Your Quickest Route to VBN

Frequently Asked Questions (FAQ)

Small print made clear. In the FAQ you will find all of the answers to the most common questions to VBN.

Show more

24h Information Service

VBN information service and VBN service center. Your telephone, digital and direct line to the VBN.

Show more

Timetable and price information

Show timetables

Verkehrshinweise

Informieren Sie sich hier über aktuelle Fahrplanänderungen für den Zugverkehr und für den Bus- und Straßenbahnverkehr, aufgrund von Baustellen und Umleitungen im VBN-Gebiet, die länger als 24 Stunden bestehen.

Zugverkehr

Bus- und Straßenbahnverkehr

Data Protection Declaration

Below, we inform you of how we use your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

1. Controller

The office named in the address details is the controller with respect to the data processed:

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN)
Am Wall 165–167
28195 Bremen

2. Contact Data for the Data Protection Officer

The VBN data protection officer is available to provide information or respond to suggestions regarding data protection:

HERODATA GmbH
Ms Larissa Schwarz-Lüking
Hohenlohestraße 9
28209 Bremen
Telephone: 04 21 / 222 10 34
Email: datenschutz@herodata.de

3. Data Protection on the Website

3.1 Saving the  IP Address

For a period of seven days VBN saves the IP address transmitted by your web browser strictly related to the purpose of detecting, limiting and remedying attacks on our website. After the end of this period we will delete or anonymise the IP address. The legal basis is Article 6 para. 1 f) GDPR. 

3.2 Usage Data

When you visit our website, usage data will be temporarily stored on our web server for statistical purposes as a protocol for improving the quality of our website. This data comprises

  • the page from which the file was requested,
  • the name of the file,
  • the date and time of the request,
  • the amount of data transmitted,
  • the access status (file transferred, file not found),
  • a description of the type of web browser used,
  • der the IP address of the requesting computer that is abbreviated in such a way that no personal connection can be made.

The above-mentioned protocol data will be stored only anonymously. 

3.3 Data Security

We undertake technical and organisational measures to protect your data as comprehensively as possible from unwanted attacks. We use an encryption process on our site. Your data is transmitted from your computer to our server and vice versa via the internet using an SSL/TLS encryption. In the status bar of your browser you will see that the padlock symbol is closed and the address line starts with "https://".

3.4 Data Transmission to Third Parties

Within the context of processing an order, VBN transmits your data in accordance with Article 28 GDPR to service providers, who support us in operating our website (for example hosts, internet agencies, web analysis service providers) and the associated processes. Our service providers are strictly bound by instructions to us and are bound by a contract accordingly. 

3.5 Cookies

Our websites use so-called 'cookies'. Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. when using the 'FahrPlaner', for service enquiries or forms). Other cookies can be used to evaluate user behaviour or for advertising purposes.

Cookies that are necessary for the electronic communication process, for providing certain functions you have requested (e.g. for the shopping basket function) or for optimising the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Article 6 para. 1 f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Article 6 para. 1 a) GDPR and Section 25 para. 1) TDDDG); Consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in this privacy policy.

3.6 Cookie Consent Tool: Changing cookie settings

Our website uses Cookiebot's consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. This technology is provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter 'Cookiebot').

When you visit our website, a connection is established to Cookiebot's servers to obtain your consent and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser in order to be able to assign the consents you have given or their revocation to you. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie yourself or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 para. 1 c) GDPR.

Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

3.7 Transferring to Other Websites

Our website includes links to other providers. You can see this with the example of a logo or by the fact that a new browser window opens. If it is not a web offering from VBN GmbH, the data protection regulations of the respective provider apply there. For example, this applies to pages that are linked to with the relevant logos (for examplevon Facebook and YouTube) or references to the websites, for example, of the VBN transport companies, the NITAG OnlineShop and online payment services. 

3.8 Embedded Vimeo Videos

On his website and applications, VBN integrates the video player services of Vimeo, Incorporated, 555 West 18th Street (New York), New York 10011 (www.vimeo.com). The videos are embedded on our page as iFrame. When you activate the video player plug-in, a connection will be made between your browser (terminal device) and the Vimeo servers. In the process, some of your data, such as your IP address and the terminal device you are using to visit the site, as well as your activities, may be processed. By accessing the video and further interaction with the video player service, more information about you may be processed by Vimeo, for example to evaluate the videos you have watched or your interests.

Vimeos uses what is known as web tracking methods on its own site and also within the video player service. This is done regardless of whether you are registered with Vimeo. Unfortunately, we cannot influence Vimeo’s web tracking methods or the connected services.

Please be aware: It cannot be ruled out that Vimeo will use your profile data, for example to evaluate your approximate location, interests, the videos accessed, etc. We have no influence whatsoever on the processing of your data by Vimeo and the services incorporated.

Please also note Vimeo’s data protection regulations (www.vimeo.com) at https://vimeo.com/privacy

3.9 FahrPlaner

On his website and applications VBN incorporates the timetabling services of HaCon Ingenieurgesellschaft mbH, Lister Straße 15, 30163 Hanover. The Trip Planner at https://www.vbn.de/fahrplaner is incorporated into our site with the help of what is known as an iFrame. We also use widgets on all of our pages so that we can access the timetable data more quickly.

When you access these pages, a connection will be made between your browser (terminal device) and the Hacon servers. Some of your data, for example your IP address and the terminal device you are using to visit the site and your interactions within the FahrPlaner applications, is processed.

Based on your location, the timetable application can display stops, possible trips near you and service messages (news). To do this, after your consent, the GPS coordinates identified by your device will be transmitted to our servers. For example, you can ask for connections to/from your current location and have stops near you displayed.

3.10 Online Sales (Mobile and OnlineTicket)

On his websites (https://www.vbn.de and https://www.fahrplaner.de) and applications VBN incorporates the services of EOS UPTRADE GmbH, Schanzenstraße 70, 20357 Hamburg. The application and the associated sub-pages at https://shop.fahrplaner.de are embedded with the help of a layout loader.

When you access these pages, a connection is made between your browser (terminal device) and the EOS UPTRADE servers. Some of your data, for example your IP address and the terminal device you are using to visit the site and your interactions, is processed.

By sending off the registration form and subsequent use of the MobileTicket and when using without registering, more information about you is processed by EOS UPTRADE GmbH , see 4. Online Sales (Mobile OnlineTicket).  

3.11 Application and Contact Forms

On his websites, VBN offers you the opportunity to fill in application and contact forms. They are processed on the basis of Article 6 para. 1 b) GDPR and are used to implement pre-contractual measures (BOB, MIA/MIAplus, Youth-LeisureTicket, customer card applications and BusSchool).

For BOB, MIA/MIAplus and Youth-LeisureTicket (JFT) the data will be passed on to the responsible transport company with which the contract is concluded. Data for the customer card application will not be passed on, but processed by the VBN. Data for the bus school are processed together with the transport companies involved in the project.

For BOB, MIA/MIAplus and Youth-LeisureTicket (JFT) the information is stored in the background system of the VBN website and deleted after 28 days. For customer card applications (adults and children, pupils, students and apprentices) and BusSchool, the information is stored in the background system of the VBN website and deleted twice a year, at the latest after 6 or 12 (BusSchool) months.

For other contact forms, processing and storage is carried out in accordance with Article 6 para. 1 f) GDPR. The legitimate interest of the VBN consists in the effective and rapid processing of an enquiry or a reference in the context of customer service, if necessary with the involvement of the VBN transport company concerned or the public transport authorities.

4. Online Sales (Mobile and OnlineTicket)

4.1 Purpose and Legal Basis of Processing

VBN processes the customer’s data, i.e. their name, title and address, their date of birth, their bank details, their email address, preferred method of payment, bank account details with IBAN and/or credit card data, reply to security question and the order processes with the following information: IP address, first name and surname for ticket personalisation and ticket data in accordance with Article 6 para. 1 b) GDPR for the purposes of fulfilling the contract. The user agent/device information/relation information is collected as a legitimate interest in accordance with Article 6 para. 1 f) GDPR. The legitimate interests on the part of the VBN are system optimisation, quality assurance and fraud prevention. This also includes the associated customer support. 

4.2 Recipients of the Personal Data

The data provided by you will be processed and stored on behalf of the VBN by EOS UPTRADE GmbH, Schanzenstraße 70, 20357 Hamburg in accordance with Article 6 para. 1 f). The legitimate interest on the part of the VBN lies in outsourcing the back-office system, ticket creation and hosting to a service provider.

VBN passes on your personal data (first name and surname, date of birth, address, email address, bank account details if provided by you, credit card data, PayPal account information, mobile telephone number and data about your ticket sales) and all changes to LogPay Financial Services GmbH, Schwalbacher Straße 72, 65760 Eschborn for the purposes of sale and assignment of any claims against you that arise in association with your ticket purchase. This is done on the basis of Article 6 para. 1 f) GDPR. The legitimate interest on the part of the VBN lies in outsourcing the payment processing and claims management. The legitimate interest on the part of LogPay Financial Services GmbH lies in collecting data for the purposes of processing payments, claims management, evaluating the reliability of payment types and avoiding defaults.

You can object to transmission of data to EOS UPTRADE GmbH and LogPay Financial Service GmbH at any time, however, you will no longer be able to order using electronic our sales channels.

You can access the data protection legal information of LogPay Financial Services GmbH at https://www.logpay.de/datenschutz.html

In the FahrPlaner app VBN offers the option to pay using the PayPal online payment service. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). If you choose PayPal as your payment method, you will be transferred to the PayPal website and the payment data you enter will be transmitted to PayPal in encrypted form. Usually, this comprises your name, address, telephone number, your IP address, email address or other information required to process the order, including your order data.

Your personal data is processed by PayPal as the data controller. Where this is necessary to fulfil the order, PayPal may pass data on to third parties. Moreover, to check your identity and credit-worthiness, PayPal passes on your personal data to credit reference agencies, such as SCHUFA. The legal basis is Article 6 para. 1 f) GDPR. The legitimate interest on the part of PayPal lies in ensuring the customers’ solvency.

You can find more information about data processing by PayPal at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.

4.3 Duration of Data Storage

Personal data will be stored only for as long as prescribed by law and for as long as necessary to achieve the purpose in question.

5. Customer Card Application (for adults and children, pupils, students and apprentices)

5.1 Purpose and Legal Basis of Processing

VBN processes the customer card holder’s data, and, where applicable, that of the applicant and, where applicable of the legal representative, i.e. their name, address, telephone number, dates of birth (only customer card application for children, pupils, students and apprentices), school/college/training company (only customer card application for children, pupils, students and apprentices) and ticket data in accordance with Article 6 paragraph 1 b) GDPR and number 3.2.1 of the VBN Fare Regulations for the purposes of the pre-contractual measures, i.e. to be able to issue you a customer card. 

5.2 Recipients of the Personal Data

The data is not passed on to third parties.

5.3 Duration of Data Storage 

The information will be deleted after one year at the latest.

6. Praise and Criticism

6.1 Purpose and Legal Basis of Processing

VBN processes the customer’s data, i.e. their name, address, their email address, their telephone number and their concern (Praise and Criticism) in accordance with Article 6 para. 1 b) GDPR. The legitimate interest of the VBN is to process your concern quickly and effectively and to pass it on to the relevant office. It is processed jointly with the transport companies operating in the network area (https://www.vbn.de/en/vbn/our-partners) and the commissioning authorities. 

6.2 Recipients of the Personal Data

The specific concern will be passed on the the relevant office that is responsible for dealing with your concern. This may be individual transport companies or the commissioning authority, such as Zweckverband Bremen/Niedersachsen and/or the districts or municipalities in the network area.

VBN has commissioned Salesforce.com Germany GmbH, Erika-Mann-Straße 31, 80636 Munich, as an external service provider for the hosting and further development of the database.

You are entitled to object to processing. You can do this by sending a notification at datenschutz(at)herodata.de or to Verkehrsverbund Bremen/Niedersachsen, Am Wall 165-167, 28195 Bremen. Your personal data will be deleted when if it may not be further processed to ensure legitimate interests. 

6.3 Duration of Data Storage

The data required for the answer will be deleted 18 months after the last contact. The concern will be anonymised.

7. Mobility guarantee

7.1 Purpose and Legal Basis of Processing

VBN processes the customer’s data, i.e. their name, their address, their email address, their bank details, possibly their telephone number, possibly their card number of the Deutschland-Ticket, MIA Ticket, JobTickets or BOB Ticket and their concern (Guarantee Claim) in accordance with Article 6 para. 1 b) GDPR. The legitimate interest on the part of the VBN is to review and process your guarantee claim. 

7.2 Recipients of the Personal Data

VBN has commissioned an external service provider for hosting. Hosting is the responsibility of Bremer Straßenbahn AG (BSAG), Flughafendamm 12, 28199 Bremen, which is strictly bound to instructions.

In the case of centrally distributed tickets (Deutschland-Ticket, MIA Ticket, JobTickets and BOB Ticket), VBN reserves the right to compare the accuracy of the information with the customer centres of BSAG, BREMERHAVEN BUS and VWG.

You are entitled to object to processing. For example, you can do this at datenschutz(at)herodata.de or by sending a notification to Verkehrsverbund Bremen/Niedersachsen, Am Wall 165-167, 28195 Bremen. Your personal data will be deleted when if it may not be further processed to ensure legitimate interests. 

7.3 Duration of Data Storage

The personal data on your guarantee claim will be stored for 18 months for the purpose of preventing abuse and will then be automatically anonymised without receiving a new guarantee claim request.

Dedicated to the purpose of fulfilling commercial or tax retention periods, the data will be archived for up to 10 years.

8. Customer Concern (Private/Business Concern)

8.1 Purpose and Legal Basis of Processing

You can contact VBN by telephone, email and post. VBN processes customer’s data, i.e. their name, address, email address, telephone number, in accordance with Article 6 para. 1 f) GDPR. The legitimate interest of VBN is to process your customer query quickly and effectively and to pass it on to the relevant office. It is processed jointly with the transport companies operating in the network area (https://www.vbn.de/vbn/our-partners). We process only the data you have provided so that we can contact you in line with your wishes.

8.2 Recipients of the Personal Data

The specific concern will be passed on the the relevant office that is responsible for dealing with your concern. This may be individual transport companies in the network area.

You are entitled to object to processing. For example, you can do this at datenschutz(at)herodata.de or by sending a notification to Verkehrsverbund Bremen/Niedersachsen, Am Wall 165-167, 28195 Bremen. Your personal data will be deleted when if it may not be further processed to ensure legitimate interests. 

8.3 Duration of Data Storage

The data will be deleted after one year at the latest.

9. BusSchool

9.1 Purpose and Legal Basis of Processing

VBN processes the customer’s data, i.e. their name, school, the school’s contact data, in accordance with Article 6 para. 1 f) GDPR wtih a legitimate interest to carry out the BusSchool and train bus escorts. 

9.2 Recipients of the Personal Data

VBN offers BusSchool and training of bus escorts together with the transport companies AllerBus represented by Verden-Walsroder Eisenbahn GmbH (VWE), Moorstraße 2a, 27283 Verden and Verkehrsbetriebe Wesermarsch GmbH (VBW), Arthur-Lückemeyer-Weg 2, 26954 Nordenham. The personal data will be exchange between the partners to process the project.

You are entitled to object to processing. For example, you can do this at datenschutz(at)herodata.de or by sending a notification to Verkehrsverbund Bremen/Niedersachsen, Am Wall 165-167, 28195 Bremen. Your personal data will then be deleted if it cannot be further processed to ensure legitimate interests. 

9.3 Duration of Data Storage

The information will be deleted after one year at the latest. 

10. Competitions

10.1 Purpose and Legal Basis of Processing

VBN processes the data of competition entrants, i.e. their names and addresses, in accordance with Article 6 para. 1 f) GDPR with the legitimate interest of being able to run the competition. The winners will be notified in writing. 

10.2 Recipients of the Personal Data

The data is not passed on to third parties.

You are entitled to object to processing. For example, you can do this at datenschutz(at)herodata.de or by sending a notification to Verkehrsverbund Bremen/Niedersachsen, Am Wall 165-167, 28195 Bremen. Your personal data will be deleted if it can no longer be used to ensure legitimate interests. 

10.3 Duration of the Data Storage

We will store winners’ data in line with the tax and commercial law regulations for up to 10 years, and then it will be deleted.

11. Applications

11.1 Purpose and Legal Basis of Processing

VBN processes the applicants’ data, i.e. their names, address and personal data provided by them in accordance with Article 6 para. 1 f) GDPR with the legitimate interest of being able to complete the application process. 

11.2 Recipients of the Personal Data

The data is not passed on to third parties.

You are entitled to object to processing. For example, you can do this at datenschutz(at)herodata.de or by sending a notification to Verkehrsverbund Bremen/Niedersachsen, Am Wall 165-167, 28195 Bremen. Your personal data will be deleted if it can not processed to ensure legitimate interests. 

11.3 Duration of Data Storage

The data will be deleted 6 months after the end of the selection process if the application has not resulted in employment.

12. User’s Rights

GDPR gives you certain rights when your personal data is being processed: 

12.1 Right to Information (Article 15 GDPR):

You have the right to demand confirmation as to whether data concerning you has is being processed; if this is the case, you have a right to information about this personal data and the information listed in detail in Article 15 GDPR. 

12.2 Right to Correction and Deletion (Articles 16 and 17 GDPR):

You have the right to demand immediate correction of incorrect personal data concerning you and, where applicable, the completion of incomplete personal data.

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in detail in Article 17 GDPR applies. 

12.3 Right to Limitation of Processing (Article 18 GDPR):

You have the right to demand limitation of processing if one of the conditions listed in Article 18 GDPR applies. 

12.4 Right to Data Portability (Article 20 GDPR):

In certain cases, which are listed in detail in Article 20 GDPR, you have the right to demand receipt of the personal data concerning you in a structured, commonly used and machine-readable format or transmission of this data to a third party. 

12.5 Right to Object (Article 21 GDPR):

If data is collected on the basis of Article 6 para. 1 f) (Data Processing to Pursue Legitimate Interests), you are entitled to object to processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. 

12.6 Right to Lodge a Complaint with a Supervisory Authority

According to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes GDPR. The right to lodge a complaint may be made to a supervisory authority in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

In the Free Hanseatic City of Bremen, the competent supervisory authority is the Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen, Arndtstraße 1, 27570 Bremerhaven.

13. Automated Decision-Making

We do not use automated decision-making or profiling.

14. Video Surveillance

Video systems are used to monitor the VBN business premises, in particular the VBN Service Centre in Bremen, Am Wall 165–167, 28195 Bremen. In accordance with Article 6 para. 1 f) of the GDPR, the data is processed in the interest of preventing and investigating criminal offences. Video surveillance specifically serves to prevent criminal offences, to prevent damage to property and personal injury caused by vandalism, to prevent theft and violence and to preserve evidence and support criminal prosecution or the assertion of resulting civil law claims. This also serves to improve employees' sense of security and to protect employees from assaults.
Electronic images are created which, depending on the resolution options of the installations, enable the depiction of persons. If image data is saved, it is automatically deleted no later than 72 hours after recording. If a criminal offence is reported, the stored image data is retained for analysis until the respective proceedings are concluded, after which it is then deleted.

You can object to data processing at any time, for example by sending an email to datenschutz(at)herodata.de, or you can send a message to VBN GmbH, Am Wall 165–167, 28195 Bremen. Your personal data will then be deleted unless further processing is authorised for the protection of legitimate interests.

15. Friendly Captcha

The VBN website uses the "Friendly Captcha" service for certain actions. This service protects the website from automated attacks (bots). Friendly Captcha collects technical data such as IP addresses (one-way hashing; input value cannot be recovered), browser information and information about visits to the website. 

This data is processed by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, to determine whether the user is human or a bot. No cookies are set or used, and the data collected is not used to identify or track users. No data is stored in permanent browser storage (such as LocalStorage or IndexedDB). Any data that may be stored is deleted within 30 days. 

The legal basis for data processing is Article 6 para. 1 sentence 1 f) GDPR, as VBN has a legitimate interest in protecting the website from misuse. Further information on data protection at Friendly Captcha can be found in the privacy policy of Friendly Captcha GmbH at https://friendlycaptcha.com/legal/ and at https://friendlycaptcha.com/legal/privacy-end-users/.

Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.