We are pleased that you are using our website, the FahrmitUns Pro app or the FahrmitUns Go app. The protection of your personal data is very important to us. This privacy policy applies to the FahrmitUns Pro app (for associations) and the FahrmitUns Go app (for passengers).
Table of contents
1. Controller
Ulf TreichelDeepener Str. 17
27386 Hemslingen
datenschutz@fahrmituns.de
+49 4266 9549979
2. Data collected and purposes of processing
2.1 FahrmitUns Pro
- Association data: Association name, municipality, postcode, garage location (GPS), shift plans. Art. 6(1)(b) GDPR
- Driver data: First name, last name, driving licence validity, passenger transport permit. Art. 6(1)(b) GDPR
- Device data: Device ID, device name, OS version. Art. 6(1)(f) GDPR
- GPS live location: Exact bus coordinates when live location is active – stored on Appwrite servers (EU) and continuously overwritten. Art. 6(1)(a) GDPR
- Firebase Crashlytics: Crash reports and device information. Art. 6(1)(a) GDPR
2.2 FahrmitUns Go
- Google OAuth: Google ID, name, email, profile picture. Art. 6(1)(b) GDPR
- Request stop token: Temporary token (valid 15 min) for stop activation. No permanent location stored. Art. 6(1)(b) GDPR
- GPS: Only temporarily at app start to determine the nearest stop – not stored. Art. 6(1)(a) GDPR
- Firebase Crashlytics: Same as Pro. Art. 6(1)(a) GDPR
3. Recipients of data
- Appwrite – Backend-as-a-Service, servers in the EU. Privacy Policy ↗
- Google Firebase (Crashlytics, FCM) – Crash reports and push notifications. Privacy Policy ↗
- Google OAuth – Authentication in the Go app. Privacy Policy ↗
4. Third-country transfers
Data may be transferred to the USA (Google OAuth, Firebase Crashlytics). Transfers are made on the basis of Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR. GPS data for the live location display is stored exclusively on Appwrite servers in the EU.
5. Storage duration
- Association and driver data: Until deletion request or end of association registration.
- Authentication data (Go): As long as the account is active.
- Request stop token: Automatic deletion after 15 minutes.
- GPS live (Pro): Continuously overwritten, no location history.
- GPS at app start (Go): Temporary, not stored.
- Crash data: 90 days at Firebase Crashlytics.
- Form data: Deleted after processing, usually within 30 days. Statutory retention periods (up to 10 years) reserved.
6. Cookies
The website uses only technically necessary cookies (§ 25(2) TTDSG – no consent required). The FahrmitUns Go app does not use cookies.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
__Host-PHPSESSID |
Session management and authentication | Session cookie (ends when browser closes) | FahrmitUns |
7. Your rights
- Access (Art. 15 DSGVO)
- Rectification (Art. 16 DSGVO)
- Erasure: (Art. 17 DSGVO) – for Pro app also directly in the app or via fahrmituns.de/delete-account ↗
- Restriction (Art. 18 DSGVO)
- Data portability (Art. 20 DSGVO)
- Objection (Art. 21 DSGVO)
8. Right to withdraw consent
Consents (Firebase Crashlytics, GPS, live location, Google OAuth) can be withdrawn at any time in the app settings or Google account. This does not affect the lawfulness of processing carried out prior to withdrawal.
9. Right to lodge a complaint
The State Commissioner for Data Protection of Lower SaxonyPrinzenstraße 5 · 30159 Hannover
www.lfd.niedersachsen.de ↗
10. No automated decision-making
No profiling or automated decision-making pursuant to Art. 22 GDPR takes place.
11. Changes
We reserve the right to update this privacy policy. The current version is always available at /datenschutz/fahrmituns.
13. Security measures
We implement: TLS/SSL encryption, BCrypt password hashing, regular security updates, access restricted to authorised persons. Our servers are located in Germany.