Data Privacy Statement

We want you to feel safe and comfortable whenever you visit our websites. As the protection of your privacy is of great significance to swb AG und its subsidiary companies, our website / Internet offer is designed in such a manner that you can use it anonymously as long as you do not provide any information voluntarily in regards to you as a person. Within this context, data are processed in compliance with the principles stated below.

Responsible entity

swb AG
Theodor-Heuss-Allee 20
28215 Bremen / Germany
T 0421 359-3351
F 0421 359-3350
info.@swb-gruppe.de

Table of contents

• Usage data
• Cookies
• Web-tracking tools
• General handling of your personal data
• Contact and application forms
• Route planner
• Publication of your data
• Data transmission to third countries
• Data security
• Rights & possibility to object
• Operational data protection commissioner

Usage data

If you retrieve our websites, no data are recorded that can be related to you as a person, and no usage profiles are created in regards to you as a person. Our web server only records so-called usage data automatically in a protocol. The protocol contains the following information:

• IP address or domain of the retrieving computer, shortened by the last three digits (anonymised)ě
• Date and time of retrieval
• Name of the file retrieved
• Visited website
• Used web browser
• Used operating system

In addition, we record the Internet Service Provider, the Internet address (URL), from which you have come to visit us, and our websites that you click on. A connection with you as a person cannot be established on the basis of these data, which means that you remain anonymous. Such data processing takes place on the basis of Article 6 Subsection 1 Sentence 1 letter f of the EU General Data Protection Regulation (GDPR) and of our interest in protecting our website / Internet offer and adjusting it to your requirements. The aforementioned information is recorded and evaluated for statistical purposes and to avert irregular inquiries/retrievals (DOS attacks). All data are deleted on the day after utilisation.

Cookies

Moreover, we use cookies to simplify and improve user guidance on the websites. Cookies are small files that are stored on your computer for a limited period of time and, for instance, support the renewed retrieval of standard forms or the process of online registration. A distinction is made between the Session Cookies, which are deleted again as soon as you close your browser, and the Permanent Cookies, which are stored beyond the individual session. Cookies may contain data that render it possible to recognise the used device. To some extent, however, the cookies only contain information on certain settings that cannot be related to a specific person.

On our websites, we make use of Session Cookies and Permanent Cookies. Technically necessary cookies are processed on the basis of Article 6 Subsection 1 Sentence 1 Letter f of the GDPR as well as for the purpose of optimising or facilitating user guidance and adjusting the presentation of our website. The processing of cookies takes place on the basis of your consent, to be provided via our cookie banner. You are able to revoke your consent at any time by deleting the cookies in your browser. You may change the settings in your browser in such a way that the browser informs you on the placing of cookies. As a result, the use of cookies becomes transparent for you. Please note, however, that some services can only be executed without cookies in a technically limited manner.

General handling of your personal data

Any personal data, which you transmit to us online (by e-mail or through web forms) are recorded and processed in accordance with statutory regulations. If we use your data for the purpose of contract implementation or to protect legitimate business interests, this also includes the authorised transfer of the data to subsidiary companies of swb AG for contractual purposes or on the grounds of statutory obligations. Apart from that, we only forward your data to third parties if we are entitled or obliged to do so under the law (e.g. for criminal prosecution purposes).
In addition, we use the name and postal address for market analyses in accordance with the provisions of the Federal Data Protection Act and to inform you on the services offered by swb AG. You may raise an objection against such use of your data at any time (see below). If you make further data available to us, we shall only use them for advertising or analysis purposes with your explicit consent that may be revoked at any time.
For the sake of protecting your data, we rule out any transfer of your data for advertising purposes unless you also provide us with your consent, which you may revoke at any time, to such data transfer.

Contact and application forms

As a matter of course, we shall treat any information as confidential, which you transmit to us by completing the application form or by e-mail. Your data are processed exclusively in order to respond to your inquiry and to make contact with you, for this particular purpose, through the requested channel of communication. Such data processing takes place on the basis of Article 6 Subsection 1 Sentence 1 Letter f of the GDPR and for the sake of answering your questions as quickly and conveniently as possible. Where your inquiry can only be clarified by a partner company, we shall forward your inquiry including your data to that company in your own best interests. Apart from that, we rule out any transfer of the data to third parties as well as any use of this data for advertising or statistical purposes without your explicit and revocable consent. We store the data as long as we require them to achieve the particular purpose (such as cooperation or future collaboration) and delete them as soon as the respective purpose ceases to apply.

Route planner

If you wish to use our route planner, for instance to plan your trip to kraftwerk – city accelerator bremen, you will have to enter the starting point and the destination. These data will be processed by the map service Google Maps, provided by Google Inc. Through your use of Google Maps, information concerning your utilisation of the service (especially the IP address of your computer) may be transmitted to a server of Google Inc. in the USA and stored there. swb AG does not exert any influence on the further processing of data by Google Inc. Please also read the “Conditions of Use of Google Maps“if you wish to use that service. If you do not agree with your data being processed by Google Inc., please refrain from using the map or deactivate the Java Script function in your browser to obtain a limited view.

Publication of your data

On our websites or in booklets, we publish personal information or images of people, which you make available to us or release for use, only with your explicit consent that may be revoked with effect for the future at any time (Article 6 Subsection 1 Sentence 1 Letter a of the GDPR).

Data transmission to third countries

To some extent, we transmit personal data to a third country outside the EU. In any such case, we make sure that an appropriate level of data protection is guaranteed:
In the event of Google Analytics (USA), an appropriate level of data protection results from Google’s corresponding participation in the Privacy Shield Agreement (Article 45 Subsection 1 of the GDPR).

Data security

We take appropriate measures to implement the protection of your data in technical and organisational terms. Our employees are under obligation to comply with data protection. At the same time, our service providers commissioned with data protection are carefully selected and likewise under obligation to adhere to data protection. Some areas of our Internet offer, in which particularly sensitive data is transmitted for instance in standard forms, are additionally encrypted by us through SSL, so as to protect your data from unauthorised access. You can recognise encrypted websites, among other things, by the lock symbol of your browser. Please note that unencrypted data transmission (by e-mail or via other web forms) may also be read potentially by unauthorised persons outside our scope of influence. If you wish to transmit sensitive data to us without encryption, we therefore recommend you to use other channels of communication.

Your rights as a user

When it comes to the processing of your personal data, the GDPR grants certain rights to you as a website user:

1. Right to be informed (Article 15 of the GDPR):

You are entitled to demand a confirmation stating whether any personal data relating to you are processed; where this is the case, you are entitled to be informed on these personal data and to receive the information mentioned specifically in Article 15 of the GDPR.

2. Right to correction and deletion (Articles 16 and 17 of the GDPR):

You are entitled to demand the correction of any incorrect personal data relating to you and, where applicable, the completion of any incomplete personal data relating to you without delay.

You are furthermore entitled to demand that the personal data relating to you be deleted without delay if one of the reasons stated specifically in Article 17 of the GDPR is in place, e.g. if the data are no longer necessary for the purposes pursued.

3. Right to restriction of the data processing (Article 18 of the GDPR):

You are entitled to demand the restriction of data processing if one of the prerequisites mentioned in Article 18 of the GDPR is in place, e.g. if you objected to the processing, over the duration of a possible examination/review.

4. Right to data portability (Article 20 of the GDPR):

In certain cases mentioned specifically in Article 20 of the GDPR, you are entitled to receive the personal data relating to you in a structured, well-established and machine-readable format or demand the transmission of these data to a third party.

5. Right to object (Article 21 of the GDPR):

Where data are collected on the basis of Article 6 Subsection 1 Sentence 1 Letter f of the GDPR (data processing for the protection of legitimate interests), you are entitled to raise an objection, for reasons that result from your specific situation, against the data processing at any time. We shall then cease processing the personal data unless verifiable compelling reasons are in place, which must be worthy of protection, for the data processing activities that outweigh the interests, rights and freedoms of the person concerned, or if the data processing serves to assert, exercise or defend legal claims.

6. Right to submit a complaint to a supervisory authority

Pursuant to Article 77 of the GDPR, you are entitled to submit a complaint to a supervisory authority if you are of the opinion that the processing of personal data relating to you constitutes a breach of data protection regulations. The right to complain may be asserted in particular vis-à-vis a supervisory authority in the member state of your place of residence, your place of work or the place of the suspected infringement. In Bremen, the responsible supervisory authority is the Federal State Commissioner for Data Protection and the Freedom of Information, Ms Dr. Imke Sommer, Arndtstrasse 1, 27570 Bremerhaven / Germany.

Operational data protection commissioner

If you have any questions concerning data protection, please feel free to get in touch directly with our data protection commissioner:

Data Protection Commissioner
swb AG
Theodor-Heuss-Allee 20
28215 Bremen
T 0421 359-2117

datenschutz@swb-gruppe.de