Data protection information

Responsible body

The responsible body for the collection, processing and use of personal data according to the German Federal Data Protection Act is:

QT Mobilitätsservice GmbH
Torstraße 19
10119 Berlin, Germany

privacy@qixxit.com

Ms Chris Newiger is the designated Privacy Officer.

General data policy

Our general data policy is intended to give you an overview of the data which we, QT Mobilitätsservice GmbH, as the responsible body, collect during your visit to qixxit.de, qixxit.com and to our Android and iOS apps. This policy is also intended to give you an overview of the purpose for which we process and use this data. We take the protection of your personal data and thus your privacy rights very seriously. It is our aspiration to provide you with a high degree of data protection in dealing with your personal data.

We consider it a matter of the highest importance to adhere to all legal data protection regulations, in order to ensure the highest possible protection of your privacy rights.

What is personal data?

Personal data consists of specific information about an identified or identifiable natural person. A person is identifiable if their identity can be determined directly through the data or by means of additional knowledge.

Typical examples of such personal, specific information include:

  • Name, age, family status, date of birth
  • Address, phone number, e-mail address
  • Account number, credit card number
  • Identity document number
  • Genetic data and medical records

Non-personal data is anonymised or aggregated data which cannot be used to identify a specific natural person.

If you use Qixxit, we may collect personal data.

When do we collect and process personal data?

Protecting your personal data is important to us. Therefore, we only save and process data for specific purposes. In the following, we will explain why we collect and process data.

Visits to our website and use of our smartphone apps

When you visit our website or open one of our smartphone apps, our servers save your IP address, the pages you access, the access date and duration as well as the amount of transmitted data. This data is anonymised when collected and analysed for statistical purposes to enable us to optimise our platform.

Connection search

If you run a travel connection search on Qixxit, your starting location and destination as well as your preferred means of travel will be recorded to enable finding a suitable travel connection. Beyond this, the data and the travel chains resulting from the search request are anonymised and used for statistical analysis only and without any reference to the enquirer. We use the insights from these analyses to continuously improve our service. In addition, we aim to optimally adjust our service to your enquiries and needs. For further information about this, please also see “Use of Google Analytics and Google Firebase.”

Booking

If you carry out a booking on our website or in one of our smartphone apps, we will collect the necessary booking data:

Your name, and that of your travel companions if applicable

  • Address, billing address
  • E-mail address
  • Payment details (see below)
  • Travel connection details (e.g. data, time, starting location, destination, changes, flight and train numbers, booking class of the trip)
  • Loyalty card numbers as applicable, such as BahnCard or frequent flyer card

In this process we only query the data required by the transport service provider for issuing the ticket.

We use this collected data for the following purposes:

  • To carry out the booking with the transport service provider
  • To send out the necessary paperwork and for getting in touch with you regarding booked tickets
  • For customer support
  • For recognizing and fixing any errors and technical faults

The booking invoices need be kept in our records for 10 years due to taxation laws.

Collection of payment data

If you book a ticket on our websites or in one of our smartphone apps, payment data such as your account and credit card numbers, contact and identification information will be collected. To prevent credit card fraud, your payment data along with other necessary personal data will be transmitted in a secure and encrypted form to an external service provider for validation (see “Is personal data passed on to third parties?”).

My Account

If you decide to create a user account with Qixxit, you need to supply us with your email address.

All other information, e.g.

  • your title
  • name
  • address of residency
  • BahnBonus number
  • payment data, e.g. credit card number

is optional and can be saved in your user account to prefill bookings forms and therefore to speed up the booking process. If you created an user account and are logged in while booking, we will also save your booked itineraries and tickets so you can retrieve them on your mobile phone with the Qixxit App installed or from our web site. We will use your provided data also for usage analysis and market research to further improve your product.

You can cancel your user account any time from the web site and all the data connected will be deleted. Booking invoices need be kept in our records for 10 years due to taxation laws.

Newsletter subscription

You will only receive our newsletter if you register for it personally. The newsletter contains information on Qixxit, new developments, promotional offers and content. When you register, we require your e-mail address. We work with a so-called double opt-in registration process. To ensure that the newsletter registration is in fact made by the owner of the e-mail address, an e-mail message is sent to the e-mail address provided. You must confirm your registration by clicking on the link provided in the e-mail message to receive our newsletter. Of course, you may always revoke your agreement to receive the newsletter by clicking on the “Unsubscribe” link at the bottom of each newsletter.

Who is responsible for collecting and processing personal data?

QT Mobilitätsservice GmbH collects and processes your data as responsible body. The appointed data protection body is DSB. If you have any questions, suggestions or concerns, please send them to:

QT Mobilitätsservice GmbH
Torstraße 19
10119 Berlin, Germany

privacy@qixxit.com

When is your data deleted?

Your data is deleted as soon as it is no longer required for fulfilling the purpose for which it was collected. This is the case, for instance, when a booked ticket expires. In case you created a user account and booking information is stored within the account, it will not be deleted automatically. In this case you can delete the data yourselves or cancel our user account entirely (see below).

What are your rights as a user?

You have the right to

  • request information about which data has been saved about you
  • request the correction, deletion or blocking of your personal data if this is legally permitted and possible in the context of the existing contractual agreement
  • object to being sent advertisements

To exercise your rights, simply send a letter or e-mail to:

QT Mobilitätsservice GmbH
Torstraße 19
10119 Berlin, Germany

privacy@qixxit.com

Is the data protected?

The transmission of data to and from the Qixxit websites and apps is always encrypted via TLS (Transport Layer Security).

Is personal data passed on to third parties?

Your personal data is only ever passed on for the purpose of fulfilling a contract or if you expressly agree to the dissemination of your data.

If you book Deutsche Bahn tickets the data will be passed on to DB Vertrieb GmbH, Stephensonstraße 1, 60326 Frankfurt am Main, Germany.

Other external service providers who we commission to process data for us (external processors) are strictly bound by article 28 DSGVO (EU General Data Protection Regulation). In such a case, QT Mobilitätsservice GmbH remains responsible for protecting your data. The service providers work in conformity with instructions from QT Mobilitätsservice GmbH, which is ensured through strict contractual regulations, technical and organizational measures and additional checks. Therefore, such external service providers do not count as third parties in the sense of data protection law.

Offers from our partners via qixxit.com and our smartphone apps are booked directly through that partner. A notice will inform you about this. We select our Qixxit partners carefully. However, we cannot assume liability for our partners. They carry the responsibility for any data they receive as part of the booking.

How are cookies used?

To improve the user-friendliness of Qixxit for you, we use cookies, like many other online service providers. A cookie can be read by no other website than the one that has placed the cookie. The use of the website becomes more user-friendly if cookies can be used. Most browsers accept cookies automatically. However, you can change your browser settings so that it is not recognized or re-identified by cookies (do-not-track). Cookies can be deleted from your hard disc at any time.

What happens if you click on external links?

If you clink on a link to an external website, you leave the Qixxit websites or apps. This means that we are not responsible for the content, services or products offered on the linked websites. Neither are we responsible for the data protection and technical safety of the linked websites.

If you would like to report a linked website, please contact:

QT Mobilitätsservice GmbH
Torstraße 19
10119 Berlin, Germany

privacy@qixxit.com

Use of Google Analytics

Qixxit uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter called “Google”). Google Analytics uses cookies, which are text files saved on your computer, to help the website analyse how users make use of the site. The information generated by the cookie about your use of the website will typically be transmitted to, and stored by, a Google server in the USA. Because Qixxit has activated the IP anonymisation, Google will shorten your IP address within the member states of the European Union and other contracting member states to the Agreement on the European Economic Area prior to transmission. Only in exceptional cases, for instance when there is a technical breakdown in Europe, may it become necessary for the full IP address to be transmitted to a Google server in the USA before being shortened there.

By order of Qixxit, Google will use the generated information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to Qixxit. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address transmitted in the context of Google Analytics with any other data held by Google.

You can prevent the use of cookies by selecting the appropriate setting in your browser; in this case, however, you may not be able to use the all the functions of Qixxit.

Furthermore, you can prevent the capture of the data generated through the cookie (including your IP address) by Google as well as the processing of this data by Google by downloading and installing a browser plugin via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For further information about the terms of use and data protection, go to: https://www.google.de/intl/de/policies/. We would like to point out that Google Analytics has been extended by the “anonymizeIp” code on the Qixxit websites to ensure an anonymised capture of IP addresses (so-called IP masking).

Use of Adjust in our apps

The iOS and Android Qixxit apps use the usage statistics and analytics technology Adjust by adjust GmbH, Saarbrücker Str. 36, 10405 Berlin, Germany (hereinafter “Adjust”). When you open our app, Adjust collects installation and event data, such as “app open”. We use this anonymised information to understand how our users interact with our app and to analyse mobile advertising campaigns. For this kind of analysis, Adjust uses your anonymised IDFA or Android ID as well as your anonymised IP and MAC address. It is not possible to identify you as an individual.

Use of Google Firebase in our apps

The iOS and Android Qixxit apps use Google Firebase, an analytics service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). We use Google Firebase for an anonymised analysis of user behaviour. For further information on data protection in Google products, go to: https://www.google.com/policies/privacy/.

Use Crashlytics in our apps

The iOS and Android Qixxit apps use the analytics programme crashlytics by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google collects data about the use of the app, particularly regarding system failures and errors. In this way, information about the device, the installed app version as well as other information, may be used to improve troubleshooting, particularly with regard to hardware and the operating system of your smartphone. The data will be deleted after 90 days. For more information about this, go to the privacy policy of Crashlytics: https://try.crashlytics.com/terms/privacy-policy.pdf.

Use of Sentry on our website

To track crashes and errors on our website we use Sentry, a service by Functional Software, Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA. The data we submit to Sentry is anonymised and will only be used for analysing causes for software crashes. For further information on how sentry handles data, please refer to their privacy policy: https://sentry.io/legal/privacy/2.0.0/

Conversion-Tracking on our web sites

If you order a transportation ticket at Qixxit or are forwareded to a partner's web site, we may send this information ("conversion") to one of our advertising partners. We do this to measure the effectiveness or our advertising and to optimize our advertsing activities. The statistical reports we receive from our advertising partners are anonymized and do not allow identification of individual users.

Facebook-Pixel

On our web sites we are using the Facebook pixel which is a javascript code snippet that sends data to Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA) and allows us to receive statistical reports on the performance of our ads on the Facebook platform. It sends the following data:

  • HTTP-Header: The HTPP-Header consists of your IP-Address, your web browser version and the requested URL
  • Pixel specific data: the Pixel-ID and the Facebook-Cookie of the user, if they are registered with Facebook
  • Conversion data ("Conversion-Tracking"): If you order a trsonsportation ticket at Qixxit or you are forwarded to a partner web site, this information is submitted to Facebook

For further information please refer to Facebook's privacy policy: http://www.facebook.com/about/privacy/. If you donÄt want Facebook to safe your tracking data, please change your settings here: https://www.facebook.com/settings/?tab=ads. Facebook hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.

Google Adwords Conversion Tracking

On our web sites we are using the Google Adwords Tracking to optimize our ads on Google (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA). Our can change or disable this tracking here: http://www.google.com/ads/preferences/. For further information please refer to Google's privacy policy: https://policies.google.com/privacy. Google is a participant of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

AWIN Conversion Tracking

On our web sites we are using the tracking of AWIN to optimize our ads on the AWIN affiliate network (AWIN AG, Eichhornstrasse 3, 10785 Berlin, Germany).

For further information please refer to AWIN's privacy policy:: https://www.awin.com/gb/legal/privacy-policy.

When was this data protection information last updated?

This data protection information was last amended on October 11th 2018.