Danish

Privacy policy for DOT webshop

The DOT Webshop is operated by Trafikselskabet Movia for DOT - Din Offentlige Transport I/S

Data responsibility - contact information

DOT and Movia jointly share responsibility for the processing of your personal information when you make a purchase on the DOT Webshop. We have entered into an agreement regarding our joint data responsibility. If you have questions or wish to exercise your rights, please contact Movia. Trafikselskabet Movia Gammel Køge Landevej 3
2500 Valby
CVR-nr. 29896569
Phone: +45 3613 1400
E-mail: movia@moviatrafik.dk Movias Data Protection Officer (DPO): Bech-Bruun Advokatpartnerselskab Langelinie Allé 35
2100 København Ø
CVR nr.: 3853 8071
Phone: +45 7227 3002
E-mail: dpo.moviatrafik@bechbruun.com
Safe message function via: https://dpo.bechbruun.com/movia DOT – Din Offentlige Transport I/S Gammel Køge Landevej 3
2500 Valby
CVR-nr. 38181793
E-mail: mail@dinoffentligetransport.dk
Phone(DOT Customer Service): +45 7015 7000

Purpose and Legal Basis

When you purchase a product on the DOT Webshop, we collect and process information about you. The information is necessary for us to:
  • Process your purchase and deliver the products you have ordered, as well as collect payment, etc.
  • Verify your eligibility for traveling with a specific customer type, e.g., as a senior citizen/pensioner/disability pensioner in sheltered employment.
  • Respond to inquiries/complaints from you regarding your purchase and store correspondence with you in our record-keeping system.
  • Maintain documentation for accounting regulations.
Our legal basis for processing is:
  • Article 6(1)(b) of the General Data Protection Regulation (GDPR) (to fulfill a contract with you).
  • Article 6(1)(c) of the GDPR (compliance with our obligation to retain accounting records, the duty to record correspondence, and submission of material to the archives in accordance with archive law).
  • Article 6(1)(e) of the GDPR (necessary for the performance of a task carried out in the public interest or in the exercise of official authority).
  • Section 11(1) of the Data Protection Act (CPR number).

We process these types of data

We can process the following personal information when you shop on the DOT Webshop: Name, address, email, phone number, delivery address, reference, image, purchase history, zones, and the validity period of purchased products. When purchasing, renewing, and refunding pensioner cards, additionally: CPR number, master card number, pensioner group and type, and uploaded documentation for certain pensioners. When purchasing special tickets for disability pensioners in sheltered employment, additionally: confirmation that the applicant is in sheltered employment. If you shop as a public or business customer, additionally: Contact person's name, company/organization, VAT number, username, and password. Information about the payment card you use is entered directly on an encrypted payment page at DIBS Payment Services A/S to complete your payment. Therefore, we do not have access to your card details. All transfers of payment card transactions are encrypted and in accordance with the rules set by the card issuers. For information about the data we process when you use our website, www.dinoffentligetransport.dk, please see the Privacy policy for dinoffentligetransport.dk For information about cookies on the website, please follow the "Cookies" link in the bottom of the website.

Where do the information come from?

The majority of the information we process is provided by you when you purchase tickets or cards. For the purchase and renewal of pensioner cards, you need to use MitID. This information is processed by the CPR Register and Udbetaling Danmark; no individuals at DOT and Movia have access to your CPR number. Your CPR number is stored in your browser session until it expires. A session is identified when the website recognizes your visit through a cookie, ensuring that your data can be processed in connection with your purchase on the DOT Webshop. Your personal data is not stored in this context. The session expires after 20 minutes of inactivity. In the context of using MitID, we receive information about your name, date of birth, address (if you do not have a confidential address), MitID user number, and a personal identification number. Read more about the processing of information in connection with the use of MitID at mitid.dk https://www.mitid.dk/juridisk/privatlivspolitik/ Information about your status as a disability pensioner (group and type) is processed through an automatic lookup in Udbetaling Danmark's systems when you are logged in with MitID.

Data controllers and recipients

The information is stored by Movia and DOT and with our IT service providers, who are subject to a data processing agreement and only act according to our instructions. In some cases, we may need to disclose some of your information to others. Information about your payment card is directly disclosed to DIBS Payment Services A/S, which handles the payment process. Data from the DOT Webshop may be disclosed to DSB, Movia, or Metroselskabet if it is necessary for independent case processing when you contact them regarding public transportation, including processing cases related to fines issued by the individual company. If you owe money for purchases in the DOT Webshop that are not paid, Movia must send the debt for collection to Gældsstyrelsen, according to the Act on the Recovery of Debt to the Public, and your personal information will be disclosed to Gældsstyrelsen.

Storage time

Information about purchases and renewal of travel passes is kept for the current year plus 3 years due to our obligation to retain accounting records and to respond to your inquiries. However, requirements that are under collection by Gældsstyrelsen may be kept for a longer period. Data about pensioner group and type as well as your calculated age are retained for 1000 days. Correspondence and other data with you are stored in our record-keeping systems and are deleted at the earliest when they are handed over to the National Archives in accordance with archive law rules.

Your rights

The legislation provides you with some general rights. If you wish to exercise your rights, please contact us. We will investigate whether the conditions are met.
  • The right to access information: You have the right to access the information we process about you, as well as additional information.
  • The right to rectification: You have the right to have inaccurate information about yourself corrected.
  • The right to erasure: In special cases, you may have the right to have information about you deleted before the usual general deletion time.
  • The right to restriction of processing: In certain cases, you have the right to have the processing of your personal information restricted. If you have the right to restrict processing, we may only process the information in the future, except for storage, with your consent or for the establishment, exercise, or defense of legal claims or to protect a person or important public interests.
  • The right to object: In some cases, you have the right to object to our processing of your personal information.
You can read more about your rights in Datatilsynets' guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

Complaints

If you are not satisfied with our processing of your personal information, we would like you to contact us. See our contact information above. You also have the right to file a complaint with Datatilsynet (the Danish Data Protection Agency). See how to contact Datatilsynet at www.datatilsynet.dk.   Version 1.3, November 2nd 2023