- de
- en
Informationspflichten
Information Obligations for Electronic Payment Transactions
The controller pursuant to Article 4(7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the managing directors Nico Schoenecker and Alexander Holzmair.
The Data Protection Officer of Autobus Oberbayern GmbH can be reached at the address mentioned above or by email at Datenschutz@autobusoberbayern.de.
Failure to provide this data may result in the inability to process payments of outstanding receivables or collect liabilities.
We transmit personal data to the Finance and Accounting department and to the bank. Further processing will only take place if you have given your consent or if there is a legal permission.
Furthermore, we may transmit information to a lawyer where necessary. This will be done in accordance with legal requirements, insofar as it is necessary to safeguard our legitimate interests or those of third parties, and there is no reason to believe that your interests or fundamental rights and freedoms requiring the protection of personal data override these interests. The collection, storage, and transmission are therefore carried out for the purposes of legitimate business interests pursuant to Article 6(1)(f) GDPR.
2. Purposes of Data Processing and Legal Basis
(1) We collect, store, and, if necessary, transmit data insofar as it is required to record any payment orders submitted in paper form onto electronic media and to process them in the interbank clearing system using the paperless data exchange procedure (cashless payment transactions). The collection, storage, and transmission are therefore carried out for the purposes of the employment relationship pursuant to Article 88(1) GDPR in conjunction with Section 26(1) BDSG (new) or for the purpose of fulfilling a contract with the data subject pursuant to Article 6(1)(b) GDPR.
(2) Your payment data will be transmitted to the respective payment service provider depending on the payment method selected. The payment service provider is responsible for your payment data. Information, in particular regarding the controller of the payment service providers, the contact details of their data protection officers, and the categories of personal data processed by the payment service providers, can be found at https://www.autobusoberbayern.de.
(3) We maintain up-to-date technical measures to ensure the protection of personal data. These are adapted to the current state of the art.3. Duration of Data Storage
If we do not process your contact data for business purposes, we store the data collected for electronic payment transactions until the purpose for which the data was collected has been fulfilled and it is no longer required, or until the statutory retention period of 10 years has expired. Your data will also be deleted if storage is unlawful. After this period, the data collected for this procedure will be deleted or blocked if deletion is not possible.
You have the right to request information from us at any time regarding the personal data stored about you (Article 15 GDPR). This also includes the recipients or categories of recipients to whom this data is disclosed and the purpose of storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing.
Additionally, under the conditions of Article 20 GDPR, you may at any time request data portability, provided that the data is still stored with us.
In the event of the processing of personal data for the performance of tasks carried out in the public interest (Article 6(1)(e) GDPR) or for the purposes of legitimate interests (Article 6(1)(f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for these purposes, unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21(1) GDPR, you may object to the processing of your data on grounds relating to your particular situation.
5. Contact
All requests for information, inquiries, withdrawals of consent, or objections to data processing should be sent by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by letter to the address mentioned under point 1.
For further information, please refer to the full text of the GDPR available on the Internet at https://dsgvo-gesetz.de or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contacting the Supervisory Authority
Bavarian State Office for Data Protection Supervision (Landesamt für Datenschutzaufsicht)
Promenade 27, 91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Credit Card Payments
The controller pursuant to Article 4(7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the managing directors Nico Schoenecker and Alexander Holzmair.
The Data Protection Officer of Autobus Oberbayern GmbH can be reached at the address mentioned above or by email at Datenschutz@autobusoberbayern.de.
(1) We collect, store, and, if necessary, transmit data insofar as it is required to settle outstanding claims via credit card. The collection, storage, and transmission are therefore carried out for the purpose of fulfilling a contract with the data subject pursuant to Article 6(1)(b) GDPR.
Failure to provide this data may result in the inability to make payments by credit card. We transmit personal data to the Finance and Accounting department. Further processing will only take place if you have given your consent or if there is a legal permission.
(2) Payment data is transmitted to the respective payment service provider depending on the selected payment method. The payment service provider is responsible for your payment data.
(3) We maintain up-to-date technical measures to ensure the protection of personal data. These are adapted to the current state of the art.
We retain the data required under commercial and tax law for the contractual relationship for the legally prescribed periods pursuant to Article 6(1)(c) GDPR. For this period (usually 10 years), the data will be processed solely for the purpose of potential audits by the tax authorities.
Your data will also be deleted if storage is unlawful. After this period, the data collected for this procedure will be deleted or blocked if deletion is not possible.
You have the right to request information from us at any time regarding the personal data stored about you (Article 15 GDPR). This also includes the recipients or categories of recipients to whom this data is disclosed and the purpose of storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing.
Additionally, under the conditions of Article 20 GDPR, you may at any time request data portability, provided that the data is still stored with us.
In the event of the processing of personal data for the performance of tasks carried out in the public interest (Article 6(1)(e) GDPR) or for the purposes of legitimate interests (Article 6(1)(f) GDPR), you may object to the processing of your personal data at any time with effect for the future.
In the event of an objection, we must refrain from any further processing of your data for these purposes, unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21(1) GDPR, you may object to the processing of your data on grounds relating to your particular situation.
All requests for information, inquiries, withdrawals of consent, or objections to data processing should be sent by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by letter to the address mentioned under point 1.
For further information, please refer to the full text of the GDPR available on the Internet at https://dsgvo-gesetz.de or visit our website at https://www.autobusoberbayern.de/datenschutz.
Bavarian State Office for Data Protection Supervision (Landesamt für Datenschutzaufsicht)Promenade 27, 91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Travel Expense Reimbursement
The controller pursuant to Article 4(7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the managing directors Nico Schoenecker and Alexander Holzmair.
The Data Protection Officer of Autobus Oberbayern GmbH can be reached at the address mentioned above or by email at Datenschutz@autobusoberbayern.de.
Failure to provide this data may result in the inability to process and reimburse travel expenses.
We transmit personal data to the Finance and Accounting department and, where applicable, to tax authorities. Further processing will only take place if you have given your consent or if there is a legal permission.
2. Purposes of Data Processing and Legal Basis
(1) We collect, store, and, if necessary, transmit data insofar as it is required to process travel expense reimbursements. The collection, storage, and transmission are therefore carried out for the purposes of the employment relationship pursuant to Article 88(1) GDPR in conjunction with Section 26(1) BDSG (new) or for the purpose of fulfilling a contract with the data subject pursuant to Article 6(1)(b) GDPR.
If we do not process your contact data for business purposes, we store the data collected for travel expense reimbursements until the purpose for which the data was collected has been fulfilled and it is no longer required, or until the retention period specified by statutory requirements has expired.
We retain the data required under commercial and tax law for the contractual relationship for the legally prescribed periods pursuant to Article 6(1)(c) GDPR. For this period (usually 10 years), the data will be processed solely for the purpose of potential audits by the tax authorities.
Your data will also be deleted if storage is unlawful. After this period, the data collected for this procedure will be deleted or blocked if deletion is not possible.
4. Your Data Protection Right
You have the right to request information from us at any time regarding the personal data stored about you (Article 15 GDPR). This also includes the recipients or categories of recipients to whom this data is disclosed and the purpose of storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing.
Additionally, under the conditions of Article 20 GDPR, you may at any time request data portability, provided that the data is still stored with us.
In the event of the processing of personal data for the performance of tasks carried out in the public interest (Article 6(1)(e) GDPR) or for the purposes of legitimate interests (Article 6(1)(f) GDPR), you may object to the processing of your personal data at any time with effect for the future.
In the event of an objection, we must refrain from any further processing of your data for these purposes, unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21(1) GDPR, you may object to the processing of your data on grounds relating to your particular situation.
5. Contact
All requests for information, inquiries, withdrawals of consent, or objections to data processing should be sent by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by letter to the address mentioned under point 1.
For further information, please refer to the full text of the GDPR available on the Internet at https://dsgvo-gesetz.de or visit our website at https://www.autobusoberbayern.de/datenschutz.
Bavarian State Office for Data Protection Supervision (Landesamt für Datenschutzaufsicht)Promenade 27, 91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for B2B Sales
The controller according to Article 4 (7) of the GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Alexander Holzmair. The Data Protection Officer of Autobus Oberbayern GmbH can be reached at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to enable the management of customer data (also referred to as ERP) where no goods movements are recorded. The collection, storage, and disclosure are therefore carried out for the purpose of fulfilling a contract with the data subject pursuant to Article 6 (1) sentence 1 (b) GDPR or for the purpose of taking steps at the request of the data subject prior to entering into a contract pursuant to Article 6 (1) sentence 1 (b) GDPR. Failure to provide this data may result in the inability to sell goods or services.
We transmit personal data to the sales and distribution departments as well as to the accounting department. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are continuously adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for the CRM system without inventory management until the purpose for which the data was collected has been fulfilled and it is no longer required, or until the expiry of the statutory retention period of 6 years. Your data will also be deleted if its storage is unlawful. After this period, the data collected for this process will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request the rectification, and/or under the conditions of Article 17 GDPR, the erasure, and/or under the conditions of Article 18 GDPR, the restriction of processing of your data. You may also, under the conditions of Article 20 GDPR, request the transfer of your data at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we shall refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5.Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority:
Bavarian State Office for Data Protection Supervision
Promenade 27, 91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Employment Contracts
The following provides information about the collection of personal data in connection with an employment contract. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Alexander Holzmair. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to fulfill the mutual contract under which the employee undertakes to perform the agreed work and the employer undertakes to pay the agreed remuneration. The collection, storage, and disclosure are therefore carried out for the purpose of fulfilling the employment relationship and on the basis of Article 88 (1) GDPR in conjunction with Section 26 (1) BDSG (new). Failure to provide this data may result in the employee not being hired.
We transmit personal data to the HR department (internal payroll) and cloud-based data storage systems. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are regularly adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for the employment contract until the expiry of a period of 10 years after the employee has left the company. We retain the information required under commercial and tax law relating to the contractual relationship for the legally prescribed periods on the basis of Article 6 (1) sentence 1 (c) GDPR. During this period (generally 10 years), the data will only be processed again in the event of an audit by the tax authorities. After this period has expired, the data collected for the employment contract will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Information Obligations for Payroll and Employment Relationship
The following provides information about the collection of personal data in connection with payroll accounting. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Christopher Utz. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to record, process, and book remuneration (wages and salaries) as well as statutory and voluntary deductions. The collection, storage, and disclosure are therefore carried out for the purpose of fulfilling the employment relationship on the basis of Article 88 (1) GDPR in conjunction with Section 26 (1) BDSG (new) as well as for the purpose of fulfilling a legal obligation of the controller on the basis of Article 6 (1) (c) GDPR. Failure to provide this data may result in wages and salaries not being paid.
We transmit personal data to the competent tax office, the relevant social security provider, employees, the HR department (internal payroll), and cloud-based data storage. Any further processing will only take place if you have given your consent or if there is a legal authorization.
In addition, we may transmit information regarding this employment relationship to our legal counsel where necessary. This is done in accordance with legal requirements insofar as it is necessary to safeguard our legitimate interests or the legitimate interests of third parties, and there is no reason to believe that your interests or fundamental rights and freedoms requiring the protection of personal data override these interests. The collection, storage, and disclosure are therefore carried out for the purpose of safeguarding business interests on the basis of Article 6 (1) (f) GDPR.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are continuously adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for payroll accounting until the expiry of a period of 10 years after the payroll year or the end of the employment relationship. We retain the information required under commercial and tax law relating to the contractual relationship for the legally prescribed periods on the basis of Article 6 (1) sentence 1 (c) GDPR. During this period, the data will only be processed again in the event of an audit by the tax authorities. After this period has expired, the data collected for the employment contract will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Transport Orders
The following provides information about the collection of personal data in connection with a transport order. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Christopher Utz. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to optimally manage customer orders and ensure smooth internal processes. The collection, storage, and disclosure are therefore carried out for the purpose of fulfilling the employment relationship on the basis of Article 88 (1) GDPR in conjunction with Section 26 (1) BDSG (new). Failure to provide this data may result in the transport order not being processed.
We transmit personal data to customers and the relevant departments within the company. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are regularly adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for transport orders until the purpose for which it was collected has been fulfilled and it is no longer required, or until the expiry of the statutory retention period (a maximum of 10 years). We retain the information required under commercial and tax law relating to the contractual relationship for the legally prescribed periods on the basis of Article 6 (1) sentence 1 (c) GDPR. Your data will also be deleted if its storage is unlawful. After this period has expired, the data collected for this process will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Invoices
The following provides information about the collection of personal data in connection with an invoice. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Christopher Utz. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to create a document in which a company informs its customers about the payment due under a contract. The collection, storage, and disclosure are therefore carried out for the purpose of fulfilling the contract and on the basis of Article 6 (1) (b) GDPR. Failure to provide this data may result in the inability to issue invoices for the services provided.
We transmit personal data to the accounting department as well as the relevant sales and distribution department, customers, suppliers, and service providers. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are regularly adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for invoicing until the expiry of the 10-year retention period. We retain the information required under commercial and tax law relating to the contractual relationship for the legally prescribed periods on the basis of Article 6 (1) sentence 1 (c) GDPR. During this period, the data will only be processed again in the event of an audit by the tax authorities. After this period has expired, the data collected for invoicing will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for the Ticketing System (Webshop)
The following provides information about the collection of personal data in the ticketing system (webshop). Personal data includes all data that can be related to you personally, such as your name and email addresses.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Alexander Holzmair. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to communicate with employees, customers, service providers, and suppliers. The collection, storage, and disclosure are therefore carried out for the purpose of executing and billing the service. The processing is necessary for the performance of a contract with the data subject.
Failure to provide this data may result in workflows not being properly executed. We transmit personal data to employees, suppliers, and the software provider in the cloud. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are continuously adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for transport orders until the purpose for which it was collected has been fulfilled and it is no longer required, or until the expiry of the statutory retention period (a maximum of 10 years). We retain the information required under commercial and tax law relating to the contractual relationship for the legally prescribed periods on the basis of Article 6 (1) sentence 1 (c) GDPR. Your data will also be deleted if its storage is unlawful. After this period has expired, the data collected for this process will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Employee Leasing
The following provides information about the collection of personal data in connection with employee leasing. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Christopher Utz. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to enable an employee to be temporarily assigned by an employer to a third party (hirer) for remuneration. The rights and obligations of the employer are assumed by the lender. The collection, storage, and disclosure are therefore carried out for the purpose of fulfilling a legal obligation of the controller on the basis of Article 6 (1) (c) GDPR as well as for the performance of a contract with the data subject on the basis of Article 6 (1) (b) GDPR. Failure to provide this data may result in an employee not being able to be assigned.
We transmit personal data to the competent tax office and to the hirer. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are continuously adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for employee leasing until the purpose for which it was collected has been fulfilled and it is no longer required, or until the expiry of the statutory retention period (generally 10 years). We retain the information required under commercial and tax law relating to the contractual relationship for the legally prescribed periods on the basis of Article 6 (1) sentence 1 (c) GDPR. During this period, the data will only be processed again in the event of an audit by the tax authorities. Your data will also be deleted if its storage is unlawful. After this period has expired, the data collected for this process will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for Applications by Post / Email
The following provides information about the collection of personal data in the context of applications submitted by post or email. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Alexander Holzmair. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to process an application, which represents an offer from a job seeker to the company for the establishment of an employment or training relationship. This application is sent by the applicant to the company by email or post. The collection, storage, and disclosure are therefore carried out for the purpose of taking pre-contractual measures at the request of the data subject on the basis of Article 6 (1) (b) GDPR. Failure to provide this data may result in the applicant not being hired.
We transmit personal data to the relevant employees or departments within the company (HR department, specialist department). Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are continuously adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for the application until the purpose for which it was collected has been fulfilled and it is no longer required, or until the expiry of a period of 3 months after the conclusion of the application process. Your data will also be deleted if its storage is unlawful. After this period has expired, the data collected for this process will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Information Obligations for HR Management Software
The following provides information about the collection of personal data in our HR management software. Personal data includes all data that can be related to you personally, such as your name, address, email addresses, and telephone number.
1. Contact Details and Company Data Protection Officer
The controller pursuant to Article 4 (7) GDPR is Autobus Oberbayern GmbH, Heidemannstr. 220, 80939 Munich, Tel.: +49 89 323040, Email: info@autobusoberbayern.de, represented by the Managing Directors Nico Schoenecker and Alexander Holzmair. The Data Protection Officer of Autobus Oberbayern GmbH can be contacted at the above address or by email at Datenschutz@autobusoberbayern.de.
2. Purposes of Data Processing and Legal Bases
(1) The data is collected, stored, and, if necessary, disclosed by us to the extent required to facilitate the collection, processing, handling, and analysis of personal data within an organization. This is primarily for the purposes of human resource management. The collection, storage, and disclosure are therefore carried out for the purpose of taking pre-contractual measures at the request of the data subject on the basis of Article 6 (1) (b) GDPR and for the purpose of fulfilling the employment relationship on the basis of Article 88 (1) GDPR in conjunction with Section 26 (1) BDSG (new). Failure to provide this data may result in the inability to manage employees properly, pay wages, or maintain smooth business operations.
We transmit personal data to the HR department (internal payroll) and to cloud data storage. Any further processing will only take place if you have given your consent or if there is a legal authorization.
(2) We maintain up-to-date technical measures to ensure the protection of personal data. These measures are continuously adapted to the current state of the art.
3. Duration of Data Storage
Insofar as we do not process your contact data for operational purposes, we store the data collected for our HR management software until the purpose for which it was collected has been fulfilled and it is no longer required, or until the expiry of the statutory retention period (generally 10 years after leaving the company). Your data will also be deleted if its storage is unlawful. After this period has expired, the data collected for this process will be deleted or blocked if deletion is not possible.
4. Your Data Protection Rights
You have the right to request information from us at any time about the personal data stored about you (Article 15 GDPR). This also includes information about the recipients or categories of recipients to whom this data has been disclosed and the purpose of the storage. Furthermore, you have the right, under the conditions of Article 16 GDPR, to request rectification and/or, under the conditions of Article 17 GDPR, erasure and/or, under the conditions of Article 18 GDPR, restriction of processing. You may also, under the conditions of Article 20 GDPR, request data portability at any time – provided that the data is still stored by us.
In the case of processing personal data for the performance of a task carried out in the public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purposes of legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we will refrain from any further processing of your data for these purposes unless:
– there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or
– the processing is necessary for the establishment, exercise, or defense of legal claims.
Pursuant to Article 21 (1) GDPR, you may object to data processing for reasons arising from your particular situation.
5. Contact
Please address all information requests, inquiries, withdrawals of consent, or objections to data processing by email to our Data Protection Officer at Datenschutz@autobusoberbayern.de or by post to the address mentioned in section 1. For further information, please refer to the full text of the GDPR, which is available online at https://dsgvo-gesetz.de, or visit our website at https://www.autobusoberbayern.de/datenschutz.
Contact for the Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 981 531300
Email: poststelle@lda.bayern.de
Use of Cookies
This website uses cookies. We use cookies to personalize content and ads, provide social media features, and analyze traffic to our website. We also share information about your use of our website with our social media, advertising, and analytics partners. Our partners may combine this information with other data you have provided to them or that they have collected as part of your use of their services. You consent to our cookies if you continue to use our website.