Welcome to the website of Stadtverkehr Lübeck GmbH and Lübeck-Travemünder Verkehrsgesellschaft mbH. Thank you for your interest in our company. We take the protection of your personal data very seriously. We are committed to ensuring compliance with the applicable data protection legislation.
Collection, processing and use of personal data
You can normally visit our website without needing to disclose your personal data. We will only collect personal data if you voluntarily enter this in the relevant form on our website, for the purpose of identifying lost property, for sending suggestions/criticisms, or in order to contact you. In these instances, information is transferred in encrypted form in order to prevent misuse of data by third parties.
The following data is stored for organisational and technical reasons when you use our website.
- Visitors’ IP addresses (the last octet of the IP address is erased)
- Date and time at which the site was accessed
- Success or error code (HTTP status)
- Name and size of downloads (resource)
- Name of search engine or external link (referrer)
- Name and operating system of the browser used (agent field)
This data cannot be attributed to specific people. This data is not combined with other data sources. We reserve the right to check data after collection if we have reasonable grounds to suspect unlawful use. This data shall be automatically erased after 30 days.
The provider of this website uses the services of etracker GmbH in Hamburg, Germany (www.etracker.com) to analyse usage data. Cookies are used here to enable the statistical analysis of the use of this website by visitors, and to identify usage-related content or advertising. Cookies are small text files which are stored by the internet browser on the user’s device. etracker cookies do not contain information which allows a user to be identified.
The data generated by etracker is processed and stored by etracker on behalf of the provider of this website in Germany only, and is therefore subject to strict German and European data protection legislation and standards. etracker has been independently accredited and certified in this regard, and awarded the ePrivacy Seal data protection seal of approval.
Data is processed on the legitimate basis of point f) of Article 6(1) (legitimate interest) of the EU General Data Protection Regulation (EU GDPR).Our legitimate interest exists in optimising our website and online presence. As the privacy of our visitors is very important to us, the IP address will be rendered anonymous as soon as possible at etracker, and user or device identifiers converted into a unique code which cannot be attributed to an individual person. etracker shall not use this data in any other way, nor shall it combine it with other data or disclose it to third parties.
You can withdraw consent to the specified data processing at any time, insofar as these data are personal. Withdrawing consent in this way shall have no adverse consequences for you.
To withdraw consent to the processing of your personal data with etracker on this website, please click the check box to remove the check mark:
Further information on data protection at etracker can be found here.
In order to embed videos, we use the YouTube plugin from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA) on our website. YouTube is represented by Google Inc. with its corporate headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). The legitimate basis is point f) of Article 6(1) GDPR. Our legitimate interest lies in improving the quality of our website.
Google, together with its subsidiary YouTube, guarantees that EU data protection requirements are met even when data is processed in the USA through certification in accordance with the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
We use YouTube’s “privacy-enhanced mode”. According to the information provided by YouTube, this mode only establishes a connection to YouTube servers when the video is played.
If the connection to the YouTube server is established by playing the embedded video, YouTube will record and process at least your IP address, the date and time, as well as the web page you have visited. A connection to the Google advertising network “DoubleClick” is also established.
If you are logged in to a YouTube account, YouTube also attributes this information to your personal user account. If you want to prevent this from happening, you can adjust the relevant settings in your YouTube user account, or you must log out of YouTube before visiting our website.
YouTube permanently stores cookies via your web browser on your device for functionality reasons and to analyse usage. If you do not agree with this processing, you can prevent the storage of cookies by adjusting the settings in your web browser.
More information on data processing and on YouTube (Google) data privacy can be found at https://policies.google.com/privacy.
Purpose limitation, use and disclosure of personal data
Your personal data is only disclosed or otherwise transmitted if you have freely given us your consent to do so or if this is required for processing purposes. In particular, we have concluded the necessary processing contracts with the IT service providers we use to handle our business processes.
If you have transmitted personal data to us for the purpose of identifying lost property, sending a suggestion/criticism, or in order that we can contact you, this is stored for a maximum period of 36 months after completion of the relevant operation.
The following applies to personal data which you disclose to us within the scope of the punctuality, connection and cleanliness guarantee: Your claim cannot be processed without voluntary completion of the required fields. After reimbursement of your claim, the data is stored for 10 years within the scope of the statutory retention requirements and then erased.
The following applies to personal data which you disclose to us when single tickets are refunded: Your claim cannot be processed and the single ticket cannot be refunded without voluntary completion of the required fields. After reimbursement of your claim, the data is stored for 10 years within the scope of the statutory retention requirements and then erased.
The following applies to personal data which you disclose to us when you register for events such as field trips, school holiday bus safety days or mobility training: The entry of personal data is voluntary. Data is stored for a maximum of 12 months after the end of the relevant event and then erased.
For personal data which you enter when you use our other services such as online subscriptions, Wi-fi, LÜMO [late-night shuttles], etc., the Terms and Conditions and data privacy policies stored there shall also apply. These contain the following information: processed data categories, information on purpose and legitimate basis, details on storage period.
Data is only sent to statutory bodies pursuant to and within the scope of mandatory statutory provisions. Insofar as data processing is based on voluntary consent, you can withdraw this at any time with immediate effect.
Right of access, right to lodge a complaint and data erasure
If you have any questions on your stored personal data and its protection, please contact our data protection officer at dsb (at) swhl.de.
On request and free of charge, you can obtain information on all your stored personal data. You also have the option of rectifying any errors, bringing old information up-to-date, or having stored data erased. You can also withdraw your consent to the collection, processing and use of your personal data at any time with immediate effect.
You have the right to lodge a complaint with the supervisory authority with regard to the processing of your personal data. The address of the competent supervisory authority is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Postfach 71 16, 24171 Kiel
Tel.: +49 (0)431 988-1200
Fax: +49 (0)431 988-1223
We take technical and organisational measures to protect your data against unauthorised access, loss, manipulation or destruction. Our security measures are constantly updated in accordance with the available level of technology. If you communicate with us by email, we cannot guarantee absolute data security, and so we recommend that you send any confidential information by post.