Date: Thu, 10 Jun 2010 12:07:23 +0200 From: To: Cc: , Dear Mr. Hasbrouck, parts of your request, dated May 5th,2010, should not be handled by us, because we are not the controller of PNR data, which is collected in the course of activities of the AMADEUS computer reservation system for the purpose of making reservations or issuing flight tickets on Lufthansa flights. According to Article 11 of the Code of Conduct for computerised reservation systems of 14th January 2009, the system vendor - in our case AMADEUS - is with regard to the processing of that data to be considered as a data controller in accordance with Article 2 (d) of Directive 95/46/EC. This includes the handling of data by the sales agent Airtrade International (Vayama.com), who acts as subscriber of the AMADEUS GDS. You may request access to such data, of which you are the data subject at the following address: AMADEUS Data Processing GmbH Mr. Oboama Addy Senior Corporate Counsel & Group Data Protection Officer Berghamer Strasse 6 D-85435 Erding Email: oaddy@amadeus.com Apart from that we will handle your access request pursuant to Section 34 Federal Data Protection Act (FDPA). Section 19 refers to public bodies and is not applicable to Lufthansa AG as private body. According to section 34, paragraph 1, sentence 1, we will inform you about the personal data * we collected concerning your flights LH 455, 05 April 2010, LH 4576, 06 April 2010, LH 6911, 23 April 2010, LH 418, 23 April 2010, LH 9368, 23 April 2010 * the recipients or categories of recipients to which the data has been transferred in order to fulfill the carriage contract * the purpose of storage of that data. An extended right of access according to section 6a FDPA is not given, as the processing of passenger data by Lufthansa does not involve automated individual decision making in the sense of that law. If it is acceptable for you and if we could use encrypted mailing via PGP, we would like to send our material via email. Please give us your consent to this. Otherwise we send a letter via DHL. We ask for your understanding, that we will not be able to answer your request earlier as at the end of calendar week 27. Kind regards, Dr. Barbara Kirchberg-Lennartz > ______________________________________________ > Von: KIRCHBERG-LENNARTZ, BARBARA > Gesendet: Donnerstag, 27. Mai 2010 12:57 > An: 'edward@hasbrouck.org' > Cc: WEBER, JUERGEN FRA DSB; ROTH, NICOLA > Betreff: Notice of status > > Dear Mr. Hasbrouck, > > today, May 27th, 2010, we received your letter dated May 5th, 2010, > subject access request. > > We will process your request as soon as possible and will get back to > you in written form. > > Kind regards > Dr. Barbara Kirchberg-Lennartz > Corporate Data Protection Officer > > ________________________________ > Dr. Barbara Kirchberg-Lennartz > Konzern-Datenschutzbeauftragte > > Deutsche Lufthansa AG > FRA DSB > Lufthansa Aviation Center > D-60546 Frankfurt/Main > Tel.: +49 (0)69/ 696 5620 > Mobil: +49 (0)151 / 5892 1309 > Fax: +49 (0)69 / 696 98 5620 > E-Mail: barbara.kirchberg-lennartz@dlh.de > > www.lufthansa.com > klicken, buchen und fliegen Sitz der Gesellschaft / Corporate Headquarters: Deutsche Lufthansa Aktienges= ellschaft, Koeln, Registereintragung / Registration: Amtsgericht Koeln HR B = 2168 Vorsitzender des Aufsichtsrats / Chairman of the Supervisory Board: Dipl.-In= g. Dr.-Ing. E.h. Juergen Weber Vorstand / Executive Board: Wolfgang Mayrhuber (Vorsitzender / Chairman), Dr= =2E Christoph Franz (Stellvertretender Vorsitzender / Deputy Chairman), Step= han Gemkow, Stefan H. Lauer