Data Privacy Statement PTVGmbHPTV Planung Transport Verkehr GmbH, Sitz der Gesellschaft / Registered
Office: Karlsruhe, Geschäftsführung / Management Board: Christian U.
Haas (Vors./CEO), Dr. Karsten Kölsch (CFO), Handelsregister (HRB Nr.) /Commercial Register (HRB No.): 743055, USt-ID-Nr. / VAT ID No.:DE 812 666 053, Registergericht / Court of Registration: Mannheim.

Data Privacy Statement PTV GmbHContents

Contents
PTV Data Privacy Statement (PTV GmbH) ........................................................... 3
1

General information ..................................................................................... 3
1.1

Information about the responsible party.............................................. 3

1.2

Processing of personal data when using our websites ....................... 4

1.3
concerned?

What rights do you have as far as your information is
5

1.4

Your obligation to provide data ........................................................... 6

1.5

Storage duration.................................................................................. 6

1.6

SSL encryption .................................................................................... 6

1.7

Information on data transfer to the USA ............................................. 7

1.8

Objection to receiving promotional emails .......................................... 72

Hosting of our websites ............................................................................... 7

3

Legal basis of the processing ..................................................................... 7
3.1

4

5

6

Processing purposes and their legal basis ......................................... 8Special Notes................................................................................................ 9
4.1

myptv website (myptv.com) ................................................................ 9

4.2

Data protection in eCommerce ......................................................... 12

4.3
processes

Data protection in the case of applications and application
12

4.4

Comment function on blog.ptvgroup.com ......................................... 13

4.5

Live.Chat ........................................................................................... 14

Used tools ................................................................................................... 14
5.1

Appointment Bookings ...................................................................... 14

5.2

Online Marketing ............................................................................... 15

5.3

Social Media, Social Media Plugins .................................................. 16

5.4

Live-Chat with User-Like ................................................................... 17

Cookies and Analysis - Tools .................................................................... 18
6.1

Cookies ............................................................................................. 18

6.2

Analytics tools and advertising .......................................................... 19

Shorttitle

Data Privacy Statement PTV GmbH

Version of contract template:

2.4.2 dated 2023-06-19

 PTV Planung Transport Verkehr GmbH / June 2023

Page 2/27

Data Privacy Statement PTV GmbHPTV Data Privacy Statement (PTV GmbH)PTV Data Privacy Statement (PTV GmbH)PTV Group is committed to Internet-based business models and to developing an
Internet-based offering of our applications and solutions. Thank you for visiting one of our
websites and for your interest in our company and our solutions and services.
This privacy policy describes how we collect and record, use, disclose, transmit and store("process") your personal data. The personal data collected depends on the context ofyour interaction with us. We always treat your personal data confidentially and inaccordance with the legal data protection regulations and this privacy policy.
This privacy policy refers to our offer:
 www.ptvgroup.com (including subdomains, e.g. company.ptvgroup.com),

www.myptv.com (including subdomains, e.g. developer.myptv.com/), www.shaping-mobility.com,
 www.iamigniting.com.

The applicable data privacy statement can be accessed at any time on the mentioned
websites. As a result of the further development of our websites and services, or due tolegal or regulatory requirements, the data privacy statement of PTV Group is subject tocontinuous updates.

1
1.1

General information
Information about the responsible party

The data processing controller on this website is:
PTV Planung Transport Verkehr GmbHHaid-und-Neu-Str. 15
76131 Karlsruhe, Germany
Email: info@ptvgroup.com
PTV GmbH together with the companies affiliated within the meaning of Sections 15 etseq. Stock Corporation Act (AktG) form the PTV Group. We may share contact
information of customers and interested parties with affiliated companies of PTV Group
as part of your business relationship (contractual or pre-contractual relationship according
to Art. 6 Sect. 1 Sent. 1 lit. b GDPR). We and the affiliated companies of PTV Group are
jointly responsibility for the protection of your personal data (Art. 26 GDPR). To ensurethat you can easily and reliably exercise your data protection rights within the scope of
this joint responsibility, we have agreed with our affiliated companies that you can assert
your data protection rights described in 1.3, not only against the respective PTV Group
company, but also centrally against PTV GmbH.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 3/27

Data Privacy Statement PTV GmbH

General information

We have appointed an external data protection officer for our company.
You can reach our external data protection officer at
Email: data-protection@ptvgroup.com

1.2
1.2.1

Processing of personal data when using our websites
What personal data is collected?

Our websites are generally freely accessible. Personal information is only collected if it isnecessary for the execution of the services available on the website. When you visit PTVGroup's websites, certain information is stored, particularly about your browser, operating
system and IP address.
If you use a contact or registration form, the information you provide is recorded.
We also collect:
 IP addresses in anonymous form
 Data required for the anonymous determination and analysis of your user

behavior; this includes the IP address as well as meta information such as thebrowser you use, the browser language, date and time, user preferences, e.g.
by setting cookies.

This does not include information whose content does not directly indicate the identity or
the factual circumstances of an individual person, e.g. the number of visitors to a website.
1.2.2

Recipients of your personal data are for example:
 Affiliated companies of the PTV Group Service providers who are processors within the meaning of Art. 4 No. 8 GDPR
 Advertising partner
 Social media services
 Companies that determine the behaviour of internet users from anonymised

user data, analyse it and exploit it for marketing purposes. This does notconcern your personal contact data

1.2.3

For what purposes do we process your data?

We process your personal data to ensure the faultless provision of the websites, to enable you to use the services and functions of the website, such as trial

versions or orders, to process your enquiry, and to constantly improve our services by analysing user behaviour, to enforce our terms of use, to assert or defend against legal claims, and toward off and prevent fraudulent and similar acts, including attacks on our IT
infrastructure.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 4/27

Data Privacy Statement PTV GmbH

1.3

General information

What rights do you have as far as your information is concerned?

You have the right to receive information about the origin, recipient and purpose of yourstored personal data at any time. You may also have the right to demand the correction,
blocking or deletion of this data. For this purpose, as well as for further questions
regarding data protection, you can contact us at any time at the address given in theimprint. Furthermore, you have a right of appeal to the responsible supervisory authority.
1.3.1

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To
do this, you can contact us at any time at the address given in the imprint. The right torestriction of processing exists in the following cases: If you dispute the accuracy of your personal data stored by us, we usually need time

to check this. For the duration of the verification, you have the right to request the
restriction of the processing of your personal data.
 If the processing of your personal data happened/is happening unlawfully, you canrequest the restriction of data processing instead of erasure.
 If we no longer need your personal data, but you need it to exercise, defend or assert

legal claims, you have the right to request restriction of the processing of yourpersonal data instead of erasure.
 If you have lodged an objection pursuant to Art. 21 Sect. 1 Sent. 1 GDPR, a balancing

of your and our interests must be carried out. As long as it has not yet been
determined whose interests prevail, you have the right to demand the restriction of
the processing of your personal data.
 If you have restricted the processing of your personal data, this data may - apart frombeing stored - only be processed with your consent or for the assertion, exercise or
defense of legal claims or for the protection of the rights of another natural or legal
person or for reasons of an important public interest of the European Union or a
Member State
1.3.2

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express
consent. You can also revoke at any time any consent you have already given us. This
shall be without prejudice to the lawfulness of any data collection that occurred prior toyour revocation.
Right to object to the collection of data in special cases; right to object to directadvertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1
SENT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO
THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISINGFROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASEDON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANYPROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTIONDECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS PTV Planung Transport Verkehr GmbH / June 2023

Page 5/27

Data Privacy Statement PTV GmbH

General information

YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO
PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE
PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND
FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING,
EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANTTO ART. 21 SECT. 1 SENT. 1 GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN
DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE
PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF
SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT
IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOURPERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT
ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).
1.3.3

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with asupervisory agency, in particular in the member state where they usually maintain their
domicile, place of work or at the place where the alleged violation occurred. The right tolog a complaint is in effect regardless of any other administrative or court proceedings
available as legal recourses.
1.3.4

Right to data portability

You have the right to demand that we hand over any data we automatically process on
the basis of your consent or in order to fulfil a contract be handed over to you or a third
party in a commonly used, machine readable format. If you should demand the directtransfer of the data to another controller, this will be done only if it is technically feasible.

1.4Your obligation to provide data

In principle, you are not obliged to provide us with personal data. However, the provisionof your data is necessary for the establishment of pre-contractual and the implementationof contractual business relationships, as well as in the event of a legal obligation to collect
your data by us. Without this data, we cannot conclude or execute a contract with you.
This may also apply to data required later in the course of the business relationship.

1.5

Storage duration

Unless a more specific storage period has been specified in this privacy policy, yourpersonal data will remain with us until the purpose for which it was collected no longer
applies. If you assert a justified request for deletion or revoke your consent to dataprocessing, your data will be deleted, unless we have other legally permissible reasonsfor storing your personal data (e.g. tax or commercial law retention periods); in the latter
case, the deletion will take place after these reasons cease to apply.

1.6

SSL encryption

For security reasons and to protect the transmission of confidential content, such aspurchase orders or inquiries you submit to us as the website operator, this website uses
an SSL encryption program. You can recognize an encrypted connection by checking
 PTV Planung Transport Verkehr GmbH / June 2023

Page 6/27

Data Privacy Statement PTV GmbH

Hosting of our websites

whether the address line of the browser switches from “http://” to “https://” and also by theappearance of the lock icon in the browser line.
If the SSL encryption is activated, data you transmit to us cannot be read by third parties.

1.7

Information on data transfer to the USA

Our website uses, in particular, tools from companies based in the USA. When thesetools are active, your personal information may be transferred to the US servers of thesecompanies. We must point out that that the USA is not a safe third country within themeaning of EU data protection law US companies are required to release personal data
to security authorities without you as the data subject being able to take legal action
against this. The possibility cannot therefore be excluded that US authorities (e.g. secretservices) may process, evaluate and permanently store your data on US servers formonitoring purposes. We have no influence over these processing activities.

1.8

Objection to receiving promotional emails

We hereby expressly object to the use of contact details, which have been published inaccordance with editorial requirements, for sending advertising and promotional material
which has not been explicitly requested. The same applies to the e-mail address dataprotection@ptvgroup.com. Website operators reserve the right to take legal action in theevent of unsolicited mailing of promotional information, for example in the form of spam
emails.

2

Hosting of our websites

Unless otherwise stated, our websites are hosted on servers of the PTV Group. These
are located in an external computer center (housing). For the myptv.com the hosting isdone by an external provider. You will find information on this in section 4.1.3.

3

Legal basis of the processing

Unless otherwise expressly stated in the collection of personal data, the legal basis fordata processing is the execution and performance of a contract with you (Art. 6 Sect. 1 lit. b

GDPR) ("Contract Implementation"), the fulfilment of legal obligations to which we are subject (Art. 6 Sect. 1 lit c.

GDPR), ("fulfilment of legal obligations") or Protection of our legitimate interests (Art. 6 Sect. 1 lit. f GDPR) ("legitimate

interest in processing"). Our legitimate interest lies in the processing of yourpersonal data for the purpose of (i) offering and operating the online services
and (ii) initiating, implementing and handling our business relationship. To theextent that, according to the table below, our legitimate interest in processing is
indicated as the legal basis for the processing of your personal data, we
believe that your interests, fundamental rights and freedoms are sufficiently
taken into account because (i) we regularly review the processing activities and PTV Planung Transport Verkehr GmbH / June 2023

Page 7/27

Data Privacy Statement PTV GmbH

Legal basis of the processing

underlying processes described in this Privacy Policy, (ii) we take theprotection of your personal data into account in our processes, (iii) we
guarantee the transparency of our processing activities and (iv) you are entitledto the aforementioned rights with regard to our processing activities. If you
would like more information about the described balancing of interests, pleasecontact our privacy organization at data-protection@ptvgroup.com.
 If you have expressly given your consent to the processing of your personal

data in individual cases, this consent is the legal basis for the processing (Art.
6 Sect. 1 lit. a GDPR) ("Consent").

3.1

Processing purposes and their legal basis

Contact form, order a newsletter Consent when given voluntarily (Art. 6 Sect. 1 lit. a GDPR)
 Legitimate interest in processing (Art. 6 Sect. 1 lit. f GDPR)

Registration and implementation of PTV Group events
 Consent when given voluntarily (Art. 6 Sect. 1 lit. a GDPR)
 In the case of paid events, also contract performance (Art. 6 Sect. 1 lit. b

GDPR) Legitimate interest in processing (Art. 6 Sect. 1 lit. f GDPR)

Enforcement of our terms of use, assertion and defense of legal claims, defense
and prevention of fraudulent and similar acts, including attacks on our IT
infrastructure Compliance with legal obligations (Art. 6 Sect. 1 lit. c GDPR)
 Legitimate interest in processing (Art. 6 Sect. 1 lit. f GDPR)

Communication with customers and suppliers about products, services andprojects, e.g. to process enquiries from the contractual partner or to provide
technical information about products.
 Performance of the contract (Art. 6 Sect. 1 lit. b GDPR)
 Legitimate interest of PTV Group in the processing (Art. 6 Sect. 1 lit. f GDPR)

Planning, execution and administration of the (contractual) business relationshipbetween the customer and us, e.g. to process orders for products and services, tocollect payments, for accounting and billing purposes and to carry out deliveries
and support services
 Performance of the contract (Art. 6 Sect. 1 lit. a GDPR)
 Compliance with legal obligations (Art. 6 Sect. 1 lit. a GDPR)

To carry out customer satisfaction surveys and direct marketing
Within the framework of applicable laws, we may use your contact details for direct
marketing purposes (e.g. invitations to trade fairs, information and offers on our products
and services) and to carry out customer satisfaction surveys, in each case also by e-mail.
 PTV Planung Transport Verkehr GmbH / June 2023

Page 8/27

Data Privacy Statement PTV GmbHSpecial Notes

You have the right to object to the use of your contact data for these purposes at any timeby sending an e-mail to data-protection@ptvgroup.com or by making use of the objection
option in the message you received.
 Consent of the user, if given voluntarily (Art. 6 Sect. 1 lit. a GDPR).
 Legitimate interest of PTV Group in the processing (Art. 6 Sect. 1 lit. f GDPR)

Maintaining and protecting the security of our products and services and our
websites, preventing and detecting security risks, fraudulent activity or othercriminal or harmful activity
 Legitimate interest of PTV Group in the processing (Art. 6 Sect. 1 lit. f GDPR)

Compliance with (i) legal requirements (e.g. tax and commercial retention
obligations), (ii) existing compliance screening obligations (to prevent economic
crime or money laundering) and (iii) our policies and industry standards
 Fulfilment of legal obligations (Art. 6 Sect. 1 lit. c GDPR).
 Legitimate interest of PTV Group in the processing (Art. 6 Sect. 1 lit. f GDPR)

Settlement of legal disputes, enforcement of existing contracts and for theassertion, exercise and defence of legal claims
 Fulfilment of legal obligations (Art. 6 Sect. 1 lit. c GDPR)
 Legitimate interest of PTV Group in the processing (Art. 6 Sect. 1 lit. f GPDR)

4Special Notes

4.1

myptv website (myptv.com)

4.1.1

Registration and use of myptv.com

On myptv.com, you have the option of using PTV Group products in free or paid versions(PTV cloud services), receiving information about our products and you can register for
events.

4.1.1.1

ID registration and use of product instances of existing customers

Use of myptv.com is only possible after successful registration. Upon registration, you will
be provided with a myPTV ID as an ID token. Then you can log in with your username
and password at any time.
To register, we need information on the following categories: Personal data (first name, last name) Your chosen password
 Company information (name of the company)
 Contact details (e-mail address)
 Country/Region
 PTV Planung Transport Verkehr GmbH / June 2023

Page 9/27

Data Privacy Statement PTV GmbHSpecial Notes

This allows you to view the portfolio of services on myptv.com, to register for events and,at the initiative of existing customers, to be activated as a user to product instances of the
PTV Cloud service and to activate a trial period phase of a PTV Cloud service.
The storage of this personal data takes place in the European Union in accordance withsection 4.1.3. of this declaration and on the basis of an existing order processing. Shoulda transfer of your data to third parties become necessary in the context of an event
registration, you will be informed separately.
In your avatar menu you can change your password at any time and enter further data
voluntarily. You can also upload a profile picture there, which is used as an identifier for
logged-in users, e.g. for comment functions.
We delete your data if it is no longer required to fulfill your requests. The review of thenecessity takes place at regular intervals. Furthermore, the legal archiving obligations
apply.

4.1.1.2

Collection of further data for the use of a chargeable PTV Cloud Service

As soon as you want to use paid services, you have to provide additional information
about your company, such as company address, VAT ID, information for electronic
invoicing (e.g. Peppol Participant ID), credit card or bank details (IBAN, BIC).
We point out that no contract can be concluded or executed without this information (see1.4). You will be informed separately about the processing of your data collected in thiscontext when concluding the respective contract.
All information about the company is stored as customer data in our internal systems andprocessed for a specific purpose. We delete this data if it is no longer required to fulfill
your requests. The review of the necessity takes place at regular intervals. Furthermore,
the legal archiving obligations apply.
4.1.2

Processing of personal data - overview, purpose and legal basis

Enabling the use of the services and functions of myptv.com such as Create and administer your user account; implementing updates, security and troubleshooting measures; providing customer support;
 Processing your activation/order and making related information and offers available;
 Billing for the use of the myptv website service you have selected;
 establishing your identity and user authentication;
 improving and further developing our services.
 Determining the entrepreneurial status

The legal basis for the processing is the performance of the contract (Art. 6 Sect. 1 Sent.
1 lit. b GDPR), fulfillment of legal obligations (Art. 6 Sect.1 Sent. 1 lit. c GDPR), as well as
the legitimate interest of PTV Group (Art. 6 Sect. 1 Sent. 1 lit. f GDPR) to improve andfurther develop the offer and, if applicable, the consent of the user if it has been given
voluntarily (Art. 6 Sect. 1 Sent. 1 lit. a GDPR).
 PTV Planung Transport Verkehr GmbH / June 2023

Page 10/27

Data Privacy Statement PTV GmbH

4.1.3

Special Notes

External Hosting

The website www.myptv.com is hosted by an external service provider (hosting provider).
The personal data collected via the website (exclusively the IP address) is stored on theservers of the hosting provider.
PTV Group products that can be accessed at www.myptv.com are also hosted by an
external service provider. The personal data processed within these products is stored on
the servers of the hosting provider. This may include IP addresses, contact requests,
meta and communication data, contractual data, contact data, names, website accesses
and other data.
The hosting provider is used for the purpose of fulfilling the contract with our potential andexisting customers (Art. 6 Sect. 1 Sent. 1lit. b GDPR) and in the interest of a secure, fastand efficient provision of our online offer by a professional hosting provider (Art. 6 Sect. 1
Sent. 1 lit. f GDPR).
Our hosting provider will only process your data to the extent that this is necessary for thefulfilment of its service obligations and in order to comply with our instructions regarding
this data.
We use the following hosting provider for www.myptv.com:
 UEBERBIT GmbH, Rheinvorlandstraße 7, 68159 Mannheim. Hosting takes

place in Frankfurt, Germany.

We use the following hosting provider for the PTV Group products:
 Microsoft Azure Cloud, which is provided by Microsoft Ireland Operations Ltd,

Carmenhall Road, Sandyford, Dublin 18, Ireland ("Microsoft Ireland"). Hostingtakes place in Amsterdam. There is an data processing agreement between
PTV and Microsoft Ireland.

4.1.4

Disclosure of personal data (myptv.com)

Your personal data collected on myptv.com will only be passed on to third parties, i.e. tonatural and legal persons other than you, the person responsible and the processor, if: you have given your express consent in accordance with Art. 6 Sect. 1 Sent. 1

lit. a GDPR; or this is necessary in accordance with Art. 6 Sect. 1 Sent. 1 lit. b GDPR to fulfil acontract with you (e.g. transfer of data to payment service providers or credit
institutions), or there is a legal obligation to pass on data in accordance with Art. 6 Sect. 1

Sent. 1 lit. c GDPR (e.g. to law enforcement or financial authorities), or the disclosure is necessary in accordance with Art. 6 Sect. 1 Sent. 1 lit. f GDPR

for the assertion, exercise or defense of legal claims and there is no reason toassume that they have an overriding interest worthy of protection in notdisclosing your data (e.g. in the event of attacks on our IT systems).

The third parties may only use your data for the specified purpose.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 11/27

Data Privacy Statement PTV GmbH

4.2
4.2.1

Special Notes

Data protection in eCommerce
Processing of data (customer and contract data)

We collect, process and use personal data only insofar as is necessary for theestablishment, content-related structuring or alteration of a contractual relationship(inventory data). This takes place on the basis of Art. 6 Sect. 1 Sent. 1 lit.b GDPR, which
permits the processing of data in order to fulfil a contract or take steps prior to entering
into a contract. We only collect, process and use personal data regarding the use of our
website (usage data) insofar as this is required for users to use the service or to bill them.
The customer data collected is deleted upon completion of an order or termination of thebusiness relationship. Statutory retention periods will remain unaffected.
4.2.2

Data transfer upon conclusion of a contract for online shops, traders andproduct dispatch

We only send personal data to third parties if this is necessary as part of contract
processing, for instance to companies entrusted with the delivery of products or afinancial institution commissioned to process payments. No further transfer of data takes
place or only if you have given explicit consent to the transfer. Your data will not bepassed on to third parties, for advertising purposes, for example, without explicit consent.
The basis for data processing is Art. 6 Sect. 1 Sent. 1 lit. b GDPR, which permits theprocessing of data in order to fulfil a contract or take steps prior to entering into acontract.
4.2.3

Encrypted payment transactions on our websites

If there is an obligation to provide us with your payment data (e.g. account number for
direct debit authorization) after the conclusion of a chargeable contract, this data isrequired for payment processing.
The payment transactions via the usual means of payment (especially Visa/MasterCard,
direct debit) are exclusively carried out via an encrypted SSL or TLS connection. You canrecognize an encrypted connection by the fact that the address line of the browser
changes from "http://" to "https://" and by the lock symbol in your browser line.
In the case of encrypted communication, your payment data that you transmit to us
cannot be read by third parties.

4.3

Data protection in the case of applications and application processes

We collect and process personal data from applicants for the purpose of executing anapplication process in PTV Planung Transport Verkehr GmbH and its associatedcompanies. Data may be processed electronically. This is the case particularly if
applicants send us application documents electronically, for example by email, or via the
career pages on our website.
Once your data has been entered and sent, it goes directly to the servers of our external
service providers rexx systems GmbH, Süderstraße 77, 20097 Hamburg, Germany, via
an encrypted connection. All data is encrypted based on the TLS method. If you log on PTV Planung Transport Verkehr GmbH / June 2023

Page 12/27

Data Privacy Statement PTV GmbHSpecial Notes

after you have registered using the user data provided, the TLS encryption method is also
used.
Further information about data protection with our external service provider can be foundin the rexx systems GmbH data privacy statement at https://www.rexx-systems.com/dataprotection/.
Data security for applications
Your data is hosted by a provider within the context of contract processing pursuant toArt. 28 GDPR. Both PTV Planung Transport Verkehr GmbH and the provider use
technical and organizational security measures to protect your data against accidental ordeliberate manipulation, loss, destruction or access by unauthorized persons. Our
security measures are constantly being improved in accordance with technologicaldevelopments.
Processing of data at the end of the application process
If a PTV Group company concludes an employment contract with an applicant, thetransmitted data will be stored for the purpose of processing the employment relationshipin compliance with the statutory provisions. If no employment contract is concluded withthe applicant, the application documents are automatically deleted six months after
notification of the rejection decision, provided that no other legitimate interests prevent
deletion. Other legitimate interests in this sense include, for example, a duty to provide
evidence in proceedings under the General Equal Treatment Act (AGG).
The basis for data processing is Art. 6 Sect 1 Sent. 1 lit. b GDPR, which permits theprocessing of data in order to fulfil a contract or take steps prior to entering into acontract.

4.4

Comment function on blog.ptvgroup.com

For the comment function on blog.ptvgroup.com, unless you post anonymously, yourcomment will be stored along with information at the time the comment was created, youremail address and the username you chose.
Storage of the IP address
The blog's comment function stores the IP addresses of users who post comments. Thisis for our security, as we may be held responsible for illegal content (such as insults or
propaganda) on the site, even if it is created by users. IP addresses are not processedbeyond this purpose.
Storage period of comments
The comments and related data are stored and remain on our website until thecommented content has been completely deleted or the comments have to be deleted forlegal reasons.
Legal basis
The comments are stored on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You
can revoke your consent at any time. An informal e-mail notification to us is sufficient forthis purpose. The legality of the data processing operations that have already taken placeremains unaffected by the revocation.
 PTV Planung Transport Verkehr GmbH / June 2023

Page 13/27

Data Privacy Statement PTV GmbH

4.5

Used tools

Live.Chat

In certain areas of our website we offer contact and advice via live chat. With the help of
the Live Chat function, you can communicate with one of our employees via text
messages. When you open and start using the Live Chat, your browser automaticallytransmits the following data for technical reasons, which we store separately from otherdata you may transmit to us: Date and time of access, Duration of the visit to our website, Type of web browser including version, Operating system used, Amount of data sent, Type of event, IP address (anonymized).

The legal basis for this data processing is Art. 6 Sect. 1 lit. f GDPR, whereby ourlegitimate interest is directed towards guaranteeing and maintaining the operation andsecurity of our offer as well as an error-free service. Within this framework, the data isalso processed by us for analysis purposes - without allocation to a specific person.
If you provide us with additional personal data via the live chat, this is done on a voluntarybasis. We do not actively request personal data from you. The texts you enter in the chatwidget during the live chat are stored on our behalf on the external service provider’sserver. The legal basis for this data processing is Art. 6 Sect. 1 lit. b and f GDPR, as wehave a legitimate interest in offering you an optimal prospect and customer service within
the framework of a (pre)contractual relationship.

5
5.1

Used tools
Appointment Bookings

We use the appointment booking tool "Bookings" (part of the Microsoft Office 365 service)of the provider Microsoft Ireland Operations Limited, One Microsoft Place, South Country
Business Park, Leopardstown, Dublin 18 D18 P521 for online appointment scheduling.
By using this tool, it is possible for you to book yourself a consultation appointment with
one of our employees. You will only be connected to the service if you actually make an
appointment booking through the service. For the appointment booking, your entereddata will be transferred to Microsoft. The data is processed as part of the cloud service
Microsoft 365 in Microsoft data centers in the EU. We have concluded a contract with
Microsoft which stipulates that the data will not leave the EU and will not be evaluated orprocessed by Microsoft, and we have also concluded an order processing agreementwith Microsoft. At this point, we would like to point out that there are currently no GDPR
compliant data protection guarantees for the use of Microsoft 365, as the European Courtof Justice has declared the EU-US Privacy Shield to be invalid as suitable data protection
guarantees in a ruling of 16.7.2020. More information and a statement from Microsoft can PTV Planung Transport Verkehr GmbH / June 2023

Page 14/27

Data Privacy Statement PTV GmbH

Used tools

be found at Assuring Customers About Cross-Border Data Flows (microsoft.com). The
use of Microsoft 365 is, under the condition of your voluntary consent to the dataprocessing GDPR compliant, if you do not agree with the data processing by Microsoft
Bookings, you have the option to book an appointment by using other contact options
offered.
Information on Microsoft's handling of personal data can be found in Microsoft's privacy
policy at: Microsoft Privacy Statement – Microsoft privacy
In order to make an appointment booking, you must provide your name and email
address, in addition you can voluntarily provide your telephone number, as well as
additional information you wish to provide to the PTV employee for the preparation ofyour appointment.
The legal basis for the processing of your data is your consent, which you give by clicking
on "Book" (Art. 6 Sect. 1 Sent. 1 lit. a of the GDPR).
You can revoke your consent to data processing at any time by sending an informal email to data-protection@ptvgroup.com.
Your data will only be processed for the purpose of handling the appointment andsubsequently deleted after the appointment, unless a pre-contractual business
relationship arises from the consultation, which constitutes a legal basis for further dataprocessing (Art. 6 Sect. 1 Sent. 1 lit. b of the GDPR).

5.2

Online Marketing

Use of Eloqua
We use Eloqua from the third-party provider Oracle, Redwood City, CA, USA(www.eloqua.com) for marketing purposes. Eloqua allows us to tailor content to the exact
visitors and subscribers to our website and how we communicate with them.
Eloqua cookies gather anonymized data about the user behavior of visitors to our
website, for example the number of visitors to the website, how they came to the site andwhich pages they have visited. This data feeds into analyses and helps us to improve our
website. We may also gather personal identification data when you use certain services
or parts of the website. When you sign up for a service or subscribe to one of our
newsletters, for example, we can identify you when you visit our website and navigate
through the individual pages. This data is stored securely at Eloqua.
If you wish to prevent the use of Eloqua tracking technologies on your device completely,
you can do so on the Eloqua opt-out page available athttps://www.oracle.com/marketingcloud/opt-status.html.
Further information on data protection in connection with the use of Eloqua can be foundhere: Oracle Privacy Policy

 PTV Planung Transport Verkehr GmbH / June 2023

Page 15/27

Data Privacy Statement PTV GmbH

5.3
5.3.1

Used tools

Social Media, Social Media Plugins
Facebook-Plugins (Like & Share-Button)

We have integrated plug-ins of the social network Facebook on this website. The providerof this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
According to Meta Platforms’s statement the collected data will be transferred to the USA
and other third-party countries too.
You will be able to recognize Facebook plug-ins by the Facebook logo or the “Like”
button on this website. An overview of the Facebook plug-ins is available under thefollowing link: https://developers.facebook.com/docs/plugins/.
Whenever you visit this website and its pages, the plug-in will establish a directconnection between your browser and the Facebook server. As a result, Meta Platforms
will receive the information that you have visited this website with your plug-in. However,
if you click the Facebook “Like” button while you are logged into your Facebook account,
you can link the content of this website and its pages with your Facebook profile. As aresult, Meta Platforms will be able to allocate the visit to this website and its pages to yourFacebook user account. We have to point out, that we as the provider of the website do
not have any knowledge of the transferred data and its use by Meta Platforms. For moredetailed information, please consult the Data Privacy Declaration of Facebook at:https://www.facebook.com/privacy/explanation.
If you do not want Meta Platforms to be able to allocate your visit to this website and its
pages to your Facebook user account, please log out of your Facebook account while
you are on this website.
The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of
the website has a legitimate interest in being as visible as possible on social media. If a
respective declaration of consent has been obtained, the data shall be processed
exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be
revoked at any time.
5.3.2

Twitter Plugin

We have integrated functions of the social media platform Twitter into this website. These
functions are provided by Twitter International Company, One Cumberland Place, Fenian
Street, Dublin 2, D02 AX07, Ireland. While you use Twitter and the “Re-Tweet” function,
websites you visit are linked to your Twitter account and disclosed to other users. During
this process, data are transferred to Twitter as well. We must point out, that we, theproviders of the website and its pages do not know anything about the content of the datatransferred and the use of this information by Twitter. For more details, please consult
Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.
The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The operator of thewebsite has a legitimate interest in being as visible as possible on social media. If a
respective declaration of consent has been obtained, the data shall be processed
exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be
revoked at any time.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 16/27

Data Privacy Statement PTV GmbH

Used tools

You have the option to change your data protection settings on Twitter in the accountsettings at https://twitter.com/account/settings.
5.3.3

LinkedIn Plugin

This website uses functions of the LinkedIn network. The provider is LinkedIn
Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Any time you access a page of this website that contains functions of LinkedIn, aconnection to LinkedIn’s servers is established. LinkedIn is notified that you have visited
this website with your IP address. If you click on LinkedIn’s “Recommend” button and arelogged into your LinkedIn account at the time, LinkedIn will be in a position to allocate
your visit to this website to your user account. We have to point out that we as theprovider of the websites do not have any knowledge of the content of the transferred dataand its use by LinkedIn.
The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of thewebsite has a legitimate interest in being as visible as possible on social media. If a
respective declaration of consent has been obtained, the data shall be processed
exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be
revoked at any time.
For further information on this subject, please consult LinkedIn’s Data Privacy Declaration
at: https://www.linkedin.com/legal/privacy-policy.
5.3.4

YouTubeOur website uses plug-ins of the Google operated site YouTube. The operator of the site
is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages that has a YouTube plug-in, a connection is established to
the YouTube servers. The YouTube server is notified which of our pages you have visitedin the process.
If you are logged in to your YouTube account, YouTube allows your surfing behavior to
be associated directly to your personal profile. You can prevent this by logging out of yourYouTube account.
YouTube is used in the interests of attractive presentation of our online services. This
represents a legitimate interest in accordance with Art. 6 Sect. 1 lit. f GDPR.
You can find further information regarding the handling of user data in the YouTube data
privacy statement at: https://www.google.de/intl/de/policies/privacy.

5.4

Live-Chat with User-Like

We use the Live Chat of Userlike UG, Probsteigasse 44-46, 50670 Cologne, Germany(hereafter "Userlike"). Userlike uses cookies to enable you to have a personal
conversation with us in the form of a real-time chat. Live chat visitors do not have to log inwith their name to use this function but can have an anonymous chat. We use the socalled privacy mode when using Userlike. This means that your IP address is stored in
the cookies in anonymous form and is not used to identify you personally. If you disclose
personal information about yourself during the anonymous chat, this is done voluntarily.
 PTV Planung Transport Verkehr GmbH / June 2023

Page 17/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

The data collected by Userlike is processed on our behalf and based on a contract fororder processing.
The processing of your personal data is based on Art. 6 Sect. 1 lit. f GDPR, as we have alegitimate interest in the economic operation, the operability and the optimization of our
website in the form of a cross-webpage operation of the chat function.
For further information, please refer to Userlike's privacy policy:
https://www.userlike.com/en/terms.

6

Cookies and Analysis - Tools

When you visit our website, your surfing behavior can be statistically evaluated. This ismainly done with so-called analysis programs and cookies.
Detailed information about these analysis programs and cookies can be found in thefollowing section.

6.1

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small
text files that do not cause any damage to your device. They are either stored temporarily
for the duration of a session (session cookies) or they are permanently archived on yourdevice (permanent cookies). Session cookies are automatically deleted once you
terminate your visit. Permanent cookies remain archived on your device until you actively
delete them or they are automatically eradicated by your web browser.
In some cases, it is possible that third-party cookies are stored on your device once youenter our site (third-party cookies). These cookies enable you or us to take advantage of
certain services offered by the third party (e.g. cookies for the processing of payment
services).
Cookies have a variety of functions. Many cookies are technically essential since certain
website functions would not work in the absence of the cookies (e.g. the shopping cartfunction or the display of videos). The purpose of other cookies may be the analysis ofuser patterns or the display of promotional messages.
Cookies, which are required for the performance of electronic communicationtransactions (required cookies) or for the provision of certain functions you want to use(functional cookies, e.g. for the shopping cart function) or those that are necessary for the
optimization of the website (e.g. cookies that provide measurable insights into the web
audience), shall be stored on the basis of Art. 6 Sect. 1 lit. f GDPR, unless a different
legal basis is cited. The operator of the website has a legitimate interest in the storage of
cookies to ensure the technically error free and optimized provision of the operator’s
services. If your consent to the storage of the cookies has been requested, the respective
cookies are stored exclusively on the basis of the consent obtained (Art. 6 Sect. 1 lit. aGDPR); this consent may be revoked at any time.
You have the option to set up your browser in such a manner that you will be notified any
time cookies are placed and to permit the acceptance of cookies only in specific cases.
You may also exclude the acceptance of cookies in certain cases or in general or activate
 PTV Planung Transport Verkehr GmbH / June 2023

Page 18/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

the delete function for the automatic eradication of cookies when the browser closes. If
cookies are deactivated, the functions of this website may be limited.
In the event that third-party cookies are used or if cookies are used for analytical
purposes, we will separately notify you in conjunction with this Data Protection Policy
and, if applicable, ask for your consent.
6.1.1

Cookie-Consent with Cookiebot

Our websites use Cookie Content technology from Cookiebot to obtain your consent tothe storage of certain cookies on your end device and to document this in a dataprotection-compliant manner. The provider of this technology is Cybot A/S, Havnegade39, 1058 Copenhagen, Denmark, website: https://www.cookiebot.com/en/ (hereinafter"Cookiebot").
Cookiebot stores a cookie in your browser in order to be able to assign the consent you
have given or to revoke it. The data collected in this way is stored until you request us todelete it, delete the Cookiebot cookie itself or until the purpose for which the data isstored no longer applies. Mandatory legal storage obligations remain unaffected.
Cookiebot is used to obtain the legally required consent for the use of cookies. The legal
basis for this is Art. 6 Sect. 1 lit. c GDPR.
6.1.2

Changing your cookie settings

You can view and change your cookie settings at any time athttps://www.ptvgroup.com/en/cookies/.

6.2
6.2.1

Analytics tools and advertising
Use of Leadlab

Our website uses tracking pixel technology from wiredminds GmbH (www.wiredminds.de)to analyse visitor behavior.
Data is collected, processed and stored where appropriate from which a usage profile iscreated under a pseudonym. These usage profiles are anonymised in full wherever this ispossible and reasonable. Cookies may be used for this purpose. Cookies are small text
files stored in the visitor's Internet browser and used to recognize the Internet browser on
the next visit. Data collected, which may also include personal data, is sent to wiredminds
or is collected directly by wiredminds. wiredminds may use data left on the website
through visits in order to create anonymised usage profiles. Data obtained in this way will
not be used without the separate consent of the data subject to identify the visitor to thiswebsite and will not be combined with personal data relating to the bearer of thepseudonym. If IP addresses are collected, they are anonymised immediately by deletingthe last number block.
6.2.2

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc,
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google
Analytics uses "cookies", which are text files placed on your computer, to help thewebsite analyze how users use the site.
 PTV Planung Transport Verkehr GmbH / June 2023

Page 19/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

We would like to point out that on this website Google Analytics has been extended by
the code "anonymizeIp" to ensure anonymized collection of IP addresses (so-called IP
masking). By activating IP anonymization on this website, your IP address will betruncated beforehand by Google within member states of the European Union (EU) or inother contracting states of the Agreement on the European Economic Area (EEA). Only
in exceptional cases will the full IP address be transmitted to a Google server in the USA
and shortened there. On behalf of the operator of this website, Google will use thisinformation for the purpose of evaluating your use of the website, compiling reports on
website activity and providing other services relating to website activity and internet
usage to the website operator. The IP address transmitted by your browser as part of
Google Analytics will not be merged with any other data held by Google.
Note: The information generated by the cookie about your use of this website will betransmitted to and stored by Google on servers in the United States. The USA isassessed by the European Court of Justice as a country with an insufficient level of dataprotection according to EU standards. In particular, there is a risk that your data may beprocessed by U.S. authorities, for control and monitoring purposes, possibly also without
any legal remedy.
For more information on Google's terms of use and data protection, please visit
https://marketingplatform.google.com/about/analytics/terms/us/ or
https://policies.google.com/?hl=en-US.
Purpose of data processing
The analysis tool or analysis cookies are used for the purpose of improving the quality of
our website and its content. In this way, we learn how the website is used and can thus
constantly optimize our offer.
Legal basis for data processing
The legal basis for the processing of personal data is your consent given in accordancewith Art. 6 Sect. 1 lit. a GDPR.
Duration of storage
The cookies are stored on the user's terminal device and transmitted by it to our site.
Therefore, you as the user have full control over the use of cookies. By changing thesettings in your internet browser, you can disable or restrict the transmission of cookies.
Cookies that have already been stored can be deleted at any time. This can also be done
automatically. If cookies are deactivated for our website, it may no longer be possible touse all functions of the website in full.
In all other respects, we store the data provided on the basis of consent until you revoke
it, which you can declare to us.
Possibility of objection and removal
You may refuse the use of cookies by selecting the appropriate settings on your browser,
however please note that if you do this you may not be able to use the full functionality ofthis website.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 20/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

You can also prevent the collection of data generated by the cookie and related to youruse of the website (including your IP address) to Google and the processing of this data
by Google by downloading and installing the browser plugin available at the following link
(https://tools.google.com/dlpage/gaoptout?hl=en).
6.2.3

Google AdSense (not personalized)

This website uses Google AdSense, an ad embedding service provided by Google
Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google AdSense in the “non-personalized” mode. Contrary to the personalized
mode, the ads are not based on your previous user patterns and the service does not
generate a user profile for you. Instead, the service uses so-called “context information”
to choose the ads that are posted for you to view. The selected ads are thus based e.g.
on your location, the content of the website you are visiting at the time or the searchterms you are using. To learn more about the distinct differences between personalized
targeting and targeting that has not been personalized by Google AdSense, please clickon the following link: https://support.google.com/adsense/answer/9007336.
Please keep in mind that if Google Adsense is used in the non-personalized mode, it ispossible that cookies are stored or comparable recognition technologies (e.g. device
fingerprinting) are used.
AdSense is used on the basis of Art. 6 Abs. 1 lit. f. GDPR. The website operator has alegitimate interest in making the marketing of the website as effective as possible. If a
respective declaration of consent was requested, processing shall occur exclusively on
the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.
You have the option to autonomously adjust the advertising settings in your user account.
To do so, please click on the link provided below and log in:https://adssettings.google.com/authenticated.
For more information about Google’s advertising technologies, please click here:
https://policies.google.com/technologies/ads
https://www.google.de/intl/de/policies/privacy/.
6.2.4

Google Remarketing

This website uses the functions of Google Analytics Remarketing. The provider of thesesolutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4,
Ireland.
Google Remarketing analyzes your user patterns on our website (e.g. clicks on specificproducts), to allocate a certain advertising target groups to you and to subsequently
display matching online offers to you when you visit other online offers (remarketing or
retargeting).
Moreover, it is possible to link the advertising target groups generated with Google
Remarketing to device encompassing functions of Google. This makes it possible todisplay interest-based customized advertising messages, depending on your prior usage
and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as
on any of your devices (e.g. tablet or PC).
 PTV Planung Transport Verkehr GmbH / June 2023

Page 21/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

If you have a Google account, you have the option to object to personalized advertisingunder the following link: https://www.google.com/settings/ads/onweb/.
The use of Google Remarketing is based on Art. 6 Sect. 1 lit. f. GDPR. The website
operator has a legitimate interest in the marketing of the operator’s products that is aseffective as possible. If a respective declaration of consent was requested, processing
shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may
be revoked at any time.
For further information and the pertinent data protection regulations, please consult theData Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.
Formation of Target Groups with Customer Reconciliation
For the formation of target groups, we use, among other things, the Google Remarketingcustomer reconciliation feature. To achieve this, we transfer certain customer data (e.g.
email addresses) from our customer lists to Google. If the respective customers are
Google users and are logged into their Google accounts, matching advertising messages
within the Google network (e.g. YouTube, Gmail or in a search engine) are displayed forthem to view.
6.2.5

Bing Universal Event Tracking (UET)

On our website, data is collected and saved using the technologies of Bing Ads fromwhich usage profiles are created using pseudonyms. This is a service of the Microsoft
Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables
us to track the activities of users on our website if they accessed our website via
advertisements from Bing Ads. If you access our website via an advertisement of thisnature, a cookie is set on your computer. A Bing UET tag is integrated on our website.
This is a code which, in combination with the cookie, saves some non-personal data
about the usage of the website. This includes, among other things, the time spent on thewebsite, which areas of the website were opened and via which advertisement the users
accessed the website. No information about your identity is collected.
The information collected is transmitted to Microsoft servers in the USA and is there
stored for a period of at most 180 days. You can prevent the collection of the data
generated by the cookie with respect to your usage of the website as well as theprocessing of these data by deactivating the use of cookies. This could possibly lead to a
restricted functionality of the website.
Furthermore, Microsoft can possibly track your usage behavior across several of yourelectronic devices using so-called Cross-Device Tracking and is thereby able to display
personalized advertising on or in Microsoft web pages and apps. You can deactivate thisbehavior under https://account.microsoft.com/privacy/ad-settings/
Further information about the analysis services of Bing can be found on the Bing Ads
website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). Further information
about data protection at Microsoft and Bing can be found in Microsoft’s data protection
provisions (https://privacy.microsoft.com/de-de/privacystatement).

 PTV Planung Transport Verkehr GmbH / June 2023

Page 22/27

Data Privacy Statement PTV GmbH

6.2.6

Cookies and Analysis - Tools

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use conversion tracking as part of Google AdWords. If you click on a Google ad, aconversion tracking cookie is placed on your computer. Cookies are small text files whichan Internet browser places on a user's computer. These cookies expire after 30 days andare not used to identify users. If a user visits certain pages of this website and the cookie
has not yet expired, we and Google can recognize that the user has clicked on an ad andbeen redirected to this page.
Every Google AdWords customer receives a different cookie. Cookies cannot be tracked
via the websites of AdWords customers. Information obtained with the help of conversion
cookies is used to produce conversion statistics for AdWords customers which have
opted for conversion tracking. Customers learn the total number of users who haveclicked on their ad and been redirected to a page provided with a conversion tracking tag.
However, they do not receive any information allowing them to identify the user. If you do
not wish to participate in tracking, you can object to such use by easily disabling theGoogle conversion tracking cookie via your Internet browser's user settings. You will thennot be included in conversion tracking statistics.
Conversion cookies are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website
operator has a legitimate interest in analyzing user behavior in order to optimize both its
web service and its advertising.
More information about Google AdWords and Google Conversion Tracking can be foundin Google's data protection regulations: https://www.google.de/policies/privacy/.
You can configure your browser to receive notifications about the placement of cookies
and only allow cookies in individual cases, enable the acceptance of cookies in specificcases or generally refuse them and enable automatic deletion of cookies when you close
your browser. Disabling cookies may limit the functionality of this website.
You may withdraw your consent to the storage of data, email address and its use forsending the newsletter at any time, for example via the 'Unsubscribe' link in the
newsletter.
6.2.7

Facebook Pixel

To measure conversion rates, this website uses the visitor activity pixel of Meta
Platforms. The provider of this service is Facebook Ireland Limited, 4 Grand Canal
Square, Dublin 2, Ireland. According to Meta Platforms’s statement the collected data willbe transferred to the USA and other third-party countries too.
This tool allows the tracking of page visitors after they have been linked to the website of
the provider after clicking on a Facebook ad. This makes it possible to analyze theeffectiveness of Facebook ads for statistical and market research purposes and to
optimize future advertising campaigns.
For us as the operators of this website, the collected data is anonymous. We are not in aposition to arrive at any conclusions as to the identity of users. However, Meta Platforms
archives the information and processes it, so that it is possible to make a connection to PTV Planung Transport Verkehr GmbH / June 2023

Page 23/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

the respective user profile and Meta Platforms is in a position to use the data for its own
promotional purposes in compliance with the Facebook Data Usage Policy. This enables
Meta Platforms to display ads on Facebook pages as well as in locations outside ofFacebook. We as the operator of this website have no control over the use of such data.
The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of thewebsite has a legitimate interest in effective advertising campaigns, which also include
social media. If a corresponding agreement has been requested (e.g. an agreement tothe storage of cookies), the processing takes place exclusively on the basis of Art. 6 Sect.
1 lit. a GDPR; the agreement can be revoked at any time.
In Facebook’s Data Privacy Policies, you will find additional information about theprotection of your privacy at: https://www.facebook.com/about/privacy/.
You also have the option to deactivate the remarketing function “Custom Audiences” inthe ad settings section
at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To dothis, you first have to log into Facebook.
If you do not have a Facebook account, you can deactivate any user based advertising
by Facebook on the website of the European Interactive Digital Advertising
Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
6.2.8

Conversion pixels from Adform

This website uses conversion tracking from Adform (Adform A/S, Wildersgade 10B, sal.
1, DK-1408 Copenhagen, Denmark; 'Adform').
Adform uses a cookie mechanism on an anonymous basis to decide which ads areshown to a user. This is based on products that a visitor has already viewed on aprevious occasion. This means that Adform stores no personal data of any kind, such as
email addresses, names or addresses, in the cookie or in the cookie-based profile.
A cookie is a small text file that can be stored on a computer if a user views advertising or
websites of an Adform customer using a browser. The cookie does not collect any
names, addresses, phone numbers, email address or other data identifying the user.
Instead, the cookie contains a random identification number. Using these random
identification numbers from the cookie, Adform collects and stores anonymous
information, such as operating system, browser version, geographical location, URLs on
which Adform shows advertising, or facts concerning reciprocal effects with advertising(for example, number of clicks or views) in cookie-based profiles.
The IP addresses of Internet users are accessible to our system during web requests on
Adform web servers.
Adform acts in accordance with local data protection legislation and anonymises data inaccordance with local regulations. Adform does not pass this data on to third parties anduses the data solely for analysis purposes on behalf of the website owner.
You can disable tracking by Adform at any time: https://site.adform.com/datenschutz-optout/.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 24/27

Data Privacy Statement PTV GmbH

6.2.9

Cookies and Analysis - Tools

Usage of Lead the Way®

Our website uses functionalities of the French web analysis service Lead the Way®.
Provider is CARTEGIE SAS based in 33522 BRUGES Cedex (France).
Lead the Way® allows us to identify customers or prospects who have visited our website
after an email campaign or as part of a marketing program. Cookies may be used for thispurpose. Cookies are small text files stored in the visitor's Internet browser and used torecognize the Internet browser on the next visit. In order to analyse your use of our
website and to be able to contact you and offer you suitable B2B solutions, we use acookie from our partner CARTEGIE to identify your IP address and establish theconnection to your company. “Lead the Way® cookies” are stored on the basis of Art. 6
Sect. 1 lit. f GDPR. As a website operator, we have a legitimate interest in analysing user
behavior in order to optimize both our website and our marketing and to be able tocontact you and offer you professional solutions.
Objection to data collection
You can object to the collection of your data by CARTEGIE cookies in accordance with
the instructions on the www.lead-the-way.fr/donnees-personnelles.html website. For more
information on how CARTEGIE handles user data, please refer to the Lead the Way
privacy policy: https://www.lead-the-way.fr/donnees-personnelles.html.
6.2.10OptinMonster

OptinMonster is a plugin of the company Retyp, LLC., 7732 Maywood Crest Dr., West
Palm Beach, FL 33412, US (https://optinmonster.com).
This allows us to provide our visitors with additional offers via pop-up on our website, forexample, to enable registration of the e-mail address in a newsletter or to point out
actions. OptinMonster uses cookies for this purpose. Personal data is only collected
through an active action of the customer (for example, the customer signs up for the
newsletter via a popup). OptinMonster does not store the collected data on its own
servers but forwards it to a PTV Group selected tool (Eloqua).
We have entered into an order processing contract with OptinMonster, in which we oblige
OptinMonster to protect your data in accordance with the applicable provisions of the
GDPR. Details on the handling of the customer’s personal data by OptinMonster aredescribed in more detail in OptinMonster’s privacy policy(https://optinmonster.com/privacy/).
6.2.11

HotjarOur websites use the web analytics service "Hotjar" for usage analysis. The provider of
the tool is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St
Julians STJ 1000, Malta, Europe. The hosting of the provider takes place within the EU.
By using this tool we have the possibility to statistically analyse visitor data and to adapt
our website and offers to our customers. (Privacy policy of the provider: Hotjar - Privacy
Policy)With this tool, movements on the websites on which Hotjar is used can be tracked (socalled heat maps). For example, it is possible to see how far users scroll and how often
 PTV Planung Transport Verkehr GmbH / June 2023

Page 25/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

they click on which buttons. Furthermore, with the help of the tool it is also possible toobtain feedback directly from the users of the website. Most importantly, Hotjar's services
can improve the functionality of the Hotjar-based website by making it more user-friendly
and easier to use for end users.
When collecting feedback via Hotjar, you have the opportunity to send us a comment
about your satisfaction with the functionality of our website, and no personally identifiable
information is requested. Should you nevertheless enter personal data in the input
window provided, this may become accessible to our employees. By storing the
feedback, this voluntarily transmitted data can be processed; the legal basis for theprocessing is the consent you gave when entering the data (Art. 6 Sect. 1 Sent. 1 lit. a
GDPR. The consent can be revoked at any time with effect for the future, a deletion of thedata transmitted in this form takes place at regular intervals. In order to also make thisunintentional data processing compliant with the GDPR, we have concluded an orderprocessing agreement with the provider.
When using this tool, we pay particular attention to the protection of your personal data
and deliberately do not make use of the provider's Identify API, which would make itpossible to identify users. For example, we can only track which buttons have been
clicked, mouse movement history, how far scrolled, device screen size, device type andbrowser information, geographical location (country only) and preferred language todisplay our website. Areas of the websites in which personal data of you or third partiesare displayed are automatically hidden by Hotjar and are therefore not traceable at any
time. In order to exclude the possibility of direct personal references, IP addresses are
only stored and processed anonymously; the user profile stored by Hotjar is also
anonymised for this reason.
Hotjar offers every user the option of using a "Do Not Track Header" to prevent the use of
the Hotjar tool so that no data about the visit to the respective website is recorded. This isa setting that is supported by all common browsers in current versions. To do this, yourbrowser sends a request to Hotjar with the information to deactivate the tracking of therespective user. If you use our websites with different browsers/computers, you must set
up the "Do Not Track header" separately for each of these browsers/computers (Hotjar Do Not Track).
6.2.12

Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The
Netherlands, which recognizes visits of companies to our website based on IP addresses
and shows us related publicly available information, such as company names oraddresses. In addition, Leadinfo places two first-party cookies for providing transparency
on how our visitors use our website and the tool processes domains from provided form
inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its
services. For additional information, please visit www.leadinfo.com. On this page:www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, yourdata will no longer be used by Leadinfo.
6.2.13

Piwik PRO

General information on data processing / nature and scope PTV Planung Transport Verkehr GmbH / June 2023

Page 26/27

Data Privacy Statement PTV GmbH

Cookies and Analysis - Tools

We use Piwik PRO Analytics Suite, a web analytics service provided by Piwik PRO SA,
ul. Św. Antoniego 2/4, 50-073 Wrocław, Poland, on our website. This is done as part ofour review of European alternatives to the US service Google Analytics. Here, we collectdata about website visitors based on cookies. The information collected may include thevisitor's IP address, operating system, browser ID, browsing activity and otherinformation. You can learn more about the scope of data collected by Piwik PRO here.
Piwik PRO does not transfer the data about you to other sub-processors or third partiesand does not use it for its own purposes. For more information, please see Piwik PRO's
privacy policy.
Purpose of data processing
We use the analytics tool to analyze visitor behavior, display personalized content andconduct online campaigns. For this purpose, we may also create visitor profiles based onbrowsing history. In doing so, we calculate metrics such as bounce rate, page views,
sessions and the like in order to understand how our website/app is specifically used.
From this, we can deduce if and how the website/app needs to be optimized for better
usability.
Legal basis of data processing
The data processing described here only takes place if and as long as you give us
consent to use the service. The legal basis is therefore your consent in accordance with
Art. 6 Sect. 1 lit. a. GDPR.
Storage period
We store and process the data until revocation.
Revocation and elimination options
You can revoke the consent once given to us at any time with effect for the future.

 PTV Planung Transport Verkehr GmbH / June 2023

Page 27/27