Data Controller

Ruter, represented by the CEO, is responsible for processing your personal data when you travel with us and use our services.

Ruter processes your personal data in accordance with the Personal Data Act.

In the processing of personal data, Ruter uses data processors within the areas of IT operations and support, debt collection, IT development, security services in ticket control, etc., as well as services related to billing and debt recovery. Some of Ruter's data processors use cloud services, but the processing will take place within the EU/EEA. All information that can be linked to you is encrypted, and the encryption key is made inaccessible to the relevant data processor.

If you travel with or use the services of other companies we collaborate with, that company will be responsible for your personal data.

Your rights

Ruter has a data protection officer who ensures that customers' rights are maintained.

According to the Personal Data Act and GDPR articles 15-22, you have the right to:

• access to the information that is stored about you
• to demand that the information about you, which is incorrect, be corrected
• to demand that your information be deleted if you withdraw consent to processing, or if Ruter does not have a legal basis for further processing. If you choose to have your information deleted, it may mean that we cannot provide you with additional services, but you can still travel with us
• å be om en begrensning av behandlingen av personopplysninger hvis du for eksempel mener de er uriktige. Dette kan du gjøre frem til opplysningene som bestrides er bekreftet som riktige. Du har også rett til å be om at personopplysningene blir lagret til du har fått avgjort et rettskrav
  å få opplysningene dine overført på et maskinlesbart format til en ny behandlingsansvarlig, dersom du for eksempel flytter ut av Oslo og Akershus

Request access

If you want access to the information stored about you, you must send this in writing, either by mail or through a contact form. You can also reach out to our customer service center. For privacy reasons, information that identifies you will be sent to your mailing address.

In addition to the registered personal data, you have the right to request access to the following:

• The purposes of the processing.
• What type of personal data is processed.
• The recipients or categories of recipients to whom the personal data has been or will be disclosed, especially recipients in third countries or international organizations.
• If possible, how long it is expected that the personal data will be stored, or, if this is not possible, the criteria used to determine this period.
• The right to request the data controller to correct or delete personal data or restrict the processing of personal data concerning the data subject, or to object to said processing.
• The right to lodge a complaint with a supervisory authority.
• If the personal data has not been collected from the person registered, all available information about the source of the personal data.
• The occurrence of automated decision-making, including profiling and relevant information about the underlying logic, as well as the significance and the expected consequences of such processing for the data subject.

You can request access through the contact form or by contacting us by phone or mail.

Address and phone number to the customer service center

Our mailing address:

Ruter As
PO Box 1030
0104 Oslo

Ask questions or complain

If you have questions about or wish to complain about the processing of personal data, you can contact Ruter's data protection officer. You also have the right to lodge a complaint about the processing of personal data with the Data Protection Authority.

Contact Ruter's Data Protection Officer:

Email: personvernombud@ruter.no

The consequences for your rights and freedoms

The treatment has little impact on your privacy. As a customer, you can always travel anonymously with us and we process your information to provide you with the desired services and to follow up on our transport agreement with you. As a main rule, no sensitive information is processed except in cases concerning school transport.

The information is submitted and forwarded through a secured line and stored with limited access. Procedures for various processing of personal data have been developed to ensure that your rights are protected. Privacy impact assessments (DPIA) for electronic ticketing have been conducted, with acceptable results.