Ruter receives personal information about you from the local school offices, which do this on behalf of the student/guardian. Ruter processes your personal data in accordance with the Personal Data Act and the EU's General Data Protection Regulation (GDPR).

This information will also be included in the decision letter.

This is what we handle

Customer Information: This includes contact details such as name, address, and social security number, which are used in conjunction with your name to identify you so that you can receive the desired transportation. If you are requesting transportation for medical reasons, we also process any relevant health information you have provided.

Travel information for regular school transportation: This is information about, for example, which zone and stop you started your journey at, when you scanned your travel card, which type of ticket you used, and your travel card number. Information from the last eight scans is stored on the travel card.

Special transport travel information: Details related to the time and place of pickup.

Legal basis

The treatment is necessary to make and implement decisions regarding school transport according to the Education Act and is authorized by the Education Act. No more information is processed than necessary, and instead, you can choose to travel anonymously with Ruter at your own expense.

Purpose

Ruter processes personal data in order to make decisions regarding school transport according to the Education Act, and to plan and follow up the service for students who are entitled to special transport

Access and use

Access to personal data is restricted and used solely in connection with decisions and administration of school transport. Ruter may also contact you as a user to evaluate the service, and may use a supplier to conduct the evaluation in this context. Additionally, the transporter is given access to the necessary personal data to carry out the assignment.

Your information will not be disclosed unless we are required to do so by public authorities, but statistical data from the survey will be reported to Akershus County Municipality. These data will not be traceable to you. Your information may also be forwarded to a complaints body in connection with a potential complaint.

Your rights during the treatment

You have the right to access and correct or delete any information stored about you, and to have the information transferred to a new data controller. You also have the right to request restricted processing until alleged inaccurate information is corrected.

Due to reasons related to your particular situation, you have the right to object to the processing, but this will result in us being unable to provide special transport. Instead, we can implement additional information measures related to access to the information and insight

Learn more about your rights under Privacy in Ruter's services

Storage and deletion

Your customer information will be stored for up to one year after your entitlement to school transport has ceased, due to the reporting obligations to Akershus County Municipality.

If your application is rejected, personal data will be deleted no later than one month after the appeal deadline expires, or no later than one month after any appeal has been processed.

Travel information is stored for up to 365 days after the ticket has expired, or 365 days after you have submitted a written complaint to Ruter about an aspect of your journey. This is done to manage your right to complain to the Transport Complaints Board.

Privacy implications

In cases of special transportation services, simple health information such as a doctor's statement, which confirms eligibility for special transportation, is processed. Therefore, a number of measures have been implemented to protect your privacy. All communication involving health information occurs over secure channels. Access to the information is restricted, and procedures for how the processing should take place are regularly followed up. In addition, we encourage everyone who submits personal information not to provide more health information than necessary for the case's clarification. The privacy implications for the registered individual are therefore considered acceptable.