Im Folgenden möchten wir Sie über die Arten von personenbezogenen Daten, die von Citylink.hu verarbeitet werden, und über die Zwecke dieser Datenverarbeitung informieren. Wir möchten Sie auch über wichtige rechtliche Aspekte des Datenschutzes, wie z.B. Ihre Rechte, informieren.

CONTROLLER

With the exception in Section 1. Registration – Citylink Account, the party responsible for processing your data (controller) in regard to any content and customer’s bookings and arrangement of transportation services on the following websites: www.citylink.hu, is Radinum Kft., 2093 Budajeno, Regesz u. 24. Hungary, EU VAT: HU14350676.

If you have any questions regarding data protection, please address your query to the following e-mail address: da************@******nk.hu.

KATEGORIEN VON PERSONENBEZOGENEN DATEN

The following categories of personal data may be processed by us in connection with our services:

• Master data which include a person’s first name, surname, address (private and/or business), date of birth.
• Communication data which include a person’s telephone number, email address (private and/or business), as well as the content of communications (e.g., emails, letters).
• Contract data which include location and time of pick-up, destination, payment details, and information on loyalty and affiliate programs.
• Voluntary data which includes data that you provide to us on a voluntary basis that we do not expressly request from you, such as your preference for a vehicle category, for example.

DIE RECHTSGRUNDLAGE FÜR DIE DATENVERARBEITUNG BEI Citylink.hu

Art. 6 (1) sentence 1 point a) of the General Data Protection Regulation (GDPR): Pursuant to this provision, the processing of your personal data is lawful if and to the extent that you have given your consent to such processing.

Art. 6 (1) sentence 1 point b) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for the performance of a contract (e.g., transportation service agreement) to which you are a party, or in order to take steps at your request prior to entering into a contract (e.g., when booking a vehicle).

Art. 6 (1) sentence 1 point c) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for compliance with a legal obligation to which Citylink.hu is subject.

Art. 6 (1) sentence 1 point f) GDPR: Pursuant to this provision, the processing of your personal data is lawful if such processing is necessary for the purposes of the legitimate interests pursued by the controller, i.e., Citylink.hu, or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, i.e., you yourself.

DIE ZWECKE DER DATENVERARBEITUNG BEI Citylink.hu

1. ANMELDUNG – CITYLINK-KONTO

ZWECKE DER DATENVERARBEITUNG

We process master data, communication data, contract data and financial data in a database of Citylink.hu and also in the ERP system of the owner of citylink.hu website, Radinum Kft., in particular for the purposes of registering and managing Citylink customer accounts, of providing customer relations services and of processing and handling invoices. The respective responsibilities have been determined in an arrangement concerning joint responsibility as joint controllers. In the scope of their joint responsibility under data protection laws, Citylink have made an arrangement determining who is responsible for the compliance with the respective obligations under the GDPR. This refers, in particular, to the rights of data subjects and the fulfilment of the duties to provide information pursuant to Articles 13 and 14 GDPR.

RECHTSGRUNDLAGE FÜR DIE OBEN GENANNTE VERARBEITUNG

Art. 6 (1) sentence 1 point a) GDPR applies to the processing of data based on your consent; Art. 6 (1) sentence 1 point f) GDPR applies to the processing that is based on the legitimate interest of Citylink.hu.

BERECHTIGTES INTERESSE, SOWEIT ART. 6 ABS. 1 SATZ 1 BUCHSTABE F) GDPR AUF DIE BETREFFENDE VERARBEITUNG ANWENDBAR IST

Our legitimate interest in processing your personal data for the purpose of a single Citylink.hu account is that we are thus able to provide our customers with all Citylink.hu services under one single interface and to offer our customers the best possible services, thereby enhancing customer satisfaction.

KATEGORIEN VON EMPFÄNGERN IHRER DATEN

Citylink.hu transmits your personal data to Radinum Kft. as the joint controller within the meaning of Art. 26 GDPR.

2. BUCHUNG

ZWECKE DER DATENVERARBEITUNG

Personal data are collected and processed via websites, the app, the telephone, or an intermediary, for example, if you provide such data, e.g., especially for the purpose of arranging transportation service agreements with third parties transportation service providers for the booking of vehicles, for the purpose of using the platform with a registered account, for the purpose of identification by logging in or for the purpose of communicating with us, e.g., through the forms that you submit to us or by sending e-mails to us. The personal data that we collect include:

• Master data
• Communication data
• Contract data
• Geolocation data
• Data about user preferences

We use these data for the purposes described above or for purposes that arise from the respective request, for example, to process specific booking requests or to process your preferences.

The personal data of users registered on the website is also stored in their own user profile. All users can view, edit or delete their personal data at any time (except that they cannot change their own username). Website administrators can also view and edit this information.

The Citylink.hu booking process provides you with the option of storing a credit card and paying for your ride by credit card. Citylink.hu uses a PCI-DSS certified payment service provider (PSP) for credit card payments. This service is required to protect your credit card information.

Citylink.hu itself does not store any of your credit card information. In order to allow you to reuse an already-registered card for future bookings, we simply store a reference number that uniquely identifies your credit card.

RECHTSGRUNDLAGE FÜR DIE OBEN GENANNTE VERARBEITUNG

Art. 6 (1) sentence 1 point b) GDPR applies to data processing for the fulfilment of transportation service agreements concluded between you and third party transportation service providers (booking vehicles), as well as for the fulfilment of the platform usage contract that was concluded with you. Art. 6 (1) sentence 1 point f) GDPR applies to the processing of data to the extent required to settle accounts vis-à-vis third parties, to assert our own claims, and to mitigate risks.

KATEGORIEN VON EMPFÄNGERN IHRER DATEN

We will disclose your data to the following recipients for the purposes named above (in particular to inform the driver company about the booking or to process a payment): financial service providers and cooperation partners.

3. GPS-ORTUNG

ZWECKE DER DATENVERARBEITUNG

In order to ensure that customers can conveniently book to be picked-up from their current location by using the Citylink.hu online applications (Android and iOS apps), our apps are able to determine your location, provided that you have consented that your GPS data be transmitted in the app. These location data are not stored and are used only to determine the pick-up point. Further, we are able to determine the coordinates of drivers via their mobile phones or built-in the vehicle GPS tracker devices, even while you are in the vehicle. This helps us to arrange additional bookings and to conduct booked rides and to provide customers with information about their upcoming ride (for instance what time the driver will arrive).

RECHTSGRUNDLAGE FÜR DIE OBEN GENANNTE VERARBEITUNG

Art. 6 (1) sentence 1 point a) GDPR applies to the processing of data based on your consent; Art. 6 (1) sentence 1 point b) or f) GDPR applies to the collecting of driver location data.

BERECHTIGTES INTERESSE, SOWEIT ART. 6 ABS. 1 SATZ 1 BUCHSTABE F) GDPR AUF DIE BETREFFENDE VERARBEITUNG ANWENDBAR IST

Our legitimate interest in collecting the location data of drivers lies in offering location-related services and features.

4. GESCHÄFTSKUNDEN/ZAHLUNG DURCH DRITTE

If you book a ride through your employer, we also process your data for the purposes described in this Data Privacy Policy. This also applies mutatis mutandi if a third party is to pay the invoice.

KATEGORIEN VON EMPFÄNGERN IHRER DATEN

We transmit personal data collected during the booking flow (in particular invoice data, including possibly also in the form of monthly statements) to your employer or the third party who is to pay your invoice.

RECHTSGRUNDLAGE FÜR DIE OBEN GENANNTE VERARBEITUNG

Art. 6 (1) sentence 1 point b) GDPR provides for data processing for the purposes of booking and customer relations, otherwise Art. 6 (1) sentence 1 point f) GDPR.

BERECHTIGTES INTERESSE, SOWEIT ART. 6 ABS. 1 SATZ 1 BUCHSTABE F) GDPR AUF DIE BETREFFENDE VERARBEITUNG ANWENDBAR IST

Insofar as the processing of data for the purpose of settling the account with your employer or third parties is concerned, our legitimate interest is in being able to assert invoice amounts and other claims or to determine the party against which the damage claim is asserted.

5. SCHÄDEN, UNFÄLLE

ZWECKE DER DATENVERARBEITUNG

In the event of an automobile accident arising out of transportation services arranged for you by Citylink.hu, we may process your master data, communication data, contract data and, if applicable, data concerning health for the following purposes:

• Receiving and processing complaints;
• Providing customer services in cases of damage;
• Facilitating communication between you and insurance companies;
• Processing damages resulting from accidents (processing based on information provided by you and third parties such as the police, witnesses, etc.)

We also process your master data, communication data and contract data for purposes of fulfilling legal obligations (e.g. providing information to investigating authorities).

Should the competent authorities suspect of an administrative or criminal offence involving an automobile accident in connection with transportation services arranged for you by Citylink.hu, then we will process not only the master data pertaining to you that we have stored, but also the data conveyed to us by the competent authorities.

RECHTSGRUNDLAGE FÜR DIE VERARBEITUNG

Art. 6 (1) sentence 1 point b) GDPR applies to data processing for purposes of complaints management, providing customer services in cases of damage, and processing damages resulting from accidents.

Art. 6 (1) sentence 1 point c) GDPR applies to data processing for purposes of investigations carried out by competent legal authorities in connection with processing damages and handling claims resulting from accidents.

Art. 9 (2) point f) GDPR applies to the processing of data concerning health for purposes of establishing, exercising or defending the customers legal claims.

EMPFÄNGER/KATEGORIEN VON EMPFÄNGERN IHRER DATEN

For the purposes described in the foregoing, we disclose your data to the following recipients: public authorities (investigating authorities; regulatory authorities; police authorities), experts, assistance services providers, independent transportation service providers, lawyers and insurance companies.

6. COOKIES UND APP-ANALYTIK

ZWECKE DER DATENVERARBEITUNG

Our websites use “cookies”, and our App uses corresponding analytics tools. Cookies are small text files that are copied from a web server onto your hard disk. Cookies contain information that can later be read by a web server within the domain in which the cookie was assigned to you. Cookies cannot execute any programmes or infect your computer with viruses. The cookies used by us contain no personal data and are not linked to any such data. Analytics tools store data about the use of the app either in the app itself, or they transmit (anonymised) usage evaluations to the operator of the app.

Further information on cookies and deactivating them can be found in the cookie policy of the respective website (accessible via the link in the respective cookie banner or via the “Data Privacy Policy” menu item). You can deactivate app analytics in the app (Info à Data Privacy Policy).

RECHTSGRUNDLAGE FÜR DIE OBEN GENANNTE VERARBEITUNG

Art. 6 (1) sentence 1 point f) GDPR applies where personal data is processed.

BERECHTIGTES INTERESSE, SOWEIT ART. 6 ABS. 1 SATZ 1 BUCHSTABE F) GDPR AUF DIE BETREFFENDE VERARBEITUNG ANWENDBAR IST

Our legitimate interests in processing your personal data via our websites and app lie in our desire to optimise our Internet offering and, as such, offer our customers best possible services and increase customer satisfaction.

SPEICHERDAUER/KRITERIEN FÜR DIE SPEICHERDAUER

Citylink.hu and Radinum Kft. stores your personal data until they are no longer necessary for the purposes for which they were collected or otherwise processed (cf. → Purposes of data processing at Citylink.hu). Where Citylink.hu is under legal obligation to store personal data, it will store personal data for the preservation period stipulated by law. The preservation period for commercial documents, which include bookkeeping documents and accounting records (including invoices), is 10 years. During this period, your data may be subject to restricted use within day-to-day operations if its processing serves no further purposes. The data that are recorded by the mobile phones of drivers (cf. → GPS tracking) are erased after a period of 30 days.

INHALTE VON DRITTEN AUF DER WEBSITE

Posts available on the website may use embedded content from external sources (e.g. videos, images, articles, etc.). Embedded content from an external source behaves exactly as if you had visited another website. These websites may collect data about visitors, use cookies or third-party tracking code, monitor user behavior related to embedded content if you have a user account and are logged in to the site.

7. IHRE RECHTE

RECHTE GEMÄSS ART. 15 – 18 UND 20 GDPR

You have the right to, at reasonable intervals, obtain information about your personal data under storage (Art. 15 GDPR). The information you are entitled to includes information about whether or not Citylink.hu or Radinum Kft. has stored personal data concerning you, about the categories of personal data concerned, and about the purposes of the processing. Upon request, Citylink.hu will provide you with a copy of the personal data that are processed.

You also have the right to obtain from Citylink.hu the rectification of inaccurate personal data concerning you (Art. 16 GDPR).

You furthermore have the right to obtain from Citylink.hu the erasure of personal data concerning you (Art. 17 GDPR). We are under obligation to erase personal data in certain circumstances, including if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw the consent on which the processing is based, or if the personal data have been processed unlawfully.

Under certain circumstances, you have the right to have the processing of your personal data restricted (Art. 18 GDPR). These include circumstances in which you contest the accuracy of your personal data and we then have to verify such accuracy. In such cases, we must refrain from further processing your personal data, with the exception of storage, until the matter has been clarified.

Should you opt to change to a competitor of Citylink.hu, you have the right either to receive, in a machine-readable format, the data that you provided to us based on your consent or on a contractual agreement with us, or to have us transmit, also in a machine-readable format, such data to a third party of your choice (Right to data portability, Art. 20 GDPR).

KEINE VERTRAGLICHEN ODER GESETZLICHEN VERPFLICHTUNGEN ZUR BEREITSTELLUNG VON DATEN/FOLGEN DER NICHTBEREITSTELLUNG VON DATEN

You are not contractually or legally obliged to provide us with your personal data. Please note, however, that you cannot enter into a contract for our services if we are not permitted to collect and process the data as required for the purposes specified in the foregoing (see → The purposes of data processing at Citylink.hu)

WIDERSPRUCHSRECHT GEMÄSS ART. 21 GDPR

If the processing of your data by Citylink.hu is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art. 6 (1) sentence 1 point (e) GDPR) or if it is necessary in the legitimate interests of Citylink.hu, then you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. Citylink.hu will then end the processing, unless we can present compelling legitimate grounds for such processing that supersede the grounds for ending the processing.

You may object, at any time and without restriction, to the processing of your personal data for purposes of direct advertising.

RECHT AUF JEDERZEITIGEN WIDERRUF DER ZUSTIMMUNG

If data processing at Citylink.hu is based on your consent, then you have the right to, at any time, withdraw the consent you granted. The withdrawal of consent shall not affect the lawfulness of processing between the time consent was granted and the time it was revoked.

RECHT AUF EINREICHUNG EINER BESCHWERDE

You have the right to lodge complaints with the supervisory authority responsible for Citylink.hu. Please send such complaints to the following address:

Radinum Kft. owner of Citylink.hu website

2093 Budajeno, Regesz u. 24.

Last amended in: 12.10.2023.