Nahverkehrsservice Sachsen-Anhalt GmbH (NASA GmbH) takes the protection of your personal data very seriously. We would like to inform you about the purposes for which we collect personal data (hereinafter referred to as "data") and how we apply them within your usage behavior of our services.
Your data will only be processed for the purpose of providing you with the app, convenient use, information presentation and service.
In this context, "processing" means the collection, use, disclosure and/or storage of personal data.
According to the General Data Protection Regulation (hereinafter referred to as "GDPR"), "personal data" consists of all data with which a natural person can be identified. The precise definitions of these terms are set out in Art. 4 of the GDPR.
The responsible according to Art. 4 No. 7 is:
Nahverkehrsservice Sachsen-Anhalt GmbH (NASA GmbH)
represented by Peter Panitz, Managing Director
Am Alten Theater 4
39104 Magdeburg
Deutschland
Phone: +49 (0)391 53631-0
Fax: +49 (0)391 53631-99
E-Mail: info@nasa.de
Website: www.nasa.de.
We have designated an external data protection officer. You can contact our Data Protection Officer via the following details:
Ms Meggie Dachner
DATA 4.0 Gesellschaft für Datenschutz und Datensicherheit mbH
Dornbergsweg 2
38855 Wernigerode
Deutschland
E-Mail: m.dachner@data40.de
Phone: +49 (0)3943 509949-0
Each time our app is accessed, our system automatically records data and information from the operating system of the used terminal device.
This data set consists of:
The requests will be recorded in the log files of our system for fourteen days. We do not save these or any other personal data beyond this deadline.
The temporary storage of your IP address is necessary to enable the delivery of our app to the user's terminal device. For this purpose, the IP address must remain stored for the duration of the session.
The storage in log files is needed to ensure the functionality of our app. In addition, we use the data to ensure the security of our information technology systems. We do not evaluate the data for marketing purposes in this context.
You have ordered a D-ticket at a transport company of your choice. After choosing the contractual partner (transport company) and entering your E-mail address and subscription number, your D-Ticket will be available in your app.
By comparing the transport company’s subscription data on a regular base, the validity of your D-Ticket will be verified.
The processing purpose is the retrieve and provision of your D-Ticket, as well as the review of your ticket validity.
For the above-mentioned purposes, NASA GmbH acts on behalf of the participating transport companies.
Your data are being processed according to Art. 6 para. 1 lit. b GDPR to fulfill your subscription with the contractual partner (transport company).
The data will not be transmitted to any third parties.
Your ticket data (subscription number, E-mail address, name, date of birth) will be processed by NASA GmbH to provide your ticket within the D-Ticket App, as long as your contract with the chosen transport company exists. Your data will be deleted from our system, as soon as your contract determines or after the ticket’s last day of validity.
Further information regarding data processing within your subscription can be requested from your chosen contractual partner (transport company).
By processing your personal data, GDPR grants certain rights. In case you want to claim these rights, please contact our Data Protection Officer via E-mail – under explicit identification of your person – or our office directly via mail.
You have the right to withdraw your consent at any point of time. The withdrawal of your consent does not affect the legality of the processing before the withdrawal has been made.
You have the right to claim a confirmation stating if any data concerning your person are being processed. If this is the case, you are entitled to request detailed information about these personal data and additionally all information listed in Art. 15 GDPR.
You have the right to claim the immediate correction of incorrect or incomplete data concerning your person.
You have the right to claim that personal data are being deleted immediately, if one of the reasons listed in Art. 17 GDPR applies.
You have the right to demand the limitation of processing, if one of the conditions listed in Art. 18 GDPR is fulfilled.
In case you have claimed your right to correct or delete your data or your right to limit the processing towards the responsible, this person is liable to inform all recipients who have seen your personal data, except this procedure is impossible or requires a disproportional effort. You are entitled to be informed about these recipients by the responsible.
In certain cases, which are listed in Art. 20 GDPR, you have the right to request the personal data in a structured, common and machine-readable format or the transmission of these to a third party.
If data are being collected based on Art. 6 para. 1 sent. 1 lit. GDPR (Data processing to protect legitimate interests of the responsible or third party), you have the right to file an objection against the processing at any point of time, for reasons that result from your special situation. The personal data will not be processed anymore, only if there are verifiably compelling reasons, which predominate the interest, rights and freedom of the affected person or the processing serves to assertion, exercise and defense of legal claims.
You have the right to file a complaint at a supervisory authority, especially within the member state of your residence, your workplace and the place of the suspected violation, if in your opinion the processing of your personal data violated GDPR.
In the state of Saxony-Anhalt, the responsible supervisory authority is the State Representative for Data Protection Saxony-Anhalt, Leiterstr. 9, 39104 Magdeburg.
To protect your data from unwanted access, we take technical and organizational measures according to the latest state of the art. Within the app, we use an encryption method. The communication between app and server will be transmitted via internet using a SSL-/TLS-coding.
Our app is subject to technological progress. Thus, we reserve the right to adjust the data protection information according to possible changes within our security and data protection measures and to provide the results in the valid version here.
Status of the data protection information: 06.03.2023