Information About Data Protection
Data Protection prospectus Regarding Data Processing Carried Out During the Use of the volanbusz.hu Website
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR), VOLÁNBUSZ Zrt. informs the users of the website volanbusz.hu of any and all facts pertaining to any and all data processing carried out during the use of the website. By participating in the given process, one becomes a data subject according to the present process description.
1. The Controller
1091 Budapest, Üllői út 131, www.volanbusz.hu, email@example.com, +3613820888, represented by the chief executive officer
2. Name and Contact Details of the Data Protection Officer
Krisztina Adél Vajda, firstname.lastname@example.org
3. The Provisions of Data Processing
The present data protection prospectus is effective as of 25 May 2018 until withdrawal.
As the operator of www.volanbusz.hu (hereinafter: website), VOLÁNBUSZ Zrt. (hereinafter: VOLÁNBUSZ) informs its visitors that, with respect to the present website, it processes personal data exclusively on the basis of the present data protection prospectus.
The present policy was prepared on the basis of the Resolution of the CEO of VOLÁNBUSZ on data protection, and its scope extends to all processes carried out during the operation of the website by VOLÁNBUSZ, during which personal data are processed within the meaning of Article 4 (1) GDPR.
'personal data': any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The terms used by the present policy shall be attributed the same meaning as set out in the definitions of Article 4 GDPR.
VOLÁNBUSZ commits itself to carry out data processing exclusively on the basis of the applicable legal provisions, and therefore processes personal data exclusively on the legal bases specified under Article 6 GDPR.
Personal data processed by VOLÁNBUSZ will, during data processing, qualify as personal data as long as the data subject is, or may be, identified on the basis of such data. VOLÁNBUSZ considers a particular piece of data to qualify as personal data if it has access to technical means through which it is capable of identifying the data subject.
VOLÁNBUSZ commits itself to carry out data processing only in a way that is, during all stages, in compliance with the purpose thereof.
By way of publishing the present prospectus, VOLÁNBUSZ informs you (i.e. the data subject) of the purpose and legal basis of the data processing, as well as the facts pertaining to data processing as set out by Article 13 GDPR.
We hereby inform you that VOLÁNBUSZ ensures – through the organisation of work streams, as well as physical, IT and credentials management tools – that unauthorised persons would not be able to access personal data; the employees of VOLÁNBUSZ are obliged to treat personal data accessed during data processing as confidential.
4. The Exercise of Data Subject Rights
VOLÁNBUSZ hereby informs you that, on the basis of the GDPR, you may, after proving your identity, exercise the following rights:
- you may request information on the processing of your personal data,
- you may request the rectification of your personal data,
- you may withdraw the consent given to the data processing,
- you may request the erasure of your personal data if you consider the processing thereof to be unlawful, or unnecessary for VOLÁNBUSZ in order to achieve the purpose of the data processing,
- you may request the restriction of the processing of your personal data;
- you may exercise your right of data portability.
VOLÁNBUSZ endeavours, in all cases, to provide you with information that are – besides being in compliance with the requirements of the GDPR – succinct, transparent, understandable, accessible, clear and comprehensible under the circumstances.
You may submit your request to VOLÁNBUSZ primarily in writing, addressed to the data protection officer, via the contact details set out under Section 1 of the present policy. Should you require to be informed orally, the competent employee of VOLÁNBUSZ may provide you with information orally once you proved your identity, if the necessary data are at his/her disposal. In all other cases our employee will register your request and we will inform you regarding your request within one month from the receipt of your request. We may extend such deadline with a maximum of additional two months, if reasonable in light of the complexity of the request or the volume of requests handled at the time; of this you will be informed electronically, within one month from the receipt of your request.
In the event that we do not take action upon your request, or you do not accept such action, you may avail yourself of remedies against VOLÁNBUSZ. Regarding our data processing, you may lodge a complaint at the National Authority for Data Protection and Freedom of Information, or the court of appeal of your place of permanent or temporary residence. However, we wish to draw your attention to the fact that, according to its current practice, the National Authority for Data Protection and Freedom of Information will accept your complaint if you had first turned to the data processor – which is, in the present case, VOLÁNBUSZ –, but we had refused to take action upon your request or you did not accept such action. We therefore advise you to contact our data protection officer first!
We hereby inform you that, for detailed information on exercising your rights and the available remedies, you may refer to Chapter 8 of VOLÁNBUSZ's data protection Policy, which is available under section 2.I.1. of the public information at [http://www.volanbusz.hu/hu/tarsasagunkrol/kozerdeku-adatok] and the Customer Service of VOLÁNBUSZ.
5. Data Processing Carried Out During the Use of the Company's website
Common Rules Applicable to All Data Processing
VOLÁNBUSZ may involve a processor into data processing. VOLÁNBUSZ may not transfer data to third parties. The data subject is entitled to the rights and remedies detailed under Section 4 regarding all data processing.
We hereby inform you that the hosting service provider of the website is Wildom Kft. (1134 Budapest Róbert Károly Krt. 59., email@example.com).
5.1. Data Processing of the Website, Cookies
5.2. HOW TO CONTACT VOLÁNBUSZ
You may contact VOLÁNBUSZ personally, via phone, in writing and through the use of the website. In the event that the data subject contacts VOLÁNBUSZ orally (personally, via phone), and the matter subject to the request may not be resolved at once, the employee of VOLÁNBUSZ will note the request and forward it to the organisational unit competent to resolve the matter.
In the event that the data subject contacts VOLÁNBUSZ in writing, the requests received in writing (via post or personal delivery of a hard-copy document) will be registered by the competent employee, who will forward it to the competent organisational unit within VOLÁNBUSZ, where the request will be processed on the merits.
In the event that the data subject contacts VOLÁNBUSZ via e-mail, the employee assigned to the given e-mail address will, if the matter may be resolved on the merits at the organisational unit thereof, commence the processing of the matter, whereas, if another organisational unit is competent in the matter, the employee will forward the request to the competent unit, so that the matter may be resolved on the merits.
Therefore, to ensure efficiency, we advise that you contact us through the e-mail addresses below:
central e-mail address (if you cannot decide which organisational unit is competent to process your request)
customer service matters
matters related to job applications
communication and marketing, media enquiries and partner communication, issuance of photography and filming permits
traffic-related issues including scheduled routes and passenger traffic
lease of buses, charters
If you choose to contact VOLÁNBUSZ through these means, you consent to data processing by contacting VOLÁNBUSZ voluntarily – whilst you were in the position to read the present public information and be aware of its contents when contacting VOLÁNBUSZ.
However, VOLÁNBUSZ allows the visitors of its website to send their questions and remarks to VOLÁNBUSZ by using only the website.
When establishing contact, the data subject submits his/her name, e-mail address and message. However, the data subject may send the data only after accepting the data protection rules of VOLÁNBUSZ through a check-box; otherwise, the message cannot be sent.
the purpose of data processing: providing means to contact VOLÁNBUSZ, processing the relevant matter
legal basis of data processing: the consent of the data subject, in accordance with Article 6 (1) a) GDPR
retention time limit: until the relevant matter is resolved
5.3. Request of Quotes for Charters
VOLÁNBUSZ provides buses for lease for group travel, excursions, domestic and foreign travel, high priority business and personal travel or custom travel.
As VOLÁNBUSZ processes every request separately, taking into account the route, the number of passengers, the requested bus, as well as any unique requirements, it provides everybody with a customised offer. For the above reasons, if you wish to avail yourself of VOLÁNBUSZ's charter service, you will need to request a quotation first.
You may request a quote at the e-mail address firstname.lastname@example.org, as well as the dedicated platform at our website (http://www.volanbusz.hu/hu/tarsasagunkrol/szolgaltatasok/kulonjarat/ajanlat-keres). In order for VOLÁNBUSZ to be able to provide a custom quote, it needs at least the following data:
- identification and contact details (name, e-mail address, phone number) of the person requesting a quotation
- travel data (destination, number of passengers).
In addition, you may optionally provide any other information, which may help us customise the offer.
On the basis of your request, VOLÁNBUSZ will prepare a custom offer for you, which you may avail yourself of until the expiry of the period within which the offer is binding, in accordance with Section 6:64 of Act 5 of 2015 on the Civil Code. If you do not accept the offer within such period, VOLÁNBUSZ will erase your data, as no contract may be concluded. If you choose to accept the offer, VOLÁNBUSZ will prepare a lease agreement, for which it will need your personal data – you will receive detailed information on this at the time of the contract's conclusion.
purpose of data processing: provision of a custom price offer for charter bus lease, on the basis of the request concerned
legal basis of data processing: the consent of the data subject, in accordance with Article 6 (1) a) GDPR
retention time limit: as long as the offer is binding
5.4. Online Purchase of Tickets and Passes
VOLÁNBUSZ allows its passengers to purchase their tickets online for any of the direct domestic lines of the company and for certain direct domestic lines of transport centres (TCs) that joined VOLÁNBUSZ's online ticket purchase system.
Tickets may be purchased online at:
Passes may be purchased online at:
For the purposes of data processing, the same rules apply to ticket and pass purchases as well. For more details on the online sales of tickets and passes, please refer to:
The online sales platform processes personal data only until the potential conclusion of the purchase; however, within the framework of the legal relationship related to the purchase, data is processed for the purposes of financial settlement.
If you do not request an electronic invoice of your purchase, exclusively the confirmation of the purchase and, as an annex thereof, the pdf ticket(s) will be sent to the e-mail address submitted.
If you request an electronic invoice, VOLÁNBUSZ will prepare the electronic invoice on the basis of the invoicing data provided and will send such invoice to the e-mail address submitted. As, in accordance with Section 165 (1) of Act 100 of 2000 on accounting, a sales note must be provided (prepared) of any commercial operations and events that affect the assets or liabilities, or composition thereof, VOLÁNBUSZ is required by Section 169 (1) to retain the data of the invoice issued for the customer for a period of eight years.
VOLÁNBUSZ does not process payment card information, payment is carried out through a closed channel to which VOLÁNBUSZ does not have access. Regarding the payment, VOLÁNBUSZ receives only data regarding as to whether the payment has been successful or unsuccessful, from the service provider, CIB Bank Zrt.
Other data regarding the purchase is kept by VOLÁNBUSZ after the ticket or pass had been produced until the civil law claims arising from such legal relationship become time-barred.
For more information regarding the terms and conditions of travel, please visit:
purpose of data processing: provision of an online ticket and pass purchase service
legal basis of data processing: the consent of the data subject by way of the use of the online ticket and pass sales platform, in accordance with Article 6. (1) a) GDPR
retention time limit:
- from the issuance of the ticket or pass until the civil law claims become time-barred
- in accordance with Section 168 (1) of Act 100 of 2000 on accounting, the invoicing data is retained until the eighth year commencing from the issuance of the invoice for the given ticket or pass
5.5. Processing Frequent Traveller Data
VOLÁNBUSZ provides a FREQUENT TRAVELLER discount available throughout the year for those travelling frequently with its buses. In order to avail herself of the discount, the passenger must have a Frequent Traveller ID and a Frequent Traveller Card issued by VOLÁNBUSZ.
For the issuance of the Frequent Traveller ID, a request form filled in by the passenger and an ID photo of the dimensions 3.5x4.5 cm is required. The filled in request form must be submitted at the VOLÁNBUSZ Travel Centre personally or via post. Address: 1091 Budapest, Üllői str. 131.
On the basis of the request form, VOLÁNBUSZ prepares the numbered Frequent Traveller ID, as well as the Frequent Traveller Card. These are sent to the passenger via post or, if personal takeover was chosen, handed over to the passengers in person.
VOLÁNBUSZ's International Pay Desk issues the fifth one-way or round-trip ticket free of charge, but, upon filling in the section regarding the 5th travel, the pay desk will withdraw the full Frequent Traveller Card.
With respect to the use of the Frequent Traveller discount, the personal data of the passenger will be processed by VOLÁNBUSZ primarily at the time such discount was requested, in order to issue the Frequent Traveller ID for the frequent traveller and hand over the Frequent Traveller Card. VOLÁNBUSZ keeps a record of its frequent travellers, comprising of the data submitted on the request form and the frequent traveller number (Travel ID) generated by the system.
On the basis of the Travel ID included on the withdrawn Frequent Traveller Card, VOLÁNBUSZ is able to link the withdrawn Frequent Traveller Card to a specific frequent traveller, and it therefore carries out data processing in such cases. As the Frequent Traveller Card qualifies as a sales note serving as the direct basis for financial accounting within the meaning of Section 167 (1) of Act 100 or 2000 on accounting, VOLÁNBUSZ is required by Section 169 (1) of Act 100 or 2000 on accounting to retain it for a period of eight years.
The frequent traveller may request at any time to be deleted from the register of frequent travellers; in such case, s/he will no longer be eligible for the frequent traveller discount, but his/her data will no longer be processed for such purposes by VOLÁNBUSZ. (If the frequent traveller was deleted from the system but, prior to the deletion, s/he had a free travel with at least one Frequent Traveller Card, then subsequently the withdrawn Frequent Traveller Card will not be capable of identification, as once the data are deleted, in absence of personal data VOLÁNBUSZ will not be able to identify the data subject on the basis of the Travel ID.)
For more information regarding the frequent traveller discount, please visit:
the purpose of data processing: the operation of the frequent traveller program and the provision of free travel to eligible frequent travellers
legal basis of data processing: the consent of the data subject by way of joining the frequent traveller program, in accordance with Article 6. (1) a) GDPR
retention time limit:
- until the erasure request of the data subject, that is, until opt-out from the frequent traveller program
- in accordance with Section 168 (1) of Act 100 of 2000 on accounting, the Frequent Traveller Card used for free travel is retained until the eighth year commencing from the free travel
5.6. Photography and Filming Permits
Photography and filming within the area VOLÁNBUSZ's premises and vehicles, irrespective of the intended use, is permitted exclusively on the grounds of a "filming permit" issued on a case-by-case basis upon a granted request submitted at the Company's Communication and Marketing Office via the address email@example.com.
The permit request must contain at least the following data:
- the applicant's data (name, address), contact details,
- the circumstances, date, purposes of filming/photography, and,
- in case of advertising and feature films, the brief description of the script of the film to be shot.
The decision on permitting the filming will be made by the competent organisational unit of VOLÁNBUSZ. If the permit is granted by VOLÁNBUSZ, this may be made subject to the payment of a fee. In such a case, the applicant will be entitled to filming once the fee had been settled, whereas, the data pertaining to the payment of the fee will be processed by VOLÁNBUSZ in accordance with the below. A failure by the applicant to pay the fee within the indicated deadline will result in the automatic rejection of the permit request.
In accordance with Section 165 (1) of Act 100 of 2000 on accounting, a sales note must be provided (prepared) of any commercial operations and events that affect the assets or liabilities, or composition thereof. All sales notes indicative of the process of commercial operations (events) must be included into the accounting records. The payment of the fee by the data subject qualifies as such a commercial operation.
Section 167 (1) of Act 100 of 2000 on accounting sets out the mandatory contents of the sales note serving as the direct basis of financial accounting; VOLÁNBUSZ is required to include these on the sales note. In absence of the above, the payment may not be carried out in a lawful manner, therefore VOLÁNBUSZ is required to process your data for eight years, in accordance with Section 169 (1) of Act 100 of 2000 on accounting.
VOLÁNBUSZ draws the attention of permit-holders to the fact that, even in possession of a permit, they must comply with the applicable Hungarian laws, that is, they may not breach the rights of other persons.
For more information on the issuance of filming permits, please visit:
the purpose of data processing: permitting filming at VOLÁNBUSZ's premises
legal basis of data processing: the consent of the data subject by way of requesting a filming permit, in accordance with Article 6. (1) a) GDPR
retention time limit:
- in case of a rejected permit request: data is processed until rejection
- in case of a granted request, if VOLÁNBUSZ does not require the applicant to pay a fee: until the rights and obligations arising from the recording become time-barred
- in case of a granted request, if VOLÁNBUSZ required the applicant to pay a fee and the applicant failed to pay the fee: the working day following the expiry of the payment deadline
- in case of a granted request, if VOLÁNBUSZ required the applicant to pay a fee and the applicant paid the fee: in accordance with Section 168 (1) of Act 100 of 2000 on accounting, until the end of the eighth year commencing from the payment
5.7. Processing of Job Applicants
VOLÁNBUSZ announces its job vacancies at http://www.volanbusz.hu/hu/tarsasagunkrol/allasajanlatok. If you choose to send your CV to VOLÁNBUSZ, then, by way of sending your CV, you consent to VOLÁNBUSZ processing your personal data pertaining to your job application.
VOLÁNBUSZ treats all job applications according to the same rules: it is immaterial whether you send your application via e-mail, post, or whether you hand it over personally at one of our customer service desks or stations. In the event that your letter arrives to the e-mail address firstname.lastname@example.org, we will notify you automatically about receiving your letter. Please use this e-mail address only for matters relating to job applications!
VOLÁNBUSZ registers all incoming CVs (as well as motivation letters, to which the same rules apply as to CVs). Within the organisation, the data of the applicants may be accessed by the person exercising the employer's rights who disposes with the vacant position. If considered fit by the person exercising the employer's rights, the applicant will go through the recruitment process. If selected, then his/her personal data will be processed by VOLÁNBUSZ for the purposes of establishing an employment relationship: further information on this will be provided to the applicant after the successful selection process.
In the event that the applicant is not selected for the given position or there is no vacant position adequate in light of his/her education, VOLÁNBUSZ will retain the CV for a maximum of six month commencing from the registration, for the purposes of contacting the applicant if a position opens up that is adequate in light of the applicant's education.
VOLÁNBUSZ destroys or deletes the registered CVs that are no longer processed on the last day of each month: the deadline of the data processing is the last day of the sixth month (including the month of receipt) commencing from receipt. (That is, if you send your CV on 5 January, then the data processing will last until 30 June; if on 29 May, until 31 October)
purpose of data processing: selecting an appropriate candidate for the positions announced by VOLÁNBUSZ
legal basis of data processing: the consent of the data subject by way of sending a CV to VOLÁNBUSZ, in accordance with Article 6. (1) a) GDPR
retention time limit: the last day of the sixth month commencing from receipt
6. Issues Not Regulated by the Present Prospectus
The issues not regulated by the present prospectus will be governed by the provisions of the GDPR.