Protecting your data privacy is important to us!
Many of the hvv services we make available to you via the internet or the hvv App can only be used, however, if you communicate your personal data for processing to the relevant party (the data controller) responsible for providing them. For this reason we would like to explain to you how your data are treated.
Data Privacy and Protection
Data Controllers in the hvv
Due to the distribution of responsibilities and roles in the hvv structure there is no single central instance which is responsible for all data processing operations as defined by the EU General Data Protection Regulation (GDPR).
But these distributed or separate areas of responsibility do not mean that you as a user have to get the information on your data privacy in the various hvv services by laboriously gathering it from a mass of different sources. You can find here all the relevant data privacy information on the various hvv services in one place. In each of the different and then specific data privacy declarations you can also find the relevant contact address or institution you can get in touch with if you have further questions.
The competent and responsible authority for data processing for the website hvv.de is Hamburger Verkehrsverbund. You can find further information here (in German).
The competent and responsible authority for data processing for the hvv App is Hamburger Hochbahn AG. You can find further information here (in German).
The competent contract partners for holders of hvv all-year season tickets is Hamburger Hochbahn AG. You can find further information here (in German).
The competent and responsible authority for data processing for hvv plus is Hamburger Verkehrsverbund. You can find further information here (in German).
The competent and responsible authority for data processing for the hvv Jobticket (ProfiTicket) is S-Bahn Hamburg GmbH. You can find further information here (in German).
The competent and responsible authority for data processing for the hvv Deutschlandsemesterticket is S-Bahn Hamburg GmbH. You can find further information here (in German).
The competent and responsible authority for data processing for the use of the hvv Card is the client contract partner you have received your hvv Card from.
You can see the contact data of your client contract partner in the letter which you received together with your hvv Card from them.
In addition you can find further information here on data storage, data protection and data security (in German).
The competent and responsible authority for data processing for the hvv Card-Info-App is Hamburger Verkehrsverbund. You can find further information here (in German).
The competent and responsible authority for data processing for the Klimaticket is S-Bahn Hamburg GmbH. You can find further information here (in German).
The competent and responsible authority for data processing for the Mobilitätsbudget is S-Bahn Hamburg GmbH. You can find further information here (in German).
The competent and responsible authority for data processing for meinhvv is Hamburger Verkehrsverbund. You can find further information here (in German).
The competent and responsible authority for data processing for the hvv Newsletter is Hamburger Verkehrsverbund GmbH. You can find further information here (in German).
The competent and responsible authority for data processing for the Online Shop is Hamburger Hochbahn AG. You can find further information here (in German).
The competent and responsible authority for data processing for hvv Prepaid Card is Hamburger Hochbahn AG. You can find further information here (in German).
The competent contract partners for the social discount are here (in German).
The competent and responsible authority for data processing for the special offer for newcomers to Hamburg is Hamburger Hochbahn AG. You can find further information here (in German).
The competent and responsible authority for data processing for open hvv is Hamburger Verkehrsverbund. You can find further information here (in German).
The competent and responsible authority for data processing is Hamburger Verkehrsverbund. You can find further information here (in German).
The competent and responsible authority for data processing for hvv switch is Hamburger Hochbahn AG. You can find further information here.
The competent and responsible authority for data processing for hvv hop is Verkehrsbetriebe Hamburg-Holstein GmbH (vhh.mobility). You can find further information here (in German).
The competent and responsible authority for data processing for hvv AST is Verkehrsbetriebe Hamburg-Holstein GmbH (vhh.mobility). You can find further information here (in German).
The competent and responsible authority for data processing for hvv Skill on Amazon Alexa is Hamburger Hochbahn AG. You can find further information here (in German).
The competent and responsible authority for data processing for the hvv Client Service Chat is Hamburger Hochbahn AG. You can find further information here (in German).
The competent and responsible authority for data processing for the "hvv Bewerbermanagementsystem" is Hamburger Verkehrsverbund. You can find further information here (in German).
Your Rights as a User
Certain of your rights as a user and/or as a data subject are valid in every case. These rights always apply, irrespective of which of the service options mentioned above you use. For this reason we have summarized these rights for you here centrally.
In compliance with the legal requirements which apply, every responsible entity (data controller) in the hvv will be happy to inform you on request whether and, if so, which personal data concerning you are stored by them (Right to be Informed/Right of Access). In addition to this you can notify them of incorrect data to have it corrected (Right to Rectification) or have data whose storage is inadmissible or no longer needed deleted (Right to Erasure). In addition, under certain circumstances you are entitled to require that the processing of your personal data be restricted (Right to Restriction of Processing) as well as to object to the processing of your data if and when such processing takes place on the legal basis of Overriding Legitimate Interest (Article 6 Par 1 (f) GDPR), or for the performance of a task carried out in the public interest (Article 6 Par 1 (e) GDPR) or to revoke your Consent (Article 6 Par 1 (a) GDPR) (Right to Object). In particular, you can object at any time to your personal data being used for advertising purposes or for market research or opinion polling (Right to Object to Data being used for Advertising). You can further require in principle that personal data applying to you are made available to you in a structured, conventional and machine-readable format in order to be able to transmit them to another data controller (Right of Data Portability).
The rights described above are guaranteed to you under Articles 15 – 21 of the EU Regulation 2016/679 (GDPR), but are only presented here in very abridged form for reasons of space.
If you have questions regarding the exact scope of the rights described and how to exercise them, you can get in touch with the Data Protection Officer given below and/or the Hamburg Representative for Data Protection and Freedom of Information.
Your Right of appeal
As a data subject you have the right, without prejudice to any other administrative or judicial legal remedy, to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of the personal data concerning you infringes the EU Regulation 2016/679 (GDPR) or, pending this coming into force as of 25.05.2018, the German Data Protection Law (BDSG).
The competent authority fot data processing in the hvv is:
The Hamburg Representative for Data Protection and Freedom of Information
Prof. Dr. Johannes Caspar
Kurt-Schumacher-Allee 4
20097 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-Mail
Contact data for the company Data Protection Officer
If you have questions concerning the processing of your personal data and/or how to exercise your rights as a user (data subject), you can get in touch directly with the responsible company Data Protection Officer.
Please only use the following contact data for questions and enquiries dealing with the subject of data protection. In all other cases, please use the general contact form.
Kai H. Terschüren
Data Protection Officer of hvv GmbH
Brooktorkai 18
20457 Hamburg
Tel.: 040/32 57 75-0
E-Mail
The fact that only the details of the appointed company Data Protection Officer of Hamburger Verkehrsverbund GmbH are given here should not be construed as signifying that the entity represented by this Data Protection Officer is solely responsible for data protection. Designating only this particular named Data Protection Officer is done purely to facilitate communication in order to make it easier for you to exercise your rights. It has no effect for the duties and responsibilities of the individual responsible entities (data controllers) - see above - arising out of the type and scope of the actual data processing.