For use of various online services of Rheinbahn AG (currently: AboOnline, redy, Rheinbahn App), the customer must first register in the “My Rheinbahn” portal. To register, the following data must be entered accurately:

• Email address
• First name
• Surname

For registration we use the “double opt-in process”, i.e. your registration is only complete when you have confirmed your application by clicking on the link in one of the confirmation emails sent to you for this purpose.

The data input by you for registration or enrolment is processed by us and used to verify your authorisation to manage the user account and also to implement all the associated rights and obligations and to contact you to send you technical or legal instructions, updates, security messages and other messages regarding the management of the user account.

When you register for “My Rheinbahn” with your access data in the Rheinbahn App, redy, AboOnline or the VRR App, a corresponding account will be created for you in this application.

The following Data Protection Regulations shall then apply:

Data Privacy Regulations for Rheinbahn App or VRR App with “Rheinbahn App-Shop“

Data Privacy Regulations for redy App

Data Privacy Regulations for AboOnline

For booking services, more data is required which is requested and stored separately in the individual Online Services. Your personal data is processed exclusively for use of the “My Rheinbahn” portal and the downstream online services. This personal data is stored by us until you delete the profile completely. You can contact us by email at any time on rheinbahn@rheinbahn.de

The entity responsible for this according to Art. 4 Section 7 GPDR is:

Rheinbahn AG
represented by the Executive Board
Lierenfelder Straße 42
D-40231 Düsseldorf
Telephone 0211.582-01
E-Mail: rheinbahn@rheinbahn.de

Company data protection officer
c/o Rheinbahn AG
Lierenfelder Straße 42
D-40231 Düsseldorf
Telephone: 0211.582-01
E-Mail: datenschutzbeauftragter@rheinbahn.de

Your rights

Right of information:
You have the right to obtain information from us on request at any time regarding the personal data processed by us regarding you according to Art. 15 GDPR. To do this, you can make a request by post or email to the address specified above.

Right of correction of inaccurate data:
You have the right to request immediate correction of personal data regarding you if it is inaccurate. Kindly write to us at the contact addresses specified above.

Right to deletion:
You have the right to request deletion of personal data regarding you under the provisions described in Art. 17 GDPR. These provisions provide for a right of deletion if the personal data is no longer necessary for the purposes for which it was collected or processed in other ways, also in cases of illegal processing, the existence of an objection or of an obligation to deletion under Union law or the right of the member state to which we are subject. At the time of data storage, refer to no. 4 of this data protection statement.  To assert your right to deletion, kindly write to the above specified contact addresses.

Right to restriction of processing:
You have the right to request restriction of processing in accordance with Art. 18 GDPR. This right specifically exists if the accuracy of the personal data between the user and us is disputed, for the duration required to verify the accuracy , and also in the event that the user requests restricted processing instead of deletion; and also in the event that the data is no longer required for our purposes, however the user requires it for the assertion, exercise or defence of legal claims if the successful exercise of an objection is still disputed between us and the user. To assert your right to restriction of data processing, please write to the above specified contact addresses.

Right to data portability:
You have the right to obtain the personal data regarding you which you have provided for us, in a structured, accessible, machine-readable format according to Art. 20 GDPR. To assert your right to data portability, kindly write to the above-specified addresses.

Right to objection:
You have the right, for reasons relating to your special circumstances, to object at any time to the processing of personal data regarding you as a result of Art. 6 Section 1e) or f), according to Art. 21 GDPR. This also includes the right to object to processing for advertising or market research purposes. We will cease to process your personal data

unless we can demonstrate compelling, legitimate grounds for processing that outweigh your interests, rights and freedoms,  if its processing serves the assertion, exercise or defence of legal claims.

Right of appeal:
Moreover, you have the right, in the event of complaints, to contact the responsible supervisory authority (in NRW the State Commissioner for Data Protection and Information Security.)