Timetable information

Privacy policy

The responsible body in the sense of the data protection regulations, in particular General Data Protection Regulation of the EU (GDPR), is:

Verkehrsverbund und Fördergesellschaft Nordhessen mbH,
Rainer-Dierichs-Platz 1,
34117 Kassel, Germany

(hereafter also referred to as “we” or “us”)

Your rights as a data subject

You can assert the following rights against us:

  • Information about the data we hold about you and how it is processed,
  • Correction of inaccurate personal data,
  • Deletion of the data we have stored about you,
  • Restriction of data processing to the extent that we are not yet allowed to delete your data due to legal obligations,
  • Objection to our processing your data
  • and data portability, provided you have consented to the data processing or have concluded a contract with us.

Should you have given us your consent, you can revoke this at any time with effect for the future. Statutory permissions remain unaffected by this.

You can lodge a complaint with the supervisory authority responsible for you at any time. Which supervisory authority is responsible for you depends on the federal state in which the alleged violation of your personal rights occurred, your place of work or your place of residence. A list of the supervisory authorities (for the non-public sector) with addresses can be found at: www.bfdi.bund.de

Your rights may be restricted in part to the extent that they are likely to render impossible or seriously impair the achievement of research or statistical purposes and that limitation is necessary for the fulfilment of the research or statistical purposes.

Purposes of data processing by the controller and third parties

We only process your personal data for the purposes set out in this privacy policy.

The NVV processes your data on the basis of and within the scope of the consent you have given (Article 6(1)(a) GDPR).

Insofar as we have a contractual relationship with you or such a relationship is sought and the implementation of pre-contractual measures or the implementation of the contract require this, we also process data on the basis of Article 6(1)(b) GDPR.

The same applies if the NVV is obliged to process data due to legal requirements (Article 6(1)(c) GDPR).

The NVV is also responsible for legally assigned tasks pursuant to the Hessian Public Transport Act. Where processing is necessary for the performance of one of these tasks, it is carried out in accordance with Article 6(1)(e) GDPR.

Furthermore, the processing may be necessary and lawful to protect the legitimate interests of the NVV, unless the interests or fundamental rights and freedoms of the data subject override (Article 6(1)(f) GDPR).

In particular, direct advertising in the context of customer information and acquisition of customers could be deemed to be relevant here.

The same applies to the transmission of data to third parties.

Deletion or blockage of data

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various retention periods provided for by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Collection of general information when you visit our website

When you access our website, information of a general nature is automatically collected. This information (server log files) includes:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • data volume transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

This information is technically necessary in order to correctly deliver the contents of web pages requested by you and is mandatory when using the Internet. In particular, they are processed for the following purposes:

  • to ensure a problem-free connection of the website,
  • to ensure the trouble-free use of our website,
  • to evaluate system security and
  • stability for statistical evaluation, improvement of the timetable information
  • as well as for other administrative purposes.

The processing of your personal data is based on our legitimate interest in collecting data for the purpose mentioned above. We do not use your data to draw conclusions about your person. The only recipients of the data are the controller and, if applicable, any processors used by the controller.

Anonymous information of this kind may be statistically analysed by us in order to optimise our website and the technology behind it.

Cookies

Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, the browser used, the operating system and your connection to the Internet.

It is not possible to use cookies to launch programmes or to transfer viruses to a computer. The information contained in cookies allows us to provide you with easier navigation and the correct display of our web pages.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are routinely set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Registration on our website

When you register to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and email address. Once you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if required. Of course, we will also provide you with information about the personal data we have stored about you whenever you wish. We will also be happy to correct or delete such data at your request, provided that there are no conflicting statutory obligations to retain such data. To contact us in this regard, please use the contact details provided at the end of this privacy policy.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Contact Form

When you contact us by email or contact form regarding questions of any kind, you voluntarily give us your consent for the purpose of contacting you. A valid email address is required for this purpose. This serves to allocate the request and the subsequent response to it. The entry of further data is optional. The information you provide will be stored for the purpose of processing the request and for possible subsequent enquiries. Once your request has been processed, all personal data will be automatically deleted.

Processing anonymised data as part of the research project "Mobile Data Fusion – Automatische Ermittlung der Fahrgastnachfrage aus AFZS-, WLAN-, Bluetooth- und Verbindungsdaten [Mobile Data Fusion – Automatic determination of passenger demand from AFZS, WLAN, Bluetooth and connection data]".

Within the context of this research project (hereinafter: "project"), we evaluate requests for timetable information on the homepage and via app as well as Wi-Fi and Bluetooth connection data of your mobile end devices . Among other things, the aim of the project is to improve the procedure for determining the demand for public transport in order to be able to provide a more attractive timetable and tariff service. In this way, the NVV would like to meet its future responsibilities as the organisation responsible for public transport in the sense of Section 6 of the Hessian Public Transport Act. The project is being funded by the Federal Ministry of Transport and Digital Infrastructure (BMVI). The processing of your data takes place on the basis of Article 6(1)(e) and (f) GDPR.

Throughout the project stages of process development, pilot application and application phase, the data is processed in anonymised form.

The analysis and aggregation of data is carried out by the following project partners, to whom this data is transmitted by us:

  • WVI Prof. Wermuth Verkehrsforschung und Infrastrukturplanung GmbH
  • Universität Kassel (Fachgebiet Verkehrsplanung und Verkehrssysteme) [University of Kassel (Department of Transport Planning and Systems)]
  • INIT Innovative Informatikanwendungen in Transport-, Verkehrs- und Leitsystemen GmbH.

Within the context of the project, the NVV and the project partners act as joint controllers pursuant to Article 26 of the GDPR. This cooperation with regard to the processing of personal data is regulated in an agreement on joint data processing. Within the scope of their activities in the project, each partner is obliged to observe the legal provisions on data protection, in particular the regulations of the General Data Protection Regulation. Furthermore, the NVV is stipulated to act as the central contact for data subjects and to provide the data-protection information. The NPT also handles the processing of the rights of data subjects in this field (see above). You are welcome to send your requests to datenschutz@nvv.de Of course, you can also contact the other project partners if you have any questions.

For more information on the project, please contact https://www.nvv.de/mobiledatafusion

Here in detail:As part of the research project, if you are at stops or in public transport vehicles in the NVV transport area that have been equipped with the recording technology as part of the research project, these devices will receive Wi-Fi and Bluetooth connection data from you. Bus stops and vehicles that have been fitted out with such equipment can be easily identified by means of NVV information leaflets. The applications developed during the research project will be tested in a pilot phase on up to six selected lines in the route network of the NVV. The passive connection data collected is technology-related and is sent automatically by devices with Internet or Bluetooth capability, such as your smartphone or tablet (hereinafter: "mobile devices"), received by the collection technology and processed for statistical purposes (Article 6(1)(f) GDPR). The aim is to generate reliable data on the real use of our public transport services.

The data of the mobile devices, which are received through the Wi-Fi and Bluetooth detection technology, include among others:

  • the MAC addresses of Wi-Fi modules
  • the ID of Bluetooth modules
  • Date and time of the requests

Data processing is anonymised and is collected solely for the research project. We do not use your data to create a profile about you.

This analysis and aggregation of data takes place through the partners of the research project, to whom this data is transmitted by us:                             

  • WVI Prof. Wermuth Verkehrsforschung und Infrastrukturplanung GmbH
  • Universität Kassel (Fachgebiet Verkehrsplanung und Verkehrssysteme) [University of Kassel (Department of Transport Planning and Systems)]
  • INIT Innovative Informatikanwendungen in Transport-, Verkehrs- und Leitsystemen GmbH.

The processing of your data takes place on the basis of Article 6(1)(e) and (f) GDPR. In accordance with Article 21 GDPR, you have the right to object to the processing of your data at any time (see above). If you do not want your Wi-Fi MAC address or Bluetooth ID to be recorded, you can enter it in a blacklist via the following link:

www.nvv.de/service-projekte/mobiledatafusion

Timetable requests
If you place requests for timetable information via our website or the NVV app, these requests will be analysed to create traffic-related statistics as part of the above-mentioned project.

For this purpose, among other things, your IP address is processed in anonymised form for statistical purposes (Article 6(1)(f) GDPR). This analysis and aggregation of data takes place through the partners of the research project, to whom this data is transmitted by us: 

  • WVI Prof. Wermuth Verkehrsforschung und Infrastrukturplanung GmbH
  • Universität Kassel (Fachgebiet Verkehrsplanung und Verkehrssysteme) [University of Kassel (Department of Transport Planning and Systems)]
  • INIT Innovative Informatikanwendungen in Transport-, Verkehrs- und Leitsystemen GmbH.

The data will be processed exclusively for the purpose of creating and evaluating this project. We do not use your data to create a profile about you. 

Registration and use of Mobilfalt

Should you wish to participate in the NVV's "Mobilfalt" service and register as a driver or passenger, your personal data will be processed. Data is only collected and processed insofar as this is necessary for participation in "Mobilfalt" (Article 6(1)(b) and (f) GDPR) and/or data is provided voluntarily by you (Article 6(1)(a) GDPR). Registration via the Mobilfalt homepage is done via the double-opt-in procedure, so that you first agree to the data processing by ticking the box and additionally receive a confirmation email before final registration.

In the event that you register for "Mobilfalt", the following data will be collected and processed for the purpose of registering and processing the Mobilfalt offer:

  • Name and First Name
  • User name and password (only when registering via the Mobilfalt homepage)
  • Address
  • Date of birth
  • Email address (only when registering via the Mobilfalt homepage)
  • Telephone/mobile phone number (for purely administrative purposes, optional for passengers)
  • Information about a severe disability (optional)
  • Information on the type of transport otherwise used, in addition, in the case of journeys by motor vehicle, the consumption of the vehicle and the type of fuel (optional, if information on climate values is desired).

In the event that you register as a passenger, we will pass on the following information to the respective driver in order to carry out specific journeys: Your name and telephone/mobile phone number (if available), information on whether you have accompanying persons with you and the stops to be made.

Should you register as a driver, the following data will also be collected and stored:

  • Mobile phone number (optional, if information is desired by SMS)
  • Number plates
  • Description of the vehicle (free text)
  • Identification card
  • Driving licence number
  • Vehicle registration number
  • Number of free seats, capacity for carrying luggage (optional)

In order to carry out a specific journey, your name, the car registration number and the description of the vehicle will be transmitted to the passenger(s).

Should you only register to use the Mobilfalt-Taxi, just the following data will be collected and stored:

  • Name and first name
  • Username, password (only when registering via the Mobilfalt homepage)
  • Email address (only when registering via the Mobilfalt homepage)

Optionally, the telephone/mobile phone number can be entered in the user profile after registration.

In order to carry out Mobilfalt taxi journeys, we pass the following information on to the respective taxi company (currently: Taxi Engel, Taxi Nicolai, Taxi Witzel, Minicar Heer, Minicar Range or FulyaTatli-Caglar Taxibetrieb):

  • Name and first names
  • Telephone/mobile phone number (if given)
  • information on whether you are bringing accompanying persons with you
  • the stops that are to be served.

The contracting authority of these taxi companies are Frölich-Reisen GmbH and DB Busverkehr Hessen GmbH, and they have access to this data.

Should the booking system need to be further developed and tested, Trapeze Group Deutschland GmbH, as the creator of the software for the booking system, has access to the data provided during your registration.

The information is stored for the purpose of processing for the duration of participation in the "Mobilfalt" offer and at the longest until the end of participation chosen by you or after termination of participation for other reasons.

The personal usage data arising in connection with the use of the "Mobilfalt" offer (travel requests, cancellations, account movements of the internal clearing account; i.e. not of the bank account) are further evaluated for statistical purposes after prior anonymisation.

You will only receive a newsletter or a form to participate in surveys if you expressly request this.

Mobilfalt-Hotline

If you contact the telephone number of the mobility centre and make enquiries, O-TON Call Center Services GmbH will access your registered profile outside the opening hours of the mobility centre in its capacity as order processor of the NVV.

Use of Matomo

This website uses Matomo (formerly Piwik), an open source software for statistical analysis of visitor access. Matomo uses cookies, which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by the cookie about your use of the website is stored on a server in Germany.

The IP address is anonymised immediately after processing and before it is stored. You have the option to prevent the installation of cookies by changing the settings of your browser software. We would like to point out that not all functions of this website may be available if the corresponding setting is made.

You are free to decide whether a unique web analytics cookie may be placed in your browser to enable the website operator to collect and analyse various statistical data.

Embedded YouTube videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Those who have deactivated the saving of cookies for the Google Ad programme will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage data in other cookies. Should you wish to prevent this, you must block the storage of cookies in the browser.

Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: www.google.de/intl/de/policies/privacy/. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

Changes to our privacy policy

We reserve the right to adapt this privacy policy to ensure that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when new services are introduced. The new privacy policy will then apply to your next visit.

Questions addressed to the Data Protection Officer

Should you have any questions regarding data protection, please send us an email to: datenschutz@nvv.de