Unlike certain types of organizations, it is not mandatory for MobieTrain to appoint a Data Protection Officer (DPO) under the GDPR. The rules for appointing a DPO are:
⚖️ Your company or organization needs to appoint a DPO if it is a controller or processor whose core activities involve processing sensitive data on a large scale, or if it regularly and systematically monitors individuals on a large scale.
👁️ Monitoring behaviour includes all forms of tracking and profiling on the internet, including behavioural advertising.
🏛️ Public administrations are always required to appoint a DPO.
MobieTrain does not fall under these criteria and therefore does not need to appoint a DPO. However, all privacy-related issues can be reported to [email protected].