Privacy Policy

This is a courtesy translation. The German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Navigo Deutschland GmbH
Musterstraße 1, 10115 Berlin, Deutschland
E-mail: datenschutz@navigo.de

2. Data Protection Officer

You can reach our Data Protection Officer at: datenschutz@navigo.de or in writing at the address above, marked "Data Protection".

3. Collection and storage of personal data

3.1 When visiting the website

When you access our website, the server automatically collects information (server log files) transmitted by your browser:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file retrieved
• Website from which access was made (referrer URL)
• Browser used and, if applicable, the operating system

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technically error-free display and optimisation of the website). Retention period: 7 days, unless required longer for security analysis.

3.2 When using the contact form

For any questions, we offer you the opportunity to contact us via the form provided on the website. The following data are processed:

• Name (required)
• E-mail address (required)
• Company (optional)
• Phone number (optional)
• Subject of your enquiry
• Content of your message

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (initiation of a contractual relationship). Your data will be used solely to respond to your enquiry and deleted after resolution, unless statutory retention obligations exist.

4. Disclosure of data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only pass on your personal data to third parties if you have expressly consented (Art. 6 para. 1 lit. a GDPR), a legal obligation exists, or this is necessary for the performance of a contract.

5. Hosting and data processing agreement

Our website is hosted by a service provider in Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

6. Cookies

We use only technically necessary cookies on this website, which are required for its operation. No tracking or marketing cookies are set. Consent is not required (Art. 6 para. 1 lit. f GDPR, § 25 para. 2 TTDSG (Telekommunikation-Telemedien-Datenschutz-Gesetz — German Telecommunications and Telemedia Data Protection Act)).

7. Web fonts

Our website loads external fonts (Google Fonts) via Google's CDN. This is necessary to ensure the correct display of the website. Your IP address is thereby transmitted to Google's servers. Legal basis: Art. 6 para. 1 lit. f GDPR. (Note: For full GDPR compliance, the fonts may be hosted locally in the future.)

8. Your rights as a data subject

You are entitled to the following rights:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to withdraw consent pursuant to Art. 7 para. 3 GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

9. Competent supervisory authority

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219, 10969 Berlin
www.datenschutz-berlin.de

10. Currency and amendments to this Privacy Policy

This Privacy Policy is currently valid and dated May 2026. The further development of our website or changes in legal or regulatory requirements may make it necessary to amend this Privacy Policy.

Note: Before publication, this document should be reviewed by a Data Protection Officer or a specialist lawyer in IT law. In particular, the sections on hosting, cookies and third-party providers should be adapted to the actual technical implementation.