3. What data is stored and what is it used for?

3.1 When purchasing services shop.ostwind.ch:

For contractual reasons, we require personal data for online orders or the purchase of certain services and products in order to provide our services and process the contractual relationship. For example, when purchasing a subscription or a single ticket. When purchasing personalised services, we collect the following data - depending on the product or service - whereby mandatory data is marked with an asterisk (*) in the corresponding form:

Personal photo
Gender, name, e-mail address of the person purchasing or travelling
Further details such as postal address, date of birth
Telephone number
Means/method of payment
Agreement to the general terms and conditions

In order to process the contractual relationship, we also collect data about the services you have purchased ("service data"). This includes - depending on the product or service - the following information:

Type of product or service purchased
Price
Place, date and time of purchase
Purchase channel (Internet, vending machine, counter, etc.)
Date of travel or duration of validity and time of departure
Place of departure and destination

The legal basis for this data processing is the need to process the contract. Data generated during the purchase of services is stored in a central database (see the section on shared responsibility in public transport) and is also processed for other purposes, including marketing and market research purposes (for more details, see the relevant sections of this data protection declaration). In addition, the data is used in the context of ticket control to identify the holder of a personalised ticket and to prevent misuse. The data is also used to provide our Après Vente service, to identify and assist you in the event of concerns or difficulties, and to process any compensation claims. Finally, the data is used to distribute the revenue generated by the purchase of tickets fairly among the companies and associations of Direct Transport. Our legitimate interest forms the legal basis for this data processing.

3.2 When using the ostwind.ch and entdeckungsreise.ostwind.ch websites:

When you visit our Internet pages, the servers of our hosting provider temporarily store each access in a log file. The following technical data is collected:

IP address of the requesting computer
Date and time of access
Internet page from which the access was made, if applicable with the search word used
name and URL of the file accessed
search queries carried out (timetable, general search function on website, products, etc.)
the operating system of your computer (provided by the user agent)
the browser you are using (provided by the user agent)
device type in the case of access by mobile phones
the transmission protocol used

The collection and processing of this data is used for system security and stability and for error and performance analysis as well as for internal statistical purposes and enables us to optimise our Internet offering. In addition, this enables us to design our website in a target group-specific manner, i.e. to provide you with targeted content or information that may be of interest to you.

The IP address is also used to preset the language of the website. In addition, it is evaluated together with other data in the event of attacks on the network infrastructure or other unauthorised or abusive use of the website for the purpose of clarification and defence and, if necessary, used within the framework of criminal proceedings for the purpose of identification and civil and criminal proceedings against the users concerned.

Finally, we use cookies and applications and tools based on the use of cookies when you visit our website. You will find more details on this in the sections on cookies and tracking tools of this data protection declaration.

Our legitimate interest forms the legal basis for these processing operations. In the case of third-party websites that are linked to our website, no guarantee is given for compliance with data protection regulations.

3.3 When using our app "OSTWIND Tickets":

OSTWIND collects and processes data related to the use of the App and the purchase of Mobile Tickets. This data includes the customer information that the customer discloses:

Email address
Means of payment/method
Smartphone ID
Type of product or service purchased
Price
Date and time of purchase
Date of travel or period of validity
Agreement to the general terms and conditions
Location data

Card information is not stored on the smartphone, in the app or at OSTWIND. Registration of the credit or debit card in the app is done directly with Datatrans AG, Stadelhoferstrasse 33, CH-8001 Zurich, Tel. +41 44 256 81 91, info@datatrans.ch.

3.4 When using firmenabo.ostwind.ch:

For contractual reasons, we require personal data for the online order or the purchase of certain services and products in order to provide our services and process the contractual relationship. For example, when purchasing a company subscription. When you purchase a company subscription, we collect the following data. Mandatory data is marked with an asterisk (*) in the corresponding form:

SwissPass customer number
Name, e-mail address of the person purchasing or travelling
Further details such as postal address, date of birth
Telephone number
Name of boarding stop
Name of place of work (company name)
Further individual additional information determined by the company, such as personnel number, department, degree of employment, etc.
Means/method of payment
Agreement to the general terms and conditions

In order to process the contractual relationship, we also collect data about the services you have received ("service data"). This includes - depending on the product or service - the following information:

Type of product or service purchased
Price
Place, date and time of purchase
Purchase channel (Internet, vending machine, counter, etc.)
Date of travel or duration of validity and time of departure
Place of departure and destination

The legal basis for this data processing is the need to process the contract. Data generated during the purchase of services are stored in a local and a central database (see the section on shared responsibility in public transport) and are also processed for other purposes, including marketing and market research purposes (for more details, see the relevant sections of this privacy statement). In addition, the data is used in the context of ticket control to identify the holder of a personalised ticket and to prevent misuse. The data is also used to provide our Après Vente service, to identify and assist you in the event of concerns or difficulties, and to process any compensation claims. Finally, the data is used to distribute the revenue generated by the purchase of tickets fairly among the companies and associations of Direct Transport. Our legitimate interest forms the legal basis for this data processing. In the case of external websites which are linked to our website, no guarantee is given for compliance with data protection regulations.

3.5 When using forms on ostwind.ch and entdeckungsreise.ostwind.ch:

You have the option of using forms (contact form, registration forms for events, competitions, order forms), whereby mandatory details are marked with an asterisk (*) in the relevant form. The following information can be entered:

Subject
Surname and first name
E-mail address
Salutation
Telephone number
Street and no.
Postcode / City
Country
SwissPass no.
Attachments
Messages
Reply details
Agreement to the AGB

We use this data, unless otherwise indicated in special GTC, exclusively to be able to answer your contact request in the best possible and personalised way. Any voluntary information about how you became aware of our offer will also be used for internal statistical purposes. We base this data processing on our legitimate interest as a legal basis or, if your contact is aimed at the conclusion of a contract, on the implementation of the pre-contractual measures requested by you.

3.6 When contacting our customer service by telephone:

If you contact our customer service by telephone. If provided by your provider, your telephone number and the time of the call will be stored. We use this data exclusively to be able to answer your contact request in the best possible way. We base this data processing on our legitimate interest as a legal basis or, if your contact is aimed at the conclusion of a contract, on the implementation of the pre-contractual measures requested by you.

3.7 When creating a SwissPass login/customer account at https://www.swisspass.ch/:

You have the option of creating a customer account on swisspass.ch. In doing so, we require the following data from you:

Surname and first name
Date of birth
Address (street, postcode, town and country)
Customer number (if you already have a public transport season ticket)
E-mail address and password (login data)

By registering, we enable you to access the numerous online services (webshops and apps) of the public transport companies and associations with the login data (so-called SwissPass login) and to obtain services from them without having to carry out an additional, time-consuming registration in each case. Services that you purchase using the SwissPass login (in particular public transport tickets/subscriptions) are recorded in your customer account and in a central database ("NDV database"). This data processing is necessary for the execution of the contract for the use of the SwissPass and is therefore based on this legal basis. For more information, please refer to the sections on shared responsibility in public transport and on disclosure to third parties in this privacy statement as well as the privacy statement on swisspass.ch