Data protection declaration
The Luftfahrt-Bundesamt (LBA) takes seriously the protection of your personal data. We would like you to know when we collect which data and how we use them. We took technical and organizational measures ensuring that the data protection regulations are observed both by us and by external service providers. The servers hosting the contents of the www.lba.de website are located within Germany.
Access to the internet service
In case of a user access to the internet service of the Luftfahrt-Bundesamt and of a retrieval of files, data related to this process will be temporarily stored in a log file and processed. These data are:
the anonymized IP address; the IP address of the accessing host system is exclusively stored in the following form: When storing the address, the last two bytes of the address are set to 0 (e. g. xxx.xxx.0.0),
- the browser,
- the log file,
- the operating system used by the requestor,
- the website from which the LBA website is visited,
- the websites of the LBA that are visited,
- a potential fault code of the request,
- the quantity of data transferred,
- the time of the internet visit.
Use and transfer of data
You decide yourself which information you entrust us with. However, if you request a service by email, we need your name and contact details. Your email and email address are exclusively used for corresponding with you. Your inquiries are stored in paper form or electronic form according to the time limits of the Registry Directive applicable for retaining records.
Links to other website providers
Our online offer includes links to other website providers. We have no influence that these providers observe the data protection regulations.
Information on data protection in the Luftfahrt-Bundesamt
Data protection is the protection of privacy. The aim of data protection is to safeguard the fundamental right to data protection. In order to achieve this aim, any processing of personal data of natural persons must be carried out in accordance with the General Data Protection Regulation of the European Union, the sectoral data protection regulations and the Federal Data Protection Act meaning that personal data may only be processed for special, clear and legitimate purposes. Therefore, only so many data may be processed that are absolutely required for the purpose intended. Furthermore, the data must always be kept accurate and up to date. An identification of the data subject may only be possible as long as this is necessary to achieve the purpose intended. Regarding organizational and technical matters, the data must be protected against unauthorized persons as well as against loss, destruction and damage.
Of course, these provisions also apply for data processing carried out in the Luftfahrt-Bundesamt. The Luftfahrt-Bundesamt ensures that the provisions are implemented at any time as optimally as possible. The variety of tasks to be performed by the Luftfahrt-Bundesamt, the quantity and sensitivity of the processing data and the progressing digitization constantly coming up with new processing options lead to the fact that data protection must be attributed increasing importance.
In addition to the obligations of the Luftfahrt-Bundesamt related to data protection, there are certain rights for the data subjects. The fundamental right to data protection can only be taken into account, if the data subjects can find out, at any time, who knows what about them. For this reason, please do not hesitate to contact us, if you have any questions concerning data protection such as:
- the body responsible for data processing,
- the purpose of data processing,
- the legal basis for data processing,
- the recipient of processed personal data,
- the probable duration of data storage,
- the potential processing of personal data for a purpose different from the one for which the data were originally collected and/or
- the source from which processed personal data originate.
For any further details please see article 13 and 14 of the General Data Protection Regulation and § 55 of the Federal Data Protection Act new version.
Furthermore, the legislator granted the following rights to the data subjects:
1. Right of access:
The data subject may in particular request information whether and, if yes, which data concerning him or her are being processed by the Luftfahrt-Bundesamt, where it obtained the data from, to whom it transmitted the data, how long are these data stored and if he/she may request a rectification, an erasure or a restriction of processing.
2. Right to rectification:
Should any personal data processed by the Luftfahrt-Bundesamt be inaccurate or incomplete, the data subject may request their rectification or completeness without undue delay.
3. Right to erasure:
The Luftfahrt-Bundesamt shall erase personal data of the data subject, if the data are no longer required for the performance of the tasks or the data subject withdraws his or her consent and where there is no legal ground for the processing or the data have been unlawfully processed.
4. Right to restriction of processing:
Principally, the Luftfahrt-Bundesamt may only process personal data with the consent of the data subject provided that the processing was restricted. The data subject may request such a restriction,
- if the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
- if the processing is unlawful and the data subject requests only a restriction of the use of the personal data instead of an erasure,
- if the Luftfahrt-Bundesamt no longer needs the personal data, but these data are required by the data subject for safeguarding his or her rights.
5. Right to data portability:
- If the processing is carried out by automated means and is based on consent or on a contract, the data subject, which he or she has provided to a controller shall have the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format.
6. Right to object:
- As far as the General Data Protection Regulation applies for the data processing operations of the Luftfahrt-Bundesamt (all processing areas of the Luftfahrt-Bundesamt with the exception of the implementation of administrative offence proceedings), the data subject shall have the right to object, on grounds relating to his or her particular situation to processing of personal data concerning him or her.
7. Right to withdraw in case of consent:
Where the processing is based on consent, the data subject shall have the right to withdraw his or her consent at any time with effect for the future. A potential withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
For any further details please see article 7 and article 15 et seq. of the General Data Protection Regulation and § 51 and §§ 57 et seq. of the Federal Data Protection Act new version.
If you are concerned, please do not hesitate to contact us by the following email address:
Data Protection Officer
Furthermore, data subjects have the option of addressing to the Federal Commissioner for Data Protection and Freedom of Information, Husarenstraße 30, 53117 Bonn, www.bfdi.de, if they consider that a processing of the LBA is not in compliance with data protection. In this respect, the Commissioner for Data Protection and Freedom of Information is the competent supervisory authority of the Luftfahrt-Bundesamt.