1. Identity and contact details of the controller and, where applicable, of the controller’s representative
Companies registered name, address & number: Eirebus Limited, Corduff Road, Blanchardstown, Dublin 15 D15KA03.
Company Reg. Number: 34247
Companies under the Eirebus Ltd Group are:
Edinburgh Coach Lines
Gray Line Scotland
Eirebus Ltd clients.
Eirebus Ltd suppliers (contracted & not contracted).
Personal data gathered on Eirebus Ltd websites and applications.
2. Contact details of the data protection officer, where applicable
If you have a query regarding the Eirebus Ltd policy or any aspect of our data protection policy you can contact us at DPO@Eirebus.ie or by writing at: Data Protection Officer, Corduff Road, Blanchardstown, Dublin 15 D15KA03
3. The purposes and legal basis of the processing
Why Eirebus Ltd needs to process data of those who are affected by this policy:
To fully perform an existing contract or to start negotiations entering a new contract.
To provide requested services and to make contact (if required) in connection with enquiries, bookings
To respond to any communications sent to us.
For legitimate business interests. Primarily future marketing purposes, including, but not limited to product offers and product information communications.
Any other data processing will be done in accordance with the GDPR.
4. The categories of personal data concerned
Eirebus Ltd collects the following information in order for the purpose of processing:
Billing & payment information
CCTV footage on coaches
CCTV footage on premises
Eirebus Ltd gather statistical and other analytical information collected on an aggregate basis of all visitors to our websites. This data comprises information that cannot be used to identify or contact user, such as demographic information regarding, for example,
User IP addresses,
Anonymous statistical data involving the use of our website.
This information is solely used to gain a more informed understanding of how our websites are being used and to make our websites more relevant to our users.
Note – Eirebus Ltd websites use session cookies. Cookie consent is obtained either explicitly or implicitly requested via an opt-in.
5. The recipients, or categories of recipients, of the data, if any
The recipients of the data are the staff of Eirebus Ltd (Permanent, fixed term, contracted or trainee staff) who process the data only in the ways that have been defined in purposes and legal basis of the processing. Each staff member of Eirebus Ltd has been educated and trained in the importance of GDPR.
6. Give details of any planned transfers of personal data to a third country or international organisation
Eirebus Ltd will not disclose personal data to third parties unless Eirebus Ltd has consent to do so or unless the third party is required to fulfil a contracted task (e.g. data entry in such circumstances, the third party will have a data processor agreement signed to adhere to GDPR).
Eirebus Ltd will disclose personal data if it is believed in good faith that Eirebus Ltd are required to disclose it in order to comply with any applicable law, a summons, a search warrant, a court or regulatory order, or other statutory requirement.
7. How long will the personal data be stored for (or the criteria used to determine that period)?
Eirebus Ltd will retain personal data for the following reasons (only exception to these reasons is if Eirebus Ltd is required or permitted by law to hold onto the information for a specific amount of time):
Data that is required in order to perform a contract will be held on Eirebus Ltd system for a seven year period following completion of a travelling Pax’s trip (or upon contract termination, if later).
For legitimate business interests (as defined in purposes and legal basis of the processing) data that is no longer deemed necessary will be deleted from our system.
Data that is collected for marketing purposes (with consent) will be stored securely and used to communicate unless consent is withdrawn.
When personal data is deemed no longer necessary it will removed and deleted in a correct manner.
8. Describe the data subject’s rights to access, rectification, erasure and portability of the personal data
Right to access: the right to request, access and copy of the personal information that Eirebus Ltd. is holding. Any access requests will need to be requested in writing or email (mailing & email address provided in the Data Protection Officer section above). Evidence of identification will be required as this ensures the personal information is not given to the wrong person. Information will be given within 30 days of the request.
Right to rectification: the right to have personal data rectified if it’s incorrect, out of date or incomplete.
Right to be forgotten: the right to withdraw consent given to process data and the right to request that Eirebus Ltd delete personal data from its system (only exception to this is Eirebus Ltd compliance with any legal obligations or if the data is required for any legal claims).
Right to restriction: The right to stop Eirebus Ltd from using personal data or limit how it is used.
Right to data portability: The right to request that Eirebus Ltd return any information provided in a structured, commonly used and machine-readable format also have the right to transmit data to another controller without hindrance from Eirebus Ltd.
Right to object: The right to object to the manner in which Eirebus Ltd. uses the personal data received (e.g. for marketing purposes).
9. Detail the data subject’s right to lodge a complaint with a supervisory authority
Any complaints on how Eirebus Ltd uses personal data can be sent to the Data Commissioner’s office. More information can be provided on their website: www.dataprotection.ie
10. The origin of the personal data
Eirebus Ltd receives personal data through the following means:
Through contractual negotiation and agreements.
Corresponding through email or phone.
Social media contact