1. Data Controller
The controller within the meaning of the General Data Protection Regulation is
rebus Regionalbus Rostock GmbH
Parumer Weg 35
18273 Güstrow
Tel.: +49 3843 6940-0
Fax: +49 3843 6940-299
Email: info@rebus.de
represented by Managing Director Thomas Nienkerk
The Data Protection Officer is:
Jan Thomas Jacobi
Tel.: +49 3843 6940-295
Email: datenschutz@rebus.de
If you have any questions regarding data protection or wish to exercise your rights or make a claim regarding your personal data, please send an email to the Data Protection Officer.
2. Collection and Processing of Data When Visiting Our Website
Every visit to our website and every access to a file stored on the website is logged in log files. The legal basis is Article 6(1)(f) of the GDPR. This data is stored for internal system-related and statistical purposes, to optimize the website, and to ensure the security of our IT systems. This also constitutes our legitimate interest. The following information is logged: name of the accessed webpage/file, date and time of access, amount of data transferred, notification of successful access, IP address, the type and version of the web browser, the user’s operating system, the previously visited website (if a link from that site led to the destination page), and the requesting domain.
The data is stored for a maximum of 14 days.
The collection of this data is strictly necessary for providing the website, and the storage of this data in log files is essential for the operation of the website. Therefore, website visitors do not have the option to object.
Additional personal data is collected only if you provide it voluntarily, for example, as part of an inquiry or registration. This data is not stored together with the log files.
3. Collection and Processing of Personal Data When Using the Contact Forms or the Provided Email Addresses
Our website offers various forms for quick contact. When you use these forms, the personal data provided in the form is stored. If a field is marked with an * as a required field, the legal basis is Article 6(1)(f) of the GDPR. Fields not marked with an * are optional. In this case, the legal basis is Article 6(1)(a) of the GDPR. Your consent to the processing of the data is obtained as part of the submission process, and reference is made to this Privacy Policy. If the form is intended to lead to the conclusion of a contract, the supplementary legal basis is Article 6(1)(b) of the GDPR.
It is also possible to contact us via the email addresses provided. In this case, the user’s personal data transmitted with the email is stored in our email system. The legal basis for processing this data is Article 6(1)(f) of the GDPR. If the email contact is intended to conclude a contract, the supplementary legal basis for the processing is Article 6(1)(b) of the GDPR.
The purpose of the processing is to contact you and handle your inquiries or requests for quotes, which also constitutes our legitimate interest.
The data will be stored at least as long as necessary to achieve the purpose for which it was collected. This remains the case until the respective contact has been concluded. The contact is considered concluded when it can be inferred from the circumstances that the matter in question has been definitively resolved. Once the matter has been resolved, the data will be deleted in accordance with statutory retention requirements.
Providing the required information is absolutely necessary for processing your request. If you exercise your right to object, we will delete the data immediately. Further processing of your request will then no longer be possible.
4. Use and Disclosure of Personal Data
To the extent that you have provided us with personal data, we use it only to respond to your inquiries, to fulfill contracts concluded with you, and for technical administration.
Your personal data will be disclosed to third parties or otherwise transferred only if this is necessary for the purpose of contract fulfillment—in particular, the transfer of order data to suppliers—if it is necessary for billing purposes, if we are legally obligated to do so, or if you have given your prior consent.
Stored personal data will be deleted if you revoke your consent to its storage, if it is no longer necessary for the purpose for which it was stored, or if its storage is otherwise prohibited by law.
5. Third-Party Services
We have integrated content, services, and features from other providers into our website. These include, for example, maps provided by Google Maps or videos from YouTube. In order for this data to be accessed and displayed in the user’s browser, the transmission of the IP address is absolutely necessary. The providers (hereinafter referred to as “third-party providers”) therefore receive the IP address of the respective user.
Although we make every effort to use only third-party providers that require the IP address solely to deliver content, we have no control over whether the IP address or additional data may be stored. In such cases, this process serves, among other things, statistical purposes. If we are aware that the IP address is being stored, we will inform our users accordingly.
6. Use of Google Maps
We use the “Google Maps” component on our site, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google.”
Each time the “Google Maps” component is accessed, Google sets a so-called cookie to process user settings and data when displaying the page on which the “Google Maps” component is integrated. This cookie is generally not deleted when you close your browser but expires after a certain period of time, unless you delete it manually beforehand.
If you do not consent to this processing of your data, you have the option to disable the “Google Maps” service and thereby prevent the transfer of data to Google. To do so, you must disable the JavaScript function in your browser. Please note, however, that in this case you will not be able to use the map feature at all or only to a limited extent.
The use of “Google Maps” and the information obtained through “Google Maps” is governed by Google’s Terms of Service, which you can view at https://policies.google.com/privacy?hl=de&gl=de, as well as the additional terms and conditions for “Google Maps” at https://policies.google.com/terms?hl=de&gl=de.
7. Use of YouTube
Our website includes at least one video from YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA, hereinafter “YouTube.” YouTube is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google.”
When you click the link, a connection is established to YouTube’s servers. In the process, the specific page you accessed is logged. If you are simultaneously logged in with an account belonging to the Google Group, the websites you visit can be associated with your personal profile. The use of YouTube is subject to the privacy policy, which you can view at https://policies.google.com/terms?hl=de&gl=de, as well as the additional terms of service at https://www.youtube.com/t/terms.
6. Rights of the Data Subject
If we process your personal data, you are a data subject within the meaning of the GDPR and are therefore entitled to the following rights vis-à-vis us as the data controller:
Right of Access
Upon written request to our Data Protection Officer, we will be happy to inform you about the data we have stored about you. You may request the following information from us:
- the purposes of processing,
- the categories of personal data being processed,
- the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations,
- if possible, the planned period for which the personal data will be stored, or, if this is not possible, the criteria for determining this period,
- the existence of a right to rectification or erasure of the personal data concerning you, or to restriction of processing by the controller, or a right to object to such processing,
- the existence of a right to lodge a complaint with a supervisory authority,
- if the personal data are not collected from the data subject, any available information regarding the origin of the data,
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4), and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended effects of such processing on the data subject,
- if the personal data is transferred to a third country or to an international organization, information about the appropriate safeguards in connection with the transfer pursuant to Article 46 of the GDPR.
Right to Rectification
If the data stored about you is inaccurate, you have the right to have it rectified without delay. Subject to the purpose of the processing, you have the right to request that your personal data be completed.
Right to erasure
You may request that we erase the personal data stored about you without undue delay if:
- it is no longer necessary for the purposes for which it was collected,
- the basis for processing is your consent and there is no other legal basis for the processing,
- you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR,
- the personal data has been processed unlawfully,
- the erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject, or
- the personal data was collected in connection with information society services offered pursuant to Article 8(1), and none of the grounds for processing listed in Article 21(3) of the GDPR apply.
Right to Restriction of Processing
You may request that we restrict processing if:
- you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data,
- the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use,
- we no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise, or defend legal claims; or
- you have objected to the processing pursuant to Article 21(1), as long as it has not yet been determined whether our legitimate grounds override yours.
If the processing of your personal data has been restricted, such data—apart from its storage—may be processed by us only with your consent or for the purpose of asserting, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.
If processing has been restricted in accordance with the above conditions, we will notify you before the restriction is lifted.
Obligation to Notify in Connection with the Rectification or Erasure of Personal Data or the Restriction of Processing
If you have exercised your right to rectification, erasure, or restriction of processing with us, we will notify all recipients to whom we have disclosed the personal data concerning you of such rectification, erasure, or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to request that we inform you of these recipients.
Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b), and the processing is carried out by automated means.
When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, provided that this is technically feasible. This right must not infringe upon the rights and freedoms of others.
The right to data portability does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f). This also applies to profiling based on these provisions. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of your personal data. This also applies to profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data will no longer be processed for those purposes.
In connection with the use of information society services, you may exercise your right to object through automated means using technical specifications.
Right to Withdraw Consent to Data Processing
To the extent that we use data for a purpose that requires your consent under applicable law, we will always ask for your explicit consent and record your consent in accordance with data protection regulations. You may revoke your consent at any time with future effect. The lawfulness of the processing carried out on the basis of your consent up until its revocation remains unaffected.
Automated Decisions in Individual Cases, Including Profiling
You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you, unless the decision is
- necessary for the conclusion or performance of a contract between you and us,
- is permitted by Union or Member State law to which we are subject, and such law provides for appropriate measures to safeguard your rights, freedoms, and legitimate interests, or
- is based on your explicit consent.
In the cases mentioned under (a) through (c), we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests. This includes, at a minimum, the right to obtain human intervention on the part of our company, to state your point of view, and to contest the decision.
Our decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
Exercising Your Rights
To exercise your aforementioned rights, simply send us a message. You may use the contact information provided above, and you will incur no costs other than the standard transmission charges.
Right to File a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside, where you work, or where the alleged infringement occurred, if you believe that the processing of your personal data violates the GDPR.
7. Security Notice
We make every effort to store your personal data in a manner that is inaccessible to third parties by implementing all technical and organizational measures. We cannot guarantee complete data security when communicating via email; therefore, we recommend that you send confidential information by mail.
8. Status and Changes to This Privacy Policy
This Privacy Policy is effective as of May 25, 2018.
Changes to our offerings, further development of our website, or changes in legal or regulatory requirements may make it necessary to amend this Privacy Policy. You can view and print the current version of the Privacy Policy at any time at this web address
