Data Protection Information Baggage Tracing
We gladly provide to you the following information about data protection in fulfilment of our information obligations pursuant to Art. 12 et seqq. of the General Data Protection Regulation (GDPR):
Controller for Data Processing:
AHS Aviation Handling Services GmbH
Airport Plaza, Haus D, Ebene 4 | D-22335 Hamburg
You will find additional information about our company and the persons authorised to represent us as well as additional contact opportunities in the legal disclosures on our internet site: https://www.ahs-de.com/impressum.
Whenever you contact our baggage tracing service (Lost & Found), it is as a rule because you have not been able to find your baggage at your destination. Or possibly you have left a piece of baggage or an item on the plane and it has been handed in to the AHS station.
We, AHS Aviation Handling Services GmbH — Baggage Tracing — will be glad to assist you on behalf of the airline in the search for your baggage.
We use a service offered by SITA* in cooperation with IATA* for this purpose. This is an online baggage tracing service that we can use to determine the current location of your suitcase around the clock. This system functions globally and can therefore exchange information with all the airports that are connected to it.
We will require the following (personal data) from you for comparison with this information because we will otherwise not be able to find your baggage.
- Surname, first name, telephone number, TAG number (uniquely generated code)
- Personal identity document number (required for identification)
- Address (if baggage will be delivered to the address)
What is the legal basis?
You have concluded a transport agreement with your airline. This agreement includes a contract obligation that your baggage will also land at your destination. If this obligation cannot be satisfied on occasion, the airline is responsible for tracing your baggage.
We are “vicarious agents” for the airline. This means that we trace your baggage on behalf of your airline and, when it has been located, hand it over to you personally or deliver it to the address you have specified.
The legal basis for this is point (b) of Art. 6 (1) GDPR.
How long are the data stored/processed? If this is not possible: What criteria are used for the determination of this period?
Your personal data are erased as soon as they are no longer required to achieve the purpose of their collection. It is possible, however, that we will be required to continue to store your data until certain statutory retention periods have expired. Moreover, we are permitted to store your data until the expiration of the statutory period of limitations (as a rule 3 years, but in some cases as long as 30 years) insofar as this is required for the establishment, exercise or defence of legal claims. The relevant data will be erased routinely at the end of any such periods.
Are the data transferred to third parties and, if so, to whom or to what category of recipients?
We enter your personal data in the so that we can find out where your baggage is located. In other words, there is a comparison of information. If your baggage has arrived at an airport other than the one at your destination, this information is entered into the system. This is the only way to find your baggage.
A “transfer” or “forwarding” of your personal data does not occur whenever we trace your baggage. There is only a comparison of your data.
Insofar as we locate a piece of baggage and enter the baggage number into the system so that this piece of baggage can be found again from this global system, there is a “transfer” of personal data. It is possible under certain circumstances that there will be a transfer to third countries or to international organisations. In these cases, we observe statutory requirements and request presentation of appropriate guarantees for the protection of your personal data.
Irrespective of the comparison of the information from the global system, it is definitely possible that your personal data must be processed in the competent business departments in our company.
In addition, it is also possible that we will transfer your personal data to companies that delivery your baggage to your address.
If the data transfer is not based on legal grounds or if the EU Commission has not issued an adequacy decision, we use the EU standard contract clauses.
What rights do you, the data subject, have?
- The right to access (Art. 15 GDPR)
- The right to rectification (Art. 16 GDPR)
- The right to erasure (“right to be forgotten”) (Art. 17 GDPR)
- The right to restriction of processing (Art. 18 GDPR)
- The right to data portability (Art. 20 GDPR)
- The right to objection (Art. 21 GDPR)
If you wish to exercise your rights, you may send an email to email@example.com. We require the following information for identification:
- Postal address
- Email address
You have the right to lodge a complaint with a supervisory authority:
If you believe that we have infringed on data protection regulations when processing your data, you have the right to lodge a complaint with a supervisory authority.
We fall under the jurisdiction of the following supervisory authority:
Hessian Officer for Data Protection and Freedom of Information
P.O. Box 3163, 65021 Wiesbaden
or: Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Phone: 06 11/14 08-0
Fax: 06 11/14 08-611
We have appointed a data protection officer for our company:
AVIATICS Cost & Safety Management GmbH & Co. KG (legal entity)
Last revised: 26/06/2019
Communications and IT provider that specialises in the aviation industry
 International Air Transport Association. Umbrella association of the airlines