Privacy policy
General information
EUROBUS AG («We») is the data controller responsible for the collection and processing of your personal data in connection with its activities. Our task is to offer our customers a comprehensive range of travel services.
In this privacy policy we explain how we process your personal data and how you can control and manage it. Our data processing may also be covered by further data protection notices, such as those contained in the General (Travel) Terms and Conditions, may be apparent from the circumstances, or may be governed by law.
This privacy policy meets the requirements of Swiss data protection law and – if and to the extent applicable – of the General Data Protection Regulation (GDPR) of the European Union.
1. Does this notice apply to you?
This privacy policy applies to you if you:
- are one of our customers or have a contractual relationship with us;
- are a fellow traveller of one of our customers.
- are interested in our products or services and therefore provide us with your personal data (e.g. at an agency, on our websites and apps or at events) so that we can contact you.
If you provide us with the personal data of other people, please make sure that you inform them of the disclosure of their personal data and ask them to read this privacy policy. We will ensure that we do the same whenever possible (e.g. where the contact details of the person concerned are available).
2. How can you control our processing of your personal data?
You have rights that allow you to effectively control your personal data and the way we process it. Below we explain your rights in relation to your personal data.
If you wish to exercise the rights listed below, please submit a request by email to web@eurobus.ch or by post to the following address:
EUROBUS AG
Schwimmbadstrasse 1
5210 Windisch
Switzerland
If you have questions about the use of your personal data under this privacy policy, please address them to: web@eurobus.ch
2. General information and mandatory disclosures
2.1 You can request access to your personal data
If you wish to have access to your personal data, we will provide you with a copy of the personal data you have requested, together with information about how it is processed.
Your right of access may be restricted in the cases provided for by law.
2.2 You can request the rectification of your personal data
If you believe that your personal data is inaccurate or incomplete, you can request that this personal data be amended or completed accordingly. In some cases, supporting documents may be required.
2.3 You can request the erasure of your personal data
If you wish, you can request the erasure of your personal data to the extent permitted by law.
2.4 You can object to the processing of your personal data on the basis of legitimate interests
If you do not agree with processing based on a legitimate interest, you can object on grounds relating to your particular situation. In that case, please inform us in detail about the processing concerned and the reasons for your objection. We will cease processing your personal data unless there are compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
2.5 You can object to the processing of your personal data for direct marketing purposes
You have the right to object at any time to the processing of your personal data for direct marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing.
2.6 You can request the restriction of the processing of your personal data
If you contest the accuracy of the personal data we use, or object to the processing of your personal data, we will review or revise your request. You can request that we restrict the processing of your personal data while we review your request.
2.7 You have rights in relation to automated individual decision-making
As a matter of principle, you have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you. However, we may automate such a decision if it is necessary for entering into or performing a contract with us, is permitted by law, or if you have given your consent.
In any case, you have the right to contest the decision, to express your point of view and to request that a competent person review the decision.
2.8 You can withdraw your consent
Where processing is based on consent you have given, you can withdraw that consent at any time.
2.9 You can request the portability of part of your personal data
You can request a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format. Where technically feasible, you can request that we transmit this copy to a third party.
2.10 Complaint to the Federal Data Protection and Information Commissioner
In addition to the rights listed above, you can lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.
3. For what purpose and on what legal basis do we use your personal data?
3.1 Contract performance and legitimate interest
In this section we explain for what purpose we process your personal data and on what legal basis we do so. We primarily use your personal data to perform a contract to which you are a party or, at your request, to take pre-contractual steps. However, we may also process your personal data to pursue our legitimate interest or that of third parties.
Your personal data is processed in particular where this is necessary for entering into or performing a contract, in order to:
- enter into a (travel) contract with you. We may process personal data to register you as a new customer, to enter into a contract and to perform it with you;
- provide you with the products and services you have purchased under the contract concerned;
- carry out settlement, invoicing and debt collection;
- provide you with services in connection with the preparation and implementation of a trip;
- for insurance purposes;
- offer advisory services;
- be able to provide help if you run into difficulties during the trip, where necessary;
- give you access to our digital platforms. We may process personal data when you use our digital platforms for various purposes (e.g. to manage your personal information or to obtain access to travel information);
- to grant access to our premises and facilities. We may process personal data when you visit us at our premises in order to carry out appropriate access and security checks;
- to communicate with you. We may process personal data when you wish to get in touch with us, when you ask us for information about our company or our services, or when the contract needs to be updated;
- answer your enquiries and support you;
- manage the termination of the contract.
Where we base a processing activity on a legitimate interest, we weigh this interest against your interests or fundamental rights and freedoms to ensure that they are proportionate. In the course of our business as a travel provider, we also use your personal data to:
- further develop our products and services;
- improve cybersecurity, manage our platforms and websites and ensure business continuity;
- implement the introduction of IT solutions;
- carry out maintenance of IT systems during ongoing operation;
- improve the automation and efficiency of our operating processes and our customer services (e.g. automatic completion of complaints, tracking your enquiries and improving your satisfaction on the basis of personal data collected during our interactions with you, e.g. telephone recordings, emails or chats);
- enable the establishment of legal claims and defence in connection with legal disputes and official proceedings;
- organise competitions and promotions and carry out opinion polls and customer satisfaction surveys.
3.2 Advertising and marketing
If you are a customer, and unless you object, we may send you offers for our products and services. We ensure that these commercial offers relate to products or services that are relevant to your needs and complement the offers you have already used. You can object to this at any time.
3.3 Consent
For certain processing of personal data, we will inform you specifically and ask for your consent. Of course, you can withdraw your consent at any time.
In particular, we ask for your consent for:
- The disclosure of particularly sensitive personal data to third parties;
- A tailor-made adaptation of our offers and products or services on the basis of a complex profile in order to predict your needs and behaviour;
- all electronic offers for products and services that are not similar to those you have purchased, or for products and services from our trusted partners.
Where necessary, we may ask you for further consent to the processing of your personal data, which, however, has no effect on data processing that has already taken place.
4. What types of personal data do we collect?
We collect and use your personal data, i.e. all information that identifies you or makes it possible to identify you.
Depending on the type of product or service we offer you and the interactions we have with you, we collect various types of personal data about you:
- Contact information, (private or business) postal address, email address, telephone number;
- Personal details, e.g. gender, date of birth and age, marital status, nationality, passport details, etc.
- Lifestyle, e.g. hobbies and interests, travel;
- Travel details, such as travel dates, itinerary/destination, airline, hotel, price, customer requests, information about your fellow travellers, frequent flyer programmes, etc.;
- Health data, e.g. information about health-related special needs or illnesses and accidents during a trip;
- Financial details, e.g. payment information, credit card number, account details;
- Data about your habits and preferences in relation to the use of our products and services (e.g. meal requests);
- Data from our interactions with you, e.g. your comments, suggestions and needs collected during our exchanges with you in person at our locations and during telephone communication (call note or call recording), communication by email, chat, chatbot, exchanges on our social media and any complaints you may have. Your connection and tracking data (e.g. collected via cookies for non-advertising or analytical purposes on our websites), online services and other applications;
- Data about your devices (mobile phone, computer, tablet, etc.), such as IP address, technical data and unique identification data;
- Personalised login credentials or security features used to connect you to our website and apps.
5. From whom do we collect personal data
We generally collect personal data directly from you. However, we may also collect it from other sources.
Sometimes we collect data from public sources:
- Publications/databases made available by official authorities or third parties (e.g. the Swiss Official Gazette of Commerce or the commercial register);
- Websites/social media presences of legal entities or corporate customers containing information that you have disclosed (e.g. your own website or your social media presence);
- public information, e.g. information from the media.
We also collect personal data from third parties:
- from our customers (e.g. as fellow travellers);
- from our business partners (e.g. tour operators, service providers abroad);
- from third parties such as credit reference agencies and fraud prevention agencies;
- from address research service providers, who are themselves responsible for collecting the relevant information lawfully.
6. To whom do we disclose your personal data and why?
To fulfil some of the purposes described in this privacy policy, in particular the carrying out of a trip, we may disclose your personal data to others where appropriate. These may be the following:
- Our service providers in the destination country (e.g. agencies, tour guides, hotel reservations, transfer and excursion services), transport providers (airline, train, car hire, etc.) and accommodation operators (hotels, hostels, etc.);
- Processors who provide services on our behalf (e.g. IT services, logistics, printing services, telecommunications, debt collection, consulting and sales, and marketing);
- certain regulated professions such as lawyers, notaries or auditors, where this is necessary in certain circumstances (legal disputes, audits, etc.), and our insurers;
- Partners for carrying out advertising, market research and opinion research;
- Partners to assist in the investigation of criminal offences (e.g. fraud) and in the establishment, exercise or defence of legal claims;
- Authorities and official bodies (e.g. tax authorities, embassies of the destination country) where there is a legal or official obligation (e.g. retention obligations, obtaining visas, obtaining entry requirements).
7. International transfer of personal data
In the case of international transfers from Switzerland and the European Economic Area (EEA) to a non-EEA country (third country), your personal data may be transferred across borders. In particular, you must expect your data to be transferred to your destination countries. But also to countries in Europe, the USA and worldwide, where the service providers and suppliers we use are located. If the FDPIC or the European Commission has recognised that a third country provides an adequate level of data protection, your personal data may be transferred on this basis.
For transfers to a third country whose level of protection has not been recognised as adequate by the FDPIC and the European Commission, we rely either on a derogation applicable to the situation concerned (e.g. where the transfer is necessary for the performance of our contract with you) or apply one of the following appropriate safeguards to ensure the protection of your personal data:
- standard contractual clauses approved by the FDPIC and the European Commission;
- binding corporate rules.
To obtain a copy of these safeguards or information on where they are available, you can make a written request in accordance with section 2.
8. How long do we keep your personal data?
We will keep your personal data for as long as is necessary to fulfil our contractual obligations and to comply with applicable laws and regulations, or for another period in view of our legitimate business interests, such as proper accounting and responding to legal claims or requests from authorities.
9. Data security
We use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and unauthorised access by third parties (e.g. encryption of data transmission, access controls, etc.). Our security measures are continuously improved in line with technological developments.
We take reasonable precautions to protect your data. The transmission of information via the internet and other electronic means always entails certain security risks, and we cannot guarantee the security of information transmitted in this way.
10. How you can follow the development of this privacy policy
In a world in which technologies are constantly evolving, we review this privacy policy regularly and update it as necessary.
The version currently published on our website applies. We recommend that you view the latest version of this document online. We will inform you of changes via our website or via our usual communication channels.
11. Analytics tools and advertising
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.
IP anonymisation
We have activated the IP anonymisation function on this website. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Browser plugin
You can prevent the storage of cookies by setting your browser software accordingly; however, we would point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can find more information on how user data is handled by Google Analytics in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Commissioned data processing
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This makes it possible to generate reports containing statements about the age, gender and interests of site visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be attributed to a specific person. You can deactivate this function at any time via the ad settings in your Google account, or prohibit the collection of your data by Google Analytics in general as described under “Objection to data collection”.
Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to link the advertising audiences created with Google Analytics Remarketing to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been tailored to you on one device (e.g. mobile phone) depending on your previous usage and browsing behaviour can also be displayed on another of your devices (e.g. tablet or PC).
If you have given the relevant consent, Google links your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you log in with your Google account.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create audiences for cross-device ad targeting.
You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; to do so, follow this link: https://www.google.com/settings/ads/onweb/.
The aggregation of the data collected in your Google account takes place exclusively on the basis of your consent, which you can give or withdraw with Google (Art. 6(1)(a) GDPR). For data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of the data is based on Art. 6(1)(f) GDPR. The legitimate interest results from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes.
Further information and the privacy provisions can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/.
12. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent to the storage of the data and the email address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of the data processing already carried out remains unaffected by the withdrawal.
The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after the newsletter has been cancelled. Data that was stored with us for other purposes (e.g. email addresses for the members' area) remains unaffected.
13. Plugins and tools
YouTube
Our website uses plugins from the YouTube site operated by Google. The operator of the sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. In the process, the YouTube server is told which of our pages you have visited.
If you are logged in to your YouTube account, you enable YouTube to attribute your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
You can find further information on how user data is handled in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.
Google Web Fonts
To ensure a uniform display of fonts, this site uses so-called web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using has to connect to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address. Google Web Fonts is used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
If your browser does not support web fonts, a default font from your computer is used.
You can find further information on Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.
Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Google Maps is used in the interest of an appealing presentation of our online offerings and to make the places we indicate on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
You can find more information on how user data is handled in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.