Privacy policy

As the operator of the CITY CYCLING website and app, Climate Alliance takes the protection of its users’ personal data extremely seriously and abides strictly by the provisions of the data protection laws. The following privacy policy provides an overview of how we safeguard users’ protection and what types of data we collect where for what purposes and how it is used.

Privacy policy

As the operator of the CITY CYCLING website and app, Climate Alliance takes the protection of its users’ personal data extremely seriously and abides strictly by the provisions of the data protection laws. The following privacy policy provides an overview of how we safeguard users’ protection and what types of data we collect where for what purposes and how it is used.

1. Personal data

Climate Alliance collects, saves, processes and uses personal data and other data that can be related to individuals, which is collected and saved during installation and use of the app and website. Personal data comprises individual information on personal or factual circumstances relating to a specific or identifiable natural person. The data is collected and saved in compliance with the applicable data protection regulations in accordance with the European General Data Protection Ordinance (EU-GDPR), the German Federal Data Protection Act (BDSG), the Data Protection Act of the State of Hesse (HDSG), and the Saxon Data Protection Law (SächsDSG).

2. Data collection, processing and use

Users must register to be able to participate in the CITY CYCLING campaign and use the app. Registration involves the collection, processing and use of data. Data is collected when a user registers via the CITY CYCLING website or app.
We require and collect the following information from cyclists so that they can participate in CITY CYCLING:

  • Title (optional)
  • First name
  • Last name
  • Email address
  • Username
  • Password (encrypted)
  • Birth year*
  • Form of address
  • Parliamentary status
  • Municipality
  • Team
  • Routes cycled, including the date, time (optional), number of persons (who cycled the kilometres), comments (optional, potentially with a route description)

* We request your birth year in order to best tailor the campaign to participants and to enhance the usefulness of the data collected for research and municipal cycling planning.

We require and collect the following information from local coordinators:

  • Title (optional)
  • First name
  • Last name
  • Email address
  • Username
  • Password (encrypted)
  • Birth year
  • Institution
  • Department/division (optional)
  • Function (optional)
  • Telephone number
  • Address
  • Team
  • Routes cycled, including the date, time (optional), number of persons (who cycled the kilometres), comments (optional, potentially with a route description)

We require and collect the following information from CYCLE STARS:

  • Title (optional)
  • First name
  • Last name
  • Email address
  • Username
  • Password (encrypted)
  • Birth year
  • Form of address
  • Parliamentary status
  • Municipality
  • Telephone number
  • Alternative telephone number (optional)
  • Political party/institution (optional)
  • Function (optional)
  • Team
  • Routes cycled, including the date, time (optional), number of persons (who cycled the kilometres), comments (optional, potentially with a route description)

This data is collected when users register and automatically logged every time they access the CITY CYCLING website or app, or the app communicates with the server of our hosting company, Timme Hosting. This data is collected, processed and utilised to enable use of the app and website, system security, and technical administration of the network infrastructure.

RADar! reporting platform (Municipalities have the option of using/offering RADar!)

We collect the following information when RADar! reports are submitted (optional):

  • Time of the report (date, time)
  • Time of the last change (date, time)
  • Address
  • Report category / reason for report
  • Comment (optional)
  • Report coordinates (longitude and latitude)
  • Report status (not yet processed, currently being processed, processed, neutral, positive)
  • Title of the reporting person (optional)
  • First name of the reporting person
  • Last name of the reporting person
  • Email of the reporting person
  • Municipality/regional key (AGS/ARS)
  • Up to 3 photos for the report (optional)
  • Comments from other people who also reported this issue (optional)
  • Photos from other people who also reported this issue (optional)
  • Comments on the report from the local coordinator(s) (optional)

We collect the following information when comments are submitted about a particular RADar! report:

  • User ID of the commenting person
  • Email of the commenting person
  • Time of the comment

This data is collected when a user submits a report and automatically logged on a server of team red Service GmbH. It is collected, processed and utilised to enable use of the website, system security, and technical administration of the network infrastructure.

For RADar! reports submitted in Hesse:
Since many municipalities in Hesse use the RADar! reporting platform and the Meldeplattform Radverkehr (MPR) in parallel, reports submitted via RADar! can optionally also be managed by specialist MPR users or the RADar! reports can be forwarded to the MPR. The MPR is operated by ivm GmbH (Integrated Traffic and Mobility Management Frankfurt Rhine Main Region).

The RADar! coordinators’ contact details are only passed on to the specialist MPR users in these two cases. The reports submitted by users of the RADar! reporting platform, including their contact details, are also transmitted to the specialist MPR users as part of processing in the aforementioned cases.

The following information is collected during use of the CITY CYCLING app:

  • GPS coordinates (longitude and latitude, altitude, date, time, accuracy, speed)
  • 3-axis acceleration data
  • 3-axis gyroscope data
  • 3-axis magnetometer data
  • Device ID to recognise data from the same smartphone
  • Model of the smartphone used

The responsible body (Climate Alliance) will transfer the data collected and processed to flow.d GmbH i.G. and Vision Velo UG where it will be processed further exclusively for the purposes of research and municipal cycling planning. The following information is transmitted for this purpose: GPS coordinates, 3-axis acceleration data, 3-axis gyroscope data, 3-axis magnetometer data, user ID, device ID, year of birth, form of address, municipality, smartphone model and operating system, build version of the app components.

The personal data transmitted for the aforementioned purposes will be processed and used in compliance with the European General Data Protection Regulation (EU-GDPR), the German Federal Data Protection Act (BDSG) and the Saxon Data Protection Law (SächsDSG).

Data processing on the city-cycling.org website
For technical reasons, Climate Alliance automatically collects and saves information that a user’s browser transmits to it in its server log files. This includes the following information:

  • Browser type/version
  • Operating system used
  • Referrer URL (page previously visited)
  • Host name of the accessing computer (IP address)
  • Date and time of the server query
  • Files viewed
  • Data volume sent

Climate Alliance is not able to assign this data to a specific person. This data is not combined with any other data sources; the data will moreover be deleted following a statistical analysis.

In order to enhance the functionality of our website and to make the use of our website more convenient for users, we use so-called “cookies”. These help to make our offers more user-friendly, effective and secure. Cookies are small text files that are downloaded on a user’s computer and saved by their browser. Most of the cookies that we use are so-called “session cookies”, which are automatically deleted when a user’s visit to the website ends. Cookies do not damage the user’s computer or contain any viruses. Users are able to prevent cookies from being stored on their computer by changing the appropriate settings in their browser. However, please note that doing so may limit the functionality of our website.

Tracking and web analytics services

As the provider of this website, we use services of etracker GmbH based in Hamburg, Germany (www.etracker.com) to analyse usage data. Cookies are used to enable a statistical analysis of the use of this website by users. etracker cookies do not contain any information enabling the identification of users.

The data generated in this way is processed and stored by etracker on our behalf exclusively within Germany and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded an ePrivacyseal.

Given that our users’ privacy is particularly important to us, etracker anonymises the IP address as soon as possible and converts login or device IDs into a unique key that is not assigned to a person. etracker does not use the data in any other way, combine it with other data or pass it on to any third parties.

For more information on data protection at etracker, see here.

3. Purpose of the processing and use of personal data

Any processing or use of personal data will only take place for the purposes stated in this privacy policy and to the extent necessary to achieve the respective purpose.

The data detailed in Section 2 will be used by Climate Alliance and those involved in the campaign (local and state coordinators, team captains, RADAR! coordinators) for campaign communication. Among others, this will include sending the following:

  • newsletters from Climate Alliance to local coordinators
  • emails from Climate Alliance to campaign participants
  • newsletters and municipality-specific information from local and state coordinators to participants in their respective municipalities
  • emails from team captains to team members
  • emails between RADar! coordinators (or those commissioned by the municipality) and the reporting persons (e.g. in the event of specific queries/concerns regarding reports submitted)
  • team chat messages in cyclists’ login area and app
  • materials (posters/flyers/merchandise) to local and state coordinators

The user will moreover only be shown the data (title, first and last name, total kilometres) for their team. When the according privacy settings are selected, the user’s team will only be able to see the user’s title and initials; the total kilometres cycled can also be hidden if desired. The local and state coordinators can use the data to award prizes among participants within the municipality.

Personal data is only transmitted to flow.d GmbH i.G. and Vision Velo UG and used by the parties named for the purposes detailed in Section 2.

Personal data will not be published or passed on to any third parties. The exception here is those participating in the special CYCLE STAR category whose title, first and last names, municipality and kilometres cycled per week will be listed on www.city-cycling.org/results.

By order of competent authorities, we are permitted to share personal and/or user-related information in individual cases insofar as this is necessary for law enforcement, to avert danger, to fulfil the statutory tasks of the authorities for protection of the constitution or counter-intelligence, or to exercise the rights to intellectual property.

State coordination

In Baden-Württemberg, as part of the RadKULTUR initiative of the Ministry of Transport Baden-Württemberg, which is managed by the following consortium:

IFOK GmbH
Berliner Ring 89
64625 Bensheim

die wegmeister GmbH
Hallstraße 25
70376 Stuttgart

In Bavaria, on behalf of the Bavarian State Ministry for Housing, Construction and Transport and the AGFK Bavaria:

Green City Experience GmbH
Albert-Roßhaupter-Str. 32
81369 Munich

In Hesse, on behalf of the Hessian Ministry of Economics, Energy, Transport and Housing:

ivm GmbH
Bessie-Coleman-Straße 7
60528 Frankfurt am Main

In Lower Saxony:

Ministry for Science and Culture of Lower Saxony

Referat 23
Hans-Böckler-Allee 5
30173 Hannover

As well as the affiliated regional state offices for schools and education in Osnabrück and Braunschweig

In North Rhine-Westphalia, on behalf of the Ministry of Transport of the State of North Rhine-Westphalia:

Verkehrsverbund Rhein-Sieg GmbH
Zukunftsnetz Mobilität NRW
Glockengasse 37-39
50667 Cologne

In Saarland:  

Ministry for Economic Affairs, Labour, Energy and Transport
Franz-Josef-Röder-Straße 17
66119 Saarbrücken

The state coordinators may only pass on the contact details of the local CITY CYCLING coordinators to the responsible state ministry for the CITY CYCLING campaign (e.g. for thank-you letters, invitations to CITY CYCLING events, etc.).

4. Storage and processing of personal data

Any personal data that is stored will be irretrievably deleted as soon as it is no longer required for the purposes for which it was collected or as soon as a user requests this.

In order to facilitate users’ participation in the CITY CYCLING campaign, their access details will remain valid for a maximum of two further years. This means that they will not need to re-register if they participate in CITY CYCLING again in the following year or the year after that. To ensure the efficient use of storage capacities, user accounts that have not been accessed for more than two years will be deleted. The same applies for inactive accounts for which registration has not been confirmed.

Climate Alliance, the responsible coordinators and the team captains may store the aforementioned data of the cyclists (only the title, first and last names and email address). They are not permitted to pass any data on to third parties.

The report data from the RADar! reporting platform is available to the responsible parties in the respective municipality for different periods of time, depending on the licence model booked. The report processing period – so the period during which the local coordinators in the municipalities are able to process and manage reports – is one or three years as standard. The participating municipalities are able to extend this period as often as desired.

To be able to inform reporters of the status of their report, the report data will be anonymised at the latest five years after the report was submitted. Personal identification will then no longer be possible. Only the report itself and its status (not yet processed, currently being processed, processed, neutral, positive) will remain.

5. Data security

In order to protect users’ personal data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons, both Climate Alliance, the companies commissioned by Climate Alliance with infrastructure support (team red Service GmbH, reflect.media GmbH, Timme Hosting GmbH & Co. KG) as well as flow.d GmbH i.G. and Vision Velo UG take appropriate personnel, technical and organisational measures to comply with the data protection requirements of the German Federal Data Protection Act (BDSG), Articles 5 and 32 of the European General Data Protection Regulation (EU-GDPR), Section 10 of the Data Protection Act of the State of Hesse (HDSG), and Section 10 of the Saxon Data Protection Law (SächsDSG). The security measures are continuously updated in line with technological developments.

6. Voluntary nature of consent

Consent to the collection, processing and use of data is voluntary. Users are able to withdraw their consent at any time without any adverse consequences.

7. Right to withdrawal, rectification and deletion of data

Users are entitled to withdraw their consent to data processing as well as to rectify, limit the use of or delete the personal data collected at any time. Users should direct their declaration of withdrawal to:

Climate Alliance
Dr. Wolfgang Hofstetter
Galvanistraße 28
60486 Frankfurt am Main
Germany

Or send an email to: datenschutz@stadtradeln.de

8. Right to information

The user has the right to receive the personal data saved in a commonly used, machine-readable format.
They moreover have the right to lodge a complaint with the respective supervisory authority. As a rule, this is the supervisory authority in the user’s habitual place of residence or work or Climate Alliance’s head office (www.datenschutz.hessen.de).

Should users have questions that have not been answered in this privacy policy or desire further clarification of a particular point, please contact Climate Alliance’s Data Protection Officer: Dr. Wolfgang Hofstetter (datenschutz@stadtradeln.de).

9. Inclusion, validity and timeliness of the privacy policy

This privacy policy is currently valid and dated 10 March 2021. Climate Alliance reserves the right to change its privacy policy as necessary at any time with effect for the future and in particular to adapt it to the latest technical developments or implementation.

10. Protection of minors and participation restrictions

Pursuant to the European General Data Protection Regulation (EU-GDPR), users must be at least 16 years of age to participate in the CITY CYCLING campaign and use the CITY CYCLING app. They must obtain consent from their legal guardian otherwise. This being said, a responsible adult (e.g. a parent or schoolteacher) is able to enter the kilometres on their behalf – the number of cyclists will need to be adjusted accordingly in the Settings tab.

11. Declaration of consent
Users hereby declare that they have understood and agree to the above privacy policy. If they do not acknowledge this, then they will not be permitted to participate in the CITY CYCLING campaign or to use the CITY CYCLING app.