Published on: 30 November, 2023

Welcome to TrainPal! This Privacy Statement, together with our Cookie Statement and Terms of Use, sets out the approach that we at TrainPal take with regards to the collection and handling of any identifiable information about you.

We understand that providing information online involves a great deal of trust on your part. We take this trust very seriously and make it a high priority to ensure the security and confidentiality of the personal information you provide us when you visit our website or use our Services. Before providing us with your personal information, please read this Privacy Statement carefully to learn about our privacy practices.

When Does This Privacy Statement Apply?

This Privacy Statement applies to information about you as an identifiable person that TrainPal’s mobile application and/or website (together the “Applications”) collects from, or about you. This Privacy Statement does not apply to anonymous data that cannot identify you in any way.

The Applications may contain links to third-party websites. TrainPal is not responsible for the privacy practices or the content of these third-party websites. We recommend that you carefully read the privacy statements of such sites.

Data Controller

The data controller of any and all information provided to or gathered by TrainPal and its Applications is Trainpal B.V., a limited company registered in Netherlands with office at Piet Heinkade 55, 15e en 16e verdieping van het UP Gebouw, 1019GM Amsterdam. Trainpal B.V. also trades under Trip.com. You can contact us at data-protection@TrainPal.com.

Our data protection representative in the UK is Trip Air Ticketing (UK) Limited. You can reach them by email at dp@trip.com.

About Your Personal Information and Uses

What Personal Information Does TrainPal Hold on Me and Others?

Information You Provide Us Directly

TrainPal collects and uses the information you provide to us directly in order to provide you with the services you request. For example, you may provide us your name, email, passcode, fingerprint as passcode, and other information when you register a TrainPal account. When booking train tickets you may provide passenger names, email and delivery address, as well as other information such as age and gender. When paying for train tickets, you may provide your bank card number, CVV on back cardholder name, expiry date, etc.

In order for us to customize the services we provide you, we may also collect information about your travel plans and preferences which includes your departure date, departure city and arriving city, seat choice, ticket choice, provided by TrainPal.

If you need to get in touch with our customer service team, or reach out to us through other means (such as through social media) we will collect information from you there too, such as your name and contact information.

You may be travelling with other guests or make a booking on someone else’s behalf, in which case you will provide similar details to TrainPal. However, we would like to remind you that it is your responsibility to ensure that the person or people whose personal information you have provided are aware that you’ve done so, and have agreed to your sharing of their personal information with TrainPal for these purposes.

Information We Collect Automatically

TrainPal collects some information about you automatically. Specifically:

Log information, which refers to information that the system may automatically collect through cookies, a web beacon, or other channels when you use our website, including:

More information on how we use cookies can be found in our Cookie Statement.

Information We Receive Through Other Sources

We will also obtain your information from affiliates and business partners. For example, we allow you to log into TrainPal with your social media account, and with your consent (you grant authorization to the social platform), your personal information will be shared with us through that social platform.

Additionally, we may integrate calling services into our platforms to enable you to connect with us, and when we do, we receive metadata about the call activities (such as where you called from, who you are, and the date and length of the call).

How Does TrainPal Use My Personal Information and What are Related Lawful Bases?

TrainPal will generally collect and use your personal information for the following purposes:

1. To fulfil a contract, or take steps linked to a contract: The use of your information may be necessary to perform the contract that you have with us, including:

2. To conduct our business and pursue our legitimate interests. In particular:

3. Where you give us consent:

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, where you have a Trip.com account, we are able to send you direct marketing without your explicit consent. You have an absolute right to opt out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by contacting us using the details set out below. You can also opt out of receiving any non-essential emails, including marketing emails, by clicking the unsubscribe link contained at the bottom of such emails or by adjusting the notification settings in your account profile on our website or app. You can change your cookie settings under the “How can I manage cookies?” section of our Cookie Statement. To learn more about Internet based advertising and your choices, please go to https://youronlinechoices.eu/ and https://youradchoices.com/.

4. For purposes which are required by law:

Duration of Processing of Personal Data.

TrainPal will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. TrainPal may retain your personal data for a longer period in the event of a complaint or if TrainPal reasonably believes there is a prospect of litigation in respect to TrainPal’s relationship with you.

To determine the appropriate retention period for personal data, TrainPal will consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which TrainPal processes your personal data and whether TrainPal can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Where will My Personal Data be Processed?

TrainPal operates both inside and outside of the European Economic Area (the “EEA”). It also cooperates with third-party vendors located both inside and outside of the EEA. Therefore, TrainPal may transfer your personal information to countries outside of the EEA, including to countries which may not have in place laws that apply the same level of data protection as within the EEA. Whenever such transfer occurs, it is based on the Standard Contractual Clauses (according to EU Commission Decision 87/2010/EC or any future replacement) in order to provide your personal information a level of data protection that applies within the EEA.

How Does TrainPal Share My Information?

We may share your booking information, account information, and device information with affiliate companies within our corporate family and third parties, such as the partners detailed below, to ensure the successful provision of services to you. Our partners include the following types:

We may also share your information in the context of complying with legal obligations, to protect our or your interests in legal matters, and in the case of a merger or acquisition.

What are my rights?

Erasure, Access, And Others

If you wish to delete your TrainPal account information, you may contact us at data-protection@TrainPal.com with your request. After the deletion, we will no longer collect, use, or share any personal information related to this account. You can request that we delete your personal information if you no longer want us to use your information to provide services to you. In addition, you can request access to your personal information, request that any inaccuracies be corrected, and request that comments or explanations be added to records about you. You may also request that we transmit to another service provider (where technically feasible) copies of your personal information that is structured and in machine-readable format. You also have the right to ask us not to process your personal information for marketing purposes at any time. You can exercise this right by contacting us at any time. You can also opt out of receiving any non-essential emails, including marketing emails, by clicking the unsubscribe link contained at the bottom of such emails or by adjusting the notification settings in your account profile on the TrainPal app. Finally, you can ask us not to collect or use your personal information for certain purposes, or you can ask us to either refrain from sharing your information with, or specifically ask that we do not provide your personal information to, a third party. The rights listed above may not apply in all cases. For example, if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping, we may not be able to delete all of your personal information, in which case we will inform you of the relevant exceptions. We will respond to your above requests without undue delay. We reserve the right to take reasonable steps to verify customer identity before taking further action on your request. To address any privacy or security questions or concerns, or to make any of these requests, contact us with details about your request at data-protection@TrainPal.com.

HOW CAN I LODGE A COMPLAINT?

We are committed to investigating and resolving complaints about our collection or use of your personal information. To make a complaint, contact us at data-protection@TrainPal.com.

Clearly provide the following information to help us address the issue effectively:

If you are a resident of the European Union or the UK, and if you are not satisfied with our resolution of your complaint, you may complain to an applicable data protection authority where you live or where you believe a breach may have occurred, as the case may be.

We aim to resolve all issues in a timely manner, or as mandated by applicable law, but if this is not possible because a more detailed investigation is required, we will keep in regular contact with you to ensure that you are kept informed of the resolution of your matter.