Privacy Policy for RSAG Fahrplan

The Rostocker Straßenbahn AG (RSAG) operates the app RSAG Fahrplan and would thus like to inform you in the following policy of the extent to which your data is collected when you use our app and for which purpose this data is used.

Responsibility for Processing Your Personal Data

The RSAG observes the valid and most recent data protection regulations and is the data controller responsible for adherence to the General Data Protection Regulation (GDPR).

Contact:
Rostocker Straßenbahn AG
Hamburger Straße 115
18069 Rostock

If you have any queries, contact us using the channels named in the Imprint.
Our company’s data protection officer is available for specific questions regarding data protection. (datenschutz@rsag-online.de)

Hosting and Server Log Files

The company GECKO (GECKO mbH, Deutsche- Med-Platz 2, 18057 Rostock) has been commissioned to host API endpoints used by our app.

The hosting services used by us are handled by our contractually bound service provider in accordance with Art. 28 GDPR. In doing so, our service provider processes the inventory data, contact data, communication data of our customers and visitors. In addition, data about each access to the server where the service is situated is stored (so-called server log files). This data includes the name of the accessed website, file, date and time of access, amount of data transferred, report on successful access, browser type and version, the user’s operating system, referrer URL (the site which was visited beforehand), IP-address and the requesting provider. After seven days at the latest the data is anonymised by shortening the IP-address, so that it is no longer possible to link it to the individual user.

The services of the hosting provider are used on the basis of our legitimate interest in an optimised, efficient and secure online offering pursuant to Art. 6(1) point (f).

Rights of the Data Subject

In accordance with statutory requirements, data subjects have the following rights pursuant to Arts. 15–22 GDPR: Right of access, rectification, erasure, restriction of processing and data portability.

Furthermore, pursuant to Art. 14(2) point (c) in connection with Art. 21 GDPR, the data subject has a right to object to processing based on Art. 6(1) point (f) GDPR.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR the data subject has the right, to lodge a complaint with the supervisory authority, if they are of the opinion that processing of their personal data is unlawful.