01 Legal Framework & Identity of the Data Controller
This Cookie Policy explains how Travel Pro S.A., operating the online booking platform LetzBookit.com, uses HTTP cookies, HTML5 local storage, and similar technologies on your terminal equipment when you visit https://letzbookit.com across any of its 9 language editions, and how you can control them at any time.
This policy is established in strict compliance with:
- Article 4(3)(c) of the amended Luxembourg Law of 30 May 2005 concerning specific provisions for the protection of individuals with regard to the processing of personal data in the electronic communications sector (Loi modifiée du 30 mai 2005 relative aux dispositions spécifiques de protection de la personne à l’égard du traitement des données à caractère personnel dans le secteur des communications électroniques, transposing ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC);
- Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), in particular Articles 6, 7, 12, and 13, alongside the Luxembourg Law of 1 August 2018 on the organization of the CNPD; and
- The Official Guidelines of the Luxembourg National Data Protection Commission (CNPD) on cookies and other trackers (Lignes directrices de la CNPD en matière de cookies et autres traceurs).
Data Controller: Travel Pro S.A. (Société Anonyme under Luxembourg law, RCS Luxembourg B44184, TVA LU15659948), legally represented by Gianni Pietrangelo.
Registered Office: 430-434, route de Longwy, L-1940 Luxembourg, Grand Duchy of Luxembourg.
Data Protection Officer (DPO): gdpr@travel-pro.lu · Tel: (+352) 46 95 45 777.
Registered Office: 430-434, route de Longwy, L-1940 Luxembourg, Grand Duchy of Luxembourg.
Data Protection Officer (DPO): gdpr@travel-pro.lu · Tel: (+352) 46 95 45 777.
02 What Are Cookies and HTML5 Local Storage? (Data Minimization by Design)
Under Luxembourg and European ePrivacy law, rules governing access to or storage of information on a user’s terminal equipment apply both to traditional HTTP cookies and to modern browser storage mechanisms:
1. HTTP Cookies (
Small text files containing compact key-value pairs stored by your browser and associated with the domain
document.cookie)Small text files containing compact key-value pairs stored by your browser and associated with the domain
letzbookit.com. On LetzBookit.com, our first-party technical cookies are engineered to be ultra-lightweight (between 2 and 21 bytes), protected with SameSite=Lax and Secure (over HTTPS), and restricted to a maximum lifespan of 90 days (or 12 months for your Cookiebot consent record).
2. HTML5 Local Storage (
A client-side browser storage area that allows LetzBookit.com to remember your in-progress flight or hotel search criteria (such as selected airports, cabin class, and passenger counts) locally on your device. Unlike HTTP cookies,
window.localStorage)A client-side browser storage area that allows LetzBookit.com to remember your in-progress flight or hotel search criteria (such as selected airports, cabin class, and passenger counts) locally on your device. Unlike HTTP cookies,
localStorage data is never automatically transmitted to web servers in HTTP request headers, ensuring superior privacy and network performance.
03 Prior Consent Rule & Cookiebot Consent Management Platform (CMP)
Pursuant to Article 4(3)(c) of the amended Law of 30 May 2005 and CNPD guidelines:
- Strictly Necessary Exemption: Cookies and local storage entries whose sole purpose is to carry out the transmission of a communication over an electronic communications network, or that are strictly necessary in order to provide an online service explicitly requested by the user (such as remembering your chosen language, holding your flight/hotel search inputs while you use the booking engine, or recording your cookie consent choice), do not require prior opt-in consent.
- Prior Informed Consent (Opt-In) for All Other Trackers: Any cookie or tracker used for statistical audience measurement, preferences, or marketing is blocked by default and is only activated if you have given your free, specific, informed, and unambiguous consent via our certified Consent Management Platform: Cookiebot by Usercentrics (operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, Domain Group ID:
4d52cdd8-27eb-4b26-b54e-3604a1393adf).
04 Exhaustive Technical Inventory of Cookies & Local Storage on LetzBookit.com
In accordance with the transparency obligations set out by the CNPD, the tables below list every first-party cookie, HTML5 local storage key, and optional third-party cookie used across https://letzbookit.com:
A. Strictly Necessary Technical Cookies & Local Storage (Always Active — Art. 4(3)(c) Law of 30 May 2005)
| Name / Key | Provider & Storage Type | Specific Technical Purpose | Duration / Retention |
|---|---|---|---|
CookieConsent |
Cookiebot (Cybot A/S) First-Party HTTP Cookie |
Stores the user’s official cookie consent state (accepted/declined categories and anonymous consent ID) on the current domain so that your privacy choices are respected across page loads. | 12 months |
letzbookit_lang |
LetzBookit.com HTTP Cookie & LocalStorage |
Remembers the 2-letter ISO language code explicitly selected by the user (en, fr, de, lb, es, pt, ru, ja, zh — 2 bytes) so that navigation and legal pages remain in your chosen language (SameSite=Lax; Secure). |
90 days |
letzbookit_origin |
LetzBookit.com First-Party HTTP Cookie |
Stores the 3-letter IATA airport code of your selected departure airport (e.g., LUX — 3 bytes) to pre-fill the departure field during your booking session (SameSite=Lax; Secure). |
90 days |
letzbookit_dates |
LetzBookit.com First-Party HTTP Cookie |
Stores your selected departure and return dates in compact format (DD-MM-YYYY|DD-MM-YYYY — 21 bytes). Automatically purged by our script as soon as the departure date is in the past (SameSite=Lax; Secure). |
Up to 90 days (Auto-purged after travel date) |
letzbookit_last_flight_search |
LetzBookit.com HTML5 LocalStorage (Client-Only) |
Preserves your in-progress flight search form parameters (origin/destination airports, cabin class, passenger counts, direct-flight toggle) locally inside your browser so your search is not lost when returning from fare results. Never sent in HTTP headers. | Browser storage (Expired dates auto-reset) |
letzbookit_last_hotel_search |
LetzBookit.com HTML5 LocalStorage (Client-Only) |
Preserves your in-progress hotel search parameters (destination city, check-in/check-out dates, room & guest distribution, star rating) locally inside your browser. Never sent in HTTP headers. | Browser storage (Expired dates auto-reset) |
letzbookit_active_tab |
LetzBookit.com HTML5 LocalStorage (Client-Only) |
Remembers whether you last searched for flights or hotels on the homepage search widget. |
Browser storage |
B. Statistics / Audience Measurement & Third-Party Services (Subject to Prior Consent — Art. 6(1)(a) GDPR)
| Name / Service | Provider & Category | Purpose & Data Processed | Duration / Retention |
|---|---|---|---|
_ga |
Google Ireland Limited Statistics (Google Analytics 4) |
Used by Google Analytics 4 (Property ID: G-L596VVBCL1) to calculate aggregate visitor, session, and campaign statistics in order to optimize website speed and usability. IP addresses are anonymized by default in GA4. |
13 to 24 months (Subject to consent) |
_ga_L596VVBCL1 |
Google Ireland Limited Statistics (Google Analytics 4) |
Used by Google Analytics 4 to persist anonymous session state and count page views during a browsing session. | 13 to 24 months (Subject to consent) |
| Google Maps Embed ( #contact section) |
Google Ireland Limited Functional Map Embed |
Displays the interactive map showing the location of Travel Pro S.A. at 430-434, route de Longwy, L-1940 Luxembourg. Loaded lazily (loading="lazy") only when scrolling to the Contact section. |
Session |
| GDS Booking Session ( tickets.letzbookit.com) |
Aaron Group & Amadeus GDS Strictly Necessary Checkout |
When you submit a flight or hotel search, technical session cookies on tickets.letzbookit.com maintain your live fare basket, passenger form state, and PCI-DSS payment session during checkout. |
Session (Expires after booking/close) |
05 How to Manage Cookies via Cookiebot or Your Browser Settings
You have full control over cookies and local storage at any time through three complementary mechanisms:
- 1. Via Our Cookiebot Consent Manager: Click the “Manage Cookies” link in the website footer on any page, or the “Open Cookiebot Preferences / Withdraw Consent” button in Section 03 above, to inspect, modify, or withdraw your consent with immediate effect.
- 2. Via Our One-Click Search Memory Reset: Click the “Clear Saved Search Memory” button in Section 03 above to immediately erase all LetzBookit local storage keys (
letzbookit_last_flight_search,letzbookit_last_hotel_search,letzbookit_active_tab) and first-party search cookies (letzbookit_dates,letzbookit_origin). - 3. Via Your Web Browser Configuration: All modern browsers allow you to block or delete cookies and site data globally or per domain. Official instructions for major browsers are available below:
- Google Chrome: Manage cookies and site data in Chrome
- Mozilla Firefox: Enhanced Tracking Protection & Cookies in Firefox
- Apple Safari (macOS & iOS): Manage cookies and website data in Safari
- Microsoft Edge: View and delete browser cookies in Microsoft Edge
06 Your GDPR Rights & Supervisory Authority in Luxembourg (CNPD)
Where cookies or online identifiers involve the processing of personal data, you benefit from all statutory rights under Articles 15 to 22 of the GDPR (right of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent at any time without affecting the lawfulness of prior processing). For complete details on how we protect your personal data, please consult our Privacy Policy & Data Protection Notice.
Contact Our Data Protection Officer (DPO)
Travel Pro S.A. — Data Protection Officer
430-434, route de Longwy, L-1940 Luxembourg
Email: gdpr@travel-pro.lu · info@letzbookit.com
Telephone: (+352) 46 95 45 777
Travel Pro S.A. — Data Protection Officer
430-434, route de Longwy, L-1940 Luxembourg
Email: gdpr@travel-pro.lu · info@letzbookit.com
Telephone: (+352) 46 95 45 777
Luxembourg Data Protection Authority (CNPD)
Commission Nationale pour la Protection des Données (CNPD)
Service des réclamations · 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
Tel: (+352) 26 10 60 - 1
Official Portal: https://cnpd.public.lu
Commission Nationale pour la Protection des Données (CNPD)
Service des réclamations · 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
Tel: (+352) 26 10 60 - 1
Official Portal: https://cnpd.public.lu