Privacy
You do not need to provide personal information to travel with us. You can travel anonymously if you wish.
What is personal data
Personal data are information and assessments that can be linked to you as an individual.
This is how we process personal data
All personal information you register with us is securely stored and treated confidentially. The information is only kept as long as necessary for us to process your case or perform the relevant service, and we do not store more than we have to. How long we store the information can be found in the information for the various services further down the page.
The processing of personal data is subject to the applicable personal data act and the General Data Protection Regulation (GDPR). Our internal procedures for the processing of personal data are in accordance with the Personal Data Act. Here, requirements for information security and internal control are maintained.
This is how we handle your privacy
Apps and website
Transport services
Surveys and user testing
Customer service and tickets
Data Controller
Ruter, represented by the CEO, is responsible for processing your personal data when you travel with us and use our services.
Ruter processes your personal data in accordance with the Personal Data Act.
In the processing of personal data, Ruter uses data processors within the areas of IT operations and support, debt collection, IT development, security services in ticket control, etc., as well as services related to billing and debt recovery. Some of Ruter's data processors use cloud services, but the processing will take place within the EU/EEA. All information that can be linked to you is encrypted, and the encryption key is made inaccessible to the relevant data processor.
If you travel with or use the services of other companies we collaborate with, that company will be responsible for your personal data.
Your rights
Ruter has a data protection officer who ensures that customers' rights are maintained.
According to the Personal Data Act and GDPR articles 15-22, you have the right to:
- access to the information that is stored about you
- to demand that the information about you, which is incorrect, be corrected
- to demand that your information be deleted if you withdraw consent to processing, or if Ruter does not have a legal basis for further processing. If you choose to have your information deleted, it may mean that we cannot provide you with additional services, but you can still travel with us
- å be om en begrensning av behandlingen av personopplysninger hvis du for eksempel mener de er uriktige. Dette kan du gjøre frem til opplysningene som bestrides er bekreftet som riktige. Du har også rett til å be om at personopplysningene blir lagret til du har fått avgjort et rettskrav
å få opplysningene dine overført på et maskinlesbart format til en ny behandlingsansvarlig, dersom du for eksempel flytter ut av Oslo og Akershus
Request access
If you want access to the information stored about you, you must send this in writing, either by mail or through a contact form. You can also reach out to our customer service center. For privacy reasons, information that identifies you will be sent to your mailing address.
In addition to the registered personal data, you have the right to request access to the following:
- The purposes of the processing.
- What type of personal data is processed.
- The recipients or categories of recipients to whom the personal data has been or will be disclosed, especially recipients in third countries or international organizations.
- If possible, how long it is expected that the personal data will be stored, or, if this is not possible, the criteria used to determine this period.
- The right to request the data controller to correct or delete personal data or restrict the processing of personal data concerning the data subject, or to object to said processing.
- The right to lodge a complaint with a supervisory authority.
- If the personal data has not been collected from the person registered, all available information about the source of the personal data.
- The occurrence of automated decision-making, including profiling and relevant information about the underlying logic, as well as the significance and the expected consequences of such processing for the data subject.
You can request access through the contact form or by contacting us by phone or mail.
Use our contact formAddress and phone number to the customer service center
Our mailing address:
Ruter As
PO Box 1030
0104 Oslo
Ask questions or complain
If you have questions about or wish to complain about the processing of personal data, you can contact Ruter's data protection officer. You also have the right to lodge a complaint about the processing of personal data with the Data Protection Authority.
Contact Ruter's Data Protection Officer:
Email: personvernombud@ruter.no
The consequences for your rights and freedoms
The treatment has little impact on your privacy. As a customer, you can always travel anonymously with us and we process your information to provide you with the desired services and to follow up on our transport agreement with you. As a main rule, no sensitive information is processed except in cases concerning school transport.
The information is submitted and forwarded through a secured line and stored with limited access. Procedures for various processing of personal data have been developed to ensure that your rights are protected. Privacy impact assessments (DPIA) for electronic ticketing have been conducted, with acceptable results.