Cookie Policy
AUSTRIAN AIRLINES uses browser cookies, scripts, web beacons, tracking URLs, pixel tags and similar technologies (hereinafter referred to as "cookies") to provide, protect and improve our website and applications. Below we explain to you how our cookies work, the purpose they have, the type of data each of them collects and how you can manage your cookie settings.
What cookies are and how they work
Cookies are small files that are downloaded onto the browser directory or the hard drive of your computer, tablet or smartphone (hereafter “device”) when you visit our website or application (hereafter “platform”). Every time you visit our platform, cookie and platform will “communicate” in order for your device to be recognised. This is useful for both you and us. For example, a cookie will allow us to save the text entries you make in form fields on the website so you won’t have to enter the same information again the next time you visit the website, therefore improving your experience on our platforms. Cookies are managed by us through a little program called tool or tag.
We use first-party and third-party cookies. First-party cookies come from our platform and send information to us only; third-party cookies are placed by third parties on our site and send information about your device to other companies that recognise that cookie. In most cases the information in a cookie is pseudonymised or anonymised because cookies generally don’t identify you as a person, they rather identify your device. In a few cases it may be possible to link certain cookies to personal data. We will only process such information if you give us your consent or if the processing is necessary for you to be able to use a certain service, like your austrian.com Profile.
Glossary
| Term | Explanation |
| Anonymised IP | An anonymous IP address is an IP address which cannot be connected to an individual customer. It is generated by deleting part of the data in the original IP address. This anonymous address can be geo-localised to a metropolitan area. |
| Booking details | Booking details are the data generated when a customer books a flight. This is anonymous data about the flight, including origin and destination of the flight, the dates, number and type of passengers, booking classes and ancillaries purchased. In addition, these include anonymous data about the type of payment (credit card or invoice), encrypted order ID (not including any ticket numbers or confirmation numbers), and timestamp. |
| Device fingerprint | A device fingerprint is a type of user identifier generated by a combination of details about the hardware and software used by a customer. |
| Encrypted user identifiers | Encrypted user identifiers are identifiers that could be linked to a specific user profile. They are encrypted so that they are not recognizable and are never linked back to an individual customer. |
| Flight search details | Flight search details are the data generated when a customer searches for a flight. This is anonymous data including origin and destination of the flight, the dates, number and type of passengers, and booking classes. |
| IP address | An IP address is a unique address that identifies a customer's device on the Internet. IP addresses are important for security and fraud prevention. |
| Passenger details | Passenger details are the data that describe individual passengers, including name, postal address and e-mail address. This data is collected when necessary to fulfill a customer's booking request. |
| Session identifiers | Anonymous session identifiers are number-letter combinations that are used to identify a single visit (session) on a platform. This allows you to do things like go back and forth through the booking process without having to start a new search. |
| User behaviour | User behaviour is data generated when a customer interacts with our platforms, including the specific series of screens visited, buttons or elements clicked, scrolling behaviours or mouse movements. |
Cookie settings
Most browsers automatically allow all cookies, but you can decide for yourself whether we or third parties are allowed to save cookies on your device or not.
a) Consent Manager
AUSTRIAN AIRLINES offers you a Consent Manager in the form of a pop-up window when you first visit our platform. In this Consent Manager you may select the category of cookies that you want to accept. You can come back on your choices at any time by clicking on the link “Change privacy settings” at the bottom of the platform. A change in your settings will not automatically delete cookies. To do that, follow the instructions outlined below.
b) Browser settings
You can change your browser settings so that they do not accept or save cookies at any time. Alternatively, you can opt to be shown a warning message every time before accepting cookies or you can set your browser up in such a way that it only accepts cookies from certain websites. You can also delete cookies that have already been saved. Deleting all cookies means your device will also delete any opt-out cookie and our Consent Manager will pop-up again next time you visit our platform. You may therefore have to renew your choice to opt-out, too. Below you find general instructions to manage cookies for the most popular browsers:
c) Cookie blockers
You may also employ cookies blockers such as “DoNotTrackMe”.
Please note that, if you decline cookies on the website, some functions may be limited or unavailable. As a result, we recommend that your browser settings accept our and our partners’ cookies.
Cookie categories
1. Necessary cookies
Necessary cookies are used to manage the platform. They enable a smooth operation, e.g. while booking your flight, delivering the correct answers to your requests and ensuring security features, such as avoiding any malicious use of the website. Necessary cookies cannot be disabled but you can delete them or opt-out when they are signalled. We employ the following necessary cookies:
| Name of tool and tag type | Cookie name and lifespan | Purpose and third country transfer | Business address, privacy policy and opt-out | Type of data collected |
| Tealium (script/cookie) |
(up to 12 months) | Tealium is a tag management system which is used to implement scripts and tracking pixels onto our websites and apps. It helps us to send data to the other tools and third-party providers we use, but it does not store any data itself. It sets cookies that allow us to identify you as an anonymised single user. For instance, thanks to this cookie, you only need to choose the cookie consent on your first visit, and not on every single page. Data transmission to a third country: No | Tealium |
|
| Google Tag Manager (script) | N/A | Google Tag Manager is a tag management system which is used to implement scripts and tracking pixels onto websites and apps. We use this script from Google to enable the optimisation of our landing pages. Data transmission to a third country: Yes, US | Google LLC Google’s privacy policy: https://safety.google/ |
|
| Google Analytics (script/cookie) |
(up to 2 years) | Google Analytics is a website analytics tool. We use Google Analytics to collect aggregated, anonymous data. This data helps us understand how customers use our platforms and identify areas for improvement. In addition, the data serves critical platform functions like detecting errors, fraudulent uses and provides operational data. We use this information to improve the quality, effectiveness and performance of our platforms, so that you have the best possible experience.The Google Analytics script is used to assign values to the cookies that are needed to collect this information. In order to function, Google Analytics sets cookies on your computer. The Information generated by the cookie about your usage of our platform is transferred to Google in the USA and stored there. Google does not have the right to access the data. Google Analytics anonymises your IP address to protect your privacy. No other personal identifiable information is collected. Data transmission to a third country: Yes, US | Google LLC Google’s privacy policy: https://safety.google/ You can prevent Google Analytics from collecting and processing your data (including your IP address) by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en |
|
| Awin (Payback) (script/cookie) |
| We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns). This specific script shares anonymised booking details with Awin and sets a third-party cookie when customers have been referred to our platforms by Payback. Our Payback program requires this script and cookie to fulfil its purpose. The use of these technologies by third parties is subject to their own privacy policy. Data transmission to a third country: Yes, UK | AWIN AG E-Mail: global-privacy@awin.com Website: www.awin.com https://www.awin.com/gb/legal/privacy-policy |
|
| First Party Cookies |
| First party cookies are used to manage the platform. | Austrian Airlines AG Head office: Vienna Legal form: Limited Company Website: www.austrian.com |
|
2. Analytics cookies
We track anonymised data for statistical and analytical purposes. These are mostly conversion cookies that enable us to evaluate the effectiveness of our marketing campaigns and partner programs. With these cookies, we count and analyse the number of sales and clicks associated.
Please find the detail in the table below:
| Name of tool and tag type | Cookie name and lifespan | Purpose and third country transfer | Business address, privacy policy and opt-out | Type of data collected |
Artefact (script/cookie) |
(14 days) | We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).This specific script shares anonymised booking details with Artefact and any partner programs in which you participate and sets a third-party cookie. For example, our Cashback program requires this script and cookie to fulfil its purpose. The use of these technologies by third parties is subject to their own privacy policy. Data transmission to a third country: Yes, FR | Artefact Germany GmbH Artefact‘s privacy policy: https://aaa.artefact.com/privacy-policyeng.do You can also use their direct Opt-out: https://aaa.artefact.com/privacy-optout.do?appLocale=eng |
|
| Decibel Insights (script/cookie) |
(up to 1 year) | Decibel is a web analytics tool designed to help us understand how the website is used and how it can be improved to better serve our customers' needs.It uses cookies to identify a visitor’s browser and track user behaviors. Your mouse clicks and sessions are recorded anonymously to improve the website, for error analysis, and to generate heatmaps and behaviour reports. Data transmission to a third country: Yes, UK | Decibel Insight Decibel Insight's privacy policy: https://decibel.com/privacy-policy/ You can also use their direct Opt-out: https://decibel.com/optout/ |
|
| Kayak (script/cookie) |
| We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of advertisement campaigns). This specific script shares anonymised booking details with Kayak when customers have been referred to our platforms by Kayak. Kayak sets an encrypted user identifier in a cookie that allows this script to connect a booking to a previous session on their website. The use of these technologies by third parties is subject to their own privacy policy. Data transmission to a third country: Yes, US | Kayak Kayaks privacy policy: https://www.kayak.com/privacy |
|
| Skyscanner (script) | N/A | We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of advertisement campaigns).This specific script shares anonymised booking details with Skyscanner when customers have been referred to our platforms by Skyscanner. Data transmission to a third country: Yes, Globally | Skyscanner Limited |
|
| Google Flights (script/cookie) |
| We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).This specific script shares anonymised booking details with Google Flights when customers have been referred to our platforms by Google Flights. It uses first and third-party cookies that allows Google Flights to connect a booking to a previous session on their website.Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy. Data transmission to a third country: Yes, US | Google LLC Google’s privacy policy: https://safety.google/ You can always adjust your Google advertisements settings by visitin gGoogle Ad Personalisation: https://adssettings.google.com/authenticated |
|
3. Personalisation cookies
We store some of your settings so that we can offer you personalised content which matches your interests. We employ the following personalization cookies:
| Name of tool and tag type | Cookie name and lifespan | Purpose and third country transfer | Business address, privacy policy and opt-out | Type of data collected |
AB Tasty (script/cookie) |
(up to 13 months) | AB Tasty is an A/B testing tool. It is used to modify a platform interface and test which variations create the best experience for our customers. All data relating to the customers participating in these tests is anonymised. This anonymised data is transmitted to AB Tasty for data analysis and interpretation of user behaviour. This process helps us to optimise your experience of our platforms. Data transmission to a third country: Yes, Globally | AB Tasty https://www.abtasty.com/terms-of-use/ |
|
4. Advertising cookies
We use advertising cookies to provide you with tailored ads while you browse the internet. We employ the following advertising cookies:
| Name of tool and tag type | Cookie name and lifespan | Purpose and third country transfer | Business address, privacy policy and opt-out | Type of data collected |
| AppNexus (pixel) | - | We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns). Data transmission to a third country: Yes, US | AppNexus, Inc. https://www.appnexus.com/corporate-privacy-policy-de https://www.xandr.com/privacy/platform-privacy-policy/ |
|
| Floodlight (script/cookie) |
(up to 2 years) | Floodlight is the conversion tracking system for the Google Marketing Platform. We use the Floodlight script (formerly DoubleClick Floodlight) to track the performance of our own Google search engine and display advertising campaigns. To do this, Floodlight uses data about your visit to and click behaviour on our website and third-party websites. If you visit certain pages on our website, Google Marketing Platform can report that your visit was a result of one of these ads.A third-party cookie is set by Google DoubleClick. Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy. Data transmission to a third country: Yes, US | Google LLC Google’s privacy policy: https://safety.google/ For further information on Google’s privacy policy relating to ads, please go to Google Advertising: https://policies.google.com/technologies/ads You can adjust your Google advertisements settings by visiting: Google Ad Personalisation: https://adssettings.google.com/authenticated |
|
| Facebook (script/cookie) |
(180 days) | Facebook Pixel is a script used to optimise our campaigns on Facebook. It collects information on campaign performance and on how you interact with our website to allow us to address you with customised advertisement on Facebook. The Facebook pixel is triggered during the booking process to capture the booking/drop out pattern (origin, destination, class, etc.). If you have given Facebook your consent to deliver you personalised ads, Facebook Pixel will, upon activation, send general information about the browsing session along with the Facebook cookie, Pixel ID and the URL of the website visited. Facebook processes your IP address. Data transmission to a third country: Yes, Globally | Facebook, Inc. Facebook's Privacy Policy: https://www.facebook.com/about/privacy You can adjust your advertisement's preferences on Facebook here: https://www.facebook.com/ads/about/?entry_product=ad_preferences You can also remove rights for third-party to use your information via these platforms: Your Ad Choices: https://optout.aboutads.info/?c=2&lang=EN Your Online Choices: https://www.youronlinechoices.com/ |
|
| Google Ads Remarketing (script/cookie) |
(up to 2 years) | We use this script from Google Adwords to create remarketing lists or similar audiences in order to personalise our online advertisement. Google associates sessions on our site (first-party cookie) with one of Google’s advertising cookies on users’ browsers (third-party cookie); when you later perform a search on google.com from the same browser, you may see customised ads based on your previous sessions on our platform. Data transmission to a third country: Yes, US | Google LLC Google’s privacy policy: https://safety.google/ For further information on Google’s privacy policy relating to ads, please go to Google Advertising: https://policies.google.com/technologies/ads You can adjust your Google advertisements settings by visiting: Google Ad Personalisation: https://adssettings.google.com/authenticated |
|
| Oracle Responsys (pixel/cookie) |
(14 days) | We use the Responsys conversion script to track the effectiveness of our newsletter campaigns. Data transmission to a third country: Yes, US | Oracle Corporation https://www.oracle.com/legal/privacy/privacy-policy.html |
|
| The Trade Desk (script/cookie) |
(390 days) | We use this script from the Trade Desk to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns). Data transmission to a third country: Yes, US | 42 N. Chestnut Street https://www.thetradedesk.com/general/privacy |
|
| Google Analytics Advertising Features (script/cookie) |
(up to 2 years) | Google Analytics is a web analytics tool which also offers an integration with Google advertising products in the Google Marketing Platform. We use this script to create remarketing lists or audiences in order to personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or several audiences lists. We can create lists of users that visited a specific page or looked for a specific destination. Those cookies can also be combined with location information or interests' segments provided by Google. With these lists, we can re-engage you with relevant, personalised advertisement elsewhere on the internet. No personally identifiable information is collected in this process and we are not able to identify you, nor your device. However, during this process, the information from our first party cookie will be combined with third party cookies and shared with third-party vendors. Data transmission to a third country: Yes, US | Google LLC Google’s privacy policy: https://safety.google/ For further information on Google’s privacy policy relating to ads, please go to Google Advertising: https://policies.google.com/technologies/ads You can adjust your Google advertisements settings by visiting: Google Ad Personalisation: https://adssettings.google.com/authenticated |
|
Changes to the Cookie policy
We update our Cookie Policy from time to time. Please do check it regularly in order to be aware of the newest version.
Questions?
For more information on cookies, please contact the Data Protection Officer:
* Please select "Cookies" as a subject.
or contact us by post to:
Austrian Airlines AG
Rechtsbüro - Datenschutz
Office Park 2
Postbox 100
1300 Wien-Flughafen
Austria
For a more detailed understanding of how we use personal data in general, please refer to our Privacy Statement.
Last update: March 31st, 2021