Cookie Policy

AUSTRIAN AIRLINES uses browser cookies, scripts, web beacons, tracking URLs, pixel tags and similar technologies (hereinafter referred to as "cookies") to provide, protect and improve our website and applications. Below we explain to you how our cookies work, the purpose they have, the type of data each of them collects and how you can manage your cookie settings.

What cookies are and how they work

Cookies are small files that are downloaded onto the browser directory or the hard drive of your computer, tablet or smartphone (hereafter “device”) when you visit our website or application (hereafter “platform”). Every time you visit our platform, cookie and platform will “communicate” in order for your device to be recognised. This is useful for both you and us. For example, a cookie will allow us to save the text entries you make in form fields on the website so you won’t have to enter the same information again the next time you visit the website, therefore improving your experience on our platforms. Cookies are managed by us through a little program called tool or tag.

We use first-party and third-party cookies. First-party cookies come from our platform and send information to us only; third-party cookies are placed by third parties on our site and send information about your device to other companies that recognise that cookie. In most cases the information in a cookie is pseudonymised or anonymised because cookies generally don’t identify you as a person, they rather identify your device. In a few cases it may be possible to link certain cookies to personal data. We will only process such information if you give us your consent or if the processing is necessary for you to be able to use a certain service, like your austrian.com Profile.

Glossary

TermExplanation
Anonymised IPAn anonymous IP address is an IP address which cannot be connected to an individual customer. It is generated by deleting part of the data in the original IP address. This anonymous address can be geo-localised to a metropolitan area.
Booking detailsBooking details are the data generated when a customer books a flight. This is anonymous data about the flight, including origin and destination of the flight, the dates, number and type of passengers, booking classes and ancillaries purchased. In addition, these include anonymous data about the type of payment (credit card or invoice), encrypted order ID (not including any ticket numbers or confirmation numbers), and timestamp.
Device fingerprintA device fingerprint is a type of user identifier generated by a combination of details about the hardware and software used by a customer.
Encrypted user identifiersEncrypted user identifiers are identifiers that could be linked to a specific user profile. They are encrypted so that they are not recognizable and are never linked back to an individual customer.
Flight search detailsFlight search details are the data generated when a customer searches for a flight. This is anonymous data including origin and destination of the flight, the dates, number and type of passengers, and booking classes.
IP addressAn IP address is a unique address that identifies a customer's device on the Internet. IP addresses are important for security and fraud prevention.
Passenger detailsPassenger details are the data that describe individual passengers, including name, postal address and e-mail address. This data is collected when necessary to fulfill a customer's booking request.
Session identifiersAnonymous session identifiers are number-letter combinations that are used to identify a single visit (session) on a platform. This allows you to do things like go back and forth through the booking process without having to start a new search.
User behaviourUser behaviour is data generated when a customer interacts with our platforms, including the specific series of screens visited, buttons or elements clicked, scrolling behaviours or mouse movements.

Cookie settings

Most browsers automatically allow all cookies, but you can decide for yourself whether we or third parties are allowed to save cookies on your device or not.

a) Consent Manager

AUSTRIAN AIRLINES offers you a Consent Manager in the form of a pop-up window when you first visit our platform. In this Consent Manager you may select the category of cookies that you want to accept. You can come back on your choices at any time by clicking on the link “Change privacy settings” at the bottom of the platform. A change in your settings will not automatically delete cookies. To do that, follow the instructions outlined below.

b) Browser settings

You can change your browser settings so that they do not accept or save cookies at any time. Alternatively, you can opt to be shown a warning message every time before accepting cookies or you can set your browser up in such a way that it only accepts cookies from certain websites. You can also delete cookies that have already been saved. Deleting all cookies means your device will also delete any opt-out cookie and our Consent Manager will pop-up again next time you visit our platform. You may therefore have to renew your choice to opt-out, too. Below you find general instructions to manage cookies for the most popular browsers:

c) Cookie blockers

You may also employ cookies blockers such as “DoNotTrackMe”.

Please note that, if you decline cookies on the website, some functions may be limited or unavailable. As a result, we recommend that your browser settings accept our and our partners’ cookies.

Cookie categories

1. Necessary cookies

Necessary cookies are used to manage the platform. They enable a smooth operation, e.g. while booking your flight, delivering the correct answers to your requests and ensuring security features, such as avoiding any malicious use of the website. Necessary cookies cannot be disabled but you can delete them or opt-out when they are signalled. We employ the following necessary cookies:

Name of tool and tag typeCookie name and lifespanPurpose and third country transferBusiness address, privacy policy and opt-outType of data collected
Tealium (script/cookie)
  • utag_main
  • utag_optout
  • channelcloser
  • channelflow
  • channeloriginator
  • cmv3
  • CONSENTMGR
  • tealium_0

(up to 12 months)

Tealium is a tag management system which is used to implement scripts and tracking pixels onto our websites and apps. It helps us to send data to the other tools and third-party providers we use, but it does not store any data itself. It sets cookies that allow us to identify you as an anonymised single user. For instance, thanks to this cookie, you only need to choose the cookie consent on your first visit, and not on every single page.

Data transmission to a third country: No

Tealium
11095 Torreyana Road,
San Diego, CA 92121 USA
https://tealium.com/privacy/

  • session identifiers
  • anonymous user identifiers
Google Tag Manager (script)N/A

Google Tag Manager is a tag management system which is used to implement scripts and tracking pixels onto websites and apps. We use this script from Google to enable the optimisation of our landing pages.

Data transmission to a third country: Yes, US

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA

Google’s privacy policy: https://safety.google/

  • sessions identifiers
  • anonymous user identifiers
  • flight search details
Google Analytics (script/cookie)
  • _ga
  • _gid

(up to 2 years)

Google Analytics is a website analytics tool. We use Google Analytics to collect aggregated, anonymous data. This data helps us understand how customers use our platforms and identify areas for improvement. In addition, the data serves critical platform functions like detecting errors, fraudulent uses and provides operational data. We use this information to improve the quality, effectiveness and performance of our platforms, so that you have the best possible experience.The Google Analytics script is used to assign values to the cookies that are needed to collect this information. In order to function, Google Analytics sets cookies on your computer. The Information generated by the cookie about your usage of our platform is transferred to Google in the USA and stored there. Google does not have the right to access the data. Google Analytics anonymises your IP address to protect your privacy. No other personal identifiable information is collected.

Data transmission to a third country: Yes, US

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA

Google’s privacy policy: https://safety.google/

You can prevent Google Analytics from collecting and processing your data (including your IP address) by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en

  • session identifiers
  • anonymous user identifiers
  • encrypted user identifiers
  • flight search details
  • booking details
  • device fingerprint
  • localisation
  • anonymised IP
Awin (Payback) (script/cookie)
  • userFP
  • b425

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns). 

This specific script shares anonymised booking details with Awin and sets a third-party cookie when customers have been referred to our platforms by Payback. Our Payback program requires this script and cookie to fulfil its purpose. The use of these technologies by third parties is subject to their own privacy policy.

Data transmission to a third country: Yes, UK

AWIN AG
Eichhornstr. 3
D-10785 Berlin

E-Mail: global-privacy@awin.com

Website: www.awin.com

https://www.awin.com/gb/legal/privacy-policy

  • booking details
  • encrypted user identifier
First Party Cookies
  • OSFlightSearch[DESTStationName]
  • OSFlightSearch[DESTStation]
  • OSFlightSearch[ORGStationName]
  • OSFlightSearch[ORGStation]
  • OSFlightSearchlang
  • osses
  • sales_site#aua_country
  • sales_site#darksitechecked
  • sales_site#lang
  • sales_site#mobile_device_checked
  • tmsee
  • _smt_uid
  • lastSearches_item0
  • lastSearches_item1
  • lastSearches_item2
  • lastSearches_item3
  • lastSearches_item4
  • lastSearches_item5
  • lastSearches_version
  • austrian-cookie-info
First party cookies are used to manage the platform.

Austrian Airlines AG
Office Park 2
P.O. Box 100
A-1300 Vienna Airport

Head office: Vienna

Legal form: Limited Company

Website: www.austrian.com

  • sessions identifiers
  • search details
  • encrypted user identifier

2. Analytics cookies

We track anonymised data for statistical and analytical purposes. These are mostly conversion cookies that enable us to evaluate the effectiveness of our marketing campaigns and partner programs. With these cookies, we count and analyse the number of sales and clicks associated.

Please find the detail in the table below:

Name of tool and tag typeCookie name and lifespanPurpose and third country transferBusiness address, privacy policy and opt-outType of data collected

Artefact (script/cookie)

  • trs
  • aaaid

(14 days)

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).This specific script shares anonymised booking details with Artefact and any partner programs in which you participate and sets a third-party cookie. For example, our Cashback program requires this script and cookie to fulfil its purpose. The use of these technologies by third parties is subject to their own privacy policy.

Data transmission to a third country: Yes, FR

Artefact Germany GmbH
Rothenbaumchaussee 80C
20148 Hamburg
Deutschland

Artefact‘s privacy policy: https://aaa.artefact.com/privacy-policyeng.do

You can also use their direct Opt-out: https://aaa.artefact.com/privacy-optout.do?appLocale=eng

  • booking details
  • encrypted user identifier
Decibel Insights (script/cookie)
  • da_lid
  • da_sid

(up to 1 year)

Decibel is a web analytics tool designed to help us understand how the website is used and how it can be improved to better serve our customers' needs.It uses cookies to identify a visitor’s browser and track user behaviors. Your mouse clicks and sessions are recorded anonymously to improve the website, for error analysis, and to generate heatmaps and behaviour reports.

Data transmission to a third country: Yes, UK

Decibel Insight
89 Worship Street
London EC2A 2BF
UK

Decibel Insight's privacy policy: https://decibel.com/privacy-policy/

You can also use their direct Opt-out: https://decibel.com/optout/

  • session identifiers
  • device fingerprint
  • user behaviour
Kayak (script/cookie)
  • xp-session-seg

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of advertisement campaigns). This specific script shares anonymised booking details with Kayak when customers have been referred to our platforms by Kayak. Kayak sets an encrypted user identifier in a cookie that allows this script to connect a booking to a previous session on their website. The use of these technologies by third parties is subject to their own privacy policy.

Data transmission to a third country: Yes, US


Kayak
7 Market Street
Stamford, CT 06902
USA

Kayaks privacy policy: https://www.kayak.com/privacy

  • encrypted user identifier
  • booking details
Skyscanner (script)
N/A

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of advertisement campaigns).This specific script shares anonymised booking details with Skyscanner when customers have been referred to our platforms by Skyscanner.

Data transmission to a third country: Yes, Globally

Skyscanner Limited
Floor 6, The Avenue
1 Bedford Avenue
London, WC1B 3AU UK

  • anonymous identifiers
  • booking details
Google Flights (script/cookie)
  • _gcl_gf

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).This specific script shares anonymised booking details with Google Flights when customers have been referred to our platforms by Google Flights. It uses first and third-party cookies that allows Google Flights to connect a booking to a previous session on their website.Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: Yes, US

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA

Google’s privacy policy: https://safety.google/

You can always adjust your Google advertisements settings by visitin gGoogle Ad Personalisation: https://adssettings.google.com/authenticated

  • booking details
  • encrypted user identifier

3. Personalisation cookies

We store some of your settings so that we can offer you personalised content which matches your interests. We employ the following personalization cookies:

Name of tool and tag typeCookie name and lifespanPurpose and third country transferBusiness address, privacy policy and opt-outType of data collected

AB Tasty (script/cookie)

  • ABTasty
  • ABTastySession

(up to 13 months)

AB Tasty is an A/B testing tool. It is used to modify a platform interface and test which variations create the best experience for our customers. All data relating to the customers participating in these tests is anonymised. This anonymised data is transmitted to AB Tasty for data analysis and interpretation of user behaviour. This process helps us to optimise your experience of our platforms.

Data transmission to a third country: Yes, Globally

AB Tasty
17-19 Rue Michel-le-Comte, Paris, 75003

https://www.abtasty.com/terms-of-use/

  • sessions identifiers
  • anonymous user identifiers
  • device fingerprint
  • user behaviour
  • IP address (not stored)

4. Advertising cookies

We use advertising cookies to provide you with tailored ads while you browse the internet. We employ the following advertising cookies:

Name of tool and tag typeCookie name and lifespanPurpose and third country transferBusiness address, privacy policy and opt-outType of data collected
AppNexus (pixel)-

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).
This specific script shares anonymized booking details (no personal information) with AppNexus to evaluate the performance of our marketing campaigns.

Data transmission to a third country: Yes, US

AppNexus, Inc.
28 West 23rd Street, 4th Floor, New York , NY , 10010

https://www.appnexus.com/corporate-privacy-policy-de

https://www.xandr.com/privacy/platform-privacy-policy/

  • Anonymised IP
  • Anonymous user identifiers
  • Booking details
  • Flight search details
Floodlight (script/cookie)
  • _IDE
  • _ga
  • _gcl_au

(up to 2 years)

Floodlight is the conversion tracking system for the Google Marketing Platform. We use the Floodlight script (formerly DoubleClick Floodlight) to track the performance of our own Google search engine and display advertising campaigns. To do this, Floodlight uses data about your visit to and click behaviour on our website and third-party websites. If you visit certain pages on our website, Google Marketing Platform can report that your visit was a result of one of these ads.A third-party cookie is set by Google DoubleClick. Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: Yes, US

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA

Google’s privacy policy: https://safety.google/

For further information on Google’s privacy policy relating to ads, please go to Google Advertising: https://policies.google.com/technologies/ads

You can adjust your Google advertisements settings by visiting: Google Ad Personalisation: https://adssettings.google.com/authenticated

  • sessions identifiers
  • search details
  • booking details
  • encrypted user identifier
Facebook (script/cookie)
  • _fb

(180 days)

Facebook Pixel is a script used to optimise our campaigns on Facebook. It collects information on campaign performance and on how you interact with our website to allow us to address you with customised advertisement on Facebook. The Facebook pixel is triggered during the booking process to capture the booking/drop out pattern (origin, destination, class, etc.). If you have given Facebook your consent to deliver you personalised ads, Facebook Pixel will, upon activation, send general information about the browsing session along with the Facebook cookie, Pixel ID and the URL of the website visited. Facebook processes your IP address.
Moreover, Facebook may use its cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and target ads on its own network and connect it to your online activity. For more details, see Facebook's Privacy Policy.

Data transmission to a third country: Yes, Globally

Facebook, Inc.
1 Hacker Way
Menlo Park, CA 94025 USA

Facebook's Privacy Policy: https://www.facebook.com/about/privacy

You can adjust your advertisement's preferences on Facebook here: https://www.facebook.com/ads/about/?entry_product=ad_preferences

You can also remove rights for third-party to use your information via these platforms: Your Ad Choices: https://optout.aboutads.info/?c=2&lang=EN

Your Online Choices: https://www.youronlinechoices.com/

  • sessions identifiers
  • device fingerprint
  • search details
  • booking details
  • encrypted user identifier
  • IP address
Google Ads Remarketing (script/cookie)
  • ga

(up to 2 years)

We use this script from Google Adwords to create remarketing lists or similar audiences in order to personalise our online advertisement. Google associates sessions on our site (first-party cookie) with one of Google’s advertising cookies on users’ browsers (third-party cookie); when you later perform a search on google.com from the same browser, you may see customised ads based on your previous sessions on our platform.
Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: Yes, US

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA

Google’s privacy policy: https://safety.google/

For further information on Google’s privacy policy relating to ads, please go to Google Advertising: https://policies.google.com/technologies/ads

You can adjust your Google advertisements settings by visiting: Google Ad Personalisation: https://adssettings.google.com/authenticated

  • search details
  • encrypted user identifier
Oracle Responsys (pixel/cookie)
  • 6.interact2.Xz.....N.N…

(14 days)

We use the Responsys conversion script to track the effectiveness of our newsletter campaigns.
When clicking on a link in an Austrian Airlines newsletter that links to an Austrian Airlines website, an encrypted user identifier is set in a cookie. If then a booking is made this script connects the booking to a clicked newsletter campaign.

Data transmission to a third country: Yes, US

Oracle Corporation
10 Van de Graaff Drive
Burlington
Massachusetts 01803
United States of America

https://www.oracle.com/legal/privacy/privacy-policy.html

  • encrypted user identifiers
  • booking details
The Trade Desk (script/cookie)
  • TDID

(390 days)

We use this script from the Trade Desk to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).
We also use this script to create remarketing lists or similar audiences in order to personalize our online advertisement. When you later visit other websites with the same browser, you may see customized ads based on your previous sessions on our platform.

Data transmission to a third country: Yes, US

42 N. Chestnut Street
Ventura
CA 93001

https://www.thetradedesk.com/general/privacy

  • anonymous user identifiers
  • booking details
  • flight search details
  • session identifiers
Google Analytics Advertising Features (script/cookie)
  • _ga
  • _gat

(up to 2 years)

Google Analytics is a web analytics tool which also offers an integration with Google advertising products in the Google Marketing Platform. We use this script to create remarketing lists or audiences in order to personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or several audiences lists. We can create lists of users that visited a specific page or looked for a specific destination. Those cookies can also be combined with location information or interests' segments provided by Google. With these lists, we can re-engage you with relevant, personalised advertisement elsewhere on the internet. No personally identifiable information is collected in this process and we are not able to identify you, nor your device. However, during this process, the information from our first party cookie will be combined with third party cookies and shared with third-party vendors.
Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: Yes, US

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA

Google’s privacy policy: https://safety.google/

For further information on Google’s privacy policy relating to ads, please go to Google Advertising: https://policies.google.com/technologies/ads

You can adjust your Google advertisements settings by visiting: Google Ad Personalisation: https://adssettings.google.com/authenticated

  • encrypted user identifier

Changes to the Cookie policy

We update our Cookie Policy from time to time. Please do check it regularly in order to be aware of the newest version.

Questions?

For more information on cookies, please contact the Data Protection Officer:

* Please select "Cookies" as a subject.

or contact us by post to:

Austrian Airlines AG
Rechtsbüro - Datenschutz
Office Park 2
Postbox 100
1300 Wien-Flughafen
Austria

For a more detailed understanding of how we use personal data in general, please refer to our Privacy Statement.

Last update: March 31st, 2021