Privacy policy

The controller within the meaning of the data protection regulations, in particular the EU General Data Protection Regulation (GDPR), is

Verkehrsverbund und Fördergesellschaft Nordhessen mbH,
Rainer-Dierichs-Platz 1,
34117 Kassel

(hereinafter also referred to as ‘we’ or ‘us’)

Your rights as a data subject

You can assert the following rights against us:

• Information about your data stored by us and its processing,
• Correction of incorrect personal data,
• Deletion of your data stored by us,
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
• objection to the processing of your data by us and
• data portability if you have consented to data processing or have concluded a contract with us.

If you have given us your consent, you can revoke it at any time with effect for the future. Statutory authorisations remain unaffected by this.

You can contact the supervisory authority responsible for you at any time with a complaint. Which supervisory authority is responsible for you depends on the federal state of your place of residence, your work or the suspected violation of your personal rights. A list of supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Your rights may be restricted in part to the extent that they are likely to render impossible or seriously impair the realisation of research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes.

Purposes of data processing by the controller and third parties

We only process your personal data for the purposes stated in this privacy policy.

The NVV generally processes your data on the basis and within the scope of your consent (Art. 6 para. 1 lit. a GDPR).

If we have a contractual relationship with you or are seeking to enter into such a relationship and the implementation of pre-contractual measures or the execution of the contract require this, we also process data on the basis of Art. 6 para. 1 lit. b GDPR.

The same applies if the NVV is obliged to process data due to legal requirements (Art. 6 para. 1 lit. c GDPR).

The NVV is also responsible for legally assigned tasks in accordance with the Hessian Public Transport Act (Hessisches ÖPNVG). If processing is necessary for the fulfilment of one of these tasks, it is carried out in accordance with Art. 6 para. 1 lit. e GDPR.

Processing may also be necessary and lawful for the purposes of the legitimate interests pursued by the NVV, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (Art. 6 para.1 lit.f GDPR).

This applies in particular to direct advertising in the context of customer information and acquisition.

The same applies to the transfer of data to third parties.

Deletion or blocking of data

We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to fulfil the purposes stated here or for the various storage periods stipulated by law. Once the respective purpose no longer applies or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Collection of general information when visiting our website

When you access our website, information of a general nature is automatically collected. This information (server log files) includes

• IP address
• Date and time of the enquiry
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.

This information is technically necessary in order to correctly deliver the website content requested by you and is mandatory when using the Internet. It is processed in particular for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring the smooth use of our website,
• Analysing system security and stability
• For statistical evaluation, improvement of the timetable information and
• For other administrative purposes.

The processing of your personal data is based on our legitimate interest in collecting data for the aforementioned purposes. We do not use your data to draw conclusions about your person. The only recipients of the data are the controller and any processors used by the controller.

Anonymous information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

Timetable information and capacity utilisation forecast

We use your enquiries about timetable information on our homepage and in the NVV app to improve the forecast of the occupancy of the means of transport (capacity utilisation forecast). By improving the capacity utilisation forecast, we want to ensure that passengers are more reliably informed about the occupancy of their desired means of transport and can switch to another, less busy means of transport if necessary. This is intended to improve the quality and convenience of using public transport. This is done on the basis of Art. 6 para. 1 lit. e and f GDPR. The following personal data is processed:

• Device identification features (MIC and MAC)
• Website from which the request originates
• Browser
• Amount of data transferred in each case
• Content of the request (specific page, whereby only the stops are used for location searches and the footpaths are removed)
• Operating system and its interface

The processing is carried out by our contractor HaCon Ingenieurgesellschaft mbH. They anonymise your data and only use it once for the above-mentioned purpose. It will then be deleted within 24 hours.

Cookies

Like many other websites, we also use so-called ‘cookies’. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the Internet.

Cookies cannot be used to start programmes or transfer viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how you can change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Registration on our website

When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and email address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete this data at your request, provided there are no statutory retention obligations to the contrary. To contact us in this regard, please use the contact details provided at the end of this privacy policy.

Data protection information for newsletters and electronic notifications

We only send newsletters, emails and other electronic notifications (hereinafter ‘newsletter’) with the consent of the recipient or with legal authorisation. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the user's consent. Our newsletters also contain information about our tariffs, services and us.

The following information provides you with an overview of the processing of your personal data as part of the newsletter subscription and the rights to which you are entitled under data protection law.

The entity responsible for data processing is

Nordhessischer VerkehrsVerbund
Verkehrsverbund und Fördergesellschaft Nordhessen mbH
Rainer-Dierichs-Platz 1
34117 Kassel

Telephone +49 (0)561 709490
Email: info@nvv.de

Imprint: https://www.nvv.de/nutzungsbedingungen/impressum

You can reach our company data protection officer at:  datenschutz@nvv.de

To subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name so that we can address you personally in the newsletter, or other information if this is necessary for the purposes of the newsletter.

Double opt-in procedure: Registration for our newsletter is always carried out in a so-called double opt-in procedure. This means that after registering you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the mailing service provider are also logged.

Deletion and restriction of processing: We may store the unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for erasure is possible at any time, provided that the former existence of consent is confirmed at the same time. In the event of obligations to observe objections permanently , we reserve the right to store the email address in a block list solely for this purpose.

The registration process is logged on the basis of our legitimate interests for the purpose of verifying that it is carried out properly. If we commission a service provider to send emails, this is done on the basis of our legitimate interests in an efficient and secure dispatch system.

Contents: Information about us, our tariffs, promotions and offers.

Processed data types: Inventory data (e.g. names, addresses); Contact data (e.g. e-mail, telephone numbers); Meta/communication data (e.g. device information, IP addresses); Usage data (e.g. websites visited, interest in content, access times).

Affected persons: Communication partner.

Purposes of processing: Customer information and direct marketing (e.g. by e-mail or post).

Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR); Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Option to object (opt-out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the contact options given above, preferably email.

Recipients or categories of recipients to whom the data may be disclosed

• Internal departments, insofar as this data is required there as part of the proper fulfilment of tasks,
• the responsible transport association ‘Kasseler Verkehrs-Gesellschaft Aktiengesellschaft, Königstor 3-13, 34117 Kassel’, insofar as this data is required there in the context of the proper fulfilment of tasks,
• (technical) service providers supporting us or service providers supporting us in the dispatch process within the scope of so-called order processing. If we commission third parties with the processing of data, this is done on the basis of Art. 28 GDPR (order processing).
• Otherwise, your personal data will only be passed on to third parties if we are legally obliged to do so or if you have expressly consented to your data being passed on. Your data will not be passed on for other non-commercial or commercial purposes.

Further information on processing operations, procedures and services:

Mailchimp: Email dispatch and email marketing platform;

Service provider: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA;

Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR); 

Website: https://mailchimp.com

Privacy policy: https://mailchimp.com/legal/

Order processing contract: https://mailchimp.com/legal/

Standard contractual clauses (guarantee of data protection level for processing in third countries): Inclusion in the order processing contract; 

Further information: Special safety measures:  https://mailchimp.com/help/Mailchimp-european-data-transfers/

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Contact form

If you contact us with questions of any kind by email or contact form, you give us your voluntary consent for the purpose of contacting you. This requires you to provide a valid e-mail address. This is used to allocate the enquiry and subsequently answer it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. After your enquiry has been dealt with, your personal data will be automatically deleted.

Use of Matomo

This website uses Matomo (formerly Piwik), an open-source software for the statistical analysis of visitor access. Matomo uses so-called cookies, i.e. text files that are stored on your computer and enable your use of the website to be analysed.

The information generated by the cookie about your use of the website is stored on a server in Germany.

The IP address is anonymised immediately after processing and before it is stored. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website.

You can decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyse various statistical data.

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behaviour.

If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at “YouTube” can be found in the provider's privacy policy at: www.google.de/intl/de/policies/privacy/. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the data protection officer

If you have any questions about data protection, please send us an email to: datenschutz@nvv.de

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your Internet browser under the keyword “User settings”. You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f GDPR. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can find more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website or alternatively follow the option described above to make an objection.