Data protection

MVV GmbH processes the data transmitted by a customer when placing the order for the purpose of processing this order. The legal basis for processing is Art. 6 (1) lit b GDPR. The recipients of this data are the employees of MVV GmbH responsible for processing the order. In accordance with commercial law regulations, the data will be deleted after a period of ten years. If this data is not provided, conclusion of a contract will not possible.

For dedicated rules on mobile online ticketing, please refer to General Terms and Conditions of Business Mobile and Online Ticket, Section 12.

To issue a customer card, the data submitted by the customer in his or her online application will be processed. This data is (where marked with *) required for issuance of a customer card, which is, in turn, mandatory for travelling on the student & apprentice fare. If this data is not provided, the product cannot be made available.

The Personal Data entered when completing the application form for a student & apprentice fare customer card is processed exclusively by employees of MVV GmbH for the purpose of the review, creation, printout, and postage of customer cards for student & apprentice fare as well as the validation of relevant state compensation payments and for sales statistics (number of items only)  The legal basis for processing is Art. 6 (1) lit b GDPR; processing is required to fulfil a contract or for pre-contractual measures.

The data will be stored for as long as it is required for the purpose indicated; as a rule, the data will be deleted two years after the card was issued.

Data transmitted to MVV GmbH when sending a suggestion or a complaint is processed to handle the matter and is stored and evaluated in anonymised form for the purpose of quality assurance. The data is processed by employees of MVV GmbH. When the suggestion or complaint has to be forwarded to the transportation company affected for handling or clarification, the Personal Data submitted will be forwarded to the respective company, too. The user explicitly consents to this. The legal basis for processing is Art. 6 (1) lit a GDPR (consent). If this data is not provided, complaints or any other matters cannot be processed.

To protect against spam, MVV GmbH employs Google Inc.’s (“Google”) reCAPTCHA service. This service includes sending to Google your IP address and, if required, other data requested by Google for its reCAPTCHA service. Different data protection rules apply for the Google corporation. For more information on Google Captcha’s data protection guidelines, see www.google.com/policies/privacy/.

If required, matters brought to our attention without using the contact form will also be forwarded to the transportation companies affected for handling or clarification; again, the Personal Data submitted will be forwarded, too.

As a rule, this data will be deleted twelve months after processing.

When ordering MVV brochures on the internet, the data submitted by the person placing the order will be processed by employees of MVV GmbH to handle the order. The legal basis for processing is Art. 6 (1) lit f GDPR. The legitimate interest of MVV GmbH, the transportation companies, and relevant stakeholders in public transport is the distribution of information material (free of charge) to increase the number of people using public transport instead of other means of transportation. If this data is not provided, it will not be possible to place an order. The data will be deleted two months after the material was sent.

The MVV Partner Platform is a data exchange platform for employees of transportation companies and relevant stakeholders in public transport. The data entered during registration is used by employees of MVV GmbH for verification during registration and features related to the MVV platform. The data is not processed for any other purposes. The data is not passed on to any third parties unless necessary for the purpose it was originally transmitted. The legal basis for processing is Art. 6 (1) lit f GDPR. The legitimate interest of MVV GmbH, relevant stakeholders in public transport, and the transportation companies is the smooth communication of information relevant for employees of transportation companies and relevant stakeholders in public transport as well as MVV GmbH in their day-to-day business. The Personal Data of the registered person is deleted once the person has unregistered or was removed. If this data is not provided, it will not be possible to register.

Other than short temporary storage for technical reasons within the framework of IP-based communication and when using one of the ticket shops to purchase MVV online tickets, no Personal Data is processed for requests via the MVV Journey Planner and the MVV Cycle Planner When using one of the ticket shops provided to purchase MVV online tickets, Personal Data is processed in accordance with the data protection guidelines applicable for the respective ticket shop. The regulations for the sale of mobile and online tickets via MVV GmbH’s ticket shop can found in Section 12 of the General Terms and Conditions of Business and Data Protection Guidelines.

For travel information and journey planning requests, the following data will be stored on the end device: a history of recently used locations, routes, and lines of transport, settings made, downloads (e. g. orientation maps, network maps, and timetable pages), server content received (map sections, travel information), and cookies required for technical reasons as specified below.

For secure operation, calculations made within the framework of electronic journey planning (departures, travel information, etc.) are logged on the journey planner servers. These logs exclusively track the calculations made and comply with MVV GmbH’s data protection guidelines  No Personal Data is transmitted or stored; it is not possible to identify a user or a request pattern.

If the user enters an email address, it will only be stored temporarily for technical reasons and will automatically be deleted once the travel information was sent; it will not be processed for any other purpose. The legal basis for processing is Art. 6 (1) lit f GDPR with the intention of providing our users with improved access to public transport.

MVV Journey Planner and MVV Cycle Planner use so-called functional (i.e. technically necessarry) cookies. These Cookies allow for the recognition and temporary storage of information including language settings or a preference for our mobile journey planning portal. In addition, the cookies set optimise the processing of your travel information requests within our server infrastructure (so-called session cookies). No Personal Data is collected or passed on when doing so.

To improve the quality of our Journey Planner, MVV GmbH and/or IT service providers also generate anonymous usage statistics as per server requests. The sole purpose of these statistics is product improvement. They do not contain any Personal Data. MVVJourney Planner and MVV Cycle Planner do nout use any tracking or advertising cookies.

In MVV’s mobile journey planning portal, you can use your location for travel information requests. To use this feature, you have to explicitly consent to the usage of location services in your browser. This data will be used to identify waypoints on your routes as well as stops, stations, and upcoming departures in your vicinity. Location data will not be stored permanently or passed on to third parties.

Based on the information provided by you, a code is developed to allow for the integration of the MVV Journey Planner into your website. This data is not stored permanently, but will be deleted after your request was completed. There is no Personal Data involved in this process, seeing as this process does not store any IP addresses, for example.

All documents sent to us within the framework of a job application process will be reviewed to decide on further use. The legal basis for processing is Art. 6 (1) lit b GDPR; such processing is required for pre-contractual measures. Six months after the applicant was declined, they will be deleted (paper documents will be shredded) unless agreed upon otherwise.

The data you submit is used for the sole purpose of the respective project. The data is not passed on to any third parties. It is rendered anonymous before processing, and it is not possible for us to identify individuals. Once the project has been completed, the raw data will be deleted, and it is no longer possible to identify individuals in any way.

As part of our sweepstakes, we process personal data that you voluntarily provide to us (e.g. name, e-mail address). This data is used exclusively for the purpose of running the competition and notifying the winners. For deviating regulations, please refer to the conditions of participation of the respective campaign.

Purpose and legal basis of processing:

Your personal data will be processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Your data will only be stored for the duration of the competition and for subsequent notification of winnings. The data will then be deleted, unless statutory retention obligations prevent this.

Data transfer:

Your data will not be passed on to third parties and will not be used for advertising purposes.

Withdrawal of consent:

You have the right to withdraw your consent to data processing at any time with effect for the future. The revocation can be sent by e-mail to datenschutz(at)mvv-muenchen.de. After revocation, your data will be deleted, unless there are statutory retention obligations.

Prohibition of linking:

You do not necessarily have to agree to the anonymous statistical analysis of the app data in order to take part in the competition.

MVV GmbH uses the data transmitted by you for the sole purpose of mailing the newsletter. The data is not passed on to any third parties. The data is rendered anonymous and used by employees of MVV GmbH for the sole purpose of statistically analysing newsletter mailings. The legal basis for processing is Art. 6 (1) lit a GDPR (consent). Once you unsubscribe from the newsletter, your data will be deleted. If this data is not provided, it will not be possible to send out the newsletter.