All travel cards are initially unregistered, so you can travel anonymously. We also offer services that provide you with useful help and support in case of card loss. These services require that you allow us to process some personal data.

Purpose

The purposes of processing the personal data are:

• Improved customer service and follow-up: Ruter processes personal data in order to provide you with more personalized and improved management of your customer relationship and to offer additional services. For example, if you lose or have your travel card stolen, we can use the registered information about you to transfer the remaining value to a new travel card. You pay 50 kroner for a new card. We can also refund the remaining value for a handling fee of 100 kroner.
• Grant access to MyPage. Here you can view the contents of your travel card or block it.
• Receive marketing information (includes improved customer service): You can choose to receive information about route offers and prices etc. from Ruter, including via email. If you choose to register your travel card, you can also access an overview of your consents on "MyPage".

This is what we handle

• Customer information. This includes contact details such as name, address, email, mobile number, date of birth, and travel card number.
• Travel information. This includes details such as the zone and stop where you began your journey, when you scanned your travel card, the type of ticket you used, and your travel card number. Information from the last eight scans is stored on the travel card.
• Sales information, details from the sale of a ticket or top-up/use of travel funds such as the time of purchase, amount, ticket type, and the zone in which the ticket is valid.

Payment information (for subscription) is not processed by Ruter, but by the payment intermediary.

We only process your information if you have consented to it, or to fulfill a subscription agreement with you. You can withdraw this consent at any time, or cancel the agreement.

Customer information and travel details are stored in separate databases, and access to this information is restricted. You can withdraw this consent at any time, or terminate the agreement.

Legal basis

If you subscribe to a period ticket or travel money, the legal basis for processing personal data is that we follow up on this agreement with you.

For other services described above, the basis for processing is consent.

Access and use

Access to personal data is restricted and provided on a need-to-service basis. You have the right to access and rectify, data portability, and erasure of information stored about you.

Learn more about your rights under Privacy in Ruter's services

We only combine relevant customer information and travel information upon request from the customer, for example, if you contact Ruter regarding the balance on your travel card. We do not disclose your personal information to a third party unless we are required to do so by public authorities.

Storage and deletion

Your customer information will be stored as long as you have consented to the storage, or as long as the processing is necessary to follow up on the subscription agreement with you. This assumes that there is an active travel card linked to the customer record. If you withdraw your consent, we will delete your customer information within 14 days. Personal information will additionally be deleted subsequently:

• Travel information is stored for up to 365 days after your ticket has expired, or 365 days after you have submitted a written complaint to Ruter regarding an issue with your journey. This is done to manage your right to complain to the Transport Complaints Board.
• Sales information is stored for up to 365 days after the ticket has expired, or 365 days after you have submitted a written complaint to Ruter about an aspect of your journey. This is done to manage your right to complain to the Transport Complaints Board.
• Information (both travel and customer information) that we need in order to invoice you for an agreement on automatic top-up of travel cards must be stored for 5 years due to accounting legislation.

See regulation on the Transport Appeal Board § 5-2

Withdraw consent to storage or cancel subscription

You can withdraw consent to receive information from Ruter, and you can withdraw consent to all processing of personal data. If you withdraw your consent to all processing of personal data, Ruter will delete your customer information. You can still travel with the travel card even if you withdraw consent to the storage of personal data, but you will lose access to additional services.

If you have an automatic renewal of a 30-day ticket or automatic top-up of travel funds and you cancel this agreement, you must return the travel card to us so that we can delete your information. As long as the travel card is in use, Ruter may store information about you.