Information on the Processing of Data

Pursuant to EU Regulation n. 679/2016 (hereafter referred to as “Privacy Policy”), information related to the processing of personal data of users travelling during the COVID-19 (Coronavirus) pandemic is provided below.
 

1) DATA CONTROLLER

The Controller of personal data is FlixMobility GmbH (hereafter referred to as “FlixBus”), with registered office in Friedenheimer Brücke 16, 80639 Munich, represented by CEOs André Schwämmlein, Arnd Schwierholz, Daniel Krauss, Jochen Engert. (herafter referred to as “Controller”).

You can contact the Controller at following email address: servizioclienti@flixbus.it.

Pursuant to Art. 37 of the Privacy Policy, FlixBus has named a Responsible for Data Protection (Data Protection Officer - “DPO”), reachable at following email address: data.protection@flixbus.com; address: FlixMobility GmbH, Friedenheimer Brücke 16, 80639 Munich, Germany.
 

2) TYPES OF DATA PROCESSED

Compliant with the purposes and modes outlined in the present policy, data processed refers to:

2.1 Information provided by the passengers via the self-certification filled in when purchasing FlixBus tickets is being processed, with reference to following aspects:

a) Passengers are in possession of a COVID-19 green certification, or are excluded from the vaccination campaign on grounds of age or exempted on the basis of medical certification;

b) Passengers have not been in contact with a person suffering from COVID-19 in the last 2 days before the onset of symptoms, and up to 14 days after the onset of symptoms. The period of 14 days shall be reduced to 7 in the case of vaccinated travelers;

c) Passengers commit to inform responsible health authorities and the carrier in the event of COVID-19 symptoms within 8 days from the end of the journey;

d) In case of bookings with more than one passenger, passengers confirm that they live in the same residence or they are relatives or they have stable interpersonal relationship with the other passenger(s) included in the booking.

2.2 The body temperature data at time of boarding shall not exceed 37,5 °C.

3) PURPOSE OF DATA PROCESSING

Personal data is processed for the sole purpose of preventing COVID-19 infection, in accordance with the “Linee guida per l'informazione agli utenti e le modalità organizzative per il contenimento della diffusione del COVID-19 in materia di trasporto pubblico” (Guidelines for Customer Information and the organizational procedures to contain the spread of COVID-19 with regard to public transportation) adopted by order of the Minister of Health of 30 August 2021.

The legal basis of the processing is, therefore, to be found:

• in the fulfillment of legal obligations and in the implementation of the Guidelines mentioned above, as well as the current legislation aimed at the prevention of infection by COVID-19;

• in the purpose of ascertaining, exercising or defending a right in a court of law or whenever judicial authorities exercise their judicial functions (this is the legal basis for data storage 60 days after the state of emergency).

4) PROVIDING OF DATA AND CONSEQUENCES OF A POTENTIAL DENIAL

The providing of data is a mandatory prerequisite to travel by FlixBus. Denial to provide one’s data prevents users from accessing the Company’s buses.
 

5) PROCESSING MODE

Data are solely processed by the Company, who acts in accordance with specific instructions provided in compliance with the processing purposes and modes.

The Company processes data pursuant to the principles of lawfulness, honesty, transparency, exactness, integrity and not excess, relevance and necessity with relation to the purposes fulfilled, granting protection of your privacy and rights.
 

6) TIME OF PROCESSING

The information mentioned in Par. 2 of the present policy are not stored in FlixBus’ servers, but they will count as a requirement for purchasing FlixBus tickets. In addition, the data concerning the passenger’s body temperature are not recorded and stored by the Company.

7) DATA COMMUNICATION

Personal data will not be spread, nor will they be communicated to third parties, unless this is required by specific legal dispositions (e.g. requests from health authorities).
 

8) RIGHTS OF INTERESTED PARTIES

Pursuant to Art. 13 of the Privacy Policy, you will any time be able to:

a) Claim access to your personal data, as well as their amendment or deletion, or limitation of their processing.

b) Oppose to the processing of your personal data.

c) Exercise the right to the portability of your data.

The abovementioned rights can be exercised without formalities, by contacting the Data Controller at following addresses: via e-mail: data.protection@flixbus.com; via mail: FlixMobility GmbH, Friedenheimer Brücke 16, 80639 Munich, Germany.