Data Protection information

The data protection information provided below applies from 25 May 2018 and reflects the enhanced transparency requirements as provided in the EU General Data Protection Regulation.

Who is the controller?

Deutsche Lufthansa AG (Venloer Straße 151-153, 50672 Cologne, Germany) (hereinafter also “Lufthansa”, “we”, “us”) wishes to inform you below of how your personal data are processed within the context of our offerings. These offers can be directly accessed via (“website”) and the Lufthansa app.

When we refer to Lufthansa Group airlines below, this means the airlines Lufthansa, SWISS International Airlines AG, Austrian Airlines AG, Brussels Airlines S.A. and Eurowings GmbH. The Lufthansa Group includes Lufthansa Group Airlines as well as the other companies of the Lufthansa corporation.

Whom can I contact?

If you have any further queries regarding data protection in connection with our website or the services offered there, please contact our data protection officer:

Group Data Protection Officer for the Lufthansa Group
Deutsche Lufthansa AG
Please address any requests for information to:
Deutsche Lufthansa AG
Data Information
60546 Frankfurt

or by e-mail to:

If you contact us via email, the communication is unencrypted.

Why do we process your data (purpose of the processing) and what is the legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Data Protection Act (BDSG).

We process personal data to fulfil contractual obligations pursuant to Art. 6(1), Subparagraph 1(b) GDPR. In particular this includes:

  • issuing flight tickets
  • sending booking confirmations
  • providing flight-related services booked by you and flight-related information, such as à la carte menus, Pre-flight Shopping, eJournals, and luggage services
  • administering the check-in process from invitation and checking entry documentation through to processing the waiting list and baggage handling
  • collecting and transmitting contact data required by mandatory legal provisions by local authorities and therefore required for the performance of the contract of carriage
  • access to lounges.

We also process your data for the purposes of our legitimate interests pursuant to Art. 6(1), Subparagraph 1(f) GDPR

  • so that we can provide you with relevant information about your booked flight and travel destination
  • for the purpose of preventing, investigating and prosecuting criminal offences, such as fraud, e.g. credit card or identity fraud, the use of fraudulent means to obtain special terms or fares
  • to enforce legal claims, including debt collection and defence in the event of legal disputes
  • for auditing purposes
  • to safeguard the airline’s IT security and operations
  • to guarantee flight safety
  • for advertising, provided that you have not objected to the use of your data
  • for the purpose of creating international aviation statistics
  • for the purpose of creating statistics to improve our products and services. In individual cases, we may create customer profiles for this purpose by processing reservation data; however, these profiles will be anonymized immediately and will not be used to analyse or predict any aspects relating to your personal preferences.
  • To communicate with you, to the extent that an ongoing business relationship with you or your employer already exists, or it is intended to be established (business contacts).
  • for scheduling support and optimising punctuality. Early detection of a passenger’s possible delayed arrival at the gate during the boarding process allows the early unloading of baggage to be initiated. Fraport AG at Frankfurt Airport records the time of the pre-screening of boarding passes before entry to the security area for this purpose and provides us/LH with this data at the departure gate shortly before departure to enable us to check for missing or possibly delayed passengers. Further information about this data collection and processing by Fraport AG can be found in their Privacy Policy.

We process your data based on your consent pursuant to Art. 6(1), Subparagraph. 1(a) GDPR for specific purposes, especially:

  • for sending out newsletters with regular offers from Lufthansa
  • for receiving specific information and offers from Lufthansa and partner companies
  • for market research and customer surveys
  • for personalised use of the website and personalised offers, including profiling
  • to support processes relating to usage of the website, with reminder features and live chats
  • for analytical purposes so that we can optimise our offer for you.

We process your data to check Covid-19 entry documents based on your consent under Art. 9(2)(a) GDPR to check Covid-19 entry documents.

Any consent given can be withdrawn at any time. This also applies to the withdrawal of declarations of consent given to us before the GDPR came into force, in other words, prior to 25/05/2018. Withdrawal of consent has effect for the future only and does not affect the lawfulness of data processed until the withdrawal.

Based on what other obligations do we process your data?

We process passenger data on the basis of our legal obligations under Art. 6(1)(1)(c) GDPR.

If obliged to do so by law, we process personal data in order to meet duties of retention under commercial or tax law or to meet legal security requirements (such as Section 7 of Germany’s Aviation Security Act [LuftSiG]). For further information on retention periods, please refer to “Duration of the data processing”.

Data transmission to immigration authorities:

  • Based on the airline passenger data agreement between the EU and the USA and the EU and Canada
  • Based on the German Airline Passenger Data Act (FlugDaG) in Germany and within the EU where destination countries in the EU have implemented EU Directive 2016/681
  • Based on the Trade and Cooperation Agreement between the European Union and the United Kingdom
  • API* (Advance Passenger Information) - we transmit data to the extent that we are obliged to participate in international travel control activities

Transmission to health authorities:

  • for combating a pandemic

We process passenger data on the basis of our legal obligations under Art. 9(2)(g) GDPR.

Where we are required to do so by law, we will process personal data for the purpose of verifying your health status as required for entry to the relevant country.

* Data stored in the machine-readable zone in passports or identity documents 
Further information can be obtained from the relevant authorities.

Which personal data are you required to provide?

For legally stipulated or contractual requirements, we have marked the respective input fields on our website forms as mandatory, which are to be filled out on your part, so that we can provide you with the desired contract or service.

How long are your data stored?

Your personal data is erased as soon as it is no longer required for the purposes stated. However, if necessary, we must continue to store your data until the retention periods and deadlines expire, set by the legislator or supervisory authorities, which may arise from the German Commercial Code (Handelsgesetzbuch), Tax Code (Abgabenordnung) or Money Laundering Act (Geldwäschegesetz). These generally amount to six to ten years. We may also retain your data until the statutory limitation periods have expired (usually three years, but up to 30 years in some cases), provided that this is necessary for the establishment, exercise or defence of legal claims. After that, the relevant data are routinely erased.

Who receives your data?

In the context of the data processing above and the respective legal bases given (contract performance, legitimate interests, consent or processing obligations under law), your data may be passed on to the following categories of recipients:

  • Lufthansa Group airlines 
  • vicarious agents, e.g. service providers for ground handling services and other additional related services
  • other airlines performing part of the carriage
  • other service providers, e.g. for the provision of the website, newsletter dispatch, feedback handling, compiling of international aviation statistics
  • state agencies and bodies, e.g. based on entry requirements or police activities and investigations.

In the process, personal data may be transmitted to third countries or international organisations. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with legal requirements.

If these transmissions do not have a legal basis or are carried out to a country, for which the EU Commission has not issued an adequacy decision, we use EU standard contractual clauses.

Information about EU standard contractual clauses is available on the European Union website.

What are your data protection rights?

Lufthansa is committed to ensuring fair and transparent processing. That is why it is important to us that persons concerned can not only exercise their right to object but also to exercise the following rights where the respective legal requirements are satisfied:

  • Right to information, Art. 15 of the GDPR
  • Right to rectification, Art. 16 GDPR
  • Right to erasure (“right to be forgotten”), Art. 17 GDPR
  • Right to restriction of processing, Art. 18 GDPR
  • Right to data portability, Art. 20 GDPR
  • Right to object, Art. 21 of the GDPR

To exercise your right, please email
Please provide the following details so that we can identify you:

  • Name
  • Postal address
  • Email address and optionally: customer number or booking code or ticket number

If you send us a copy of your ID, please black out all other information apart from your first and last name and address.

In order to be able to process your request, as well as for identification purposes, please note that we will use your personal data in accordance with Art. 6 para. 1 (c) of the GDPR.

You also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR in combination with Section 19 GDPR. The relevant supervisory authority for Lufthansa is:

the Officer for Data Protection and Freedom of Information of the State of Hesse
Postfach 3163
65021 Wiesbaden

Information about your right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6 (1) (e) or (f) of the GDPR, including profiling based on those provisions.

The controller shall no longer process the personal data that relates to you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or in case processing is necessary for the establishment, exercise or defence of legal claims.

If personal data that relates to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data that relates to you shall no longer be processed for such purposes.

You have the option of exercising your right of objection in connection with the use of the services of the information company using an automated procedure - notwithstanding Directive 2002/58/EC - in which technical specifications are used.

What data do we process when you visit our website?

Lufthansa uses browser cookies, scripts, web beacons, tracking URLs, pixel tags and similar technologies (hereinafter referred to as "cookies") to provide, protect and improve our website and applications.  

You can find more detailed information on the data processed and the partners in our Cookie Policy.

You can amend your consent within the "Change Cookies Settings" link, at the bottom of each page.

What is the situation when you receive our newsletter?

If you gave your consent to receive the newsletter in the Newsletter section of our website (until you withdraw your consent or Lufthansa stops distribution of a newsletter), we wish to make you aware of the following:

consent is the legal basis for the processing.

Your consent relates to the processing of the following personal data provided voluntarily by you:

  • Email address
  • Surname, first name, title, gender/salutation
  • Country of origin
  • Preferred newsletter language
  • Airport preference

Your consent is used for the purpose of using your email address to send the newsletter to the address given. The newsletter provides you with information on topics from the Lufthansa world and our partner companies.

We analyse your usage patterns in every newsletter by using cookies and similar technologies to personalise communication. This analysis includes, for example, pages opened, clicks, reading time and potential bookings.

Personalisation of the newsletter is based on the analysis of

  • your interaction with the newsletter
  • your master data voluntarily provided to us (departure airport, gender, …)
  • your IP address
  • your existing and future bookings

The following systems and technologies are used in our newsletter:

Oracle Responsys
The following data are processed by the Responsys delivery tool for marketing, optimisation and legal purposes:

  • Email delivery
  • Email opening
  • Time of opening and time of clicks
  • End device used for opening, clicking and booking
  • Click behaviour in the email
  • Booking completed from within the email

The following data are processed by the Litmus email marketing tool for marketing and optimisation purposes:

  • Reading time and reading behaviour
  • Location where opened
  • Email programme and end device used

These data are stored on a subscriber/customer basis (email address).

Exactag GmbH collects processes and stores data on this website and its sub-pages for purposes of reach measurement, statistical analysis and improving cost optimization. The cookie technology is used for the browser recognition. Exactag cookies are only processed in Germany and contain solely pseudonymized data.

If you do not consent to the technologies and analyses used in the newsletter and wish to withdraw this consent, please unsubscribe from the newsletter by using the link provided in every edition of the newsletter.

Information on participation in the Miles & More programme

You can register for the Miles & More programme on our website.

More details on how your personal data are processed within the context of the Miles & More programme, please check here.

Information on participation in Lufthansa iD

Our goal is to deliver our services to you in the most convenient way possible and thus enable you to enjoy a travel experience that is tailored to you and your particular wishes and expectations, from your first visit to our website, as well as to certain other websites and apps offered by us or other companies in the Lufthansa Group, all the way through to the end of your journey and beyond. That is why we offer you the option through Lufthansa iD to create a free customer profile with which you can access a wide range of personalised services.

The creation of a Lufthansa iD profile and provision of the data needed for this is not required by law or contract. However, some services are only available to our Lufthansa iD customers. These include, for example, the option to receive personalised flight offers and additional services on our booking platform, avail yourself of personalised FlyNet offers and in-flight entertainment tailored to you in the future, and receive an enhanced selection of entertainment options. To the extent contractual purposes are given below as the legal basis for data processing, we cannot meet the respective purposes of Lufthansa iD without carrying out the data processing.

We wish to explain to you below how we process your personal data when you create a Lufthansa iD profile.


When you register for Lufthansa iD, the only mandatory information we request are your email address and a password. Your country and preferred language settings will be automatically transferred, using the country and language settings you entered at This information is required in order to create a Lufthansa iD profile and use the Lufthansa iD services described in detail below.

You are free to add further information to your Lufthansa iD profile , such as your name, gender, address, date of birth, further contact details and your mobile number or flight preferences such as seat preference or preferred departure airport. We also use this information to provide the Lufthansa iD services described below.

Personalised use of websites and apps

When you visit our websites and apps, our aim is to make it easier and quicker for you to find and use the information that is relevant to you. That is why we give you the option of using your Lufthansa iD when you log in to certain websites and apps offered by us or by other companies in the Lufthansa Group, so that the respective service you wish to use is already personalised and it is no longer necessary for you to create a new user account every time. Examples of this personalisation might be that you are greeted by name when you access the respective website/app, or we might provide information relevant to your current flight booking and/or pre-populated forms.

As may be required in individual cases, we process the data stored in your Lufthansa iD profile to enable you to log in with your Lufthansa iD and to personalise the content displayed in the website/app you access. When you access the website/app, you will be informed in detail about the nature and scope of the personalisation, the data processing required for this purpose, and the potential recipients of your data.

Specific data which you provide while logged in to a website or an app and which are not already stored in your Lufthansa iD profile may also be linked to your profile so that in future, the added data will also be available for the purposes of the Lufthansa iD (in accordance with any relevant and applicable requirements). Depending on the individual case, this may include the following categories of data: (i) master data which you enter in forms, (ii) preferences, such as preferred destinations, which you expressly designate as preferences to be stored in your profile, and/or (iii) flights which you enter manually in the website/app. Where applicable, you will also be notified on the website/app in advance of any data recovery activity.

“Stay logged-in” feature

While you are logged into websites or apps, you have the option of actively enabling a “stay logged-in” feature, which means that you will not be required to log in again after finishing your session and then re-visiting the website/app later. 

We use cookies for this purpose, so that when you  return to the website/app you will be automatically recognised.

When the “stay logged-in” feature expires, you will be asked to log in again. Furthermore, you will always be prompted to log in again if you are in the process of carrying out activities which require an enhanced level of security, such as changing your profile data. If you do not wish to use the login service, you are of course free to use the website/app without logging in. If you choose to do so, the content you access will no longer be personalised, unless you subsequently enter certain types of information manually (such as your current flight booking), in order to obtain specific information relating to your flight. In such cases, any data you input manually will not be linked to your Lufthansa iD profile.

Personalised booking process

By personalising the booking process, we aim to make it as convenient and efficient as possible for you to use our services. That is why we process information from your previous bookings and any preferences in your profile to display the relevant options and/or use the appropriate defaults immediately for you within the booking process. This makes it quicker for you to book and rebook flights and purchase additional services, i.e. without first having to find the offers of interest to you among all of the many available options.

Specifically, we process your personal data for this purpose:

  1. Top three flights

    If you use our booking portal to search for flights and enter the data for your desired flight (departure and destination airports, dates of travel) in the search screen, we process these data plus the information stored in your profile regarding previous flight bookings to show you what are likely to be the three most interesting flights for you as a recommendation at the top of the search result list. For example, if you previously booked flights to the destination airport entered in the search screen, we display to you the same or similar connections as a recommendation at the top of the search result list so that you can again select a similar connection without having to search through all of the many suggestions. Of course, you can also select a different connection from the alternatives displayed below the recommendations.

  2. Default travel class

    Economy Class flights are searched for by default in the flight search; customers must amend this setting as necessary in the search screen in order to find flights in a different travel class (such as Premium Economy or Business Class). We automatically adjust the default to your preferred travel class in order to save you this step and immediately take into consideration your preferred travel class in the flight search. For this, we process the information regarding previous flight bookings stored in your Lufthansa iD profile or any preferences there possible in relation to the travel class. Of course, you can still select a different travel class from the default travel class set by us by adjusting the search settings.

  3. Pre-selection of the recommended fare

    Various fare options (such as Economy Saver, Economy Classic and Economy Flex) are available within each travel class. We pre-select a recommended fare based on your preferences in order to make this selection easier and speed up the booking process for you. The benefit of this is that you can continue with your booking more quickly by simply clicking on “Next”. If the fare we have pre-selected for you is not actually what you require in a specific situation, you can naturally select a different fare by first clicking on this and then continuing the booking process by clicking on “Next”. We discern your preferences from the information regarding previous flight bookings stored in your profile and/or fare preferences in your profile.

Pre-populated forms

We use your data stored in your Lufthansa iD profile (this could be data you actively provided there during registration or added at some later point or data you gave as part of a previous booking and which we automatically use for another booking) in order to make the booking process easier for you by pre-populating forms. We also use your data given during bookings to provide you with pre-populated forms for online check-in and at self-service check-in kiosks. If you fill out other forms, such as during your participation in a promotion or when you send customer feedback using one of our electronic feedback forms on the website, for example to report lost baggage or provide feedback on your travel experience, the contact details required are also pre-populated from your profile.

Storing previous bookings

Any previous bookings you made while logged in or subsequently added to your profile are stored in your Lufthansa iD profile. This means you can still keep track of your previous bookings in the future and access and print booking documents and invoices.

In-flight entertainment and FlyNet

Our Lufthansa iD customers can choose from an extensive range of films, music, magazines and much more as part of our in-flight entertainment programme. Through the FlyNet programme, we also offer our Lufthansa iD customers internet access on our flights (extra charge). Using the free FlyNet portal, Lufthansa iD customers can access tips and the latest weather forecast for their travel destination, purchase goods in the Lufthansa WorldShop and find out about services relating to connecting flights.

You will have to log into your Lufthansa iD profile to set up our in-flight entertainment programme and FlyNet services according to your particular preferences in the future. We will process your login details (email address and password) during this in order to identify you as a Lufthansa iD customer.

We will also offer you in the future personalised in-flight entertainment programmes and FlyNet services to make it easier for you to select from the extensive range of entertainment options and find the information of relevance to you. In other words, you will first be shown information and offers which we believe are most relevant to you. Your profile and the preferences chosen there will be analysed to achieve this personalisation.

If you have consented to this, we will also process information regarding your past use of these offers collected via cookies for the purpose of personalising our in-flight entertainment and FlyNet offerings.

Personalisation of offers for additional services

You are shown a list of possible additional services for your flight in the booking portal after you select or book a flight. These may be additional flight-related Lufthansa services, such as premium meals or upgrades, or additional third-party services, such as rental cars or insurance policies. We wish to display additional services of relevance to you, which is why we sort the ads so that those likely to be of most interest to you appear at the top. This means we show you additional services which would be a useful addition to the flight searched for or already booked by you and/or in which you have already demonstrated interest in the past at the top; offers we presume will be less interesting to you are then shown below these.

For this, we process the data regarding the flight selected by you or your upcoming flight and the data regarding previous bookings of additional services stored in your profile. If you have already booked a flight and log in again, we also process the booking information stored in your Lufthansa iD profile to check which additional services are available for your upcoming flight and might be of interest to you because they have not yet been included in your booking or purchased by you.

We do not build an extensive profile for this; in particular, we do not merge your aforementioned data with other data pools in order to carry out deeper analysis of your preferences without your consent. Insofar as we process data regarding your previous purchases of additional services, we also limit this to data from the last six months.

If you give us your consent in relation to this, we also use information collected using cookies to analyse your response to the additional services offered, i.e. whether you click or purchase them, in order to continuously improve the personalisation of our additional offers.

Personalised advertising communication

During the registration process and subsequently in your Lufthansa iD profile, you have the option of giving us consent to transfer information and individual offers regarding the services of Lufthansa Group airlines and their partner companies and to communicate with you for this purpose via electronic means of communication (e.g. email, SMS/MMS) and/or telephone.

If you give us the relevant consent, we process your contact details (i.e. name, telephone number, email address) in order to send you the information and individual offers.

As we only wish to send you information and offers that you are really interested in, we also process with your consent the information stored in your Lufthansa iD profile regarding previous bookings, such as itinerary, travel period and booking class, and your current booking, such as your travel destination, selected fare and preferences in your Lufthansa iD profile, in order to personalize the information and offers. For example, we may send you special offers or vouchers for additional services for your trip or for services available at your travel destination by analysing information regarding your forthcoming trip.

You have the right to withdraw your consent at any time. You may withdraw your consent to advertising communication for individual areas as well (such as just for the email newsletter) in your profile. For further information on your right to object, please refer to the “Information about your right to object pursuant to Art. 21 GDPR”. Your withdrawal of consent does not affect the lawfulness of any processing performed on the basis of this consent before such consent was withdrawn.

Profile setting and storage period options

You can use your profile settings to define which of your data we may process. For example, you can decide whether you wish to add further data, such as certain preferences, to your profile in addition to the data required for registration so that they can be processed for the aforementioned purposes.

You can also decide for yourself the extent to which you wish to receive information and individual offers from us by adjusting your communication settings.

If you no longer wish to avail yourself of the Lufthansa iD services, you may delete your Lufthansa iD profile at any time. If you no longer wish to avail yourself of the Lufthansa iD services, you may delete your Lufthansa iD profile at any time.

You can delete your Lufthansa iD profile as well as individual pieces of data provided by you within your Lufthansa iD profile.
We also delete your provisional Lufthansa iD profile if you do not confirm your registration by the deadline given in the confirmation email or have a confirmation email with activation link sent to yourself more than three times without confirming activation. Participation in the Miles & More programme and linking with Lufthansa iD

Participation in the Miles & More programme and linking with Lufthansa iD

If you are also registered for the Miles & More programme (“Miles & More”), we ask that you link (“connect”) your Lufthansa iD profile with your Miles & More account. This is the only way we can ensure that you only receive the communication you want and that the different profile details do not contradict each other

You decide whether to connect these by giving your consent. If you give your consent, the data are compared. This is explained further below.

Specifically, the data stored by you in both accounts are synchronised/used as follows when connected:

  • Master data (e.g. surname, first name, address, telephone number) which you have given voluntarily during registration or later are compared. If these do not match, the name and date of birth from your Miles & More account are automatically used. In all other cases, you are asked to select your choice.
  • Other data such as your seat and other preferences are compared if there is information regarding these in both accounts. If the information does not match, you are asked to select one. If these data are only stored in your Miles & More account, the data in your Miles & More account are automatically added to your Lufthansa iD profile. If these are only stored in your Lufthansa iD profile, the data in your Lufthansa iD profile are automatically added to your Miles & More account.
  • Payment details from your Miles & More account are added to your Lufthansa iD profile. For technical reasons, the payment details from your Lufthansa iD profile are discarded during a connect. You may subsequently amend your payment details at any time via the respective profile/account administration.
  • Your booking summary from your Miles & More account is added to your Lufthansa iD profile. If there are current bookings in both your Lufthansa iD profile and Miles & More account at the time of the connect, only the current bookings of the Miles & More account are shown for technical reasons. Bookings no longer visible in the booking summary of your Lufthansa iD profile as a result of this can be added again manually at any time. Please note that there is no change to the binding nature of any bookings no longer visible as a result of the connect.

If you have given us your consent to carry out a connect, we use the linked data for the aforementioned purposes.

As you have the option to consent to advertising communication from us in both accounts and we want to be sure that we only contact you if you actually want us to, these communication settings are also synchronised during a connect. This ensures that we only then contact you when you have given your consent to this in both your Lufthansa iD profile and Miles & More account. Please note that if you provide or withdraw your consent after the accounts are connected, this is then effective for both of your accounts.

You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of any processing performed on the basis of this consent before such consent was withdrawn. For further information on your right to object, please refer to the “Information about your right to object pursuant to Art. 21 GDPR” section.

Star Alliance Biometrics

Star Alliance Biometrics is a Star Alliance product and enables voluntary biometric identification (facial recognition) of the passenger at the airport. Lufthansa currently offers the use of biometric services at the following access points: boarding.

Deutsche Lufthansa AG is responsible for the processing activities described below.

Lufthansa processes the following personal data: 

  • we transmit your Miles & More membership number and your name in encrypted form from the Lufthansa app to the Star Alliance Navigator app for registration at Star Alliance Biometrics. Your consent is required for this in accordance with Art. 6(1)(1)(a) GDPR.
  • Star Alliance is responsible for the further registration; please read the Star Alliance Privacy Policy for further information about registering.
  • Your Miles & More number and your boarding pass information are transmitted to Star Alliance to build a day-specific identification file (“Gallery of the Day”). For registered users, this is carried out based on their consent in accordance with Art. 6(1)(1)(a) GDPR; for potential users with a Miles & More number to ensure a smooth process operation this is carried out in accordance with Art. 6(1)(1)(f) GDPR.
  • A short video sequence is recorded at those access points/devices staffed by Lufthansa at the airport that have integrated biometric services from Star Alliance Biometrics. A photo is extracted from this that is used to identify you.
    This is carried out for registered users based on their consent in accordance with Art. 6(1)(1)(a) GDPR; for non-registered passengers to ensure a smooth process operation this is carried out in accordance with Art. 6(1)(1)(f) GDPR

Categories of recipients

  • Lufthansa uses IT service providers which have been placed under a contractual obligation in accordance with the GDPR. 
  • Lufthansa continues to transmit the data to the Star Alliance.

Duration of data storage

  • At the access points/devices, your data will be deleted as soon as the identification process has been completed or your data has been transmitted.
  • The day-specific identification file (“Gallery of the Day”) is generated and processed under the responsibility of Star Alliance and is deleted on a flight-by-flight basis two hours after departure.

You can withdraw your consent to the use of biometric identification at any time. You can do so in the profile management section of the Star Alliance Navigator app by deleting your biometric profile there. Your withdrawal of consent does not affect the lawfulness of any processing performed based on this consent before the withdrawal of such consent.

The provision of personal data is not required by law or contract, but is required for the use of the product Star Alliance Biometrics.

No automated decision-making including profiling is carried out.

Examples of how your data are used in our Services

Flight bookings

When you purchase a flight ticket via our website, we always process the following personal data from you:

  • Title, first name, surname (collectively “master data”)
  • Landline and/or mobile number, email address (for the booking confirmation) (collectively “contact data”)
  • Your preferred payment method and related data, as well as the master data, address and contact data of the payer (collectively “payment data”).

Optionally, you can provide us with the following information:

  • Date of birth
  • Nationality and passport information (“identification data”)
  • Frequent flyer information, such as the programme in which you participate and your membership number (“frequent flyer data”)
  • your meal preference
  • “Redress code” (US Immigration)
  • PartnerPlusBenefit programme (for companies)

Flight-related travel information

An email sent to you a few days before your departure date provides information on your upcoming trip, offers of additional individual services and possible free travel services available. You can object at any time to the pre-flight email being sent using the link in the flight-related travel information.

Check-in services

We inform you when online check-in for your flight opens so that you can select a seat early on.
If you access your booking on or are logged into or the Lufthansa app and an upcoming trip is linked with your customer profile, you are then shown a link for online check-in.

If you have stored an email address in your customer profile and your current booking is linked with your customer profile or you have given an email address during the booking, we then send an unencrypted email to inform you that online check-in is open for your upcoming trip and provide you with direct access to online check-in for your flight. This access is enabled using an encrypted direct link.

Optionally, you may provide us with the following information during online check-in:

  • Frequent flyer information (frequent flyer programme, card number)
  • Mobile phone number and/or email address for sending mobile boarding passes and for notifications in the case of flight irregularities (any emails sent for this are explicitly unencrypted)

Automated check-in

If you consent to the automated check-in option in your customer profile (Miles & More or LH iD, default setting for all Miles & More customers), then automated check-in ensures your mobile boarding pass is automatically sent to you for flight bookings completely within the Schengen Area and if flights have been booked no later than 24 hours before departure.

Flight status and flight irregularity notifications

If you provide us with a mobile number and/or email address when making a booking, updating your booking or in your customer profile (Lufthansa iD or Miles & More) linked with the booking so that we can send you your boarding pass and/or for you to use the Lufthansa app for your flight, we will then inform you about any changes to the flight status and in particular any flight irregularities (either via text/SMS or unencrypted email and/or in the app).

Additional services in the Lufthansa app for your trip

Personal Details

You have the option in the Lufthansa app of storing personal data locally on your mobile end device so that the necessary elements are pre-populated during the check-in process, making check-in more convenient and faster for you.
Travel documents (passport, ID, residence permit and visa) can also be entered using the scan function.

The personal data stored on your device are only processed locally in the app and include:

  • Identification data for check-in (type of frequent flyer card, card number, surname, first name)
  • Contact data (mobile number or email address)
  • Immigration document data (passport, ID, residence permit, visa, other types of documents)

Please note that misuse by a third party, such as if your mobile phone is stolen, cannot be ruled out. Therefore, we recommend that you protect your mobile phone accordingly, such as with a code lock. Lufthansa expressly emphasises that data are stored at your own risk and Lufthansa cannot be held liable for any misuse.

Location services and airport maps

If you permit the Lufthansa app to process your location (using the app’s location service settings in the respective operating system), then we can show you your location in our digital airport maps. This setting is needed for us to offer you further location-based services.
We process tracking data to pinpoint your position (dynamic IP address, location data via the device’s Bluetooth, WiFi, GPS functionality).

Location-based Services

Our local information uses your location provided you have agreed to this in your smartphone settings under the app’s location service settings in the respective operating system.

We can use the local information to send you offers that are relevant for your location. Our processing of your smartphone’s motion data in an anonymised form also helps us to predict waiting times at security checkpoints, for example.

Your location is only used for the aforementioned purposes.

If you do not wish to use our local services, you may disable these at any time in the Lufthansa app settings.


We offer you various channels for providing feedback. You can therefore freely decide how you wish to communicate with us. Included in this, you have the option of using our feedback form on our website to send us data. A letter is another way to communicate with us. You may also choose to use other channels to provide feedback, such as your email address, fax or the Lufthansa app. Please be aware that your individual feedback may be used for training and quality purposes.

  • If your message is accompanied by a request for financial compensation, we will ask for a copy of your official photo ID in individual cases for your protection and clear identification.