1. Data we collect
We collect personal data only when you actively provide it — typically when you submit a booking request or contact us directly.
Booking and enquiry data
When you submit a transfer booking or enquiry we collect: your name, phone number, email address, pickup and destination addresses, travel date and time, number of passengers, vehicle preference, and any optional notes you include.
Technical data
Our web server automatically logs standard technical information: IP address, browser type and version, referring URL, and pages visited. This data is used solely for security monitoring and is not linked to your personal identity.
2. How we use your data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing and fulfilling your transfer booking | Performance of a contract (Art. 6(1)(b)) |
| Responding to enquiries not resulting in a booking | Legitimate interest (Art. 6(1)(f)) |
| Keeping accounting and transaction records | Legal obligation (Art. 6(1)(c)) |
| Security monitoring (server logs) | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling, and we do not send marketing communications without your explicit consent.
3. How long we keep your data
- Booking records — retained for 7 years to comply with Estonian accounting law (Raamatupidamise seadus).
- Enquiries not resulting in a booking — deleted within 12 months of the last contact.
- Server logs — automatically deleted after 90 days.
4. Who we share data with
We share your data only with processors who help us deliver the service:
- FormSubmit.co — receives booking form submissions on our behalf and forwards them to our email inbox. They act as a data processor under a service agreement.
- Web hosting provider — stores the website and its server logs on our behalf.
We do not sell, rent, or otherwise disclose your personal data to third parties for their own marketing or commercial purposes.
5. International data transfers
Our primary data processing takes place within the European Economic Area. FormSubmit.co is operated by a US-based provider. Where data is transferred outside the EEA, we rely on standard contractual clauses (SCCs) or other appropriate safeguards as required by GDPR Chapter V.
6. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your data where there is no overriding legal reason to keep it.
- Restriction — ask us to limit processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, email us at info@travelbus24.ee. We will respond within 30 days. We may ask you to verify your identity before fulfilling the request.
7. Supervisory authority
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Estonian supervisory authority:
Andmekaitse Inspektsioon (Data Protection Inspectorate)
www.aki.ee · +372 627 4135 · info@aki.ee
8. Changes to this policy
We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.
9. Contact
Travelbus24 OÜ
Registry code: 14860982
Estonia
info@travelbus24.ee
+372 5162332