Privacy Notice

Table of contents

1. General information

2. Registration

3. Type, extent and purpose of data processing

4. Newsletter and marketing campaigns

5. Location of servers and support provider

6. Third parties

7. Right to information and right of objection

8. Withdrawal information

9. Cookies, web beacons, use of Google Analytics, Adjust

10. Google AdWords, controlled non-person-related pop-up ads

11. Use of social plug-ins (Facebook, Google+ and Twitter)

12. Tracking of ads by Mapp Digital Germany GmbH

13. Tracking of ads by Google AdWords

14. Tracking with Google Remarketing

15. Mobile applications

1. General information

ride2go GmbH, Erlenstr. 7, 71297 Mönsheim, represented by their management (hereinafter referred to as “ride2go”) operates an online portal (“ride2go Portal”) providing the arrangement of carpools and matching of rides as well as access to transport options of external partners (e.g. travel by rail, coach, third party ridesharing portals, etc.). To a limited extent, access and use of the ride2go Portal is also possible using the ride2go Portal apps.

ride2go provides access to and use of ride2go Portal on the basis of the General Terms and Conditions (GTC). The GTC shall govern the relationship between ride2go as the operator of the ride2go Portal and the users of the ride2go Portal. The ride2go Portal’s propositions only address consumers as defined in Section 13 of the German Civil Code (private individuals).

The information below is aimed at informing users about the purpose, manner and extent of our collection, processing and use of personal data on the ride2go Portal. Any data entered on the ride2go Portal shall be collected, used and processed by ride2go. ride2go shall be the controller within the meaning of the German Federal Data Protection Act.

2. Registration

To be able to use all functions of the ride2go Portal, users need to register with their e-mail address and a password randomly selected in line with the security requirements. Users will be requested to take good care to keep their password secret in order to prevent misuse.

Implementing a differentiated system of access rights and technical protection such as SSL encryption and firewalls, we aim at achieving greatest possible data security.

Of the voluntary and mandatory data entered upon registration, the standard settings in a user’s public profile only show a user’s first name and gender.

3. Type, extent and purpose of data processing

Within the use of the ride2go Portal, we collect, process and use data and we cannot exclude the possibility that such data tracks back to the user’s identity.

The ride2go Portal operator distinguishes between personal data (“Personal Data” i.e. a user’s name, contact details, profile data) and trip data (“Trip Data” e.g. start, destination and time of a trip). Personal Data describes or identifies a person, while Trip Data describes or identifies a ride offered or requested.

The ride2go Portal’s software captures and stores the data below:

· IP address of the connecting device,

· operating system of the connecting device,

· browser version of the connecting device,

· name of the retrieved file,

· date and time of retrieval,

· transmitted data volume,

· redirecting URL.

The ride2go Portal operator will collect, use and process Personal Data only to the extent required in order to provide the services under the User Contract and where legally permitted or required. The ride2go Portal operator shall handle any Personal Data in compliance with applicable data protection law. Personal Data shall be treated as confidential and stored exclusively on the servers of the ride2go Portal operator and shall at no time be disclosed to third parties unless with the user’s express prior consent.

Personal Data entered by a user shall be used for the Purpose only, i.e. to enable the use of the ride2go Portal and to flag a user’s ride sharing options. In line with the intended purpose of ride2go Portal, i.e. the arrangement of carpools and matching of rides, users can flag all pieces of personal contact information as visible to other users. Posting users may restrict access to their contact details (e.g. last name, phone number, e-mail address) for each individual ride selecting one of various visibility options below:

1. visible to all users (default),

2. visible to registered users only,

3. hidden, i.e. not visible.

In addition to the data which is mandatory for registration, users can opt to provide additional data allowing other users to become better acquainted with them and to select them as a suitable ride sharing partner. Voluntary information includes for instance: age group, smoker/non-smoker, interests, etc. If required, users can also store and publish photos of themselves and/or their vehicles.

The ride2go Portal can verify and display whether or not a user is a member of a mobility club. Membership of a mobility club will be matched with the data stored at the mobility club.

Upon registering, all users grant the ride2go Portal operator a royalty-free, revocable licence to use Personal Data and Trip Data within the limits of the Purpose. This shall include, without limitation, the storage of data on the servers of the ride2go Portal operator and its publication (e.g. by showing user data on the ride2go Portal), and its processing and duplication where this is required in order to keep the details on standby or to publish them.

Where users of the ride2go Portal are requested to provide their data protection consent, they shall be informed about their right to withdraw such consent with immediate effect at any time (cf. Clause 8 Withdrawal information).

4. Newsletter and marketing campaigns

Upon registering, users sign on for the ride2go Portal newsletter. Users not interested in receiving this newsletter can unsubscribe at any time clicking the unsubscribe link or disabling the relevant setting in their account.

To the extent the ride2go Portal runs marketing campaigns (such as, for instance, sweepstakes), the ride2go Portal operator shall collect the name, e-mail and postal address of the participant. The data shall be exclusively used to run and administer the marketing campaign. Such data shall not be forwarded to third parties. In excess of the above, the ride2go Portal operator shall only use the data to the extent permitted by law. Participation in any marketing campaign can be withdrawn with immediate effect in the user account settings or by means of an unsubscribe link in the mailing.

5. Location of servers and support provider

The ride2go Portal operator uses a technical support provider for the services offered in the framework of the ride2go Portal. The ride2go Portal’s servers are hosted and operated in Germany. User data shall not be passed on, as defined in the German Federal Data Protection Act, to the support provider, but the support provider rather processes user data on behalf of the ride2go Portal operator. The ride2go Portal operator shall ensure compliance with the relevant provisions of the German Federal Data Protection Act in relation to this commissioned data processing, including, without limitation, with regard to the conclusion of commissioned processing agreements with service partners in line with the requirements of Section 11 of the German Federal Data Protection Act.

6. Third parties

Upon registering, all users grant the ride2go Portal operator a royalty-free, revocable licence to transfer Trip Data to external third parties within the limits of the Purpose. External third parties shall mean the operators of mobility portals (e.g. Fahrtfinder.net). Users shall grant to the external third parties the right to process transferred Trip Data and display it on an external website. For the avoidance of doubt, no information displayed on external websites shall include Personal Data. The only inference between Trip Data and Personal Data shall be made by means of their exposure on the ride2go Portal operated by ride2go. External third parties shall redirect any prospective ride sharers wishing to associate Trip Data with Personal Data to the ride2go Portal operated by ride2go. Interested ride sharers shall not be able to view Personal Data unless on the ride2go Portal operated by ride2go. In addition, ride2go shall procure that external third parties agree not to relocate any user data into permanent storage and not to use such data unless for temporary display within a posted ride.

Upon registering, users grant the ride2go Portal operator a royalty-free, revocable licence to include Trip Data and Personal Data in schemes operated by ride2go for cooperation partners within the limits of the Purpose. Schemes provided by ride2go for cooperation partners shall mean partner programmes (e.g. http://www.Lindlar/Pendler ) or business solutions (https://www.fahrgemeinschaft.de/unternehmen.php). In the framework of schemes operated by ride2go for cooperation partners no Personal Data or Trip Data shall be transferred to such cooperation partners. ride2go shall process and store Personal Data and Trip Data for programmes of cooperation partners only on servers of ride2go and present such data via a direct connection only on those web page sections of cooperation partners that are administered by ride2go. In addition, ride2go shall procure that cooperation partners agree not to use any user data unless for temporary display within a posted ride.

7. Right to information and right of objection

Users can obtain information about the data stored under their user names at any time upon request at the ride2go Portal’s contact details in the site notice.

Also, users can withdraw their consent to the use of their data at any time by terminating the User Contract. If a user terminates the User Contract or if a user account was closed, any and all user data will be erased without delay. No data shall be archived.

8. Withdrawal information

Users can revoke their registration in writing at any time with immediate effect and without stating the reasons (e.g. by e-mail, letter or fax sent to the ride2go Portal contact details in the site notice) or by closing their account. If a user withdraws from the contract or if a user account was closed, any and all user data will be erased without delay. No data shall be archived.

Users can withdraw any consent given at any time with immediate effect in writing without stating the reasons (e.g. by e-mail, letter or fax sent to the ride2go Portal’s contact details in the site notice) or by changing the relevant permissions settings in their user profiles.

9. Cookies, web beacons, use of Google Analytics, Adjust

The ride2go Portal’s software uses cookies. Cookies are small text files stored on the user’s device. Cookies are required to enable certain functionalities of the service. The information contained in cookies facilitates navigation for the user and enables better display of the ride2go Portal’s internet pages. In addition, displayed information is matched with the user’s profile. Cookies do not contain any Personal Data.

Users have the possibility to prevent the placement of cookies in their browser settings. After blocking cookies, the ride2go Portal’s functionalities may no longer be fully available. Cookies do not install or launch any programmes or other applications on the user’s device.

In addition, ride2go Portal uses small background-coloured or transparent graphics (web beacons) to gather statistics on the ride2go Portal’s usage. In this context no Personal Data is being transmitted. Users can object to this data collection, processing and use at any time by terminating the User Contract with immediate effect.

The ride2go Portal uses the Google Analytics web analysis tool of Google Inc. (“Google”) to customise its website. Google Analytics uses cookies which are stored on the user’s device and allow to analyse the websites visited by a user. The information on the user’s website usage (including the user’s IP address) is transferred to and stored on a Google server in the USA. In this context, the ride2go Portal uses the “_anonymizeIp()” script to ensure that Google anonymises the user’s IP address without delay (after determining the geolocation).

Google will use this information to analyse the user’s website usage, to compile website activity reports for the website operator and to provide additional services in connection with the website and Internet usage. Google may transmit this information to third parties, where this is required by law or where such third parties process data on Google’s behalf. According to Google, a user’s IP address will not be matched with other data available at Google.

Users can prevent the installation of cookies in their browser settings. In this case the ride2go Portal’s functionalities may no longer be fully available. Also, Google offers certain deactivation tools for some Internet browsers so that users can block the recording and analysis of their website behaviour. More information and download sites for such tools are available at http://tools.google.com/dlpage/gaoptout?hl=de

This website uses the “adjust” analysis technology by adjust GmbH (“adjust”) to monitor campaigns. For this type of analysis, adjust uses the users’ IP and Mac addresses which are however all anonymised for the tracking. Web beacons function like cookies but are not visible to the user. This data is pseudonymised and cannot be traced back to identify an individual natural person. Users can object to this data collection, processing and use at any time by terminating the User Contract with immediate effect or closing the account.

10. Google AdWords, controlled non-person-related pop-up ads

The ride2go Portal uses Google AdWords and its conversion tracking. A conversion tracking cookie is placed when the user clicks at a Google ad. These cookies expire after 30 days and do not serve to identify the person of the user. If the user visits certain pages of the ride2go Portal and the cookie has not yet expired, Google and the ride2go Portal operator can see that the user clicked at the ad and was redirected to an AdWords customer’s page. Each Google AdWords customer receives a different cookie. This is why cookies cannot be tracked through the AdWords customers’ websites. The information gathered by conversion cookies serves to compile conversion statistics for AdWords customers who opted for conversion tracking. The customers receive information on the total number of users who clicked at their ad and through to their website which has a conversion tracking tag installed. However, they receive no information that can be used to identify the user. Users who want to opt out of tracking can delete the relevant cookie.

11. Use of social plugins (Facebook, Google+ and Twitter)

The ride2go Portal uses social plugins (“Plugins”) of the social networks Facebook, Google+ and Twitter. Facebook’s Plugins are identified by the Facebook logos (white f on blue tile or a thumbs-up sign). Google uses a +1 button and Twitter’s Plugin is identified by the Tweet button.

These Plugins may send information which potentially include Personal Data to the social network providers who may potentially use such information. Plugins need to be proactively activated by clicking the relevant button. Only after activation do Plugins collect and transmit information to the social networks. After activation was triggered on the website which contains the Plugin, the browser builds a direct connection to the servers of Facebook, Google or Twitter. Facebook, Google or Twitter transmit the Plugins’ content directly to the user’s browser which integrates the content into the website. The ride2go Portal operator does not collect any Personal Data by means of Plugins or through the use of Plugins.

The ride2go Portal operator has no influence over which data is captured by an activated Plugin and how the provider uses the data. For the time being, we must assume that at least the IP address and hardware-related information are collected and used. If, for instance, a user is logged onto Facebook, then Facebook can match the website visit to that Facebook account. Facebook might even capture and store the IP addresses of non-Facebook members, regardless of whether or not they clicked on an activated Plugin. In Germany, Facebook states that they only store anonymised IP addresses. The same applies to the other social plugins mentioned below. Again, the social networks might try to place cookies on the browsing devices.

The Facebook button establishes a direct connection to the servers of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This tells Facebook which particular page is being visited. If a user simultaneously is also logged onto Facebook, then Facebook can identify the user as the visitor of a specific page. For details on which additional data is collected und how such data is used, please refer to Facebook’s privacy policy at https://www.facebook.com/help/?faq=186325668085084. Options to protect your privacy on Facebook are available at http://www.facebook.com/policy.php

The Google+ Plugin establishes a direct connection to the servers of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This tells Google which particular page is being visited. If a user simultaneously is also logged onto Google, then Google can identify the user as the visitor of the relevant page. For details on which additional data is collected und how such data is used, please refer to Google’s privacy policy at https://www.google.com/intl/de/policies/privacy/. Privacy settings are available at https://www.google.com/dashboard/?hl=de

Twitter’s Plugin establishes a direct connection to the servers of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. This tells Twitter which particular page is being visited. For details on which additional data is collected und how such data is used, please refer to Twitter’s privacy policy at https://twitter.com/privacy. Privacy settings are available at https://twitter.com/settings/account

12. Tracking of ads by Mapp Digital Germany GmbH

The advertising partner Mapp Digital Germany GmbH is in charge of collecting data for the delivery of promotional material using Dynamic 1001 GmbH’s EC track web analytics tool. The web analytics tool is used to measure the success of marketing campaigns by/for the mobility club (registered association) and on the ride2go Portal.

Objection (opt-out): To prevent such user-targeted advertising, click http://media01-ecircleag.com/optout.html to place an opt-out cookie on your device.

13. Tracking of ads by Google AdWords

Ads are placed in our name by means of the online advertising service Google AdWords. This is based on identifying particular keywords users type into Google’s search engine to visit a page of the mobility club’s website and on using such information stored as anonymised data in a cookie to display interest-based ads on the mobility club’s website or within the Google ad network.

Right to object to data collection by Google services: By using this website, you agree to your data collected by Google being processed in the kind and manner described above and for the aforementioned purpose. For the avoidance of doubt, we shall not use any data collected by web controlling tools to personally identify the visitors of the mobility club’s website.

You can deactivate or adjust your ad settings for Google search engine ads at any time. For details please refer to: https://www.google.com/settings/ads/

Another option is to block third party cookies on Network Advertising Initiative’s deactivation page: http://www.networkadvertising.org/choices/

For the data privacy terms for Google advertising go to: https://www.google.de/intl/en/policies/technologies/ads/ and for Google’s general privacy policy refer to: https://www.google.com/intl/en/policies/privacy/

14. Tracking with Google Remarketing

We use the remarketing tools of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). Past visitors to our website who were interested in our online services will see targeted ads while browsing on Google’s partner sites. Ads display is triggered through cookies which are small text files stored on the user’s device. These text files help to analyse user behaviour of website visitors to subsequently use this information for targeted product recommendation and interest-based advertising.

If you do not want to receive interest-based advertising, you can block Google’s use of cookies for that purpose at https://www.google.com/settings/ads/

Another option is to block third party cookies on Network Advertising Initiative’s deactivation page or adjust your browser settings.

By using our services you agree to your data collected by Google being processed in the kind and manner described above and for the aforementioned purpose. For the avoidance of doubt, Google have their own privacy policies which are independent from our policies. We shall accept no responsibility or liability for these policies and procedures. Before using our website, please make yourself familiar with Google’s privacy policies.

For the data privacy terms for Google advertising go to: https://www.google.com/intl/en/policies/technologies/ads/ and for Google’s general privacy policy refer to: https://www.google.com/intl/en/policies/privacy/

15. Mobile applications

The ride2go Portal’s service can also be accessed and used through mobile applications (“Apps”). The above described uses of Personal Data also apply to the ride2go Portal’s Apps. All App data shall be encrypted before being transmitted.

Who we are

Our website address is: https://wordpress-r2g-transport2go-prod.apps.prod.rd2g.de.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

Who we share your data with

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

Additional information

How we protect your data

What data breach procedures we have in place

What third parties we receive data from

What automated decision making and/or profiling we do with user data

Industry regulatory disclosure requirements