Privacy Policy

Rhein-Main-Verkehrsverbund GmbH ("RMV") takes the protection of your personal data very seriously. We want you to know when we collect which data and how we use it. In the following, we inform you about the type, scope and purpose of the collection, processing and use ("processing") of personal data ("data") in the context of the use of our website and within external online presences, such as our social media profiles ("online presence"). 

Table of Contents

• Note on the responsible body
• Data protection officer required by law
• Data collection
  • Server log files
  • Cookieless usage analysis via Matomo
  • Sending the Deutschlandticket newsletter
  • Company details of the JobTicket registration form
  • Company details for the Deutschland-JobTicket
  • Sweepstake form
  • Participant details in the RMV Future Lab registration form
  • Audio and video conferencing in the RMV Future Lab.
  • Enquiry by e-mail, telephone or fax
  • Linking and use of online presences in social media
• Disclosure of personal data to third parties
• Security measures
• Rights of the data subjects
• Amendment and update of the privacy policy

Note on the responsible body

The responsible body for data processing on this website is:

Rhein-Main-Verkehrsverbund GmbH
Alte Bleiche 5 
65719 Hofheim am Taunus

Tel.: +49 6192 294-0
Fax: +49 6192 294-900
E-Mail: datenschutz@rmv.de

Data protection officer required by law

RMV has appointed an external data protection officer:

DSBOK
Oliver Krause (eDSB)
Untergasse 2
65474 Bischofsheim

Tel.: +49 6144 402197
E-Mail: info@dsbok.de
Website: www.dsbok.de

Data collection

Server log files

RMV automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• browser type and browser version
• referrer URL
• Time of the server request
• IP-addresses are not saved

This data is not merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - for this purpose, the server log files must be collected.

• Types of data processed: Content data (e.g. text entries), usage data (e.g. entry pages, access times), meta/communication data (e.g. device information).
• Data subjects: Users (e.g. website visitors, users of online services).
• Legal grounds: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

• Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos).
• Data subjects: Communication partners.
• Purposes of processing: contact requests and communication.
• Legal grounds: Contract performance and pre-contractual enquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Disclosure of personal data to third parties

Data that has been logged when accessing the RMV's internet service will only be passed on to third parties if we are obliged to do so by or on the basis of the law or an enforceable order of a court, authority or other body under public law, or if the passing on is necessary for legal or criminal prosecution in the event of attacks on the RMV's internet infrastructure. The data will not be passed on for other non-commercial or commercial purposes.

Security measures

We take appropriate technical and organisational measures in accordance with the law, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and the level of threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input of, disclosure of, assurance of availability of and segregation of the data. We also have procedures in place to ensure the exercise of data subjects' rights, the deletion of data and responses to data compromise. Furthermore, we already take the protection of personal data into account in the development or selection of hardware, software as well as procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

• Shortening of the IP address: If it is possible for us or if it is not necessary to store the IP address, we shorten your IP address or have it shortened. In the case of IP address shortening, also known as "IP masking", the last octet, i.e. the last two numbers of an IP address, are deleted (in this context, the IP address is an identifier individually assigned to an Internet connection by the online access provider). The shortening of the IP address is intended to prevent or make it significantly more difficult to identify a person by their IP address.
• SSL encryption (https): In order to protect your data transmitted via our online offer, we use SSL encryption. You can recognise such encrypted connections by the prefix https:// in the address line of your browser.

Rights of the data subjects

As a data subject, you have various rights under the GDPR, in particular under Articles 15 to 18 and 21 of the GDPR:

• Right to object:
  You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
   
• Right of withdrawal of consent:
  Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
   
• Right to information:
  You have the right to request confirmation as to whether data in question is being processed and to information about this data as well as further information and a copy of the data in accordance with the legal requirements.
   
• Right to rectification:
  You have the right, in accordance with the law, to request that data concerning you be completed or that inaccurate data concerning you be corrected.
   
• Right to erasure and restriction of processing:
  In accordance with legal requirements, you have the right to request that data concerning you be deleted without delay or, alternatively, to request restriction of the processing of the data in accordance with legal requirements.
   
• Right to data portability:
  You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
   
• Right to restriction of processing:
  You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:
  • If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
  • If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
     
• Right to complain to competent supervisory authority:
  In the event of breaches of the GDPR, data subjects shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal is without prejudice to any other administrative or judicial remedy.