Ally City Transport App: Data Protection Declaration

Section 1
General

Your personal data will be collected, processed and used by us only in compliance with applicable data protection law. The following provisions inform you about the nature, scope, and purpose of the collection, processing and use of personal data. This Data Protection Declaration applies to our “allyapp.com” websites (“Website”) and to our mobile app “Ally City Transport App” (“App”). If you are forwarded to other applications or websites through links on our App or Website, please obtain information from these platforms in each case about how your data will be handled.

Section 2
Collection, processing and use of personal data

We only collect, process, and use personal data, if you have consented to this or if the corresponding legal provisions concerning the protection of your data permit the collection, processing, and use. Please refer to the following provisions for details.

Section 3
Use for specific purpose

  1. We will collect, process, and use the personal data provided with your consent only for the purposes disclosed to you.
  2. Your personal data may only be collected, processed, and used without your separate consent, if the collection, processing, or use of the data
    1. is necessary for the preparation, negotiation, modification and fulfillment of a contract with you,
    2. is necessary to enable the use of the App,
    3. occurs for a purpose, which is directly related to the purpose to which you have granted your consent to the collection, processing, and use of your personal data,
    4. is required due to legal obligations or orders by public authorities or courts,
    5. is necessary to substantiate or protect legal claims or to defend against lawsuits, or
    6. serves to prevent abuse or other illegal activities.
  3. Please refer to the following provisions for details.

Section 4
Communication- or usage- related information

When you access our websites or use our App, communication-related information or usage-related information may automatically be recorded due to technical reasons. The recording, processing, and use of your communication- or usage-related data occurs only if, and in so far as this is necessary to enable the use of our Website and/or App and will only occur in accordance with statutory data protection rules.

Section 5
Anonymized use of data for analysis purposes

Each time you access our Website or use our App, data is recorded automatically for analysis purposes, about the Internet browser and operating system used, the domain name of the requested website and the website from which you came from and the number of visits and average staying time on our Website or App. We use this information in order to determine the attractiveness and performance of our Website and App. We are not able to make any conclusions in respect to any specific individual and will not consolidate this data with other data sources which would allow any such conclusion. This data is deleted after it has been analyzed.

Section 6
Location-based data

  1. By providing your starting point and desired destination, you may search for and compare urban transit routes within our App.
  2. If you want to use “my location” as your starting address, we determine your real-time geographic location through your mobile device. Precondition is that you have activated the location-based feature in your operating system and in our App (see subsection 3).
  3. The automatic collection, processing, and use of your location-based data for the purposes laid out in subsection 2 above require your consent. Your consent is given when you activate the location-based feature in your operating system and in our App. You may withdraw your consent at any time by deactivating the location-based feature in your operating system.
  4. We would like to point out that you may not be able to use all functions of our App in case of deactivation of the location-based feature as this feature is an important part of the App.
  5. We use the location-based data that we collect in accordance with subsection 1 and 2 in anonymized form for research on mobility services. You may withdraw your consent to the use of the location-based data for the purposes laid out in this subsection at any time by deactivating the location-based feature in your operating system.

Section 7
Push notifications

  1. During the use of the App, push notifications may be sent to you.
  2. To obtain push notifications you have to activate push notifications in the settings of your mobile device. You may deactivate the push notifications at any time in the settings of your mobile device.

Section 8
'Cookies', analytic tools, helpdesk provider

  1. Use of Cookies / Analytic tools

    Cookies are small text files, which are stored on your computer or mobile device and which automatically recognize your computer or mobile device during your next visit. There are two broad categories of cookies – ‘first party cookies’ and ‘third party cookies’. First party cookies are cookies that are served directly by us, the website and app operator, to your computer or mobile device and are used only by us to recognize your computer and/or mobile device. Third party cookies are served by a service provider on behalf of us and are used by such service provider to recognize your computer or mobile device when it visits other websites or other apps. Third party cookies are most commonly used for website analytics.

    We use both categories. We use first party cookies on our Website and in our App to help recognize your browser as a previous visitor and save and remember any preferences that may have been set while your browser was visiting our site. The third party cookies and analytic “tools” that we use are listed in the following.

    You can prevent the storage of the cookies through a corresponding setting in your browser software or, to some extent, in the settings of our App. You can also set your internet browser so that it deletes already stored cookies from your computer hard drive, blocks all cookies, or warns you before storing a cookie. We would like to point out, however, that you might not be able to fully use all functions of the Website and App in this case.

  2. Google Analytics

    We use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for our Website and App. Google Analytics makes it possible to analyze your use of our Website and App. The information generated by the cookie about your use of our Website and App (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymization, Google will truncate the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. Google will use this information on our behalf in order to analyze your use of our Website, our App, compile reports about your Website and App activities and provide additional services associated to the use of our Website and our App. The IP address transmitted by your browser in connection with Google Analytics is under no circumstances consolidated with other Google data.

    You may prevent the recording of the data generated by the cookie that is related to your use of the Website (including your IP address), the transfer of the data to Google, as well as the processing of that data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. We would like to point out, however, that you might not be able to fully use all functions of the Website or App in this case.

    Regarding the use of Google Analytics in our App: You can deactivate Google Analytics in the settings in the App.

    For further information on Google Analytics privacy policy, please see the following links:

  3. Facebook SDK

    Our App integrates the “Facebook Software Development Kit” (“Facebook SDK”). The Facebook SDK is provided by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA (“Facebook”).

    The Facebook SDK enables us to improve the success of our advertising campaigns on Facebook, e.g. by not displaying advertisements on a mobile device for Apps that are already installed on the mobile device. The Facebook SDK further allows us to analyze the installation of our App and the success of our advertising campaigns.

    The Facebook SDK also enables us to analyze users’ individual activities within the App in order to, e.g., better define the target group of an advertising campaign.

    For this purpose, our App discloses anonymized data to Facebook, namely the App-ID, App version and the information that the App was opened. In this context, the Advertising ID provided by the operating system on the mobile device serves as a pseudonym (The name can differ depending on the operating system).

  4. Adjust

    Our App uses adjust, an app performance and analysis technology by adjust GmbH (“adjust”). adjust is a web analysis service that provides mobile analytics and attribution services across advertising sources such as banner ads, Facebook mobile app install ads or QR Codes. adjust uses cookies that generate information about your interaction with our App. We use this information solely to recognize how our users engage with our App, to match our users with our advertisement campaigns and to track our marketing performance in order to optimize and analyze our mobile ad campaigns.

    In case you click on a mobile ad for our App in a third party app, the following applies: adjust collects, processes and uses certain non-personal data from you, when you click on our mobile ad in a third party app. In such case, a hashed “fingerprint” is generated, consisting of your anonymized IP address, the timestamp in milliseconds, data such as your country, language, local settings, operating system and version or app version. This fingerprint is stored temporarily for up to six hours in an in-memory database. The link in the third party app leads you to the app store. As soon as you click on the link and open our App in the store, the above-mentioned data is transferred to the adjust server and stored there.

    adjust provides us with information about the download, installation and first opening of our App on your mobile device, your interaction with our App (e.g. in-app purchase, registration, referencing) and information about which advertisements you have seen or clicked on via our App. adjust does not combine the collected data with any other data that would enable adjust to identify you.

    For further information on adjust’s privacy policy please visit the following website:

  5. Localytics

    We use Localytics, a combined analytics and marketing platform for mobile and web apps by Char Software, Inc. d/b/a Localytics (“Localytics”). Localytics uses technologies such as cookies, beacons and tags in order to analyze and track your movements in conjunction with our App and gather demographic information on our behalf. This information is transmitted to and processed by Localytics on servers in the United States.

    For further information on Localytics privacy policy please visit the following website:

  6. Helpshift

    We use Helpshift, an end-to-end mobile helpdesk and third party in-app support system by Helpshift Inc. (“Helpshift”). When you contact us via the App or via our website to ask for help to resolve an issue, we may ask for your name, email address and any information you choose to give us as part of your request. The shared information will be managed by Helpshift. Helpshift will only use your information in accordance with our instructions to answer your requests and not for their own purposes.

    Helpshift may also automatically, by means of cookies, collect and store certain types of information, such as your IP address, domain server and type of Internet browser in order to track your experience and use of our App and website.

    The information governed by Helpshift is transmitted to a Helpshift server in the United States and processed there.

    For further information on the privacy policy of Helpshift, please see the following website:

Section 9
Use of social network plug-ins

  1. Our website currently uses and embeds the following social network plug-ins, better known as share buttons (“share buttons”):
    • Facebook
    • Twitter
    • LinkedIn
    • Xing
    • Instagram
  2. We implemented the share buttons in a way that they are by default deactivated. They do not collect any data unless you activate them by clicking on them. If you activate the share button, certain information, namely the information that you have accessed our website, your IP address, date and time of your visit and other browser-related information, is transferred to the social network operator (in case of US operators: to the US), irrespective of whether or not you have a personal user account with the social network. If you are logged in as a member of the respective social network at the time you click on the button, this information will be allocated to your personal user account. You may prevent the latter only by logging out before using the plug-in. The relevant social network operator uses such data for the creation of user profiles for purposes of advertising, market research and/or tailored design of their websites. The evaluation of data is carried out in particular to display needs-based advertisement and to inform other users of the network about your activities on our website. You have the right to object to the creation of such user profiles. However, you have to contact the respective operator to exercise such right.
  3. We have no influence on the full extent of data collection or data processing operations of the aforementioned social network operators. We are also not aware of the detailed scope or purpose of data collection or about the retention periods for data collection. As data is collected in particular through cookies, we recommend deleting all cookies in the security settings of your browser before you activate the social network button. For detailed information about the purpose and scope of data collection and use, please refer to the data protection statements of the respective operators listed below. You can also find further information about your related rights and possibilities for protecting your privacy in the data protection statements.
  4. As far as the XING share button is concerned, if it is activated, the following data is collected and processed according to XING AG (“XING”): When accessing this website, your browser connects for a short time to the XING servers which provide the XING share button features (including the visitor counter). XING does not save any of your personal data when you access this website. XING does not store IP addresses, nor does it use cookies to monitor your behavior with regard to the XING share button.
  5. Please find in the following the addresses of the social network operators and the websites, where you can view the latest privacy policies concerning the share buttons mentioned above:
    1. Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
      http://www.facebook.com/about/privacy/your-info-on-other#applications and
      http://www.facebook.com/about/privacy/your-info#everyoneinfo.
    2. Twitter Inc., 1355 Market Street, Suite 900, San Francisco, California 94103, USA
      https://www.twitter.com/privacy?lang=en.
    3. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
      https://www.linkedin.com/legal/privacy-policy.
    4. Xing AG, Dammtorstraße 30, 20354 Hamburg, Germany
      https://www.xing.com/app/share?op=data_protection.
    5. Instagram Inc., 1 Hacker Way, Building 14, Menlo Park, CA
      https://www.instagram.com/about/legal/privacy/.

Section 10
Data secrecy

We have appropriate technical and organizational measures in place in order to protect any personal data that is collected, processed and used by us and that shall prevent loss, unauthorized collection, processing and use of such data.

Section 11
Data subjects’ rights

Upon request and in line with applicable data protection law, we will provide you free of charge with information to any recorded data relating to you and the purpose of data recording. Upon your request we will rectify your personal data as far as it is inaccurate and erase any such data if this is required according to applicable data protection law. You may also withdraw any consent for the future without giving reason for it, by, for example, amending your settings in the App or in your operating system (as described above).


Our contact details are:

Door2Door GmbH
Torstraße 109
10119 Berlin, Germany

Phone number: +49 30 948 520 401
E-mail address: hello@door2door.io

Our data protection supervisor is:

Marcus Hippe
Strategisten GmbH
Kurze Mühren 1
20095 Hamburg
E-mail address: datenschutzbeauftragter@door2door.io