Privacy policy and consent on data use

The internet platform of Arlberg Express International and the integrated online reservation system (hereinafter «website») is owned and operated by Arlberg Express GmbH, located in Austria at A-6754 Klösterle am Arlberg 33 (hereinafter «Arlberg Express» or «we»). To us, the protection and security of your personal data are a top priority. Since the protection of your personal data plays such an important role at Arlberg Express, inquiry, processing and application of your data is dealt with strictly according to the regulations of the EU Data Protection Regulation EUDATAP and Teleservices Data Protection Act.

By agreeing to the following Consent to the Use of Personal Data, you consent to the operator of Alberg Express, processing and using your personal information in accordance with the provisions set forth below and in compliance with the applicable statutory provisions, including, without limitation, the data protection laws. The consent to the collection and use of your personal data can be revoked at any time with effect for the future.

Data collection, processing and utilisation of individual-related data

Personal data is any data in electronic or manual files that relates to an identified or identifiable individual. Personal information includes data such as your name, telephone number, postal address, email address, and any additional information you provide, whether at your discretion or in response to our request.

The use of our website is usually possible without providing personal information.

Arlberg Express shall collect, process and store individual-related data of the customer only as far as this is necessary for processing reservations, for the performance of the transport, for our services and for own marketing purposes. Therefore we need your first name and surname, your birthday, your current address, your email address and your mobile phone number. With the credit card payment method we need your full name as well as the credit card number and expiry date during the payment process for the reservation of a journey with us.The credit card number is not stored and is passed on directly to the payment service provider for processing.

We process personal data also in Switzerland, for which the EU Commission has confirmed an adequate level of data protection (appropriateness decision under Article 45 EU-GDPR).

The personal information we collect is exclusively used to process and share for the purpose of implementing contracts with external subcontractors like bus operators, service providers for IT, transport professionals, customer service and payment processing as well as for registration purposes and to ensure that your booking is processed smoothly. In justified cases (e.g. damage caused to vehicles) we reserve the right to pass on customer data to third parties like the operating sub-contractors, which is necessary to substantiate and lodge the claim against the customer. Data that were transferred in this context may only be used by our contracting parties in order to meet their task and not for any other purpose.

Payment service providers

Throughout our website, we provide the opportunity to carry out a booking process. Your details will be passed on to our payment service provider. The payment can only be completed either by credit transfer on our online account or can partly be paid by cash.
Transactions made by credit card are conducted through ConCardis GmbH, headquartered in Germany, D-65760 Eschborn at Helfmann Park 7. Further information about data protection of ConCardis can be found in the data protection regulation of ConCardis.

Data security

Personal data processing is conducted primarily by means of extensive technical and organizational precautionary measures, including measures for checking the source of data and for protecting data against accidental or unlawful destruction or accidental loss, alteration or unauthorized access.

Despite efforts to keep a notably high standard of these special requirements, it cannot be ruled out that information sent to us via the internet may be seen and used by other people.

Please note that therefore we cannot be held liable for the publication of information which was transferred on account of data transmission failure or unauthorized access by third parties (e. g. computer trespass, unauthorized interception of telephone calls or fax messages).

Cookies

Arlberg Express utilizes so-called "cookies" in some areas of the website to individualize the available services. Cookies (also called web cookies) are small pieces of data which are saved on your computer. These cookies contain settings and data that our system and your browser can exchange. Many of the cookies we use are session cookies which are automatically deleted from your hard drive at the end of your browser session. This means they will be deleted when you close your browser. Other cookies remain on your computer and enable us or our partners to recognize your computer during your next visit (so-called permanent cookies) This storage helps us to appropriately structure the website for you and makes usage easier for you, e. g. by storing certain entries from you in such a way that you don't have to continually repeat them again. Your browser allows restrictive settings with regard to the use of cookies for you. The help function in the menu bar of most browsers will tell you how to allow cookies or refuse. In case you refuse cookies, this could lead to a situation in which our offer presentations are no longer functional for you or are only functional in a limited way.

Access rights and rights of objection

According to the EU-Data Protection (EUDATAP), the user is entitled to the right to request information regarding recorded data relating to the user as well as to the right to correct, delete or block recorded data. In order to obtain information or to withdraw your declared consent, please contact:

Arlberg Express GmbH
Langen am Arlberg 33
6754 Klösterle am Arlberg
Austria
or email us at
datenschutz@arlbergexpress.com

Server-Log-Files

The provider (hoster) automatically collects and saves information in the so-called server's log files that your browser transmitted to us in order to improve this website regarding system performance, usability and in order to provide useful information about our services. The following data transmitted to our company via your Internet browser are recorded: browser type and version, utilized operating system, website from which you are visiting us (referrer URL), date and time of your access, and your Internet protocol (IP) address.

We will not consolidate the above data with your personal data. We also reserve the right to check the data subsequently if we believe that illegal contents are used.

Website analysis

We analyse the use of our website with the open source web analysis tool Matomo (formerly Piwik; privacy policy available under https://matomo.org/privacy-policy/). For this purpose, however, automatically collected IP addresses are anonymised before evaluation. All generated analyses are therefore based on anonymised data records and no personal evaluation takes place. The sole purpose of web analysis is to optimise the website in terms of user-friendliness and to provide useful information about our services. This data is not merged with other personal data sources or forwarded to third parties.

In addition to the aforementioned data, Matomo also uses so-called "cookies" (see above).

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit our page featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.

If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.