martin is eating a cookie

Cookie policy

Our website uses cookies to understand how people use it in order to improve your website experience. By klicking on the "Accept"-button below you consent to our use of cookies as defined in our cookie policy. You have the right of withdrawal at any time. Details about our cookies and the possibility to change the settings can be found via the "Change cookie settings"-button. To read our full data policy please click here.

Prize Draw Privacy Notice
Doughnut Drop

 

1.      Controller and contact:

Hahn Air Lines GmbH, An der Trift 65, 63303 Dreieich, Germany

General contact: ccm@hahnair.com

Data protection Team contact: datenschutz@hahnair.com

Data Protection Officer: You may contact our Data Protection Officer via datenschutz@hahnair.com.

 

2.       Processing of personal data, purposes and legal bases

2.1  Categories of personal data

Depending on the entry form and the prize draw, we may process in particular:

  • Identification data (e.g. first name, last name)
  • Contact data (e.g. email address, telephone number)
  • Agency and professional data (e.g. travel agency name, IATA number), where provided
  • Participation and verification data (e.g. ticket or booking reference numbers, eligibility checks, submission time).
  • Technical data generated when using the entry form (e.g. IP address, timestamps, logs), where provided by the form service provider
  • Communication content (e.g. messages and emails sent to us)

2.2  Purposes

We process your personal data on the following legal bases:

  • to administer and run the prize draw, including receiving entries, verifying eligibility and preventing misuse
  • to conduct the draw and determine the winner(s)
  • to contact the winner(s) and fulfil the prize
  • to respond to enquiries related to the prize draw
  • to comply with legal obligations and retention requirements (where applicable) and to establish, exercise or defend legal claims
  • to publish winner information as described in the Terms and Conditions

2.3  Legal bases

We process personal data on the following legal bases:

  • Art. 6(1)(b) GDPR to administer and carry out the prize draw (participation and prize fulfilment)
  • Art. 6(1)(c) GDPR to comply with legal obligations, where applicable
  • Art. 6(1)(f) GDPR based on our legitimate interests in ensuring the secure and fraud-free operation of the prize draw and in the establishment, exercise or defence of legal claims
  • Art. 6(1)(a) GDPR where you provide separate consent for optional processing (e.g. publication of an individual participant’s name)

 

3.      Recipients

We share personal data only where this is necessary for the administration and execution of the prize draw, or where we are legally required to do so. Recipients may include internal teams at Hahnair involved in administering the prize draw; technical service providers engaged by Hahnair to operate the website and the embedded application used for participation (acting as processors on Hahnair’s behalf); public authorities, courts and external advisors where required by law or necessary to protect our legal interests; social media platforms and other recipients, where winner information is published on such channels (only as described in the Terms and Conditions).

Where the prize draw provides for publication of winner information, data may also be processed via the relevant communication channels (e.g. website, newsletter, social media). The name of an individual participant will be published only where a separate consent has been obtained.

 

4.      International data transfers

Where service providers or platform providers process personal data outside the European Economic Area (EEA), transfers take place only in accordance with Art. 44 et seq. GDPR, in particular on the basis of adequacy decisions or the EU Standard Contractual Clauses (SCCs) and, where required, additional safeguards. You may request further information by contacting datenschutz@hahnair.com.

 

5.      Retention

We store personal data only for as long as necessary for the purposes described above: Data of non-winning participants will generally be deleted within 3 months after completion of the draw. Winner data will be retained for up to 3 months after the draw (or until the prize has been fulfilled and used, whichever occurs earlier), unless a longer retention is required by applicable law. Records subject to statutory retention obligations will be retained for the legally required period and then deleted. Published winner information may remain publicly accessible (e.g. on the internet or social media) for as long as the relevant publication remains available, unless removed earlier.

 

6.      Your rights

You have the right to request access, rectification, erasure, restriction and data portability. You also have the right to object to processing based on Art. 6(1)(f) GDPR. Where processing is based on consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing prior to withdrawal remains unaffected. To exercise your rights, please contact us at datenschutz@hahnair.com.

 

7.      Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for Hahn Air Lines GmbH is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Germany.

 

8.      Requirement to provide data

Participation is voluntary. However, the provision of the data marked as mandatory in the entry form is required to participate. Without such data, participation is not possible.

 

9.      Automated decision-making

No automated decision-making, including profiling, takes place. Winners are selected by random draw.

Version: 16 September 2026