Privacy Policy pursuant to Article 13 and 14 GDPR for the sale of personalised tickets from Wiener Linien outside the online offer

These are the data protection provisions for the sale of personalised tickets from Wiener Linien outside the online offer. The privacy policies that are viewed at the time of purchase or are available online at www.wienerlinien.at/datenschutz always apply.

Definitions:

Personal data (hereinafter also referred to as data) is information about a person whose identity is determined or at least determinable. This includes, for example, your name, your contact details, your e-mail address, but also your IP-address.

Processing or data processing means any operation or set of operations which is performed upon data, whether or not by automated means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller, e.g. external IT service providers.

1. Data processing during purchase

1.1. Processed date

1.1.1. Your personal data (e.g. first and last name, academic degree, title, address, date of birth, telephone number, email address, payment details, time of purchase, booking number, customer number, etc.) provided when ordering a personalised ticket (e.g. annual ticket) and generated by the purchase will be stored. Furthermore, your chosen means of payment and the last 4 numbers of the debit/credit card used will be stored.

We would like to point out that no credit card data, such as credit card numbers, are stored in Wiener Linien systems

1.1.2. When purchasing an annual pass, a photograph and bank details (if the annual/monthly direct debit option has been selected) are also stored. When purchasing a discounted annual ticket (senior, youth and special), the fact that the age verification was successful is stored. In the case of the special annual ticket, information about whether the eligibility check was successful is also stored. This may result in health data being stored, as a disability must be present in order to purchase a special annual ticket. However, no health data in the strict sense is stored; only information about whether the requirements for obtaining a special annual pass are met is recorded. We do not store a copy of your ID card.

1.1.3. When purchasing tickets for students, with the exception of the monthly holiday ticket, your matriculation number and the name of the university at which you are enrolled will also be stored.

1.1.4. When purchasing the Youth Ticket or the Top Youth Ticket and the reduced monthly ticket for Mobile Pass holders and Social Pass holders, it is possible to have your name printed on the ticket, but this data is not stored.

1.1.5. As part of the sale of the Climate Ticket Austria (KTÖ), we process your data, namely your name, the validity of the KTÖ, the time of purchase and a booking number. We process all other data that you provide when purchasing the KTÖ (other master data, photo, etc.) on behalf of the Ministry of Transport.

1.1.6. If the invoice recipient is different from the buyer, the name and address of the invoice recipient provided to us by the buyer will be stored.

1.1.7. If you purchase a ticket for another person, the data contained in the authorisation (e.g. name and, if applicable, date of birth) will be stored. If you are purchasing an annual pass for a third party, a visual check will be made of both your photo ID and the ID of the person for whom the annual pass is intended. No photo IDs are stored or processed in our systems..

1.1.8. If you have difficulties with your annual pass (e.g. because it has not been delivered or has been lost) or wish to cancel your annual pass contract, we will also process the data you provide in the relevant form (e.g. reason for cancellation) and any supporting documents in our system.

1.1.9. Your e-mail address and telephone number will be processed for customer service purposes.

1.1.10. If you have given your consent, your data specified in the consent may be used by Wiener Linien for marketing purposes.

1.1.11. If you give your consent, your personal data will be processed for marketing purposes, namely name, address, contact details, contract-, billing-, usage- and consumption data, commercial key figures, customer contact behaviour and response behaviour, and transmitted to those within the Wiener Stadtwerke Group.

1.2. Purpose of processing

1.2.1. The personal data provided at the time of purchase and generated by the purchase (see 1.1.1; 1.1.3; 1.1.5; 1.1.6 and 1.1.7); the data that you have provided due to a problem with your annual pass or if you wish to cancel your annual pass contract (see 1.1. 7) and the data you have provided in a form and in any supporting documents (see 1.1.8) will be processed for the fulfilment of the contract, for the processing of the purchase, billing, contract administration and for the fulfilment of legal retention obligations arising from the contractual relationship. The processing of your personal data is absolutely necessary due to the contractual relationship.

1.2.2. Your photograph is required for printing the card when ordering an annual pass. We require your bank details for the purchase of an annual pass, if the annual/monthly direct debit option has been selected (see 1.1.2), for the fulfilment of the contract, for processing the purchase, billing, contract administration and for the fulfilment of legal retention obligations arising from the contractual relationship. The processing of your personal data is absolutely necessary due to the contractual relationship.

1.2.3. You have the option of having your name printed on the ticket in order to personalise it and protect it from unauthorised use by third parties (see 1.1.4).

1.2.4. Your e-mail address and telephone number are processed in particular for customer service (see 1.1.9).

1.2.5. If you give your consent (see 1.1.10), Wiener Linien will use the data you provide during and after the existence of contractual relationships to contact you about offers and innovations by post, e-mail, telephone/SMS, social media channels or apps (marketing purposes). 

1.2.6. If you give your consent (see 1.1.11), your personal data, namely name, address, contact details, contract, billing, usage and consumption data, commercial key figures, customer contact behaviour and response behaviour will be processed for the purpose of ensuring data quality, consistency and up-to-dateness, as well as for the purpose of developing new products, the categorisation of customers into groups and subsequent marketing relating to the provision of products and services in the energy, telecommunications, building management, IT, funeral and mobility sectors during and after termination of the present contract exclusively within the Wiener Stadtwerke Group to the following companies for the above-mentioned purposes:

WIENER STADTWERKE GmbH, WIEN ENERGIE GmbH, WIEN ENERGIE Vertrieb GmbH & Co KG, Wiener Netze GmbH, WIENER LINIEN GmbH & Co KG, WIPARK GmbH, Aktiengesellschaft der Wiener Lokalbahnen, Wiener Lokalbahnen Verkehrsdienste GmbH, Upstream - next level mobility GmbH, immOH! Energie- und Gebäudemanagement GmbH, BESTATTUNG WIEN GmbH, Friedhöfe Wien GmbH, WienIT EDV Dienstleistungsgesellschaft mbH.

Marketing includes direct marketing by electronic means or other media, such as mailings, e-mails, SMS/MMS or phone calls.

1.3. Data Transmission

1.3.1. If payments are made by direct debit order (annual/monthly; see 1.1.2), your payment-related data will be transmitted to our bank for the purpose of payment. This includes your name, the claim, your IBAN/BIC, the purpose of use and the execution date.

1.3.2. In the case of card payments, all necessary personal data (e.g. name, IBAN/BIC and booking receipt for the purchase) are transferred to our external financial service providers for payment in accordance with the Payment Services Directive.

1.3.3. If you have changed your address with WIEN ENERGIE GmbH or WIEN ENERGIE Vertrieb GmbH & Co KG, these companies will send us your current address if you have agreed to this. This will then be updated for you in the Wiener Linien customer database.

1.3.4. Furthermore, your data (name and address) may be transmitted to the shipping company commissioned by us to deliver the goods.

1.3.5. Your purchase data will be transmitted to our tax advisors/auditors (purchase data) to fulfil our tax obligations.

1.3.6. Data relating to your annual pass (name, date of birth, address) can be transmitted to Verkehrsverbund Ost-Region (VOR) Gesellschaft m.b.H. for the purpose of contract fulfilment.

1.3.7. If you have a valid annual pass and are unable to present it when inspected by VOR or ÖBB employees, your first and last name, date of birth and customer number may be transmitted to Verkehrsverbund Ost-Region (VOR) Gesellschaft m.b.H. and ÖBB Personenverkehr AG for the purpose of contract fulfilment or we may receive them from the companies specified.

1.3.8. If you purchase a Climate Ticket Austria (KTÖ) and were previously an annual season ticket customer, the Ministry of Transport will be informed of this for billing/billing purposes.

1.3.9. If you are in arrears with the payment of tickets (e.g. annual tickets), or if your account is not covered by SEPA direct debit, your data will be forwarded to a debt collection agency or a commissioned lawyer and, if necessary, subsequently to a competent court for further legal action.

1.4. Legal Basis

1.4.1. The processing of your purchase data (see 1.1.1 to 1.1.4 and 1.1.6 to 1.1.8) is based on Art. 6 para. 1 lit. b (necessary for contract fulfilment), lit. c (fulfilment of legal obligations), and/or Article 9 (2) (b) (social security and social protection) as well as Article 9 (2) (g) (significant public interest).

1.4.2. Processing in connection with the KTÖ (see 1.1.5) is carried out on the basis of the legitimate interest in the settlement of accounts with the Ministry of Transport.

1.4.3. Your e-mail address and telephone number (see 1.1.9) are processed for customer service purposes on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

1.4.4. We process your data for marketing and informational purposes (see sections 1.1.10 and 1.1.11) based on your consent in accordance with Article 6(1)(a) of the GDPR.

1.5. Deletion/Storage period

1.5.1. In principle, your personal data will be stored for as long as it is necessary in relation to the purpose it was collected for. Additionally, your personal data will be stored for as long as legal obligations require the processing or the retention is necessary for the establishment, exercise or defence of legal claims.

1.5.2. Your purchase data (see 1.1.1-1.1.3; 1.1.5-1.1.9) will be deleted after 7 years due to statutory retention obligations. This period begins at the end of the calendar year in which the last change to the receipt or the last full payment was made.

The photograph provided by you (see 1.1.2) for the issuing of the annual ticket will be deleted 3 months from effectiveness of the contract termination.

1.5.3 You can withdraw your consent to the processing of your personal data for marketing and information purposes (see points 1.1.10 and 1.1.11) at any time free of charge by sending an e-mail to kundendialog@wienerlinien.at or by post to Wiener Linien GmbH & Co KG, Sales and Consultancy Department, 1030 Vienna, Erdbergstraße 202.

2. Processors

Wiener Linien uses the following categories of processors:

• Server hoster
• Technical service providers for the operation of our Cash register system
• Technical service providers for the management of annual and semester tickets

3. Your rights

3.1.1. You have the right to information, correction of your data, deletion under certain conditions, digital data transfer and restriction of processing. You have the right to object to the processing of your data. If data processing by Wiener Linien is based on consent, you can withdraw this consent at any time. To assert your rights, please send an e-mail to datenschutz@wienerlinien.at or write to Wiener Linien GmbH & Co KG, Compliance & Checks, Erdbergstraße 202, 1030 Vienna.

3.1.2. Furthermore, you have the right to lodge a complaint with the Austrian data protection authority, which you can make use of in the event of data protection violations.

4. Contact controller and data protection officer

For more information please contact:

Wiener Linien GmbH & Co KG

Erdbergstraße 202

1030 Wien

Tel.: +43 (0)1 7909 100

E-Mail: kundendialog@wienerlinien.at  
 

You can reach the data protection officer of Wiener Linien at:

WIENER LINIEN GmbH & Co KG

Stabsstelle Compliance & Checks

Erdbergstraße 202

1030 Wien

Tel.: +43 (0)1 7909 100

E-Mail: datenschutz@wienerlinien.at

 

October, 2025