Frankfurt
Phone VGF telephone switchboard
+49 69 21303+49 69 21303
Language

Data protection policy (valid from 15/07/2019)

We, as the operator of the website at www.meine.vgf-ffm.de (also “website”) are responsible for the personal data of the user (“you”) of this website in accordance with applicable data protection laws, in particular the General Data Protection Regulation (“GDPR”).
In the following, we will inform you clearly in the context of our information obligations (Art. 13 et seq. GDPR) as to which data is processed when you visit our website and on what legal basis this is done. You will also receive information on how we protect your data in technical and organisational terms, and what rights you are entitled to have granted by us and the relevant supervisory authority.

1. Information on the responsible entity

Stadtwerke Verkehrsgesellschaft Frankfurt am Main mbH
Kurt-Schumacher-Straße 8
60311 Frankfurt

Phone: 069 213-03
Telefax: 069 213-22740
E-Mail: info(at)vgf-ffm.de

2. Data Protection Officer

We have appointed a company Data Protection Officer:

You can reach our Data Protection Officer at:
Stadtwerke Verkehrsgesellschaft Frankfurt am Main mbH (VGF)
Datenschutzbeauftragter
Kurt-Schumacher-Straße 8
60311 Frankfurt am Main
E-mail: datenschutz(at)vgf-ffm.de

3. Processing of your personal data

a. Informational use of our website

If you access our website in order to visit it, so-called log files are processed by our system automatically
The following log files are processed automatically: 
•    IP address of the requesting computer 
•    Type of Internet browser used 
•    Version of the Internet browser used 
•    Pages accessed 
•    Date and time of the visit 

The log files contain your IP address and possibly other personal data. Therefore, establishing a link to you is essentially possible. However, we store your data only temporarily and, in particular, not together with other personal data.

The processing of the above-mentioned data is necessary for the provision of our website. We also store the data for the purpose of the security of our information technology systems. These purposes also justify our legitimate interest in processing the data on the legal basis of Art. 6 (1) lit. f GDPR. The log files, which also contain your IP address, will be deleted or anonymised immediately after they are no longer required to achieve the aforementioned purposes, but after one month at the latest.

b. Use of offers

aa. Registration

You have the option to create a customer account on our website with your personal data. This allows you to manage your subscription independently online and to purchase RMW time-limited tickets in the WebShop. If you decide to create a customer account to manage your subscription online or to purchase RMV time-limited tickets, you must provide us with the following information: 

•    E-mail address 
•    First and last name
•    Address
•    Date of birth 

All other information is voluntary. We store the following voluntary information together with your e-mail address if you provide it to us:
•    Telephone numbers
•    Fax numbers

When you send off your registration, we save your IP address and the date and time of your registration together with the data you have provided for the purposes of safeguarding our information technology systems and to be able to allocate the registration accordingly.
Your data is used for the purpose of the online administration of your customer account and the provision of the associated functions, such as processing your customer data and displaying your orders. The legal basis for the storage of your customer account data is Art. 6 (1) lit. b GDPR.
We store the data that you have provided to us as part of your registration as long as you do not delete your customer account with us. Should you make changes to your details, the old details will be deleted and only the updated data will be stored. In addition, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR). In this case, we will block your data to the extent that it is only processed for the necessary purposes. 
You can delete or change your customer account with us at any time. You will find the functions for changing your details or closing your account in your profile (“Delete customer account”).

bb. Orders

If you place an order on our website for your subscription or the purchase of an electronic ticket, we process the data from your customer account (see aa.) to fulfil the contract. 

We also need your payment details. 

In order to send you your order, we pass on your address data to our shipping or logistics service provider for the purpose of delivery.  
The legal basis for processing the data is Art. 6 (1) lit. b GDPR. The data will be stored as long as necessary for the processing of the contract. In addition, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR). In this case, we will block your data to the extent that it is only processed for the necessary purposes.
In addition to this data, we store the point in time (date and time) of the transmission of your data to us as well as your IP address for the security of our information technology systems. The processing of this data corresponds to our legitimate interest (Art. 6 [1] lit. f GDPR) in order to guarantee the security of our systems and to counteract any instance of misuse. This additional data will be deleted as soon as it is no longer required, at the latest when the contract with you has expired.

Cc. Payment method

In our WebPortal subscriptions can be made and time-limited tickets can be purchased. 

(1) Subscription
The payment processing of subscriptions (AboOnline) takes place via a SEPA direct debit mandate. Our principal bank receives your bank details for the purpose of payment processing. 

(2) Time-limited tickets
When you purchase a time-limited ticket in the WebShop, you can select different payment providers. If you select a payment provider, this provider will also receive your personal data, including your name, address and bank account details. In addition, our house bank receives your bank details when an electronic payment is received. 

PayPal: If you pay on our website with PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg), PayPal will receive your payment details for payment processing and PayPal may carry out a credit check. You can find information about this under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#rAnnex.

Instant bank transfer: If you are using a service provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (part of the Klarna Group) (hereinafter referred to as “Sofort”), Sofort receives your personal data, for example your name, address and bank account details. It is possible that Sofort will carry out a credit check. You can find more information on this under: https://www.klarna.com/sofort/.

Credit card (MasterCard/Visa/Diners Club): If you pay with your credit card on our website, your credit card provider will receive information that you have placed an order with us. Your credit card provider may carry out a credit check. For more information, check the website of your credit card provider.

4. Customer contact form/feedback

You can contact us electronically using our customer contact form to provide us with feedback or to ask us questions about your customer account. If you use this option, you will transmit the following data to us: 

•    Mail address (to contact you)
•    First name and surname (for purposes of fraud prevention and to verify you as our customer)
•    Customer number to verify you as our customer 

In addition to the data that you provide us voluntarily, we store the point in time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 [1] lit. f GDPR) in order to guarantee the security of our systems and to counteract any instance of misuse. This data, which we additionally collect during your contact with us, is deleted as soon as it is no longer required, and at the latest when the request for your contact has been fully clarified.

By sending the contact form, you agree to the processing of your data by us. The legal basis for the processing of your data for the purpose of managing contact with you is Art. 6 (1) lit. a GDPR. The data will be stored until it is no longer required for the purpose of the conversation with you and the matter of establishing contact with you is fully clarified. Your data will not be used for other purposes. 
If the purpose of your contact is to conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. This data is stored for as long as it is necessary for the execution of the contract. In addition we only store your data in order to fulfil contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR).

5. Contact by e-mail, telephone or fax

You have the possibility to contact us by e-mail or telephone. Your personal data transmitted in this way will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to process the contact with you. The legal basis for processing your personal data is Art. 6 (1) lit. f GDPR. The data will be stored until it is no longer required for the purpose of the conversation with you and the matter of establishing contact with you is fully clarified. 

If the purpose of your contact is to conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. This data is stored for as long as it is necessary for the execution of the contract. In addition we only store your data in order to fulfil contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR). 

In addition to the data that you provide us voluntarily, we may also receive the point in time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 [1] lit. f GDPR) in order to guarantee the security of our systems and to counteract any instance of misuse. This data, which we additionally collect during your contact with us, is deleted as soon as it is no longer required, and at the latest when the request for your contact has been fully clarified.

You can inform us at any time (see point 1 above) that we should delete the data provided during the conversation. In this case, and as far as is permissible, all personal data stemming from the conversation will be deleted and a continuation of the conversation is not possible.

6. Vouchers and news about special offers by e-mail, post or telephone

During the registration process you can choose (by ticking the box) whether you would like to receive vouchers and news about special offers by phone or/and by post or/and by e-mail. In addition to your declaration of consent, we process your e-mail address, your telephone number and/or your postal address for this purpose. The legal basis for this is Art. 6 (1) lit. a GDPR. By sending the newsletter registration you agree to the processing of your data by us.

We will only send you information about vouchers and promotions (in the following: “Newsletter”) once you have registered for our newsletter. 
Your data will only be processed in connection with the sending of the newsletter by e-mail, the sending of information material by post or in order to communicate with you by telephone. 

Your data will only be stored for as long as necessary to achieve the purpose for which it was collected. Your e-mail address will, therefore, be stored for the duration of your active newsletter subscription, if you have provided your consent to this. The data that we additionally collect automatically during your registration (IP address, date and time) will be deleted at the latest when you cancel your newsletter subscription. If you revoke your consent to be contacted by telephone or by post, your data will not be processed further for these purposes. 

Opt-out option / Unsubscribe from newsletter 
You can unsubscribe from or cancel our newsletter at any time. You can contact us at any time by e-mail at meine@vgf-ffm.de, by phone at 069 213-19449 or by post (see above Item 1) and notify us that you no longer wish to receive information about vouchers or special promotions.

7. Cookies

Please observe the following information: You can take steps yourself to ensure that no cookies are stored on your computer at all, or that their storage is only permitted for certain cookies. You can select this in your Internet browser settings. You can also view and delete the stored cookies there. 
If you block all cookies, it is possible that not all the functions of our website will be available to you.
We use cookies on our website. Cookies are text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. A cookie can, therefore, be used to identify your internet browser when you visit the website again. There are session cookies, i.e. those that are deleted when you close your browser, and there are persistent cookies that are stored on the hard disk until their pre-set expiration date is reached, or until they are actively removed by you. 
We use our own cookies (session and persistent cookies) in order to ensure the functionality of our website and to make the offer clearer for you. Some elements of our website, for example, require that your internet browser is recognised after a page change. 
The legal basis for the processing of your personal data in cookies is Art. 6 Para. 1 lit. f GDPR, insofar as they serve to make our website functional and Art. 6 Para. 1 lit. b GDPR, insofar as they serve to simplify the conclusion of a contract with you (e.g. so-called “shopping basket cookies”). 

Possibility of objection and removal
As stated in the introduction to this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved by your Internet browser can be deleted there at any time. If cookies for our website are restricted or deactivated, it is possible that not all the website’s functionalities can be used.

8. Icon links to social networks / our blog

We use small icons on our website, each of which refers to our web presence on third-party platforms (Facebook, Twitter, YouTube) and our blog. These are hyperlinks, meaning that no data is automatically transferred from you, but only when you click on the icons and a new tab with the website of the third party opens in your browser.

9. Facebook fan page

Facebook fan page: We operate a fan page on the social media platform Facebook (Facebook Inc., Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, “Facebook”), which we link to on our company page via the Facebook icon. As long as you do not click on the link, Facebook will not receive any information from you. If you click the link, for example, to view our corporate presence on Facebook or to “link” to our page, Facebook will receive data from you (which data Facebook receives also depends on whether you are logged in to Facebook when you click the page or not). While Facebook uses this data in line with its own responsibility to, among other things, create profiles and generate so-called custom audiences, we can only see aggregated data on our company homepage, i.e. statistics that do not allow any personal reference. The link to our social media presence on Facebook and the data processing associated with this corresponds to our legitimate interests. The legal basis for this is therefore Art. 6 lit. f GDPR. The Facebook data policy can be found here: https://www.facebook.com/policy.php.

10. Your rights

When we process your data, you are the “data subject” in the sense of the GDPR. You are entitl