- de
- en
We appreciate your interest in our website. The protection of your privacy is very important to us. Below we provide detailed information about the handling of your data.
Information about the collection of personal data
In the following, we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g., name, address, email addresses, user behavior.
The controller according to Article 4 paragraph 7 of the EU General Data Protection Regulation (GDPR) is Autobus Oberbayern GmbH, Heidemannstraße 220, 80939 Munich, Email: info@autobusoberbayern.de, Tel: 089323040. You can reach our data protection officer at datenschutz@autobusoberbayern.de or our postal address with the addition "the data protection officer."
You can visit our website without providing any personal information. We only store access data without personal reference, such as the name of your internet service provider, the page from which you visit us, or the name of the requested file. These data are evaluated exclusively to improve our offer and do not allow any conclusions about your person.
Personal data is only collected if you voluntarily provide it to us as part of your order/purchase or when opening a customer account.
When you contact us by email or via a contact form, the data you provide (your email address, possibly your address, name, and telephone number) will be stored by us to answer your questions. The data arising in this context will be deleted after storage is no longer necessary, or processing will be restricted if there are legal retention obligations.
If we use commissioned service providers for individual functions of our offer or want to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the defined criteria for the storage period.
Your rights
You have the following rights regarding your personal data:
- Right to information
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You also have the right to complain to a data protection supervisory authority about our processing of your personal data:
The Bavarian State Commissioner for Data Protection
Dr. Thomas Petri
Wagmüllerstr. 18
80538 Munich
Telephone: 089/21 26 72-0
Fax: 089/21 26 72-50
Email: poststelle@datenschutz-bayern.de
Collection of personal data when visiting our website
If you are using the website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and ensure stability and security. The legal basis for this is Article 6 paragraph 1 sentence 1 letter f GDPR.
The following data are collected:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.
Use of cookies
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you use and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the internet offer more user-friendly and effective overall.
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see a)
- Persistent cookies (see b)
a) Transient cookies are automatically deleted when you close the browser. This includes, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in your browser's security settings at any time.
You can configure your browser settings according to your wishes, e.g., to refuse third-party cookies or all cookies. However, we would like to point out that you may not be able to use all the functions of this website in that case.
We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
The Flash cookies used are not collected by your browser but by your Flash plug-in. We also use HTML5 storage objects that are stored on your device. These objects store the required data independently of your browser and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g., "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/en-US/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using your browser's private mode. We also recommend regularly deleting your cookies and browser history manually.
Here you will find more about the scope of the cookies used.
Other features and offers on our website
In addition to using our website for informational purposes only, we offer various services that you may be interested in. To use these, you will generally need to provide additional personal data, which we use to provide the respective service, and to which the aforementioned data processing principles apply.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly checked.
We may also pass on your personal data to third parties if participation in promotions, competitions, contract conclusions, or similar services are offered by us together with partners. You will receive more information when you provide your personal data or below in the description of the offer.
If our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
Objection or revocation of consent to the processing of your data
If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of processing your personal data after you have communicated it to us. The lawfulness of the data processing carried out based on the consent until the revocation remains unaffected.
If we base the processing of your personal data on a balance of interests, you can object to the processing. This is the case if the processing is not necessary, particularly for fulfilling a contract with you, which we will describe in the following descriptions of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate grounds for continuing the processing.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising by contacting us at the following contact details: Autobus Oberbayern GmbH, Heidemannstraße 220, 80939 Munich, Email: info@autobusoberbayern.de, Tel: 089323040, or Email: datenschutz@autobusoberbayern.de.
Note on data transfer to the USA
Our website includes tools from companies based in the USA, among other countries. If these tools are active, your personal data can be transferred to the US servers of the respective companies. We would like to point out that the USA is not a secure third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It cannot, therefore, be ruled out that US authorities (e.g., intelligence services) process, evaluate, and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below.
Social networks like Facebook, Twitter, etc., can generally analyze your user behavior extensively if you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners).
When you visit our social media presence, numerous data protection-relevant processing operations are triggered. Specifically:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. This data collection occurs in this case, for example, via cookies stored on your device or by recording your IP address.
Using the collected data, social media portal operators can create user profiles in which your preferences and interests are stored. This allows interest-based advertising to be displayed inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot track all processing on the social media portals. Depending on the provider, further processing operations may be carried out by the social media portal operators. Details can be found in the terms of use and privacy policies of the respective social media portals.
Legal basis
Our social media appearances should ensure a comprehensive presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on differing legal grounds, which are to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Controller and assertion of rights
If you visit one of our social media presences (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can generally assert your rights (information, correction, deletion, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., against Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for their storage no longer applies, you request us to delete them, revoke your consent to storage, or the purpose for the data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – especially retention periods – remain unaffected.
We have no influence on the storage duration of your data, which the operators of social networks store for their own purposes. For details, please refer to the information provided directly by the operators of the social networks (e.g., in their privacy policy below).
Social networks in detail
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data collected according to Facebook is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.
For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875, and https://www.facebook.com/help/566994660333381.
Details on how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=en.
Freshdesk
On our website, we offer, among other things, the possibility of contact and viewing of frequently asked questions (FAQ). The provider of this service is Freshdesk Inc., 2950 S. Delaware Street, San Mateo CA 94403, USA (hereinafter referred to as "Freshdesk"). If you open a support ticket via Freshdesk, the data you enter will be transmitted to Freshdesk. The transfer of your data to Freshdesk is based on Art. 6 para. 1 lit. a GDPR (consent). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.
Payment data
The payment data during the ordering process are encrypted and transmitted to our partner Trust My Travel. By doing so, you agree that this data will be transmitted to a Trust My Travel company (headquartered: Trust My Travel Limited, The Cedars, New Road, Ryhall, Rutland, PE9 4HL in the United Kingdom, branches in the USA) (hereinafter referred to as "Payment Service Provider"). Autobus Oberbayern GmbH itself does not know or store any payment data. By choosing a payment method, you accept any terms and conditions and privacy regulations of the respective Payment Service Provider and release, to the extent legally permissible, Autobus Oberbayern GmbH from any liability and warranty.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used, and the user's origin. These data are assigned to the respective user's device. No assignment to a user ID occurs. Furthermore, we can record your mouse and scroll movements and clicks with Google Analytics. Google Analytics also uses various modeling approaches to complement the collected datasets and applies machine learning technologies in data analysis. Google Analytics uses technologies that enable the recognition of the user for analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to and stored on a server in the USA.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. For more information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Google Analytics E-Commerce Measurement
This website uses the "E-Commerce Measurement" function of Google Analytics. With the help of E-Commerce Measurement, the website operator can analyze the purchasing behavior of website visitors to improve their online marketing campaigns. Information such as orders placed, average order values, shipping costs, and the time from viewing to purchasing a product is recorded. This data can be summarized by Google under a transaction ID that is assigned to the respective user or their device.
Google Tag Manager
This website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means: no cookies are set, and no personal data is collected. The Google Tool Manager triggers other tags, which may in turn collect data. However, the Google Tag Manager does not access this data. Deactivation at the domain or cookie level remains in place for all tracking tags implemented with Google Tag Manager.
Use of Facebook Social Plugins
Our internet presence uses social plugins ("Plugins") of the social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins can be recognized by one of the Facebook logos (a white "f" on a blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin." The list and the appearance of the Facebook Social Plugins can be viewed here: developers.facebook.com/docs/plugins.
When you call up a website of our internet presence that contains such a plugin, your browser establishes a direct connection with the servers of Facebook. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website by it. We, therefore, have no influence on the scope of the data that Facebook collects with the help of this plugin and, therefore, inform you according to our level of knowledge: Through the integration of the plugins, Facebook receives the information that you have called up the corresponding page of our internet presence. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example, by pressing the Like button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. Even if you are not a Facebook user, the service can still collect your IP address and store it.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for protecting your privacy, can be found in Facebook's data protection information: www.facebook.com/policy.php. If you are a Facebook member and do not want Facebook to collect data about you via our internet presence and link it to your data stored on Facebook, you must log out of Facebook before visiting our internet presence. We do not benefit from the data collection by Facebook and do not store the collected data.
Use of Userlike
This website uses Userlike, a live chat software of the company Userlike UG (limited liability). Userlike uses "cookies," text files stored on your computer that enable a personal conversation in the form of a real-time chat on the website with you. The collected data is not used to personally identify the visitor of this website and is not merged with personal data about the bearer of the pseudonym.
Data protection contact
Mprotect365 GmbH
Nordstraße 17-21
04105 Leipzig