Privacy Notice for Ticket Plus

Ticket Plus is committed to respecting your rights to privacy and personal data protection. This Privacy Notice aims to provide you with information regarding our processing of your personal data, your rights, and how to exercise them. We have either received your personal data from you or from others, collected it when you have visited our branch counter, websites, or app in connection with your purchase of Ticket Plus services or our service delivery to you.

1. Why do we collect information about you? We process your personal data for different reasons. You can read about the different purposes and the legal basis for our processing of your personal data in the following sections.

1.1. Ticket Plus Services When you are a client of our company or when you ask us for information about Ticket Plus services, we process your personal data. We do so to ensure that we can inform you properly about departures, mails, and luggage services, and to provide the solutions you request from us, plan, and deliver these services to you in accordance with our commitments to our clients. Additionally, we process this data to maintain effective communication and sustain a strong client relationship with you.

When you contact us for information on our services, we collect your contact details (name, email address, telephone number, and, if applicable, date of birth) and keep a record of our correspondence. This information may form the basis of a contract with you later.

1.2. Our Websites When you visit our websites, we collect information about your device and IP address, as well as the pages you visit on our sites. We do this to improve website performance and deliver relevant content to our passengers and prospective clients.

We place cookies on your device. You can read more about cookies in our cookie policy, which is always visible through the cookie sign on our website.

We process your personal data based on your interests, as we have a legitimate objective to offer you an optimized website experience with personalized feedback.

1.3. Job Positions If you apply for a job with us, we will process personal data about you that we have received from you or from references you have authorized us to contact. We do this to review your application and assess your suitability for a position with us.

We collect your contact information (name, email, telephone number, and address) as well as details of your prior employment history, which may be contained in your CV, resume, or correspondence, or provided to us by your professional references.

If you become an employee, we will use some of this information to comply with our legal obligations as your employer. In such cases, you can read more about our processing of your personal data in our internal personal data policy.

1.4. Whistleblower Hotline We offer a whistleblower hotline where employees, customers, stakeholders, or other individuals with a connection to our company can report serious misconduct or suspicions thereof, such as financial crimes or breaches of occupational safety.

You can submit your report anonymously or choose to include your name, contact details, and any other relevant information. If you provide your details, we will process your personal data for investigative purposes.

If you are the subject of a report, we may process your personal data related to alleged criminal offenses or suspicions thereof, as well as other submitted information. In some cases, we may notify public authorities. Additionally, we may collect information from employees, customers, stakeholders, and other related individuals.

2. How do we use information about you?

2.1. Ticket Plus We only use information about our current, prospective, or past clients to contact them when necessary for transportation purposes or to provide them with new offers unless they opt out. We also store client information to maintain records as required by law. Client and prospective client data is deleted five years after the last contact unless legal retention requirements apply.

2.2. Our Websites We use website visitor data in aggregated form (as statistics) to evaluate website performance. Website usage logs are periodically deleted, at least once per year.

2.3. Job Positions We use job applicant data to assess their suitability for roles at Ticket Plus. If successful, some of the data will form part of the employee file. Unsuccessful applicants' data is deleted within six months, except where legal retention requirements apply. Employee data is retained for up to five years after termination unless other retention criteria are met.

2.4. Whistleblower Hotline Data collected through the whistleblower hotline is used for investigations. If a report is unfounded, the data is deleted within six months. If public authorities are notified, the data is retained during their investigation. If disciplinary action is taken against an employee, related data is retained for five years after employment termination.

3. Security We respect your rights to privacy and data protection, ensuring the security of your information through technical and organizational measures. We work only with data controllers who uphold the same level of security. Additionally, we educate employees on maintaining high data security standards. When appropriate, we encrypt, pseudonymize, or anonymize your data to protect your privacy. We comply with existing privacy laws at all times.

4. Who receives information about you from us? We do not disclose or transfer your information to others, except when legally required.

5. Your Rights Under the General Data Protection Regulation (GDPR) Chapter III, you have several rights concerning our processing of your personal data. These include the right to:

• Request access to and obtain a copy of your data.

• Correct inaccurate or incomplete data.

• Request deletion of data no longer necessary or used without valid reasons.

• Object to data processing.

• Restrict processing while we assess a correction or deletion request.

• Data portability.

If you are reported through our whistleblower hotline, you are not entitled to know the identity of the reporter, but you may access the report details.

You can always request that we stop sending you marketing communications.

For any inquiries regarding your personal data, please contact us through the appropriate channels listed on our website.