1) DATA CONTROLLER
The Controller of personal data is FlixMobility GmbH (hereafter referred to as “FlixBus”), with registered office in Friedenheimer Brücke 16, 80639 Munich, represented by CEOs André Schwämmlein, Arnd Schwierholz, Daniel Krauss, Jochen Engert. (herafter referred to as “Controller”).
You can contact the Controller at following email address: email@example.com.
2) TYPES OF DATA PROCESSED
Compliant with the purposes and modes outlined in the present policy, data processed refers to:
2.1 information provided by the passengers via the self-certification filled in when purchasing FlixBus tickets is being processed, with reference to following aspects:
a) Passengers are not infected with COVID-19, nor have they been obliged to a mandatory period of quarantine consisting of at least 14 days;
b) Passengers do not feel symptoms relatable to COVID-19, such as a body temperature higher than 37,5°C, cough or a cold, and they have not had contacts with people infected with COVID-19 over the last 14 days;
c) Passengers commit to give up travelling and inform the responsible health authority should one of the abovementioned symptoms show up before departure or within eight days since their arrival to destination.
2.2 in case of orders with two or more tickets, information provided by passengers via self-certification filled in while purchasing the ticket and while using the ticket to travel with FlixBus, with reference to the following: if passengers live in the same residence or if they are relatives or if they have stable interpersonal relationship (same example: spouses, cohabitant, relatives non cohabitant but hanging out on a regular basis; people with no degree of kinship but hanging out in the same places or sharing social life habits).
3) PURPOSE OF DATA PROCESSING
Personal data is processed for the sole purpose of preventing COVID-19 infection, in accordance with the Guidelines for Customer Information and the organisational procedures to contain the spread of COVID-19 with regard to public transportation, pursuant to Annex 2 of the Ministerial Decree of July 14th, 2020 and Annex 15 of the Ministerial Decree of 7th August 2020.
The legal basis of the processing is, therefore, to be found:
in reasons of public interest with regard to public health, i.e. protection from serious health threats potentially crossing borders.
in the implementation of safety protocols aimed at preventing infection pursuant to Annex 2 of the Ministerial Decree of July 14th, 2020 and Annex 15 of the Ministerial Decree of 7th August 2020.
in the purpose of ascertaining, exercising or defending a right in a court of law or whenever judicial authorities exercise their judicial functions (this is the legal basis for data storage 60 days after the state of emergency).
4) PROVIDING OF DATA AND CONSEQUENCES OF A POTENTIAL DENIAL
The providing of data is a mandatory prerequisite to travel by FlixBus. Denial to provide one’s data prevents users from accessing the Company’s buses.
5) PROCESSING MODE
Data are solely processed by the Company, who acts in accordance with specific instructions provided in compliance with the processing purposes and modes.
The Company processes data pursuant to the principles of lawfulness, honesty, transparency, exactness, integrity and not excess, relevance and necessity with relation to the purposes fulfilled, granting protection of your privacy and rights.
6) TIME OF PROCESSING
The information mentioned in Par. 2 of the present policy are not stored in FlixBus’ servers, but they will count as a requirement for purchasing FlixBus tickets until the date foreseen in Annex 2 of the Ministerial Decree of July 14th, 2020 and Annex 15 of the Ministerial Decree of 7th August 2020.
7) DATA COMMUNICATION
Personal data will not be spread, nor will they be communicated to third parties, unless this is required by specific legal dispositions (e.g. requests from health authorities).
8) RIGHTS OF INTERESTED PARTIES
a) Claim access to your personal data, as well as their amendment or deletion, or limitation of their processing.
b) Oppose to the processing of your personal data.
c) Exercise the right to the portability of your data.
d) Withdraw your consent at any time without this affecting the lawfulness of previous processing.
The abovementioned rights can be exercised without formalities, by contacting the Data Controller at following addresses: via e-mail: firstname.lastname@example.org; via mail: FlixMobility GmbH, Friedenheimer Brücke 16, 80639 Munich, Germany.