Data Protection information
The data protection information provided below applies from 25 May 2018 and reflects the enhanced transparency requirements as provided in the EU General Data Protection Regulation.
Who is the controller?
Vairtual UG (Frankfurter Str. 88, 63110 Rodgau, Germany) (hereinafter also “Vairtual”, “we”, “us”) wishes to inform you below of how your personal data are processed within the context of our offerings. These offers can be directly accessed via vairtual.com (“website”) and the Vairtual App.
Whom can I contact?
If you have any further queries regarding data protection in connection with our website or the services offered there, please contact our data protection officer:
Group Data Protection Officer for the Vairtual UG
Please address any requests for information to:
Frankfurter Str. 88
63110 Rodgau, Germany
or by e-mail to:
If you contact us via email, the communication is unencrypted.
Why do we process your data (purpose of the processing) and what is the legal basis?
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Data Protection Act (BDSG).
We process personal data to fulfil contractual obligations pursuant to Art. 6(1), Subparagraph 1(b) GDPR. In particular this includes:
issuing flight tickets
sending booking confirmations
providing flight-related services booked by you and flight-related information, such as à la carte menus, Pre-flight Shopping, eJournals, and luggage services
administering the check-in process from invitation and checking entry documentation through to processing the waiting list and baggage handling
collecting and transmitting contact data required by mandatory legal provisions by local authorities and therefore required for the performance of the contract of carriage.
We also process your data for the purposes of our legitimate interests pursuant to Art. 6(1), Subparagraph 1(f) GDPR
so that we can provide you with relevant information about your booked flight and travel destination
for the purpose of preventing, investigating and prosecuting criminal offences, such as fraud, e.g. credit card or identity fraud, the use of fraudulent means to obtain special terms or fares
to enforce legal claims, including debt collection and defence in the event of legal disputes
for auditing purposes
to safeguard the airline’s IT security and operations
to guarantee flight safety
for advertising, provided that you have not objected to the use of your data
for the purpose of creating international aviation statistics
for the purpose of creating statistics to improve our products and services. In individual cases, we may create customer profiles for this purpose by processing reservation data; however, these profiles will be anonymized immediately and will not be used to analyse or predict any aspects relating to your personal preferences.
To communicate with you, to the extent that an ongoing business relationship with you or your employer already exists, or it is intended to be established (business contacts).
for sending out newsletters with regular offers from Vairtual
for receiving specific information and offers from Vairtual and partner companies
for market research and customer surveys
for personalised use of the website and personalised offers, including profiling
to support processes relating to usage of the website, with reminder features and live chats
for analytical purposes so that we can optimise our offer for you.
We process your data to check Covid-19 entry documents based on your consent under Art. 9(2)(a) GDPR to check Covid-19 entry documents.
Any consent given can be withdrawn at any time. This also applies to the withdrawal of declarations of consent given to us before the GDPR came into force, in other words, prior to 25/05/2018. Withdrawal of consent has effect for the future only and does not affect the lawfulness of data processed until the withdrawal.
Based on what other obligations do we process your data?
We process passenger data on the basis of our legal obligations under Art. 6(1)(1)(c) GDPR.
If obliged to do so by law, we process personal data in order to meet duties of retention under commercial or tax law or to meet legal security requirements (such as Section 7 of Germany’s Aviation Security Act [LuftSiG]). For further information on retention periods, please refer to “Duration of the data processing”.
Data transmission to immigration authorities:
Based on the airline passenger data agreement between the EU and the USA and the EU and Canada
Based on the German Airline Passenger Data Act (FlugDaG) in Germany and within the EU where destination countries in the EU have implemented EU Directive 2016/681
Based on the Trade and Cooperation Agreement between the European Union and the United Kingdom
API* (Advance Passenger Information) - we transmit data to the extent that we are obliged to participate in international travel control activities
Transmission to health authorities:
for combating a pandemic
We process passenger data on the basis of our legal obligations under Art. 9(2)(g) GDPR.
Where we are required to do so by law, we will process personal data for the purpose of verifying your health status as required for entry to the relevant country.
* Data stored in the machine-readable zone in passports or identity documents
Further information can be obtained from the relevant authorities.
Which personal data are you required to provide?
For legally stipulated or contractual requirements, we have marked the respective input fields on our website forms as mandatory, which are to be filled out on your part, so that we can provide you with the desired contract or service.
How long are your data stored?
Your personal data is erased as soon as it is no longer required for the purposes stated. However, if necessary, we must continue to store your data until the retention periods and deadlines expire, set by the legislator or supervisory authorities, which may arise from the German Commercial Code (Handelsgesetzbuch), Tax Code (Abgabenordnung) or Money Laundering Act (Geldwäschegesetz). These generally amount to six to ten years. We may also retain your data until the statutory limitation periods have expired (usually three years, but up to 30 years in some cases), provided that this is necessary for the establishment, exercise or defence of legal claims. After that, the relevant data are routinely erased.
Who receives your data?
In the context of the data processing above and the respective legal bases given (contract performance, legitimate interests, consent or processing obligations under law), your data may be passed on to the following categories of recipients:
Vairtual UG Partner Airlines or all Flight Operating Carriers
vicarious agents, e.g. service providers for ground handling services and other additional related services
other airlines performing part of the carriage
other service providers, e.g. for the provision of the website, newsletter dispatch, feedback handling, compiling of international aviation statistics
state agencies and bodies, e.g. based on entry requirements or police activities and investigations.
In the process, personal data may be transmitted to third countries or international organisations. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with legal requirements.
If these transmissions do not have a legal basis or are carried out to a country, for which the EU Commission has not issued an adequacy decision, we use EU standard contractual clauses.
Information about EU standard contractual clauses is available on theEuropean Union website.
What are your data protection rights?
Vairtual is committed to ensuring fair and transparent processing. That is why it is important to us that persons concerned can not only exercise their right to object but also to exercise the following rights where the respective legal requirements are satisfied:
Right to information, Art. 15 of the GDPR
Right to rectification, Art. 16 GDPR
Right to erasure (“right to be forgotten”), Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR
Right to object, Art. 21 of the GDPR
To exercise your right, please email email@example.com
Please provide the following details so that we can identify you:
Email address and optionally: customer number or booking code or ticket number
If you send us a copy of your ID, please black out all other information apart from your first and last name and address.
In order to be able to process your request, as well as for identification purposes, please note that we will use your personal data in accordance with Art. 6 para. 1 (c) of the GDPR.
You also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR in combination with Section 19 GDPR. The relevant supervisory authority for Vairtual is:
Datenschutzbeauftragte (Data Protection Officer)
How can you withdraw your consent?
If you gave us your consent to processing your personal data, please note that you may withdraw this consent at any time.
If you gave this consent on this website, please visit the page where you originally gave consent or log in using your Vairtual ID in order to withdraw consent in the settings.
If you have consented to receive our newsletter, you may withdraw this consent yourself using the Unsubscribe link in the newsletter.
In all other cases or if you have problems withdrawing your consent on this website, you can contact the data protection officer.
Please note that your consent can only be withdrawn with future effect and such a withdrawal does not have any influence on the lawfulness of past processing. In some cases, we may be entitled in spite of your withdrawal to continue to process your personal data on a different legal basis – to perform a contract, for example.
Information about your right to object pursuant to Art. 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6 (1) (e) or (f) of the GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data that relates to you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or in case processing is necessary for the establishment, exercise or defence of legal claims.
If personal data that relates to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data that relates to you shall no longer be processed for such purposes.
You have the option of exercising your right of objection in connection with the use of the services of the information company using an automated procedure - notwithstanding Directive 2002/58/EC - in which technical specifications are used.
Disclaimer and limitations of these data protection notices
These data protection notices only apply to processing for the website. Other websites are not subject to these data protection guidelines and may provide their own specific data protection guidelines.
What data do we process when you visit our website?
You can prevent tracking via cookies (do not track, tracking protection list) and reject the storage of third-party cookies in your browser settings.
If you delete all cookies, this will also delete any opt-out cookies placed, so you will have to actively opt-out again.
We differentiate between cookies that are absolutely necessary for the website’s technical features and optional cookies.
To enable you to select the data protection settings for your visits to our website that best suit your requirements, we give you the option below of adjusting your preferences with regard to the categories of operational necessity, statistics, convenience and personalisation. You can configure your personal settings here.
1. Operational necessity category
These cookies are necessary for the operation of the website and to manage our corporate commercial objectives. Furthermore, these cookies also allow us to recognise whether you wish to remain logged in to your profile so that we can provide our services to you more quickly on your next visit to our website.
Vairtual UG uses the services of a third-party provider to offer a flexible, pay-over-time travel financing solution. Please be aware that payment offers and advertising may be displayed even if you have not granted your consent to personalisation. If you submit a loan application or receive a loan, will collect personal data such as your name, address, telephone number, mobile phone number, email address, date of birth, full or partial social security number, identity card number (e.g. driving licence number), bank account number or payment card number. This information is required for a loan application, to open an account and to process your transaction. This information is used to verify your identity, to determine that you qualify and to complete your transaction. Processing is required for the performance of a contract (Art. 6(1)(b) GDPR). Additional information may be collected if you contact customer service by SMS, email or telephone. VairtualUG does not store your full or partial social security number or your identity card number (e.g. driving licence number).
This website uses Google Analytics, a web analysis service of Google Ireland Limited, (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). The use includes the “Universal Analytics” operating mode. This makes it possible to allocate data, sessions and interactions across several devices to a pseudonymous user ID and thus analyse a user’s activities across devices.
Google Analytics uses so-called “cookies”, text files which are saved on your computer and which enable an analysis of your usage of the website. Information generated by the cookie about your usage of this website is generally transferred to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will be shortened by Google within the member states of the European Union or in other states which are party to the Agreement on the European Economic Area before the transfer takes place. Only in exceptional circumstances will the complete IP address be transferred to a Google server in the USA and shortened there. The IP address of your browser conveyed in the context of Google Analytics will not be joined with other Google data. Google will use this information on behalf of the operator of this website to evaluate your usage of the website in order to compile reports about the website activities and to provide the website operator with additional services in connection with the usage of the website and the internet. These purposes also constitute our legitimate interest in the data processing. The legal basis for the use of Google Analytics is Section 15(3) German Telemedia Act (TMG) and Art. 6(1), Subparagraph 1(f), GDPR. Sessions and campaigns are terminated on expiry of a fixed period. The fixed period for the termination of sessions is generally 30 minutes without activity, and for campaigns the limit is six months. The maximum permissible time limit for campaigns is two years. More information about conditions of use and data protection can be found athttp://www.google.com/analytics/terms/de.html or athttps://policies.google.com/?hl=de.
You can prevent cookies from being installed by activating a corresponding setting in your browser software; however, we must inform you that, in this case, it is possible that you will not be able to use all the functions of this website entirely. Furthermore, you can prevent the capture of data by Google relating to your use of the website generated by the cookie (including your IP address), as well as the processing by Google of this data, by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent the capture of your data across multiple devices by Universal Analytics, you must complete the opt-out process on all systems you use. Click here to install an opt-out cookie: disable Google Analytics
2. Category "Analysis"
Cookies in this category are used to enable the following activities:
monitoring website usage and optimising the user experience
evaluating the most successful marketing channels
analysing aggregated data about website usage to understand our customers better. creating random identifiers to share with partners.
3. Category "Personalisation"
Cookies in this category are used to enable the following activities:
Saving your preferences from previous visits
collecting user feedback to improve our website
tracking your interests to offer customised content and offers
Proactive live chat
Vairtual UG uses a chat service to offer you additional support options where necessary so that you can successfully complete your booking online.
To establish a chat, anonymous data are analysed first and a chat invitation is shown on the user session in certain instances. The data regarding the booking are only passed to the chat system if the customer accepts this.
The chat agent is given information about your visit to our website and the web standard data so that they can help you as quickly as possible. The agent also sees the booking process page the customer is now on, including where the cursor is positioned. Please note that in order to provide the required quality of our consulting service, it may be necessary that we pass on the content of the chat with the agent to another agent or supervisor. Please also note that the agent with whom you are communicating can see your chat inputs live. This allows us to respond more quickly to your specific questions. Sensitive inputs such as payment data are not transmitted and cannot be seen by the agent.
Customer chats are stored for twelve months so that we can advise you in the future and further optimise our website and services.
4. Category "Advertising"
Cookies in this category are used to enable the following activities:
increasing the relevance of online and social advertising for you
identifying customer groups that we will target repeatedly for specific products
sharing data with our advertising and social media partners via their third-party cookies to suit your interests
Google Analytics Advertising Features
Google Analytics is a web analytics tool that also offers integration with Google advertising products on the Google marketing platform. We use this script to create remarketing lists or target groups to personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or more target group lists. We can create lists of users who have visited a particular page or searched for a particular destination. These cookies may also be combined with location information or interest segments provided by Google. These lists allow us to target you again with relevant, personalised advertising elsewhere on the internet. No personally identifiable information is collected in this process and we cannot identify you or your device. However, the information from our first-party cookie is combined with and shared with third-party cookies during this process.
Google Adwords remarketing
We use this script from Google Adwords to create remarketing lists or similar target groups to personalise our online advertising. Google links sessions on our website (first-party cookie) to one of the Google ad cookies on users’ browsers (third-party cookie). If you perform a search on google.com later using the same browser, you may see customised ads based on your previous sessions on our platform.
Usage-based online advertising with third-party providers
In order to provide relevant and current interest-based advertising to you, we try to draw conclusions about your current interests on the basis of your visits to the Vairtual Website, third-party websites and your surfing behavior.
We use third-party cookies and create usage profiles under a pseudonym for the purpose of retargeting/remarketing to website visitors and for conversion tracking. We may analyse these for advertising and monitoring purposes. It is not possible for us to trace these back directly to any individual.
For example, we use advertising cookies for the following purposes:
To store your website visits in order to determine your interests
To verify whether you clicked on an ad
To monitor the number of visitors that click on an ad
To use third-party services to display ads tailored to your needs, interests or preferences
To determine which kind of advertising is efficient for us
To display ads for products you have clicked on or searched for previously
To monitor the number of ads shown so that the same ads do not appear all of the time
To display other interesting ads based on your use of Vairtual websites
To analyse which ads you have clicked on before buying products
To establish the number of orders resulting from ads and their monetary value
Social Media functions
We offer social network functionality in various parts of our website. These include:
sharing and recommendation features for Vairtual content (e.g. share and like buttons)
linking Vairtual offerings with social networks, e. g. when logging into your personalised area on the website (“social login”)
We give you the opportunity in our online offerings to share and recommend your content in social networks .If you visit our website and use the recommendation features, we pass on the URL to the social network you select.
We recommend that you read the privacy information of the respective social networks carefully.
On our website, we use this two-click solution for the following social media plugins:
What is the situation when you receive our newsletter?
If you gave your consent to receive the newsletter in the Newsletter section of our website (until you withdraw your consent or Vairtual stops distribution of a newsletter), we wish to make you aware of the following:
consent is the legal basis for the processing.
Your consent relates to the processing of the following personal data provided voluntarily by you:
Surname, first name, title, gender/salutation
Country of origin
Preferred newsletter language
Your consent is used for the purpose of using your email address to send the newsletter to the address given. The newsletter provides you with information on topics from the Vairtual world.
We analyze your usage patterns in every newsletter by using cookies and similar technologies to personalize communication. This analysis includes, for example, pages opened, clicks, reading time and potential bookings.
Personalization of the newsletter is based on the analysis of
your interaction with the newsletter
your master data voluntarily provided to us (departure airport, gender, …)
your IP address
your existing and future bookings
The following systems and technologies are used in our newsletter:
Information on participation in MyVairtual Account
Our goal is to deliver our services to you in the most convenient way possible and thus enable you to enjoy a travel experience that is tailored to you and your particular wishes and expectations, from your first visit to our website Vairtual.com, as well as to certain other websites and apps offered by us or other companies in the Vairtual UG, all the way through to the end of your journey and beyond. That is why we offer you the option through MyVairtual to create a free customer profile with which you can access a wide range of personalized services.
The creation of a MyVairtual profile and provision of the data needed for this is not required by law or contract. However, some services are only available to our MyVairtual customers. These include, for example, the option to receive personalized flight offers and additional services on our Vairtual.com booking platform, avail yourself of personalized CLOUDVIBES offers and in-flight entertainment tailored to you in the future, and receive an enhanced selection of entertainment options. To the extent contractual purposes are given below as the legal basis for data processing, we cannot meet the respective purposes of MyVairtual without carrying out the data processing.
We wish to explain to you below how we process your personal data when you create a MyVairtual profile.
When you register for MyVairtual account, the only mandatory information we request are your email address and a password. Your country and preferred language settings will be automatically transferred, using the country and language settings you entered at vairtual.com. This information is required in order to create a MyVairtual profile and use the MyVairtual Account services described in detail below.
You are free to add further information to your MyVairtual profile , such as your name, gender, address, date of birth, further contact details and your mobile number or flight preferences such as seat preference or preferred departure airport. We also use this information to provide the MyVairtual Services described below.
Personalised use of websites and apps
When you visit our websites and apps, our aim is to make it easier and quicker for you to find and use the information that is relevant to you. That is why we give you the option of using your MyVairtual when you log in to certain websites and apps offered by us or by other companies in the Vairtual UG, so that the respective service you wish to use is already personalized and it is no longer necessary for you to create a new user account every time. Examples of this personalisation might be that you are greeted by name when you access the respective website/app, or we might provide information relevant to your current flight booking and/or pre-populated forms.
As may be required in individual cases, we process the data stored in your MyVairtual profile to enable you to log in with your MyVairtual and to personalise the content displayed in the website/app you access. When you access the website/app, you will be informed in detail about the nature and scope of the personalisation, the data processing required for this purpose, and the potential recipients of your data.
Specific data which you provide while logged in to a website or an app and which are not already stored in your MyVairtual profile may also be linked to your profile so that in future, the added data will also be available for the purposes of the MyVairtual (in accordance with any relevant and applicable requirements). Depending on the individual case, this may include the following categories of data: (i) master data which you enter in forms, (ii) preferences, such as preferred destinations, which you expressly designate as preferences to be stored in your profile, and/or (iii) flights which you enter manually in the website/app. Where applicable, you will also be notified on the website/app in advance of any data recovery activity.
“Stay logged-in” feature
While you are logged into websites or apps, you have the option of actively enabling a “stay logged-in” feature, which means that you will not be required to log in again after finishing your session and then re-visiting the website/app later.
When the “stay logged-in” feature expires, you will be asked to log in again. Furthermore, you will always be prompted to log in again if you are in the process of carrying out activities which require an enhanced level of security, such as changing your profile data. If you do not wish to use the login service, you are of course free to use the website/app without logging in. If you choose to do so, the content you access will no longer be personalized, unless you subsequently enter certain types of information manually (such as your current flight booking), in order to obtain specific information relating to your flight. In such cases, any data you input manually will not be linked to your MyVairtual profile.
Personalized booking process
By personalizing the booking process, we aim to make it as convenient and efficient as possible for you to use our services. That is why we process information from your previous bookings and any preferences in your profile to display the relevant options and/or use the appropriate defaults immediately for you within the booking process. This makes it quicker for you to book and rebook flights and purchase additional services, i.e. without first having to find the offers of interest to you among all of the many available options.
We use your data stored in your MyVairtual profile (this could be data you actively provided there during registration or added at some later point or data you gave as part of a previous booking and which we automatically use for another booking) in order to make the booking process easier for you by pre-populating forms. We also use your data given during bookings to provide you with pre-populated forms for online check-in and at self-service check-in kiosks. If you fill out other forms, such as during your participation in a promotion or when you send customer feedback using one of our electronic feedback forms on the website, for example to report lost baggage or provide feedback on your travel experience, the contact details required are also pre-populated from your profile.
Storing previous bookings
Any previous bookings you made while logged in or subsequently added to your profile are stored in your MyVairtual profile. This means you can still keep track of your previous bookings in the future and access and print booking documents and invoices.
Personalisation of offers for additional services
You are shown a list of possible additional services for your flight in the booking portal after you select or book a flight. These may be additional flight-related Vairtual services, such as Premium meals or Lounge Services, or additional third-party services, such as rental cars or insurance policies. We wish to display additional services of relevance to you, which is why we sort the ads so that those likely to be of most interest to you appear at the top. This means we show you additional services which would be a useful addition to the flight searched for or already booked by you and/or in which you have already demonstrated interest in the past at the top; offers we presume will be less interesting to you are then shown below these.
For this, we process the data regarding the flight selected by you or your upcoming flight and the data regarding previous bookings of additional services stored in your profile. If you have already booked a flight and log in again, we also process the booking information stored in your MyVairtual profile to check which additional services are available for your upcoming flight and might be of interest to you because they have not yet been included in your booking or purchased by you.
We do not build an extensive profile for this; in particular, we do not merge your aforementioned data with other data pools in order to carry out deeper analysis of your preferences without your consent. Insofar as we process data regarding your previous purchases of additional services, we also limit this to data from the last six months.
If you give us your consent in relation to this, we also use information collected using cookies to analyze your response to the additional services offered, i.e. whether you click or purchase them, in order to continuously improve the personalization of our additional offers.
Personalized advertising communication
During the registration process and subsequently in your MyVairtual profile, you have the option of giving us consent to transfer information and individual offers regarding the services of Vairtual UG airlines and their Operating Carriers and to communicate with you for this purpose via electronic means of communication (e.g. email, SMS/MMS) and/or telephone.
If you give us the relevant consent, we process your contact details (i.e. name, telephone number, email address) in order to send you the information and individual offers.
As we only wish to send you information and offers that you are really interested in, we also process with your consent the information stored in your MyVairtual profile regarding previous bookings, such as itinerary, travel period and booking class, and your current booking, such as your travel destination, selected fare and preferences in your MyVairtual profile, in order to personalize the information and offers. For example, we may send you special offers or vouchers for additional services for your trip or for services available at your travel destination by analyzing information regarding your forthcoming trip.
You have the right to withdraw your consent at any time. You may withdraw your consent to advertising communication for individual areas as well (such as just for the email newsletter) in your profile. For further information on your right to object, please refer to the “Information about your right to object pursuant to Art. 21 GDPR”. Your withdrawal of consent does not affect the lawfulness of any processing performed on the basis of this consent before such consent was withdrawn.
Profile setting and storage period options
You can use your profile settings to define which of your data we may process. For example, you can decide whether you wish to add further data, such as certain preferences, to your profile in addition to the data required for registration so that they can be processed for the aforementioned purposes.
You can also decide for yourself the extent to which you wish to receive information and individual offers from us by adjusting your communication settings.
If you no longer wish to avail yourself of the MyVairtual Services, you may delete your MyVairtual account profile at any time.
You can delete your MyVairtual profile as well as individual pieces of data provided by you within your MyVairtual profile.
We also delete your provisional MyVairtual profile if you do not confirm your registration by the deadline given in the confirmation email or have a confirmation email with activation link sent to yourself more than three times without confirming activation.
If you have given us your consent to carry out a connect, we use the linked data for the aforementioned purposes.
As you have the option to consent to advertising communication from us in both accounts and we want to be sure that we only contact you if you actually want us to, these communication settings are also synchronised during a connect. This ensures that we only then contact you when you have given your consent to this in both your MyVairtual iD profile and Miles & More VAIRPlay account. Please note that if you provide or withdraw your consent after the accounts are connected, this is then effective for both of your accounts.
You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of any processing performed on the basis of this consent before such consent was withdrawn. For further information on your right to object, please refer to the “Information about your right to object pursuant to Art. 21 GDPR” section.
Examples of how your data are used in our Services
When you purchase a flight ticket via our website, we always process the following personal data from you:
Title, first name, surname (collectively “master data”)
Landline and/or mobile number, email address (for the booking confirmation) (collectively “contact data”)
Your preferred payment method and related data, as well as the master data, address and contact data of the payer (collectively “payment data”).
Optionally, you can provide us with the following information:
Date of birth
Nationality and passport information (“identification data”)
Frequent flyer information
Flight-related travel information
An email sent to you a few days before your departure date provides information on your upcoming trip, offers of additional individual services and possible free travel services available. You can object at any time to the pre-flight email being sent using the link in the flight-related travel information.
We inform you when online check-in for your flight opens so that you can select a seat early on.
If you access your booking on Vairtual.com or are logged into Vairtual.com or the Vairtual app and an upcoming trip is linked with your customer profile, you are then shown a link for online check-in.
If you have stored an email address in your customer profile and your current booking is linked with your customer profile or you have given an email address during the booking, we then send an unencrypted email to inform you that online check-in is open for your upcoming trip and provide you with direct access to online check-in for your flight. This access is enabled using an encrypted direct link.
Optionally, you may provide us with the following information during online check-in:
Frequent flyer information
Mobile phone number and/or email address for sending mobile boarding passes and for notifications in the case of flight irregularities (any emails sent for this are explicitly unencrypted)
Flight status and flight irregularity notifications
If you provide us with a mobile number and/or email address when making a booking, updating your booking or in your customer profile (MyVairtual or VAIRPlay) linked with the booking so that we can send you your boarding pass and/or for you to use the Vairtual App for your flight, we will then inform you about any changes to the flight status and in particular any flight irregularities (either via text/SMS or unencrypted emailand/or in the app).
Additional services in the Vairtual app for your trip
You have the option in the Vairtual app of storing personal data locally on your mobile end device so that the necessary elements are pre-populated during the check-in process, making check-in more convenient and faster for you.
Travel documents (passport, ID, residence permit and visa) can also be entered using the scan function.
The personal data stored on your device are only processed locally in the app and include:
Identification data for check-in (surname, first name)
Contact data (mobile number or email address)
Immigration document data (passport, ID, residence permit, visa, other types of documents)
Please note that misuse by a third party, such as if your mobile phone is stolen, cannot be ruled out. Therefore, we recommend that you protect your mobile phone accordingly, such as with a code lock. Vairtual expressly emphasizes that data are stored at your own risk and Vairtual cannot be held liable for any misuse.
Location services and airport maps
If you permit the Vairtual app to process your location (using the app’s location service settings in the respective operating system), then we can show you your location in our digital airport maps. This setting is needed for us to offer you further location-based services.
We process tracking data to pinpoint your position (dynamic IP address, location data via the device’s Bluetooth, WiFi, GPS functionality).
Our local information uses your location provided you have agreed to this in your smartphone settings under the app’s location service settings in the respective operating system.
We can use the local information to send you offers that are relevant for your location. Our processing of your smartphone’s motion data in an anonymized form also helps us to predict waiting times at security checkpoints, for example.
Your location is only used for the aforementioned purposes.
If you do not wish to use our local services, you may disable these at any time in the Vairtual app settings.
We offer you various channels for providing feedback. You can therefore freely decide how you wish to communicate with us. Included in this, you have the option of using our feedback form on our website to send us data. A letter is another way to communicate with us. You may also choose to use other channels to provide feedback, such as your email address or the customer service channels Vairtual app. Please be aware that your individual feedback may be used for training and quality purposes.
If your message is accompanied by a request for financial compensation, we will ask for a copy of your official photo ID in individual cases for your protection and clear identification.