We, ASF Airport Services Friedrichshafen GmbH (Am Flugplatz 64, 88046 Friedrichshafen, Germany) (hereinafter also “we”, “us”), wish to inform you how your personal data are processed when you use our website www.airport-services-friedrichshafen.com (“website”).
If you have any further queries regarding data protection in connection with our website or the services offered, please contact our data protection officer:
Group Data Protection Officer for the Lufthansa Group
2. Scope, purpose and legal basis of processing personal data
We collect and use personal data directly from our users and other sources in the following situations:
By visiting our website the system automatically records data and information about the user’s computer system each time the website is accessed. The following data (“technical information”) can be collected:
Information on the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website
The data are also saved in our system’s log files. These data are not stored together with other personal data of the user.
We collect and use this technical information for the purposes of (network) security (to for example ward off cyber-attacks), marketing and to better understand our users’ needs as well as to continuously improve our website and enable users to access the website from their computers.
The data are saved to log files to ensure website functionality. The data also help us improve the website and safeguard our information technology systems. The data are not analysed for marketing purposes in this context.
Art. 6(1)(f) GDPR forms the legal basis for the temporary storage of the data and log files.
If Art. 6(1)(f) GDPR forms the legal basis for the processing, our legitimate interests are, in addition to the purposes listed above:
To protect the company against material and immaterial damage
Professionalism (of our products and services)
Cost optimisation (control and minimisation)
If obliged to do so by law, we process personal data in order to meet duties of retention under commercial or tax law or to meet legal security requirements (such as Section 7 of the Aviation Security Act [LuftSiG]). For further information on retention periods, please refer to “Duration of the data processing”.
2.5 Personal data sent by email
By sending us an email for a specified purpose you give your consent for saving and using your personal data for completion of your issue.
Your technical information as listed in 2.1 are deleted latest 90 days after using our website.
Your personal data sent by email are deleted latest 1 year after completion of the specified purpose, for example a handling contract.
In certain circumstances, personal data are kept for the period of time during which claims against ASF Airport Services Friedrichshafen GmbH may be enforced (statutory limitation period of three to thirty years).
Personal data are also saved to the extent that and for so long as ASF Airport Services Friedrichshafen GmbH is legally obliged to do so. Corresponding burdens of proof and duties of retention arise from, among others, the Commercial Code, Tax Code and Money Laundering Act. These prescribe retention periods up to ten years.
4. Right to object pursuant to Art. 21 GDPR
You have the right to object, on reasons relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or processing is necessary for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
5.1 Technical Information
5.2 Personal data sent by email
In order to offer you our products and services, based on our contractual obligations or in accordance with our legitimate interests, we may have to disclose your personal data to third parties internal or external to the Lufthansa Group. These recipients can be categorised as follows:
Members of the Star Alliance
Other airlines (connecting flights)
Suppliers and providers of ground handling services
State agencies and bodies
Personal data may be transmitted to third countries or international organisations as part of this. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with legal requirements (particularly, the use of EU standard contractual clauses) or an adequacy decision has been issued by the EU Commission (Art. 45 GDPR).
For information on EU standard contractual clauses, please visit [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32010D0087&from=DE]. The EU Commission provides the relevant information relating to its adequacy decisions at [https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en#dataprotectionincountriesoutsidetheeu].
We are also legally obliged to provide personal data to German and international authorities, Art. 6(1)(c) GDPR together with local and international regulations and agreements.
6. Rights of the data subject
ASF Airport Services Friedrichshafen GmbH is committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied:
Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure (“right to be forgotten”), Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR
To exercise your right, please email firstname.lastname@example.org . In order to process your request and for identification purposes, please note that we will process your personal data in accordance with Art. 6(1)(c) GDPR.
You also have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for ASF Airport Services Friedrichshafen GmbH is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg
Postfach 10 29 32
If you give your consent to us for processing your personal data by sending an email to us, please note that you may withdraw this consent at any time.
In all other cases you can contact email@example.com .
Please note that your consent can only be withdrawn with future effect and such a withdrawal does not have any influence on the lawfulness of past processing. In some cases, we may be entitled in spite of your withdrawal to continue to process your personal data on a different legal basis – e.g. to perform a contract.
These data protection notices only apply to processing for our
www.airport-services-friedrichshafen.com . Other websites are not covered by these data protection notices and provide their own specific data protection notices.