In the following, the Bremen/Lower Saxony Transport Association (VBN) would like to inform you about the handling of your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
1. Responsibility
2. Contact details of the data protection officer
3. Data protection on fahrplaner.de
4. Online sales (mobile and online ticket)
5. Rights of the user
6. Automated decision making
2. Contact details data protection officer
The VBN's company data protection officer will be happy to provide you with information or suggestions on the subject of data protection:
Verkehrsverbund Bremen/Niedersachsen GmbH
datenschutz@vbn.de
04 21 59 60 0
3. Data protection on fahrplaner.de
3.1 Storage of the IP address
The VBN stores the IP address transmitted by your web browser for a strictly earmarked period of seven days in the interest of being able to recognize, limit and eliminate attacks on the VBN website. After this period, your IP address will be deleted or anonymized. The legal basis is Article 6(1)(f) GDPR.
3.2 Usage data
When you visit the FahrPlaner website, so-called usage data is temporarily stored on the VBN web server as a log for statistical purposes. This serves to improve the quality of the VBN website. This data record consists of
- the page from which the file was requested
- the name of the file
- the date and time of the request
- the amount of data transferred,
- the access status (file transferred, file not found),
- the description of the type of web browser used,
- the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.
- The aforementioned log data is only stored in anonymized form.
3.3 Data security
The VBN takes technical and organizational measures to protect your data from unauthorized access as comprehensively as possible. An encryption procedure is used on the VBN website. Your data is transmitted from your computer to the VBN web server and vice versa via the Internet using SSL/TLS encryption. You can recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.
3.4 Data transmission to third parties
The VBN transmits your data to service providers who support the operation of the VBN website (e.g. hosters, web agencies) and the associated processes as part of order processing in accordance with Article 28 GDPR. These service providers are strictly bound by instructions to the VBN and are contractually bound accordingly.
3.5 Cookies
Cookies are used on the FahrPlaner website.
Cookies are small text files that can be stored and read on your terminal device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that are not personal.
You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that the FahrPlaner website may then not be displayed optimally and some functions may no longer be technically available.
Cookies in the “Necessary” category
These cookies are always activated because they are required and necessary for basic website functions. These necessary cookies include those that are required to respond to customer inquiries. They are used, for example, in the electronic timetable information (FahrPlaner). All these cookies contribute to the convenient, secure and compliant use of the FahrPlaner website and cannot be switched off.
You can prevent the use of cookies by making the appropriate browser settings. However, the VBN would like to point out that in this case you may not be able to use all functions of the FahrPlaner website to their full extent.
3.6 Forwarding to other websites
The VBN website contains links to websites of other providers. You can recognize this, for example, by a logo or by the fact that a new browser window opens. If it is not a VBN website, the data protection regulations of the respective provider apply. This applies, for example, to the pages linked to by the corresponding logos (e.g. from Facebook and YouTube) or links to the websites of, for example, VBN transport companies, the NITAG OnlineShop and online payment services.
3.7 FahrPlaner
Applications of the FahrPlaner services of Hacon Ingenieurgesellschaft mbH, Lister Straße 15, 30163 Hannover are integrated on the fahrplaner.de website. FahrPlaner at https://www.fahrplaner.de/en/timetable is integrated on the FahrPlaner website with the help of a so-called iFrame. In addition, so-called “widget” is integrated on the FahrPlaner home page to enable faster access to the timetable information.
When you access these pages, a connection is established between your browser (end device) and the Hacon servers. Your data, such as your IP address and the end device you used when visiting the site and your interactions within the FahrPlaner applications, are processed.
Based on your location, the journey planner can show you nearby stops, travel options and service messages (news). For this purpose, the GPS coordinates determined by your device are transmitted to our servers with your consent. For example, you can query connection requests to/from your current location and display the stops in your vicinity.
3.8 Online sales (mobile and online ticket)
The services of EOS UPTRADE GmbH, Schanzenstraße 70, 20357 Hamburg are integrated on the FahrPlaner website. The application and the respective sub-pages at https://shop.fahrplaner.de are embedded on the FahrPlaner website with the help of a so-called layout loader.
When you access these pages, a connection is established between your browser (end device) and the EOS UPTRADE servers. Your data, such as your IP address and the end device you used when visiting the page and your interactions, are processed and stored.
4. Online sales (mobile and online tickets)
4.1 Purpose and legal basis of processing
The VBN processes the customer's data, i.e. your name, title, address, date of birth, e-mail address, desired payment method, account details with IBAN and/or credit card details, answer to security question and the order processes with the following details: IP address, first and last name for ticket personalization as well as ticket data in accordance with Art. 6 para. 1 lit. b GDPR for the purpose of fulfilling the contract. The user agent / device information / relationship information is collected in accordance with Art. 6 para. 1 lit. f GDPR in the legitimate interest. The legitimate interest on the part of VBN lies in system optimization, quality assurance and fraud prevention. This also includes the associated customer support.
4.2 Recipients of the personal data
The data you provide will be processed and stored on behalf of VBN by EOS UPTRADE GmbH, Schanzenstraße 70, 20357 Hamburg in accordance with Article 6(1)(f). The VBN's legitimate interest lies in outsourcing the background system, ticket creation and hosting to a service provider.
The VBN passes on your personal data (first and last name, date of birth, address, e-mail address, account details if provided by you, credit card details, PayPal account information, mobile phone number and data on your respective ticket sales) and any changes to LogPay Financial Services GmbH, Schwalbacher Straße 72, 65760 Eschborn for the purpose of selling and assigning the claims against you that arise in connection with your ticket purchase. This is done on the basis of Article 6(1)(f) GDPR. The legitimate interest on the part of VBN lies in the outsourcing of payment processing and receivables management. The legitimate interest on the part of LogPay Financial Services GmbH is the collection of data for the purpose of processing payments, receivables management, evaluating the admissibility of payment methods and avoiding payment defaults.
You can object to the transfer of data to EOS UPTRADE GmbH and LogPay Financial Service GmbH at any time, but it will then no longer be possible to place orders via the electronic sales channel.
The data protection information of LogPay Financial Services GmbH can be found at https://www.logpay.de/datenschutz.htmlabrufen.
In the FahrPlaner app, the VBN offers payment via the online payment service PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). If you select PayPal as your payment method, you will be redirected to the PayPal website and the personal data you enter will be transmitted to PayPal in encrypted form. This usually includes your name, address, telephone number, IP address, e-mail address or other information required for order processing, including information about your order.
The processing of personal data is carried out by PayPal as the responsible party. If this is necessary for the fulfillment of the order, data may also be passed on to third parties by PayPal. PayPal also transfers personal data to credit agencies, such as SCHUFA, for identity and credit checks. The legal basis is. Article 6 paragraph 1 f) GDPR. PayPal's legitimate interest is to ensure the solvency of its customers.
Further information about data processing by PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.
5. Rights of the user
The GDPR grants you certain rights when processing your personal data:
5.1 Right of access (Article 15 GDPR):
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right of access to this personal data and to the information listed in detail in Article 15 GDPR.
5.2 Right to rectification and erasure (Articles 16 and 17 GDPR):
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Article 17 GDPR applies.
5.3 Right to restriction of processing (Article 18 GDPR):
You have the right to request the restriction of processing if one of the conditions listed in Article 18 GDPR applies.
5.4 Right to data portability (Article 20 GDPR):
In certain cases, which are listed in detail in Article 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.
5.5 Right to object (Article 21 GDPR):
If data is collected on the basis of Article 6(1)(f) (data processing to safeguard legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. The personal data will then no longer be processed unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
5.6 Right to lodge a complaint with a supervisory authority
In accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
In the Free Hanseatic City of Bremen, the competent supervisory authority is the Commissioner for Data Protection of the Free Hanseatic City of Bremen, Arndtstraße 1, 27570 Bremerhaven.