Data protection policy for use of the online shop

How does the BVG ensure that your personal information is protected?

The BVG online shop is a service provided by the Berliner Verkehrsbetriebe (“BVG”, also referred to as “We” in the following), a statutory public body, and developed by EOS UPTRADE GmbH, Hamburg. The BVG uses the BVG online shop to sell tickets, passenger information products and souvenirs on the internet.

We take the protection of personal information very seriously.

The following provides an overview of how we protect your information and what it means for you when you make use of our services. In all circumstances, your right to privacy is our highest priority. We treat all information you provide in accordance with relevant statutory provisions in force, such as the Berlin Data Protection Act (BlnDSG) and the German Telemedia Act (TMG). It is also important that you are aware of when we store what information and how we use it. The BVG undertakes to comply with all statutory data protection provisions. This is monitored by the BVG’s data protection officer. If you have any questions, suggestions or comments relating to the issue of data protection, please contact us by sending an e-mail to datenschutz@bvg.de.

What is personal information?

Personal information means personal or material particulars of a specific or identifiable person (article 4(1) of the Berlin Data Protection Act). This includes information such as your name, your e-mail address, your postal address and your telephone number. It does not include information which cannot be linked directly to your identity, such as the number of users of a website.

Do I have to provide personal information in order to use the BVG online shop?

Registration is required if you want to purchase products available in the BVG online shop. Tickets sold in the BVG online shop can be purchased at all BVG sales outlets, private sales outlets and at our ticket machines without registration. We only collect, process and use the personal information you provide as part of the registration process for the purpose of order fulfilment in accordance with article 11(1) of the Berlin Data Protection Act (“Restriction to a Specific Purpose”).

What personal information is collected and by whom?

The registration process requires you to provide the BVG with your name, your e-mail address, your postal address and, as applicable, a delivery address. The information is used and processed only for the purpose of facilitating orders, payments and deliveries, as well as for customer relationship purposes. For security reasons, credit card information is not stored in the BVG online shop and must be re-entered every time you place an order for the purpose of payment processing with B+S Card Service GmbH. The data protection provisions of B+S Card Service GmbH can be found here: https://www.bs-card-service.com/de/datenschutz/

Do we pass on personal information to third parties?

If you choose to pay by credit card, your payment details (credit card information) will be transmitted in encrypted form to B+S Card Service GmbH. B+S Card Service GmbH is our clearing partner for credit card payments and handles all payment transactions. B+S Card Service GmbH works on our behalf and on the basis of article 3 of the Berlin Data Protection Act (“Processing Personal Information on Behalf of Third Parties”). Your payment details are transmitted in a secure and encrypted form. We will only use other personal information for the purpose of order fulfilment in the BVG online shop and we do not pass on this information to third parties. We value the trust you place in us and exercise the utmost care to protect your personal information.

Who can register?

We advise you that only customers who are over 18 years of age and have a delivery and billing address within the European Union may register in the BVG online shop. We cannot accept any orders that do not meet these requirements.
When you register in the BVG online shop, your user name will be created from the e-mail address you provide. When you make your first purchase in the BVG online shop, you will receive a password at the e-mail address you specified. The next time you make a purchase in the BVG online shop, you need only enter your user name and password; the shop system will then automatically retrieve all related data it has stored. You may amend these details whenever you log in, for example if your address has changed. You may also change your password or set a new one at any time.

What rights do you have regarding the use of your personal information?

Your rights regarding the use of your personal information are governed by article 7 of the Berlin Data Protection Act. You have the right to request a summary of the information we have stored about you at any time (article 16 of the Berlin Data Protection Act (“Disclosure, Notification and Inspection”)). If you wish, this information can be provided in electronic form. To prevent the disclosure of personal information to unauthorised third parties, we reserve the right to request proof of identity prior to sending the information. You are also entitled to delete, amend or block your personal information (article 17 of the Berlin Data Protection Act). To do so, send an e-mail to info@bvg.de. The BVG will delete your personal information when the purpose for which it was stored no longer exists and there are statutory regulation which require its continued storage. Your personal information is only used for statistical analysis in anonymous form.
You are entitled to withdraw your consent to allow us to store your information with future effect at any time.

How secure are transactions conducted over the internet?

In order to protect the information you send on the internet from unauthorised access by third parties, we use SSL (secure socket layer) technology, an established and currently the safest encryption method. All your personal and payment information is transmitted in a secure environment using 1024-bit encryption.

Do we use web analysis and tracking?

The BVG uses the open-source software Piwik for statistical evaluation of visitors to its websites. Piwik uses cookies, text files that are saved on your computer and allow us to analyse your use of the BVG websites. The information collected by Piwik is not sent to other servers or passed on to third parties, but is anonymised and used solely to improve the services offered by the BVG. Piwik saves IP addresses without the last tuple. This makes it possible to identify the network, but not the computer, from which a request is received. If your browser supports “do-not-track” technology and you have activated it, your visit will be automatically ignored. You can also stop Piwik from collecting information (insert link). If you do not want Piwik to collect your information, click a button in the linked area to set a Piwik deactivation cookie in your browser. This setting is retained until you delete the cookie. The cookie is set for each browser and computer. If you use different devices to access the BVG websites, you may therefore have to repeat this process.

By using the websites of the BVG, you agree to allow Piwik to use the data it collects as specified above.

Do we use cookies?

We use session cookies on our website to ensure we give you the best experience in the BVG online shop. We recommend configuring your browser to receive our cookies. They are only used for the duration of your visit and automatically deleted when you leave our site and close your browser.

Our right to modify these guidelines with prior announcement
We reserve the right to modify these guidelines at any time while maintaining compliance with the provisions of data protection laws. If you have any further questions, please contact us by e-mail at info@bvg.de.