Welcome to the website of Stadtverkehr Lübeck GmbH and Lübeck-Travemünder Verkehrsgesellschaft mbH. Thank you for your interest in our company. We take the protection of your personal data very seriously. We are committed to ensuring compliance with the applicable data protection legislation.
Data controller, data protection officer and supervisory authority
We are the data controller. Our contact details are as follows:
Stadtverkehr Lübeck GmbH
Ratekauer Weg 1-7
D-23554 Lübeck
Phone: 0451 888-0
Fax: 0451 888-2002
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Internet: www.sv-lübeck.de
The contact details of our company data protection officer are as follows:
Stadtverkehr Lübeck GmbH, Datenschutzbeauftragter (Data Protection Officer), Ratekauer Weg 1-7, D-23554 Lübeck, email: This email address is being protected from spambots. You need JavaScript enabled to view it..
The contact details of the competent supervisory authority are:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Postfach 71 16, D-24171 Kiel, Phone.: 0431/988-1200; Fax: 0431/988-1223; Email: This email address is being protected from spambots. You need JavaScript enabled to view it..
Collection, processing and use of personal data
When our website is visited, the following data is automatically collected and stored temporarily until the next automated erasure:
- Visitors’ IP addresses (the last octet of the IP address is erased)
- Name of the pages visited
- Date and time at which the site was accessed
- Name of the browser used
- Name of the operating system used
- Name of the search engine or the external link that the visitor used to come to our page
- Name of the files downloaded
This data is processed for the purpose of statistically evaluating the use of our website and to be able to optimise the site for users.
The legal basis for such data processing is Art. 6 (1) subparagraph 1 point f) GDPR. Within the meaning of this provision, our interest in being able to statistically evaluate the use of our website and our interest and the users’ interest in our being able to optimise our websites constitutes the legitimate interest.
This data cannot be attributed to specific people. This data is not combined with other data sources. We reserve the right to check data after collection if we have reasonable grounds to suspect unlawful use. This data shall be automatically erased after 30 days.
Contact
You have the possibility of contacting us by email or using the contact form. Any details you provide in this respect, the time contact was made and your email address are stored in this context. We do not pass this data on to third parties. We collect and use the data for the purpose of responding to your communication or deal with your request.
The legal basis for data processing is Art. 6 (1) subparagraph 1 point f) GDPR. Our legitimate interest arises from the fact that we require your data in order to reply your communication or deal with your request.
Online forms
Our websites provide you with the possibility of using various online forms (e.g. for suggestions/criticism, lost property inquiries or for online subscriptions, etc.).
In doing so, you must enter the data necessary for the processing of your request, such as name, address, email address and any further data apparent from the form.
The following categories of data are processed: Customer data (such as name and address), communication details, contract and order data.
We collect, store and use the data. This is done for the purpose of processing your request, such as entering into a contract with you or processing information you provide under an existing contractual relationship. For the purpose of contractual performance, data may also be transmitted to a third party (e.g. a service provider). The legal basis for such data processing is Art. 6 (1) subparagraph 1 point b) GDPR.
Furthermore, the data is processed for the purpose of contractual performance with technical service providers (including but not limited to the purpose of contractual data processing) and for the process of pursuing legal rights and the collection of receivables. This data may – also prior to conclusion of a contract – be transmitted, taking account of the relevant regulations, to credit agencies for the prevention of debt default, e.g. for the collection of probability values for debt default or for the transmission of undisputed or unappealable receivables with which the customer is in arrears. The credit agencies store the data transmitted to them also to be able to provide such data to their contractual partners in the context of assessing the risk of debt default. Such provision of data is performed only if their contractual partners have a legitimate interest in transmission of the data. The credit agency may communicate address data for the purpose of tracing debtors. Customers may obtain from the credit agency information on the data on them stored there. In the event of collection of a receivable, data can be transmitted to the following categories of recipients to the extent necessary for collection of the receivable: Assignees, credit agencies, collection agencies, third-party debtors, residents’ registration offices, courts, court bailiffs, lawyers. The legal basis for such data processing is Art. 6 (1) subparagraph 1 point f) GDPR; our legitimate interest consists of being able to pursue our legal rights and avoid debt default.
During the use of online forms, we additionally collect and store your IP address and the date and time the data was entered in order to be able to check, in the event of suspected misuse of your data, whether you are actually the person who used the form to enter your data. The legal basis for this is Art. 6 (1) subparagraph 1 point f) GDPR; our legitimate interest consists of being able to track any misuse of data.
Application procedure
We process personal data about you for the purpose of your application for employment to the extent necessary to make a decision on conclusion of an employment contract. The legal basis in this respect is Sec. 26 German Data Protection Act (BDSG). The data is processed on the part of our affiliate Stadtwerke Lübeck Holding GmbH.
We are further able to process personal data on you to the extent that this is necessary for the defence of legal claims asserted against us arising from the application procedure. The legal basis for this is Art. 6 (1) subparagraph 1 point f) GDPR; the legitimate interest is, for example, the obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG).
To the extent that an employment relationship comes into being between you and us, we may further process personal data already received from you pursuant to Sec. 26 (1) BDSG for the purpose of the employment relationship to the extent necessary for implementation or termination of the employment relationship. The same applies if your personal data is necessary for the exercise or performance of rights and duties on the part of representatives of employee interests arising from a law or a collective agreement, a company or service agreement (collectively negotiated agreement).
We process data associated with your application. This may be general data on you (such as name, address and contact details), details of your professional qualification and education or details of professional further training or other information you transmit to us in the context of your application. Otherwise, we may process professional information you have made public such as a profile at professional social media networks.
We may transmit your personal data to our affiliates within the Stadtwerke-Lübeck Group, to the extent permissible within the scope of the purposes and legal bases presented. Otherwise, personal data is processed on our behalf on the basis of agreements pursuant to Art. 28 GDPR, by, including but not limited to, providers of hosting services or providers of applicant management systems.
We store your personal data as long as necessary for a decision to be made on your application. If an employment relationship does not come into being between you and us, we may furthermore continue to store data to the extent necessary for defence of any potential legal claims. In this context, the application documents are erased after six months from the rejection decision becoming known unless storage for a longer period of time is necessary on account of legal disputes.
In the event that you provide us with voluntary consent to a longer storage period, for example for your application to be taken into consideration for vacancies at a later date, you may withdraw such consent at any time. Revocation will lead to immediate erasure of your application data, no later however than upon expiry of the deadlines stated.
For electronic submission of your application, please use only our application form or the email address stated so that the data protection requirements relating to your data can be guaranteed also within our company.
You are not required by law or contractual arrangements to provide personal data nor are you obliged to provide the personal data. The provision of personal data is, however, necessary for the conclusion of an employment contract with us. This means that unless you provide us with personal data for your application, we will not be able to enter into an employment relationship with you.
Cookies
We use cookies on our website. Cookies are text files that are stored on your device (PC, laptop, tablet, smartphone, etc.) containing information including but not limited to your IP address, operating system, browser type and version, time of access and referrer URL (previously visited site) to be able to identify multiple use of our website by the same user and to be able to collect and evaluate data on the use of our website and to be able to optimise our website for users.
The legal basis for such data processing is Art. 6 (1) subparagraph 1 point f) GDPR. Within the meaning of this provision, our interest in being able to statistically evaluate the use of our website and our interest and the users’ interest in us being able to optimise our websites.
If we obtain your express consent for the use of cookies (for example through a “cookie banner”), the legal basis for the data processing is Art. 6 (1) subparagraph 1 point a) GDPR. You may withdraw such consent at any time, for example using this revocation button.
You can suppress the use of cookies in the settings function of your browser; in such case, some views or functions of our website may be restricted.
Analysis services
etracker
The provider of this website uses the services of etracker GmbH in Hamburg, Germany (www.etracker.com) to analyse usage data. Cookies are used here to enable the statistical analysis of the use of this website by visitors, and to identify usage-related content or advertising. Cookies are small text files which are stored by the internet browser on the user’s device. etracker cookies do not contain information which allows a user to be identified.
The data generated by etracker is processed and stored by etracker on behalf of the provider of this website in Germany only, and is therefore subject to strict German and European data protection legislation and standards. etracker has been independently accredited and certified in this regard, and awarded the ePrivacy Seal data protection seal of approval.
Data is processed on the legitimate basis of Article 6 (1) point f) (legitimate interest) of the EU General Data Protection Regulation (EU GDPR). Our legitimate interest exists in optimising our website and online presence. As the privacy of our visitors is very important to us, the IP address will be rendered anonymous as soon as possible at etracker, and user or device identifiers converted into a unique code which cannot be attributed to an individual person. etracker does not use this data in any other way, nor does it combine it with other data or disclose it to third parties.
You can withdraw consent to the specified data processing at any time, insofar as such data is personal. Withdrawing consent in this way shall have no adverse consequences for you.
To withdraw consent to the processing of your personal data with etracker on this website, please click the check box to remove the check mark:
Further information on data protection at etracker can be found here.
YouTube
In order to embed videos, we use the YouTube plugin from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA) on our website. YouTube is represented by Google Ireland Limited at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The legitimate basis is point f) of Article 6(1) GDPR. Our legitimate interest lies in improving the quality of our website.
Google, together with its subsidiary YouTube, guarantees that EU data protection requirements are met even when data is processed in the USA through certification in accordance with the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
We use YouTube’s “privacy-enhanced mode”. According to the information provided by YouTube, this mode only establishes a connection to YouTube servers when the video is played.
If the connection to the YouTube server is established by playing the embedded video, YouTube will record and process at least your IP address, the date and time, as well as the web page you have visited. A connection to the Google advertising network “DoubleClick” is also established.
If you are logged in to a YouTube account, YouTube also attributes this information to your personal user account. If you want to prevent this from happening, you can adjust the relevant settings in your YouTube user account, or you must log out of YouTube before visiting our website.
YouTube permanently stores cookies via your web browser on your device for functionality reasons and to analyse usage. If you do not agree with this processing, you can prevent the storage of cookies by adjusting the settings in your web browser.
More information on data processing and on YouTube (Google) data privacy can be found at https://policies.google.com/privacy.
Transmission of data
We transmit data to third parties only
– if you have given your express consent pursuant to Art. 6 (1) subparagraph 1 point a) GDPR
– if transmission is necessary for performance of a contractual relationship pursuant to Art. 6 (1) subparagraph 1 point b) GDPR
– if we are legally required to transmit the data as specified in Art. 6 (1) subparagraph 1 point c) or
– if transmission of the data is required pursuant to Art. 6 (1) subparagraph 1 point f) GDPR for the protection of our legitimate interests (including but not limited to the establishment, exercise or defence of legal claims) or the legitimate interests of a third part, unless your interests in the protection of your data prevail
– as described above at “online forms”
To the extent that you have entered into a contract with us, the privacy policy contained in the respective product terms and conditions will apply in addition.
Duration of data storage
If you have transmitted personal data to us for the purpose of identifying lost property, sending a suggestion/criticism, or in order that we can contact you, this is stored for a maximum period of 36 months after completion of the relevant operation.
The following applies to personal data which you disclose to us within the scope of the punctuality, connection and cleanliness guarantee: Your claim cannot be processed without voluntary completion of the required fields. After reimbursement of your claim, the data is stored for 10 years within the scope of the statutory retention requirements and then erased.
The following applies to personal data which you disclose to us when single tickets are refunded: Your claim cannot be processed and the single ticket cannot be refunded without voluntary completion of the required fields. After reimbursement of your claim, the data is stored for 10 years within the scope of the statutory retention requirements and then erased.
The following applies to personal data which you disclose to us when you register for events such as field trips, school holiday bus safety days or mobility training: The entry of personal data is voluntary. Data is stored for a maximum of 12 months after the end of the relevant event and then erased.
For personal data which you enter when you use our other services such as ticket subscriptions, Wi-Fi, LÜMO [late-night shuttles], etc., the Terms and Conditions and data privacy policies stored there shall also apply. These contain the following information: processed data categories, information on purpose and legitimate basis, details on storage period.
Your rights as data subject
You have the following rights in connection with our processing of your data:
– the right to information pursuant to Art. 15 GDPR on our processing of your personal data, on the purpose of processing, the categories of processed data, recipients or recipient categories, duration of storage or criteria for the termination of duration, right to correction, erasure, limitation of processing or objection to the processing, right to complain to the supervisory authority, where applicable information on the source of the data and the existence of an automated decision-making process with regard to profiling and where applicable information on guarantees pursuant to Art. 46 GDPR in the event of transfer to a third country or international organisations
– the right to rectification of inaccurate personal data or the completion of incomplete personal data pursuant to Art. 16 GDPR
– the right to erasure of the personal data stored pursuant to Art. 17 GDPR if the data is no longer necessary for the purpose for which it was collected or processed in any other way, if consent once given has been withdrawn and there is no other legal basis, if an objection has been filed to processing and the data may no longer be processed pursuant to Art. 21 (1) or (2) GDPR, if the data was processed unlawfully, if erasure is necessary to fulfil a legal obligation or if the data was collected in relation to information society services on offer pursuant to Art. 8 (1) GDPR
– the right to restriction of processing pursuant to Art. 18 GDPR if you dispute the accuracy of the data (and for the duration of the period necessary to verify the accuracy), if processing is unlawful, but you oppose erasure but request restriction of its use instead, if we no longer require the data for the purpose of processing, but you require the data, however, for the establishment, exercise or defence of legal claims or if you have objected to processing pursuant to Art. 21 (1) GDPR unless it has been demonstrated that our legitimate grounds override your legitimate grounds
– the right to objection to the processing of your personal data pursuant to Art. 21 (2) GDPR (if the data is processed for the purpose of direct marketing) or pursuant to Art. 21 (1) GDPR (if processing is performed pursuant to Art. 6 (1) subparagraph 1 point e) or f) for reasons arising from your specific situation unless we have compelling legitimate reasons for processing that override your interests or processing serves the establishment, exercise or defence of legal claims)
– the right to data portability pursuant to Art. 20 GDPR, i.e. to receive the personal data relating to you that you have made available to us in a structured, commonplace and machine-readable format and to have such data transferred to another data controller
– the right to withdraw any consents given pursuant to Art. 7 (3) GDPR. The consequence of withdrawal is that, as of this point in time, we are no longer permitted to process data on the basis of the consent
– the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. For this purpose, you may contact the supervisory authority named under “Contact details”. The right to lodge a complaint is without prejudge to any other administrative or judicial remedies.