Data privacy statement

Protecting your personal data is very important to us. Therefore, in the following we would like to inform you about our data protection principles. The respective Lufthansa company to which you are applying is committed to upholding these principles, allowing you to apply within a trustworthy process.

Data usage in the application management system

User accounts
To register for our application management system each user has to set up a user account. A user account consists of at least the following information:

  • First name
  • Last name
  • User name
  • E-mail address

The storage retention period of a user account is 6 months. After 6 months the acceptance of the data protection regulations must be renewed by the user. If the renewal is made, account storage is prolonged for a further 6 months.
If the user still has an open application in process at the time of expiration, then the storage retention period is automatically prolonged until this application process is completed.

Login via Social Media Networks
This function enables you to register with one of your existing social media network user accounts (LinkedIn, Xing, Google, Facebook). In so doing, the only thing that is verified is whether you have a valid account with the selected social media network, which you can use to login here. The result of this check is then automatically transferred to the application management system. However, be reassured that no further exchange of data takes place between and your selected social media network.

Application relevant data
Following the completion of the application process, the answers and information you have given during your online application process will be stored along with your name. After this time, your results will be stored in an anonymous way, without your name, for further statistical evaluation purposes. This statistical data record does not allow any type of inference to the actual person and serves solely as a basis for statistical evaluations. Further recruitment procedures will follow in subsequent application steps. A negative test result will also be relevant for applications to similar jobs within the Lufthansa Group. 

Applications to a job offer
If you have applied to a job offer your data will be made available to the specialized department which posted the position as well as to the relevant personnel department.

Recognition of declined applicants
If your application does not lead to an employment contract, a recognition data record will be stored. We need this data record in order to recognize you if you apply to the same position anew. All of your specialized qualifications will be deleted from this data record. The recognition data record includes the following information:

  • Last name
  • First name
  • Date of birth
  • Job ID
  • Rejection date

A recognition data record is permanently deleted after 365 days. The recognition data record of applicants for vocational training positions is permanently deleted after 180 days.

Simultaneous application for jobs in different companies of the Lufthansa Group
In the event that an applicant applies to multiple job positions with different companies in the Lufthansa Group, those personnel departments which were directly applied to will be made aware of all simultaneous applications. This is done to ensure efficient handling of applications. Application data will not be shared.

This does not have any effect on current application processes.

Particularities for Flight Attendant applications
Within the framework of their application process, applicants applying for Flight Attendant positions must state specifics regarding their height, diopter left eye and diopter right eye. This data is collected at a later time by the Medical Service of Deutsche Lufthansa AG during the medical examination. In order to check whether you fulfill the entry requirements, we collect this data already during the application phase. At this stage the individual data isn’t stored but rather only a qualifying value is stored in encrypted form in the application management system. This qualifying value is then only made available to the personnel department responsible for Flight Attendant selection within the respective company of the Lufthansa Group to which you have applied. If your application is successful and you receive a Flight Attendant contract, a flight fitness medical examination is required according to EU regulation 1178/2011, which sets the regulations for flight fitness criteria for flying personnel. Furthermore, a pre-employment examination according to the employer’s provisions will take place along with additional occupational medical precaution examinations in accordance with occupational medical precaution provisions (ArbMedVV). Only the result of this flight fitness examination (solely the information regarding the result of "fit to fly" yes, no or with limitations) is passed on to the responsible personnel department and then stored in the application management system until the application process has been completed. In the case of employment as a Flight Attendant, the pre-employment examination and EASA Medical data is stored along with the occupational medical precaution examination data in the medical EDP system of the Deutsche Lufthansa AG Medical Service. According to legal requirements, the data must be stored for at least 10 years. In some special cases, it may even be stored for 30 years. You have the right to request information regarding any of your stored personal data along with the right to correction or deletion or even to the limitation of or objection to the processing of your personal data. However if you decide to exercise your right to deletion or limitation of or objection to the processing itself, then we can no longer proceed with your application process. Since the data given is required within the framework of your application until the completion of the application process, should you demand the deletion or limitation of or objection to the processing, you will also be automatically retracting your application.

Particularities for Pilot Training applications
Within the context of applications for pilot training positions, personal data is passed on to third parties within or outside the Lufthansa Group. These recipients are:

  • Deutsche Lufthansa AG
  • Interpersonal
  • Deutsches Zentrum für Luft- und Raumfahrt e.V.

Lufthansa Aviation Training GmbH has engaged Deutsche Lufthansa AG to process online applications and administer the screenings/aptitude tests for the European Flight Academy’s ab initio courses.
In this context, personal data may be transferred to third countries or international organizations. For your protection and the protection of your personal data, such data transfers are subject to appropriate safeguards pursuant to and in accordance with the applicable legal requirements (in particular application of EU standard contractual clauses) or an adequacy decision adopted by the EU Commission (article 45 of the GDPR). Information about EU standard contractual clauses can be found here. The EU Commission provides information on its adequacy decisions here.
If you submit an application yet are not accepted onto a course, we save a recognition record with your personal data. We need this record in order to recognize you if you apply again. This recognition record contains the following information: Your last name, first name, date of birth and history of your participation in screenings/aptitude tests.
When your data is transferred to the applicant management system, it is automatically encrypted by LAT. In this context, the data security measures we implement always correspond to the current state of the art.

TalentHub participation
A user account and a completed talent profile are required in order to participate in TalentHub. The collection and processing of personal data takes place only to ensure network activities such as i.e. to contact Talents, to send vacant job offer suggestions and for event invitations. TalentHub is a Lufthansa Group-wide network. Access to Talent profiles is therefore available across all companies within the Group. Data processing outside of the Lufthansa Group does not occur. The Talents must renew their data protection policy consent every six months, if the extension consent is not granted, the data is deleted.

Recommendation by Lufthansa Group staff members
Depending on the desired position and which company posted it, there may be an option for entering the name of the staff member who recommended the position to you. By entering the name you are also declaring your consent that this person be informed whether your application resulted in a contract or not. The reason here is that a bonus may result for the recommending staff member.

Security when dealing with person-related data
Your data is automatically encrypted during its transfer into our application management system. The precautions taken to protect data always correspond to the current status of technology.

How long is your data stored?
Your personal data will be deleted after one year at the latest according to the legal deadlines in so far as Article 17, para. 3, DSGVO applies to possibly keeping them longer.

Which data protection rights do you have?
It is an important issue for Deutsche Lufthansa to make our processing procedures fair and transparent. Therefore it is important to us that aside from the right of objection, the concerned person may make use of the following rights, when the individual legal requirements below are met: 

  • Right to obtain information, Art. 15 DSGVO
  • Right of correction, Art. 16 DSGVO
  • Right of deletion (“Right to be forgotten”), Art. 17 DSGVO
  • Right of processing limitation, Art. 18 DSGVO
  • Right of data transmission, Art. 20 DSGVO
  • Right of objection, Art. 21 DSGVO

In order to exercise this right, please email, providing a detailed description of your request for information and the following:

  •   Last name, first name
  • Applicant number
  • Email address
  • Group company to which you have applied

Please note that information regarding your personal data can only be provided on submission of a valid copy of your ID and that only one company can be queried per request for information.

We will review your request for completeness and correctness and inform you of the following once you have been successfully identified:

  • The data concerning you which we have stored (presented in categories, where applicable),
  • The purpose of the processing of these data,
  • The origin of the data,
  • If the data are transferred, the recipients of these transfers (information regarding appropriate safeguards for transfers to third countries, where applicable),
  • Criteria for determining the planned duration of storage/actual duration of storage, where applicable,
  • Automated decision-making including profiling, if relevant,
  • Your data protection rights.

Please note that we will store your request for information for a period of three years. 

Furthermore you have the right to lodge a claim with the supervisory authority according to Article 77 DSGVO in combination with § 19 BDSG. The supervisory authority responsible for Deutsche Lufthansa AG is:

Der Hessische Beauftragte für Datenschutz und Informationssicherheit

Postfach 3163
65021 Wiesbaden

Gustav-Stresemann-Ring 1
65189 Wiesbaden


Enforcing and complying with data protection statements
Deutsche Lufthansa AG commits itself to complying with the data protection points stated above.

For questions or suggestions regarding data protection in our application management system, please contact:

Deutsche Lufthansa AG
Konzerndatenschutz FRA CY
Lufthansa Aviation Center LAC
60546 Frankfurt am Main