Cookie Policy

We use browser cookies, scripts, web beacons, tracking URLs, pixel tags and similar technologies (referred to below as “cookies”) to provide, protect and improve our website and applications. We explain below how our cookies work, what they are used for, what type of data they each collect and how you can manage your cookie settings.

What are cookies and how do they work?

Cookies are small files that are downloaded to your browser registry or the hard disk of your computer, tablet or smartphone (referred to below as your “device”) whenever you visit our website or app (referred to below as our “platform”). Every time you visit our platform, the cookies and platform communicate with each other so that they can recognise your device. This is useful for you and also for us. For example, a cookie will allow us to save the text entries you make in form fields on the website so you do not have to enter the same information again the next time you visit the website, thereby improving your experience on our platforms. We manage the cookies using a small program called a tool or a tag.

We use cookies from both first-party and third-party providers. First-party cookies originate from our platform and only send information to us. Third-party cookies are placed by third parties on our site and send information about your device to other companies that recognise that cookie. In most cases the information in a cookie is pseudonymised or anonymised, because cookies generally do not identify you as a person but only your device. In very few cases, certain cookies can be linked to personal data. We will only process such information if you give us your consent or if the processing is necessary for you to be able to use a certain service, such as your austrian.com profile.

Glossary

Term Description Anonymised IP address An anonymised IP address is an IP address that cannot be linked to a specific customer. It is generated by removing part of the data in the original IP address. This anonymised address can then be linked to a certain area in a city. Booking details Booking details are the data that is generated when a customer books a flight. This is anonymised data about the flight, including its places of departure and destination, date, number and type of passengers, booking classes and additional services purchased. It also includes anonymised data about the form of payment (credit card or invoice), encrypted order ID (without any ticket numbers or confirmation numbers) and the time stamp. Encrypted user identifiers Encrypted user identifiers are identifiers that can be linked to a particular user profile. Encryption makes them unidentifiable and they can never be linked to an individual customer. Flight search details Flight search details are the data that is generated when a customer searches for a flight. This is anonymised data, including the places of departure and destination of the flight, the date, number and type of passengers and booking classes. IP address An IP address is a unique address that identifies a customer’s device on the internet. IP addresses are important for security and preventing fraud. Passenger details Passenger details are information about individual passengers such as their names, postal and email addresses. This data is collected when it is required to fulfil a customer’s booking request. Session identifiers Anonymised session identifiers are combinations of numbers and letters and are used to identify an individual visit (or session) to a platform. For example you can navigate forwards and backwards during the booking process without having to start a new search. User behaviour Data is generated about a user’s behaviour whenever a customer interacts with our platforms. This includes the specific sequence of pages visited, buttons or other elements clicked, scrolling behaviour or mouse movements.

Cookie settings

Most browsers automatically accept all cookies. However, you can decide for yourself whether or not we or external third parties can store cookies on your device.

a) Consent Manager

When you visit our platform for the first time, a pop-up window is displayed in the Consent Manager. You can then select in the Consent Manager which types of cookie you wish to accept. You can update your selection at any time by clicking “Update privacy settings” at the bottom of the platform. Updating the settings does not automatically mean that existing cookies are deleted. Follow the instructions below to do so.

b) Browser settings

You can update your browser settings at any time to prevent the further acceptance or storage of cookies. You can also decide to have a warning message displayed every time before accepting cookies. Or you can set your browser only to accept cookies from specific websites. You can also delete those cookies that have already been stored. If you delete all cookies, this will also delete what are known as opt-out cookies from your device. These are stored to manage the rejection of other cookies. The Consent Manager may then be displayed again on your next visit to our platform. You may therefore have to reset the rejections. You will find below a general guide to managing cookies for the most common browsers:

c) Cookie blockers

You can also use cookie blockers such as “DoNotTrackMe”.

Please note that if you reject the use of cookies, some functions of the website may either be unavailable or only to a limited extent. We therefore recommend that you accept our cookies and those of our partners in your browser settings.

Cookie categories

1. Essential cookies

Essential cookies are used to manage the platform. They facilitate a smooth process, for example for booking your flight, delivering the correct answers to your requests and ensuring security features, such as preventing malicious use of the website. Essential cookies cannot be disabled but you can delete them or opt out when they are signalled. We use the following essential cookies:

Name of tool/tag Cookie name and lifetime Purpose

Business address

Privacy Policy

Type of data collected
Monetate-Kibo Commerce
(script/cookie)
  • mt.v

2 years

59 months (cookie)

We use the Monetate tool from Kibo Commerce to personalise the appearance of the website, display locally relevant news to our customers (based on pseudonymised IP addresses), or integrate new components. We also use them to improve user-friendliness and ensure the seamless integration of new services. The cookie placed by Monetate is essential to ensure our customers a consistent user experience.

Data transfer to a third country: yes, USA

Kibo Software, Inc.
717 N. Harwood Street Suite 1900
Dallas, TX 7520 USA
  • Session identifiers
  • Anonymised user identifiers
  • Anonymised IP address
Tealium (script/cookie)
  • utag_main
  • utag_optout
  • channelcloser
  • channelflow
  • channeloriginator
  • cmv3
  • CONSENTMGR
  • tealium_0

(Up to 12 months)

Tealium is a tag management system that enables the implementation of scripts and tracking pixels on our websites and apps. It helps us send data to the tools we use and third-party vendors, but it does not store any data itself. It installs cookies that allow us to identify you as an anonymised individual user. For example these cookies mean you only have to select which cookies you accept on your first visit and not every time you move to another page.

Data transfer to a third country: no

Tealium
11095 Torreyana Road,
San Diego, CA 92121 USA
https://tealium.com/privacy/

  • Session identifiers
  • Anonymised user identifiers
Google Tag Manager (script) N/A

Google Tag Manager is a tag management system that enables the implementation of scripts and tracking pixels on websites and apps. We use this script provided by Google to optimise our landing page.

Data transfer to a third country: yes, USA

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Privacy Policy: https://safety.google/

  • Session identifiers
  • Anonymised user identifiers
  • Flight search details
Awin (Payback) (script/cookie)
  • userFP
  • b425

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).

This special script shares anonymised booking details with Awin and places a third-party cookie if the customers were referred to our platforms by Payback. Our Payback programme requires this script and cookie to fulfil its purpose. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: yes, United Kingdom

AWIN AG
Eichhornstr. 3.
D-10785 Berlin

Email: global-privacy@awin.com

Website: www.awin.com

https://www.awin.com/gb/legal/privacy-policy

  • Booking details
  • Encrypted user identifiers
First-party cookies
  • OSFlightSearch[DESTStationName]
  • OSFlightSearch[DESTStation]
  • OSFlightSearch[ORGStationName]
  • OSFlightSearch[ORGStation]
  • OSFlightSearchang
  • osses
  • sales_site#aua_country
  • sales_site#dark sitechecked
  • sales_site#lang
  • sales_site#mobile_device_checked
  • tmsee
  • _smt_uid
  • lastSearches_item0
  • lastSearches_item1
  • lastSearches_item2
  • lastSearches_item3
  • lastSearches_item4
  • lastSearches_item5
  • lastSearches_version
  • austrian-cookie-info
First-party cookies are used to manage the platform.

Austrian Airlines AG
Office Park 2
PO Box 100
A-1300 Vienna Airport

Registered office: Vienna

Legal form: Limited liability company (GmbH)

Website: www.austrian.com

  • Session identifiers
  • search details,
  • Encrypted user identifiers

2. Analytical cookies

We track anonymised data for statistical and analytical purposes. These are mostly conversion cookies that enable us to evaluate the effectiveness of our marketing campaigns and partner programmes. With these cookies we count and analyse the number of sales associated clicks.

You can find out more details about this in the table below:

Name of tool/tag Cookie name and lifetime Purpose

Business address

Privacy Policy

Type of data collected
Google Analytics (script/cookie)

_ga

_gid

26 months

Google Analytics is a tool for the analysis of websites. We use Google Analytics to collect aggregated, anonymised data. This data allows us to see how customers use our platform and identify potential improvements. ​The data also fulfils important platform functions such as identifying errors and fraudulent activities, and produces operational data.​ We use this information to improve the quality, effectiveness and performance of our platforms so that you can make best use of them

The Google Analytics script is used to allocate values to the cookies that are required for the collection of this information. Google Analytics sets cookies on your computer for this to function. Google is not entitled to access this data. Google Analytics anonymises your IP address to protect your data. No further personal data is collected that could allow you to be identified.

Your consent is transmitted to Google for the following processing:​ storage of analytics (allows the storage of analysis cookies)

Data transfer to a third country: no

Google Ireland Limited

Gordon House, Barrow Street Dublin 4

Ireland

Google Privacy Policy: http://www.google.com/privacy/

You can prevent Google Analytics from collecting and processing your data (including your IP address) by downloading and installing the browser plug-in available from the following link: tools.google.com/dlpage/gaoptout?hl=en

Session identifier, anonymised user identifiers, encrypted user identifiers, flight search details. Booking details, anonymised IP address

Artefact (script/cookie)

  • trs
  • aaaid

(14 days)

We use conversion scripts to track the successful completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns). This special script shares anonymised booking details with Artefact and all partner programmes of which you are a member, and sets a third-party cookie. For example, our Cashback programme requires this script and cookie to run properly. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: Yes, France

Artefact Germany GmbH
Rothenbaumchaussee 80C
20148 Hamburg
Germany

Artefact Privacy Policy: https://aaa.artefact.com/privacy-policyeng.do

You can also use their direct opt-out option: https://aaa.artefact.com/privacy-optout.do?appLocale=eng

  • Booking details
  • Encrypted user identifiers
Quantum Metrics (script/cookie) QuantumMetricsSessionID,
QuantumMetricUserID
(Session 30 min, user 1 year)

Quantum Metrics is a web analytics tool that is intended to help us track how the website is used and identify areas for improvement in order for us to meet our customers’ needs better.
It uses cookies to identify a visitor’s browser and track the user’s behaviour.
Their mouse clicks and sessions are recorded anonymously to improve the website, analyse errors and create heatmaps and behaviour reports.

Data transfer to a third country: yes, USA

Quantum Metric, Inc., a Delaware corporation
10807 New Allegiance Drive, Ste 155
Colorado Springs, CO 80921 USA

Quantum Metric Privacy Policy

https://www.quantummetric.com/legal/privacy-policy/

Direct opt-out option

https://www.quantummetric.com/legal/privacy-policy/#:~:text=Our%20sharing%20of%20your

  • Session identifiers
  • User behaviour
Exactag
(script/cookie)
  • et_gk
  • et_uk

Exactag GmbH collects, processes and stores data on this website and its sub-pages for the purposes of measuring reach, statistical analysis and improving cost management. Cookie technology is used to recognise the browser. Exactag cookies are only processed in Germany and exclusively contain anonymised data.

Data transfer to a third country: no

Exactag GmbH
Wanheimer Strasse 68
40468 Dusseldorf
Germany
  • Anonymised user identifiers
  • Booking details
  • Flight search details
  • Encrypted user identifiers
Kayak (script/cookie)
  • xp-session-seg

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns). This special script shares anonymised booking details with Kayak if the customers were referred to our platforms by Kayak. Kayak uses an encrypted user identifier in the form of a cookie that enables this script to link a booking to an earlier session on the Kayak website. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: yes, USA


Kayak
7 Market Street
Stamford, CT 06902
USA

Kayak Privacy Policy: https://www.kayak.com/privacy

  • Encrypted user identifiers
  • Booking details
Skyscanner (script)
N/A

We use conversion scripts to track the successful completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns). This special script shares anonymised booking details with Skyscanner if the customers were referred to our platforms by Skyscanner.

Data transfer to a third country: yes, globally

Skyscanner Limited
Floor 6, The Avenue
1 Bedford Avenue
London WC1B 3AU, United Kingdom

  • Anonymised identifiers,
  • Booking details
Google Flights (script/cookie)
  • _gcl_gf

We use conversion scripts to track the successful completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns). This special script shares anonymised booking details with Google Flights if the customers were referred to our platforms by Google Flights. It uses first and third-party cookies that allow Google Flights to link a booking with an earlier session on their website. Google can use the data they collect in connection with data they have about you and personalise the advertising on their own network. You will find further information in the Google Privacy Policy.

Data transfer to a third country: yes, USA

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Privacy Policy: https://safety.google/

You can amend your Google advertising settings at any time by going to Google advertising personalisation at: https://adssettings.google.com/authenticated

  • Booking details
  • Encrypted user identifiers
Session ID booking application

Session duration 30 mins.

The session ID is a session identifier: a temporary session cookie (distinct alphanumerical code) which is generated when you access the booking application and stored in your browser. It is allocated to the user to track their interaction with the website during a session and used for functional and performance analyses of the website, for example. The session ID is deleted once more as soon as the user leaves the website or the session is terminated automatically (session timeout).

Amadeus IT Group S.A.
Salvador de Madariaga 1
28027 Madrid
Spain

Session ID/session identifiers

Marigold Engage Pixel

M_trk

365 days

Austrian uses the Marigold Engage tracker script to measure the effectiveness of newsletter & mailing campaigns.

When you click a link in an Austrian newsletter or mailing that directs you to the austrian.com website, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: no

Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500

https://meetmarigold.com/privacy-notices/

Details of flight searches and bookings, such as the departure and arrival airport, number of passengers, travel class, price, currency and country of booking

3. Personalisation cookies

We store some of your settings so that we can offer you personalised content that matches your interests. We use the following personalisation cookies:

Name of tool/tag Cookie name and lifetime Purpose

Business address

Privacy Policy

Type of data collected


Monetate-Kibo Commerce
(script/cookie)

  • mt.v

2 years

59 months (cookie)

With your consent, we use Monetate from Kibo Commerce to personalise your user experience on our website. This process is based on customer profile data and interactions with the website to provide you with personalised content and product recommendations.

Data transfer to a third country: yes, USA

Kibo Software, Inc.
717 N. Harwood Street Suite 1900
Dallas, TX 7520, USA
  • Session identifiers
  • Encrypted user identifiers
  • Anonymised IP address
  • Flight search details
  • Customer profile
  • User behaviour
Marigold Engage Pixel

M_trk

365 days


Austrian uses the Marigold Engage tracker script to track the effectiveness of newsletter & mailing campaigns and to achieve improvement in the user experience through personalisation, segmentation, remarketing and/or retargeting.

When you click a link in an Austrian newsletter or mailing that directs you to the austrian.com website, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: no

Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500

https://meetmarigold.com/privacy-notices/

Details of flight searches and bookings, such as the departure and arrival airport, number of passengers, travel class, price, currency and country of booking

4. Advertising cookies

We use advertising cookies to provide you with tailored advertising while you browse the internet. We use the following advertising cookies:

Name of tool/tag Cookie name and lifetime Purpose

Business address

Privacy Policy

Type of data collected
Floodlight (script/cookie)

_IDE

_ga

_gcl_au

Up to 2 years.

Floodlight is the conversion tracking system for the Google Marketing platform. We use the Floodlight script (formerly DoubleClick Floodlight) to track the performance of our own campaigns for the Google search engine and display advertising on Google. Floodlight uses data about your visit and click behaviour on our website and third-party websites for this purpose. If you visit certain sub-pages of our website, the Google marketing platform may report that you accessed our website from one of these advertisements. Google DoubleClick sets an external cookie.

Google can use the data collected together with the data Google collects about you to personalise advertising in its own network. You will find further information in the Google Privacy Policy.

Your consent is transmitted to Google for the following processing:​

storage of advertising (allows the storage of advertising cookies and information about advertising interactions)

personalisation of advertising (allows the personalisation of advertising)

advertising user data (use of user data for the personalisation of advertising).

Data transfer to a third country: no

EW Discover GmbH as the second data controller uses Floodlights on this page to measure the effectiveness of advertising.

Google Ireland Limited

Gordon House, Barrow Street

Dublin 4

Ireland

Google Privacy Policy: http://www.google.com/privacy/

You will find further information about the Google Privacy Policy in relation to advertising at: http://www.google.com/privacy/ads/

You can amend your advertising settings with Google at: http://www.google.com/settings/ads/

Legal information about Discover: https://www.discover-airlines.com/de/impressum/

Discover Privacy Policy: https://www.discover-airlines.com/de/datenschutzerklaerung/

Session identifiers, search details, booking details, encrypted user identifiers, anonymised IP address

Meta

(Pixel/web beacon)

_fbp

(90 days)

Meta Pixel is a JavaScript code triggered when the website is accessed that is used to optimise Lufthansa campaigns on Meta platforms.


1. Personalised advertising (targeting):

Meta Pixel allows the collection of user data to display targeted advertising on Facebook, Instagram and in the Meta advertising network. This enables Lufthansa to address users with customised advertising based on their behaviour and interests.

2. Conversion tracking:

Meta Pixel measures whether users carry out certain activities on the website (e.g. a purchase) after an interaction with an advert (e.g. on Facebook). This is used to track advertising campaigns and assess the effectiveness of advertising.

3. Retargeting:

With Meta Pixel, Lufthansa can reach out again to users who have visited lh.com previously. This makes it possible to display relevant advertising to users, e.g. to remind them about interrupted purchase transactions.

4. Optimisation of advertising campaigns:

The data collected makes it possible to optimise advertising campaigns and create better target groups based on user behaviour and conversions. This helps to increase the effectiveness of marketing activities.


You will find further details in the Facebook Privacy Policy.

Data transfer to a third country: yes, globally

Facebook, Inc.
1 Hacker Way
Menlo Park, CA 94025 USA

​https://www.facebook.com/about/privacy

You can amend your advertising settings on Facebook here: https://www.facebook.com/ads/about/?entry_product=ad_preferences

You can also remove the rights of third parties to use your information via these platforms:

Go to your advertising selection: ​https://optout.aboutads.info/?c=2&lang=EN

Go to your online selection: https://www.youronlinechoices.com/

  • Session identifiers
  • search details,
  • Duration of stays and interactions
  • Booking details
  • Encrypted user identifiers
  • Technical data (IP address, browser type, referrer URLs & URLs visited)
  • Facebook Cookie ID
Google Ads Remarketing (script/cookie)

_ga

Up to 2 years.

We use this script from Google Adwords to create remarketing lists or similar target groups to personalise our online advertising. Google links sessions on our website (first-party cookie) to one of the Google ad cookies on the users’ browsers (third-party cookie). If you carry out a search on google.com later, you can see personalised advertising based on your previous sessions on our platform.

Google can use the data collected together with the data Google collects about you to personalise advertising in its own network. You will find further information in the Google Privacy Policy.

Your consent is transmitted to Google for the following processing:​

storage of advertising (allows the storage of advertising cookies and information about advertising interactions)

personalisation of advertising (allows the personalisation of advertising)

advertising user data (use of user data for the personalisation of advertising).

Data transfer to a third country: no

EW Discover GmbH as the second data controller uses Google Ads remarketing on this page for the purpose of retargeting advertising.

Google Ireland Limited

Gordon House, Barrow Street

Dublin 4

Ireland

Google Privacy Policy: http://www.google.com/privacy/

You will find further information about the data protection measures taken by Google in relation to advertising at: http://www.google.com/privacy/ads/

You can amend your advertising settings with Google at: http://www.google.com/settings/ads/

Legal information about Discover: https://www.discover-airlines.com/de/impressum/

Discover Privacy Policy: https://www.discover-airlines.com/de/datenschutzerklaerung/

Session identifiers, search details, booking details, encrypted user identifiers, anonymised IP address

Oracle Responsys (pixel/cookie)
  • 6.interact2.Xz.....N.N…

(14 days)

We use the Responsys conversion script to track the effectiveness of our newsletter campaigns.
When you click a link in an Austrian Airlines newsletter that refers you to an Austrian Airlines website, an encrypted user identifier is set in a cookie. This script links the booking with a clicked newsletter campaign if a booking is then made.

Data transfer to a third country: yes, USA

Oracle Corporation
10 Van de Graaff Drive
Burlington
Massachusetts 01803
United States of America

https://www.oracle.com/legal/privacy/privacy-policy.html

  • Encrypted user identifiers
  • Booking details
Google Analytics advertising functions (script/cookie)

_ga

_gat

Up to 2 years.

Google Analytics is a web analysis tool that also offers integration with Google advertising products on the Google marketing platform. We use this script to create remarketing lists or target groups so that we can personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or more target group lists. We can create lists of users who have visited a particular page or searched for a particular destination. These cookies may also be combined with location information or interest segments provided by Google. These lists enable us to address you elsewhere on the internet with relevant, personalised advertising. No personal data is collected during this process and we are not able to identify either you or your device. Information from our first-party cookies is combined during this process with other cookies from external providers and shared with them.

Google can use the data collected together with the data Google collects about you to personalise advertising in its own network. You will find further information in the Google Privacy Policy.

Your consent is transmitted to Google for the following processing:​

storage of advertising (allows the storage of advertising cookies and information about advertising interactions)

personalisation of advertising (allows the personalisation of advertising)

advertising user data (use of user data for the personalisation of advertising).

Data transfer to a third country: no

Google Analytics is a web analysis tool that also offers integration with Google advertising products on the Google marketing platform. We use this script to create remarketing lists or target groups so that we can personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or more target group lists. We can create lists of users who have visited a particular page or searched for a particular destination. These cookies may also be combined with location information or interest segments provided by Google. These lists enable us to address you elsewhere on the internet with relevant, personalised advertising. No personal data is collected during this process and we are not able to identify either you or your device. Information from our first-party cookies is combined during this process with other cookies from external providers and shared with them.

Google can use the data collected together with the data Google collects about you to personalise advertising in its own network.

You will find further information in the Google Privacy Policy. Data transfer to a third country: no

Encrypted user identifiers

Changes to the Cookie Policy

We update our Cookie Policy from time to time. Check back regularly if you wish to view the latest version.

Any questions?

Please contact the Data Protection Officer for further information about cookies:

* Please select “Cookies” as the subject line,

or contact us by post at:

Austrian Airlines AG
Legal Office – Data Protection
Office Park 2
PO Box 100
1300 Vienna Airport
Austria

Please refer to our Privacy Policy if you wish to know more about how we use personal data in general.

Last updated: 14 October 2024