RNV Logo

Data protection information for booking and using the fips transport service

Under the product name fips, rnv operates a transport service without fixed departure times and fixed routes.

1. information on the collection of personal data

(1) The fips customer account of Rhein-Neckar-Verkehr GmbH (rnv) is a product of Spare Labs Inc. Vancouver, Canada. The rnv uses this product to book the fips transport service and to purchase the corresponding tickets.

(2) In the following, we provide information about the collection of personal data when using the customer account and the app. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(3) The controller pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is

Rhein-Neckar-Verkehr GmbH (rnv)
Möhlstraße 27
68165 Mannheim
E-mail: datenschutz(at)rnv-online.de

Our company's data protection officer is CTM-COM GmbH

Management Mr Görmann
Contact Mr Mentges
Marienburgstraße 27
64297 Darmstadt
Email: Datenschutz(at)ctm-com.de

Responsible data protection supervisory authority
Landesdatenschutzbehörde Baden-Württemberg
Königstraße 10a
70173 Stuttgart
Tel: 0711 615541-0 E-Mail: poststelle(at)lfdi.bwl.de

(4) When you contact us by e-mail or via a contact form, we will store your e-mail address and, if provided by you, your name and telephone number in order to answer your questions. We delete the data arising in this context after storage is no longer necessary or - in the case of statutory retention obligations - restrict processing.

(5) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to the processing
  • Right to data portability

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data in our company.

2.1 Your right to information

Upon request, rnv GmbH will provide the user with information about the personal data stored about him/her free of charge and without delay. The information can be provided in writing or by fax at the user's request. The request for information must be sent to rnv GmbH in writing or by fax, enclosing proof of identity (e.g. copy of identity card). For identification purposes, however, we only require the name, address, date of birth and period of validity on the copy of the ID card. All other data on the copy (e.g. ID card number, photograph, personal characteristics and nationality) can therefore be blacked out. The copy of the ID card will only be used to verify your identity and will then be destroyed.

Please note that we will store your request for information and our information for a period of three years for the purpose of providing evidence of proper information.

2.2 Your right to rectification or erasure

(1) If you have provided us with personal data, you have the option of having it deleted at any time (Art. 17 GDPR). To do so, send us an e-mail to fips(at)rnv-online.de or a letter by post (Rhein-Neckar-Verkehr GmbH, Möhlstraße 27, 68165 Mannheim).

(2) You can change your data (e.g. change of address) yourself at any time online in the app or send us an email to fips(at)rnv-online.de.

2.3 Your right to object to or withdraw your consent to the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection using the following contact details: fips(at)rnv-online.de.

3. collection of personal data in the fips customer account

(1) If you wish to use fips, registration is required. The personal data you voluntarily provide by registering will only be collected, processed and used to fulfil the contract.

(2) The following data is collected for registration:

  • First name and surname
  • Date of birth
  • POSTCODE
  • Telephone number
  • e-mail address
  • If applicable, selection of the payment method and provision of the required information
  • Consent to the General Terms and Conditions
  • Consent to this privacy policy
  • If applicable, details of existing VRN ticket
  • If applicable, consent of the legal guardian for underage users aged 14 and over

(3) The information provided during registration can be changed, e.g. if your address or bank details have changed. The registration data (surname, first name, date of birth and address) are used to initiate a credit check. This information is provided in accordance with the provisions of Art. 12, 14 GDPR.

(4) After termination of the user contract, the customer master data (surname, first name, gender, address, date of birth, mobile phone number and email address) will be anonymised and retained for statistical purposes. Billing data is transferred to the financial data archive and blocked in accordance with the statutory retention periods for the purposes of tax audits. The pure journey data, without any personal reference, is retained for statistical purposes.

(5) rnv and its service providers use personal data (customer master data and billing data) for the billing of journeys made.

(6) The booked journeys are personalised with the first name and the last four digits of the mobile phone number.

(7) The payment information you provide includes different data depending on the payment method. We pass on this personal data, the information about your ticket purchases and any changes to this data to the payment service provider Stripe Payments Europe Ltd. to process the payment. We also reserve the right to assign our claims against you that arise in connection with your ticket purchase to the service provider Riverty Services GmbH. This is done on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest on our part is the outsourcing of payment processing and receivables management. The legitimate interest on the part of Stripe Payments Europe Ltd. and Riverty Services GmbH lies in the collection of data for the purpose of processing payments, receivables management, evaluating the admissibility of payment methods and avoiding payment defaults.

(8) You can object to the transmission of this data to Stripe, Inc. and Riverty Services GmbH at any time, however, it will then no longer be possible to make a booking via this electronic sales channel.

(9) You can access the data protection information of Stripe Inc. at stripe.com/de/legal and the data protection information of Riverty Services GmbH at https://de.flow.riverty.com/de-de/datenschutz.

4. collection of personal data when using the fips app

(1) When you download the fips app, the required information is transmitted to the App Store, in particular your user name, email address and customer number of your account, the time of download, payment details, and the name of the user.

account, time of download, payment information and the individual device identification number. We have no influence on this data collection and are not responsible for it. We only process the data to the extent necessary to download the mobile app to your mobile device.

(2) When you use the app, we or the service provider commissioned by us, Spare Labs, collect the personal data described below in order to enable convenient use of the functions. If you wish to use our app, we collect the following data, which is technically necessary for us to offer you the functions of our mobile app and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address
  • Website requests
  • Date and time of the request
  • Device identification of the end device (IMEI = International Mobile Equipment Identity)
  • Browser & operating system

4.1 Use of your location and messages

(1) When you start using the fips app, we ask you to authorise the use of the following functions in a pop-up:

  • Location
  • Messages

(2) We also need your mobile phone number (MSISDN) and email address

(3) The app uses the location (GPS and network-based) only for the "My location" function when entering the starting point.

(4) When booking a journey without using the additional eTarif fare offer, your location will only be used as part of the "My location" function when selecting the starting point or destination. Beyond this, location data is neither recorded nor stored by your device.

(5) If you use the eTarif tariff offer in the app, your location data will also be used for the duration of use to determine the distance travelled and corresponding billing.

(6) If you authorise access to this data, the mobile app will only access your data and transfer it to our server to the extent necessary to provide the functionality. Your data will be treated confidentially by us and deleted if you revoke the right to use it or if it is no longer required to provide the services and there are no legal obligations to retain it. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

(7) You can allow or revoke the function in the settings of the fips app or your operating system at any time by deactivating localisation. It will then no longer be possible to use the airline tariff.

(8) All journey data is automatically anonymised after 100 days, provided it has been successfully billed.

4.2 Integration of external applications

(1) A plug-in is used in the fips app to display the map view. Which map provider is used (Google Maps, Apple Maps, Open Street Map, Here Maps, etc.) depends on the respective availability of the applications on your device.

(2) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy.

Further information on data protection in cases of increased transport charges can be found at: www.rnv-online.de/rnv/impressum/datenschutz.html

Status: 07.03.2024
Automatically translated with DeepL, without guarantee of accuracy.