Privacy Policy

1. Controller

We, Aviation Quality Service GmbH (hereinafter also referred to as “AQS GmbH” or “we”, or “us”), would like to provide you with information on how we process your personal data when you use our website

Should you have any further questions regarding data protection in connection with our website or the services offered on it, please contact our data protection officer:

Lufthansa Group Data Protection Officer

Deutsche Lufthansa AG
60546 Frankfurt

E-mail: [email protected]

2. Scope, Purpose, and lawful Basis of processing personal Data

We collect and use personal information directly from our users or from other sources (as described below) in the following situations:

2.1 Use of the Website and Creation of Log Files

When users visit our website, our system automatically collects data and information about the computer accessing our website each time our website is accessed. In the process, the following data (“technical information”) is collected:

(1)  Information about the type and version of browser used

(2)  The user’s operating system

(3)  The user’s internet service provider

(4)  The user’s IP address

(5)  The date and time the website was accessed

(6)  Websites from which the user accessed our website.

This data is also saved in our system's log files. This data is not stored together with any other personal data about the user.

We collect and use this technical information for purposes of (network) security (e.g. to combat cyberattacks), marketing, and to better understand the requirements of our users, as well as to continuously improve our website and enable the respective user to access the website from their computer.

This information is stored in log files to guarantee the website's functionality. In addition, we use the data to optimize our website and to ensure the security of our information technology systems. We do not process the data collected in this context for marketing purposes.

The lawful basis for the temporary storage of data and log files is article 6(1)(f) of the GDPR.

2.1.1. Use of Cookies

Our website uses cookies. Cookies are text files that are saved in the user’s web browser or by the user’s web browser on their computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that uniquely identifies the user’s browser when the user returns to the website.

Cookies are stored on the user’s computer and transmitted to our site. As a result, you as the user also have full control over the use of cookies. You can deactivate or restrict the use of cookies by changing the settings in your web browser. Any cookies that have already been saved can be deleted at any time. This can also be carried out automatically. Please note that if you deactivate cookies for our website, you may no longer be able to fully use all of our website’s features. use the following cookies:

·         Silverstripe

·         Google Analytics

2.1.2. Tracking tools

We use the following tracking and marketing tools (including for remarketing) on our website:

·         Google Analytics

The legal basis for the use of the aforementioned tools is our legitimate interest pursuant to article 6(1)(f) of the GDPR for the purposes of increasing the efficiency of our website and our marketing activities (including direct marketing).

Further information about the individual tools can be found in the Annex/Tracking Tool Policy.

2.1.3. Social Media Plug-Ins

The following social media plug-ins are embedded on our website using a two-click solution.

·         Facebook

·         LinkedIn

·         Instagram

The lawful basis for generally making these plug-ins available on our website is our legitimate interest for marketing purposes pursuant to article 6(1)(f) of the GDPR.

Further information about the individual social media plug-ins can be found in the Annex/Tracking Tool Policy.

2.2. Use of the Services offered on our Website

We offer a wide range of services on our website. In order to provide these services, we must collect and process personal data from users or our customers.

2.2.1. Newsletter

You have the possibility to sign up for a free newsletter at our website. During online registration the following data will be entered and processed:

Title of the user
Name and Surname of the user
E-mail address of the user

During the registration your consent for data processing will be obtained with reference to the privacy policy.

The data will not be disclosed to third parties in connection with the data processing for the sending of the newsletters. The data will be used exclusively for the sending of the newsletters.

We process your data to send you newsletters that inform you about interesting topics related to our services. In addition, we process and use the e-mail address you entered to send you personalized offers in connection with the newsletters.

Should a link from the newsletters lead you to our websites, you also give us permission to process and use your IP address, as well as geo-data, web beacons or similar technologies, to check whether the submitted offers have met your requirements.

The legal basis for the data processing after signing up for the newsletters and giving consent is article 6(1)(f) of the GDPR.

2.3. Processing Personal Data on the Basis of our Legitimite Interests

In the event that article 6(1)(f) of the GDPR is our legal basis for processing, in addition to the purposes listed above, our legitimate interests include:

·         Protecting the company from material or immaterial damage

·         Professionalization (of our products and services)

·         Cost optimization (cost control and cost minimization)

2.4. Obligations to Provide Personal Data

 In order to meet statutory or contractual requirements, we have marked the respective fields in the forms on our website that must be filled out so that we can perform the requested contract or service.

3. Duration of Data Processing

Your personal data will be erased as soon as it is no longer required for the aforementioned purposes. In this context, personal data may be stored for the period of time during which legal claims can be asserted against AQS GmbH (statutory limitation period of three to thirty years). In addition, personal data is stored to the extent and for as long as AQS GmbH has a legal obligation to do so. Corresponding documentation and retention obligations result from Germany’s Commercial Code, tax code, and money-laundering act, among others. Based on the aforementioned laws, data can be stored for a period of up to 10 years.

4. Right to object pursuant to Article 21 of the GDPR

You have the right to object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on point (e) or (f) of article 6(1) of the GDPR, including profiling based on those provisions.

If you make such an objection, the controller will no longer process your personal data unless the controller can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object, at any time, to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is conducted in conjunction with such direct marketing.

If you object to the processing of your personal data for direct marketing purposes, we will cease to process your personal data for this purpose.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to article 89(1) of the GDPR, you have, on grounds relating to your particular situation, the right to object to the processing of your personal data unless the processing is necessary for the performance of a task carried out for reasons of public interest.

5. Disclosure of Personal Data to Third Parties

In order to be able to offer you our products and services based on our contractual obligations or in accordance with our legitimate interests, we may have to disclose your personal data to third parties within or outside the AQS GmbH. These recipients can be categorized as follows:

  • Service Providers
    • In connection with the delivery of the services
    • In connection with accounting, invoicing, tax consulting and auditing
  • Government agencies and authorities

In this context, personal data may be transferred to third countries or international organizations. For your protection and the protection of your personal data, such data transfers are subject to appropriate safeguards pursuant to and in accordance with the applicable legal requirements (in particular application of EU standard contractual clauses) or an adequacy decision adopted by the EU Commission (article 45 of the GDPR).

Information about EU standard contractual clauses can be found at:

The EU Commission provides information on its adequacy decisions at:

You can also request a copy of the security measures we implement by sending an e-mail to [email protected] copying [email protected].

In addition, we are legally obligated to disclose personal data to German and international authorities pursuant to article 6(1)(c) of the GDPR in conjunction with local and international regulations and agreements.

6. Rights of the Data Subject

Ensuring our processing operations are fair and transparent is extremely important to Lufthansa Aviation Training GmbH. For this reason, it is important to us that you, as the data subject, can exercise the following rights, in addition to the right of objection, if the respective legal requirements are met:

·         Right of access pursuant to article 15 of the GDPR

·         Right to rectification pursuant to article 16 of the GDPR

·         Right to erasure (“right to be forgotten”) pursuant to article 17 of the GDPR

·         Right to restriction of processing pursuant to article 18 of the GDPR

·         Right to data portability pursuant to article 20 of the GDPR

To exercise your rights, simply send an e-mail to dsb(at) In this case, we would like to point out that in order to process your request and to identify you, we will process your personal data in accordance with article 6(1)(c) of the GDPR.

In addition, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Aviation Qualtity Service GmbH is:

Der Hessische Datenschutzbeauftragte

Postfach 3163

65021 Wiesbaden

E-Mail: [email protected]

7. Consent

If you have given us your consent to process your personal data, we hereby inform you that you have the right to withdraw this consent at any time.

If you have given your consent on this website, please visit the page where you originally gave your consent.

In all other cases or if you have any difficulties withdrawing your consent on this website, you can send an e-mail to dsb(at)

Please note that the withdrawal of consent only applies to the future and does not affect the lawfulness of processing based on consent before its withdrawal. In certain cases, we may be authorized to continue processing your personal data on another legal basis – such as to fulfil a contract – despite your withdrawal.

7. Disclaimer and Limits of this Privacy Policy

The information regarding data protection provided in this Privacy Policy only applies to the processing of data on the website: Other websites are not covered by this Privacy Policy and provide their own specific privacy policy.