Evro Bus GmbH

Privacy Policy

Privacy Policy (as of 24 May 2018)

Information on the collection of personal data

Protecting your privacy when processing personal data is an important concern for us. When you visit our website, our web servers routinely store the IP address of your Internet service provider, the website from which you visit us, the pages you visit on our website, and the date and duration of your visit. This information is essential for the technical transmission of the web pages and for secure server operation. These data are not evaluated on a personalised basis.

With regard to the terminology used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

When you contact us by email or via a contact form, the data you provide (your email address and, where applicable, your name and telephone number) are stored by us in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.

If we use commissioned service providers for individual functions of our services or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the defined criteria for the storage period.

Controller

The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:

Evro Bus GmbH
Ida-Dehmel-Ring 10
68309 Mannheim

Commercial Register: Mannheim Local Court
HRB 9868
VAT ID: DE 23 2041 034

Telephone: (+49) 621 – 748 12 68

Email: datenschutz@evrobus.de

Types of data processed

Master data (e.g. names, addresses).
Contact data (e.g. email, telephone numbers).
Content data (e.g. text entries, journey information, photographs of departure/arrival locations).
Usage data (e.g. websites visited, interest in content, access times).
Meta/communication data (e.g. device information, IP addresses).

Your rights

(1) You have the following rights vis-à-vis us with regard to personal data concerning you:

Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Right to object to processing,
Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

Collection of personal data, including when visiting our website

Personal data are data relating to you as a person. This includes your name, your address and your email address. You do not have to disclose any personal data in order to visit our website. In some cases, we need your name and address as well as further information in order to provide you with the requested service.

The same applies if, at your request, we provide you with information material or answer your enquiries. In these cases, we will always inform you accordingly. In addition, we only store data that you have transmitted to us automatically or voluntarily.
When you use one of our services, we generally collect only the data necessary to provide you with that service. We may ask you for additional information, but providing it is voluntary. Whenever we process personal data, we do so in order to provide our services to you or to pursue our commercial objectives.

(1) If you use the website solely for informational purposes, i.e. if you do not register or otherwise provide us with information, we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure stability and security (legal basis: Art. 6(1) sentence 1 lit. f GDPR):

IP address
Date and time of the request
Time-zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you use, and through which certain information is transmitted to the party setting the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the internet service as a whole more user-friendly and effective.

3) Use of cookies

a) This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies (see b)
Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. They store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all functions of this website.

e) We use cookies to identify you on subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

Purpose of processing

Provision of the online service, its functions and content.
Responding to contact enquiries and communicating with users.
Security measures.
Reach measurement/marketing.

Use of social media plug-ins

(1) We currently use the Facebook social media plug-in. In doing so, we use the so-called two-click solution. This means that when you visit our site, no personal data are initially passed on to the plug-in providers as a general rule. You can identify the plug-in provider by the marking on the box showing its initial letter or logo. We give you the option of communicating directly with the plug-in provider via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding website of our online service. In addition, the data specified under § 3 of this declaration are transmitted. According to Facebook, in Germany the IP address is anonymised immediately after collection. By activating the plug-in, your personal data are therefore transmitted to the respective plug-in provider and stored there (in the case of Facebook, in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.

(2) We have no influence on the data collected or the data-processing operations, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We also have no information about deletion of the data collected by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research and/or needs-based design of its website. Such evaluation is carried out in particular (including for users who are not logged in) in order to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6(1) sentence 1 lit. f GDPR.

(4) Data are transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data collected from you on our site are assigned directly to your existing account with the plug-in provider. If you activate the button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, and especially before activating the button, as this prevents the plug-in provider from assigning the visit to your profile.

(6) The address of the plug-in provider and the URL of its privacy information are: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php

Further information on data collection:

Facebook has submitted to the EU-US Privacy Shield, www.userlike.com. This support is intended to enable contact with website visitors. The visitor starts the chat by clicking the Userlike icon on this website. (2) Further information on the purpose and scope of data collection and its processing by the live-chat support provider can be found in the privacy policy of this provider stated below. There you will also find further information on your rights in this regard and setting options for protecting your privacy. 3) The address of the live-chat support provider and the URL of its privacy information are: Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne), use of social media plug-ins

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers listed below. There you will also find further information on your rights in this regard and setting options for protecting your privacy. (6) The address of the plug-in provider and the URL of its privacy information are: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU-US Privacy Shield.

Google Analytics with anonymisation function

We use Google Analytics on our site, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. Google Analytics uses so-called “cookies”, text files that are stored on your computer and thereby enable an analysis of your use of the website.

The information generated by these cookies, for example the time, place and frequency of your website visit, including your IP address, is transmitted to Google in the USA and stored there.

In this case, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and is thereby anonymised.

Google will use this information to evaluate your use of our site, to compile reports on website activity for us and to provide further services related to website and internet usage. Google may also transfer this information to third parties where required to do so by law or where such third parties process the data on Google’s behalf.

According to Google, it will under no circumstances associate your IP address with other Google data. You can prevent the installation of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

Furthermore, Google offers a deactivation add-on for the most common browsers, giving you greater control over which data are collected by Google about the websites you visit. The add-on tells the JavaScript (ga.js) of Google Analytics that no information about the website visit is to be transmitted to Google Analytics. However, the Google Analytics browser deactivation add-on does not prevent information from being transmitted to us or to other web-analysis services that we may use. Further information on installing the browser add-on can be found at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

If you have agreed that your web and app browsing history may be linked by Google to your Google Account and that information from your Google Account may be used to personalise advertisements, Google uses your data together with Google Analytics data to create audience lists for cross-device remarketing. To do this, Google Analytics first records your Google-authenticated ID on our website, which is linked to your Google Account (and is therefore personal data). Google Analytics then temporarily links your ID to your Google Analytics data in order to optimise our audiences.
If you do not agree to this, you can disable it by changing the corresponding settings in the “My Account” section of your Google Account.

Facebook Custom Audiences Pixels

In order to present interest-based advertisements to visitors to our website while they are using Facebook, we use the “Custom Audiences Pixel” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). For this purpose, we have implemented a Facebook pixel on our website, which establishes a direct connection to Facebook’s servers when our website is visited. Information that you have visited our website is transmitted to the Facebook server, and Facebook assigns this information to your personal Facebook user account. Further information on the collection and use of data by Facebook, as well as your rights in this regard and options for protecting your privacy, can be found in Facebook’s privacy information at https://www.facebook.com/about/privacy/.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. Unless the legal basis is stated in the privacy policy, the following applies: the legal basis for obtaining consent is Art. 6(1) lit. a and Art. 7 GDPR; the legal basis for processing for the performance of our services and implementation of contractual measures, as well as responding to enquiries, is Art. 6(1) lit. b GDPR; the legal basis for processing for compliance with our legal obligations is Art. 6(1) lit. c GDPR; and the legal basis for processing for the purposes of our legitimate interests is Art. 6(1) lit. f GDPR. Where the vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1) lit. d GDPR serves as the legal basis.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in connection with the use of third-party services or disclosure or transfer of data to third parties, this is done only if it is necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to statutory or contractual permissions, we process data in a third country or have such data processed there only where the special requirements of Art. 44 et seq. GDPR are met. This means, for example, that processing takes place on the basis of special safeguards, such as an officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”), or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Contacting us

When contacting us (e.g. via contact form, email, chat, telephone or social media), the user’s details are processed for the purpose of handling and processing the contact request in accordance with Art. 6(1) lit. b) GDPR. Users’ details may be stored in a customer relationship management system (“CRM system”) or a comparable enquiry-management system.

We delete enquiries once they are no longer required. We review the necessity of storage every two years; statutory archiving obligations also apply.

Instagram

Plugins and API interfaces of the Instagram social network are integrated into our website. You can recognise the Instagram plugin by the “Instagram button” on our website. If you click the Instagram button while logged into your Instagram account, content from our pages can be linked on your Instagram profile. This enables Instagram to associate your visit to our pages with your user account. We expressly point out that, as the operator of this site, we receive no knowledge of the content of the data transmitted or of how it is used by Instagram. Further information on Instagram’s privacy policy can be found here: http://instagram.com/about/legal/privacy/

YouTube in enhanced privacy mode

We use YouTube to embed videos. The videos have been embedded using enhanced privacy mode. Like most websites, however, YouTube also uses cookies to collect information about visitors to its website. YouTube uses these, among other things, to collect video statistics, prevent fraud and improve user-friendliness. This also results in a connection being established with the Google DoubleClick network. Starting the video may trigger further data-processing operations. We have no influence over this. Further information about data protection at YouTube can be found in its privacy policy at: http://www.youtube.com/t/privacy_at_youtube

Google Maps

This website uses Google Maps to display maps and create route plans.

Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using Google Maps on this website, you consent to the collection, processing and use by Google, one of its representatives or third-party providers of data collected automatically as well as data entered by you.

The terms of use for Google Maps can be found here.

You can view Google Maps’ privacy policy here.

Online job applications

The application data you submit to us are collected and processed electronically by us for the purpose of handling the application process. These include, in particular, the following personal data: portrait photograph, name, address details, age, application letter, curriculum vitae, certificates, etc. If your application results in the conclusion of an employment contract, the data you have submitted may be stored by us in your personnel file for the purposes of the usual organisational and administrative process, in compliance with the relevant legal provisions.

If your job application is rejected, the data you have submitted will be deleted automatically two months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (for example, the burden of proof under the German General Equal Treatment Act) or if you have expressly consented to longer storage in our applicant database.

Comments and posts

If users leave comments or other posts, their IP addresses are stored for seven days on the basis of our legitimate interests within the meaning of Art. 6(1) lit. f GDPR. This is done for our security in case someone leaves unlawful content in comments or posts (insults, prohibited political propaganda, etc.). In such cases, we ourselves may be held liable for the comment or post and therefore have an interest in the identity of the author.

Hyperlinks

Within our online service, we use hyperlinks to certain websites on the basis of our legitimate interests. We provide no warranty for the content of these sites, their products and/or services and are not responsible for them.

Security

We have implemented technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and service providers working for us are obliged to comply with the applicable data protection laws.

Whenever we collect and process personal data, they are encrypted before being transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process, and our privacy policies are continually revised. Please ensure that you have the latest version.

Rights of data subjects

Please contact us at any time if you would like information about which personal data we store about you or if you would like to have these corrected or deleted. In addition, you have the right to restriction of processing (Art. 18 GDPR), a right to object to processing (Art. 21 GDPR), and the right to data portability (Art. 20 GDPR). In these cases, please contact us directly.

Changes to this privacy policy

We reserve the right to amend our privacy policies if this should become necessary due to new technologies. Please ensure that you have the latest version. If fundamental changes are made to this privacy policy, we will announce them on our website.

All interested parties and visitors to our website can contact us regarding data protection matters at:

Evro Bus GmbH
Ida-Dehmel-Ring 10
68309 Mannheim

Telephone: (+49) 621 – 748 12 68

Email: datenschutz@evrobus.de

If our data protection officer is unable to resolve your concern to your satisfaction, you retain in all cases the right to lodge a complaint with the data protection supervisory authority responsible for your federal state.

Cookies and right to object to direct marketing

“Cookies” are small files stored on users’ computers. Different information can be stored within cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user’s visit to an online service. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes the browser. Such a cookie may, for example, store the contents of a shopping cart in an online shop or a login status. “Permanent” or “persistent” cookies remain stored even after the browser is closed. For example, the login status can be stored if users return after several days. Such a cookie can also store users’ interests, which are used for reach measurement or marketing purposes. “Third-party cookies” are cookies offered by providers other than the controller operating the online service (if they are only that controller’s own cookies, they are referred to as “first-party cookies”).

We may use temporary and permanent cookies and provide information about this in our privacy policy.

A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website (http://www.aboutads.info/choices/) or the EU website (http://www.youronlinechoices.com/). In addition, the storage of cookies can be prevented by disabling them in the browser settings. Please note that in this case not all functions of this online service may be available.

Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use for the purpose of operating this online service.

In this context, we or our hosting provider process master data, contact data, content data, contractual data, usage data, and meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in efficiently and securely providing this online service pursuant to Art. 6(1) lit. f GDPR in conjunction with Art. 28(3) sentence 1 GDPR (data processing agreement).

Provision of contractual services

We process master data (e.g. names and addresses as well as users’ contact details) and contractual data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and providing services pursuant to Art. 6(1) lit. b GDPR. Entries marked as mandatory in online forms are required for the conclusion of the contract.

When our online services are used, we store the IP address and the time of the respective user action. Storage is based on our legitimate interests as well as those of users in protection against misuse and other unauthorised use. As a general rule, these data are not passed on to third parties unless this is necessary for the pursuit of our claims or there is a legal obligation to do so pursuant to Art. 6(1) lit. c GDPR.

The data are deleted after the expiry of statutory warranty and comparable obligations; the necessity of retaining the data is reviewed every three years. In the case of statutory archiving obligations, deletion takes place after their expiry. Information in any customer account remains until that account is deleted.

Contact

If you have any questions or suggestions, or if you wish to exercise your rights, such as the right to information, right to erasure, etc., our contact form is available to you, or you can write directly to datenschutz@evrobus.de.