Scope

 Dr. Richard Linien GmbH & Co KG, Stromstraße 11, 1200 Vienna, Austria (“we”) is the owner of the website https://drrichard.ch/ (“website”) and the entity responsible for data protection (“controller”) regarding the data processing outlined below. 

This data protection policy concerns 

– the website https://drrichard.ch as well as 
– all contracts and electronic communication between us as the controller responsible for data processing and you as the end user of the website and the electronic means of communication that we provide (“user”). 

Many thanks for your interest in our website. Below you will find comprehensive information on how we process your data and what rights you have in this regard. 

As the data processing controller, we wish to inform you in accordance with our legal obligations (Art. 13 and 14 General Data Protection Regulation, GDPR) about how we process your personal data within the framework of our business activities. Personal data means all data that relates personally to you, such as your name, address, etc.

If applicable, in respect of this information, we also meet our obligations as an information society service provider (Art. 3 (1) E-Commerce Act) in accordance with Art. 165 (3) Telecommunications Act 2021.

Personal data

Concerns the processing of personal data and any handling of such data. Insofar as data processed by us relates to a person and – even when only via third parties or additional knowledge – makes you identifiable as a person (particularly finding out your full name), it is to be considered personal data. This also includes information such as address, postal address, IP address, telephone number and email address. Data regarding nationality, preferences, hobbies, memberships or websites viewed are also regarded as personal data.

Data processing when visiting our website (no registration) 

When you visit our website, your IP address and certain access data (meta data e.g. date/time of visit, user agent, pages previously accessed) are stored, in particular, for technical purposes, to improve website quality and for statistical purposes. The data is processed based on our overriding legitimate interest (Art. 6 (1) (1) lit f GDPR). The data processing is restricted to a period of seven days at most; after this, the data will be deleted from our servers. The information does not enable us to draw any conclusions about you as a person. As a simple website user, you can gain information about our offers and activities in a non-binding fashion, without us being able to link any data to your person i.e. identify you as a person. 

If you have given your consent, we use Google Analytics on our website to analyze how the website is used. We use the data collected from this to optimize our website and our advertising measures. This processing takes place based on your consent, which you may withdraw at any time (Art. 6 (1) (1) lit. a GDPR). More information can be found here.

Data processing when visiting our website (opening and using a customer account) 

If you have decided to make use of one of our offers, you must provide certain details in order to fulfil the contract. To do this, you must set up a customer account. Please note that we offer various services on our website, which you can access via the respective subpage. 

Data processing when visiting our auction platform (opening and using a customer account)

If you wish to create a customer account for our auction platform at https://drrichard.ch/gebrauchtbusse/registration/, please note that this service is exclusively offered to businesses. 

The following (personal) data must be entered: 
(a) Company 
(b) Postal address 
(c) Email address 
(d) Full name of the contact person 

To use our auction platform at https://drrichard.ch/gebrauchtbusse/, you must open a customer account. However, simple website users may also browse the relevant offers and gain a general overview. Access to your customer account is protected by a self-generated password. If necessary, and if you wish, you may enter additional information in order to make it easier for us to communicate with you and fulfil the contract.

Processing of personal data (customer account)

The purposes (or “legitimate interest”) for which personal data is processed are to enable us to prepare offers and supply information about our transport services, as well as to auction used buses.

The data mentioned above (creating a customer account) is processed based on your express, informed consent. We store the data for as long as is necessary for the purpose of contract fulfilment and in accordance with legal permissions. In any case, we store the personal data for as long as retention obligations stipulate or until the statute of limitation concerning legal claims has expired. If it is no longer necessary to store the data for the purpose for which it was originally collected, and there are no legal provisions stating otherwise, we will begin the deletion procedure for this data. If you request that your customer account be deleted, we will as a matter of principle delete all personal data processed by us during this time. You can request the deletion of your customer account via email at ; the deletion will then be carried out and we will notify you to confirm this. 

The transfer of personal data

For the purposes described in this data protection policy, we will transfer your (personal) data to the following recipients:

As controller we are part of a company group (“Dr. Richard Gruppe”). To fulfil our comprehensive obligations, we also use other group-affiliated companies on a collaborative basis. We have an overriding legitimate interest (recital 48 of the GDPR). Within the Dr. Richard Group, those departments or employees that require your data to fulfil their contractual or statutory obligations, and as a result of data processing based on our legitimate interests, will receive said data. 

Furthermore, the (external) processors that we have commissioned receive your data, provided that the data is required to provide their respective service. All processors are contractually obliged to treat your data strictly confidentially and only process it within the scope of providing the service. This includes the following categories of recipient:

– Marketing management 
– PR agency 
– Website evaluation/analyses 

Furthermore, third parties commissioned by us receive your data so that they can provide the respective service.

– Payment service providers / banking establishments 
– Transport / shipping companies to supply goods 
– Tax consultants 

We maintain an up-to-date list of our recipient categories in respect of data transfers and contract processors. If we appoint processors, they are, as previously mentioned, bound by our data protection policy. In addition, your personal data is treated in the strictest confidentiality. Your data is never transferred to third parties by processors without your express consent, or used for any other purpose than to fulfil their obligations towards the controller.

Dr. Richard press newsletter 

On our website, you can choose to have our press releases sent to you via email by our external partner Ecker & Partner Öffentlichkeitsarbeit und Public Affairs GmbH (hereinafter “PR agency”). 

If you choose to sign up, our press releases will be sent to you via email. To do this, you must enter your name and email address, which we then forward to our PR agency in order to fulfil the contract. The personal data you provide when signing up for the newsletter is processed based on your consent (Art. 6 (1) lit. a GDPR). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The PR agency is contractually obliged to Dr. Richard to process your data exclusively for the purpose of fulfilling the contract (sending the newsletter); it is also obliged to protect said data, and not to transfer it to third parties. 

Should you no longer wish to receive the newsletter, you can cancel it at any time either by sending an email to our PR agency (, with the subject line “Unsubscribe”) or by informing us of your request at . If you unsubscribe from the newsletter, the data collected in the process of sending the newsletter will be deleted by us and by the PR agency. 

Getting in contact via the contact addresses given 

When contacting us, the details you provide for the purpose of handling your request will be processed. This is essential, as we do not have any other way of getting in contact with you. We will delete your enquiry(ies) and your contact details once your enquiry has been answered conclusively and provided that the deletion does not obstruct any statutory retention periods or supposed legal entitlements. In principle, the information you provide is processed exclusively to answer your request or enquiry; it is not stored beyond this. 

Using the contact form regarding scheduled buses, bus rentals and lost property 

To send an enquiry about “bus rentals”, we provide a contact form on our website. You can complete this form to send us your enquiries regarding your planned journey. Based on the data you provide, we can put together, and send you, a tailor-made offer. To prepare an offer, the following data is required: your full name, email address, telephone number, and specific travel information such as: departure address and time, passenger number, travel destination, journey description, and information regarding your return. You may provide additional information optionally if you wish. We process the data you enter in the form for the purpose of fulfilling the contract, by preparing a non-binding offer built on the information provided. The processing of the personal data you provide therefore takes place for the execution of pre-contract measures based on your enquiry (prepared offer) as well as, if necessary, for the fulfilment of the contract (Art.6 (1) 1 lit. b GDPR).  You are not obliged to provide us with the personal data outlined above. If you do not provide us with this data, we cannot answer your enquiry or render our services.

In order to direct enquiries to our lost property offices, we provide a form on our website that you can fill out to send us your enquiry. You also have the opportunity to send additional enquiries via the contact form. In order for us to be able to process and answer your enquiry, you must enter your full name, email address, telephone number and specific travel information (for example, region, line number and time); you may provide additional information if you wish. We process the information you provide exclusively to answer your enquiry; it is deleted after said processing. You are not obliged to provide us with the personal data outlined above. If you do not provide this data, we cannot process or answer your enquiry and we cannot render our service.

Rights of the data subject 

A primary aspect of data protection law is to give you certain options over the disposition of your personal data even once such data has begun to be processed. For this purpose, the data subject has a number of rights, which we must comply with within one month. To exercise your rights, please contact us via this email address: .

 Specifically, these rights are: 

(a) Right of access: Unless statutory restrictions state otherwise, we will provide you with comprehensive information about our processing practices. To this end, we provide you with copies of the data as well as information concerning data that has been specifically processed; the purposes of the processing; categories of processed data; recipients; storage period or criteria used to determine this period; origin of the data; and other information depending on the case at hand. Please note, however, that we cannot surrender any documents that may injure the rights of other persons. 

(b) Right to rectification: You may request that we rectify any data that is incorrect, has become incorrect, or is incomplete. Your request will be reviewed, and the data processing concerned may be restricted upon request for the duration of the examination. 

(c) Right to (data) erasure: You can exercise this right: in the absence of any need for processing purposes; if you withdraw any previously given consent; if you have a special objection provided that the data processing concerned is based on our legitimate interest and for the data processing of the controller; if the data has been unlawfully processed; to comply with a legal obligation to delete; if the data processed is in relation to a minor of under 14 years. 

(d) An accompanying right to restriction applies in particular cases: after exercising this right, the data concerned may only be stored. In addition to the possibility of restricting the examination period for data rectifications, the unlawful data processing (provided no deletion is required) and the duration of the examination of a special request for objection are covered. 

(e) You have the right to object to a data processing at any time. However, this only applies if the processing is based on our legitimate interests and on the data processing of the controller. 

(f) You also have the right to withdraw consent, provided that we process data based on your express prior consent. Your withdrawal of consent does not take retroactive effect; it only has effect for the future.

(g) Right to appeal: You may exercise this right to the Supervisory Authority. 

(h) Right to data portability: You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. However, this right is limited to the data that you have provided to us and data that has been processed by automated means on the basis of your consent or within the framework of fulfilling the contract. Please also note that we may not be able to comply with your request due to compelling reasons worthy of protection for processing. The same applies in the case of excessive requests made; a fee may be charged in this case, as well as if the requests are manifestly unfounded. 

Data security; data deletion

We take all appropriate technical and organizational measures to ensure that only the personal data required to fulfil the business purpose is processed by default. The measures we have taken concern the amount of data collected, the scope of the processing, the retention period and accessibility. By means of these measures, we ensure that personal data is only made available to a narrowly limited and necessary number of persons. Under no circumstances will other persons be granted access to personal data without the express consent of the data subject. 

Data protection measures

We, as the data controller, also use various protection mechanisms (backups, encryption) to secure the website and other systems. This should serve to protect your (personal) data to the best degree possible. All Dr. Richard employees have been informed about applicable data protection regulations, internal data protection regulations and data security precautions, and are required to keep secret all information entrusted or made available to them in the context of their professional employment. The requirements of the GDPR are strictly observed and personal data is only made available to individual employees insofar as this is necessary with regard to the purpose. If we use contractors, they are also obliged to act in accordance with our data protection policy on the basis of specific framework agreements. 

Links to third-party pages 

On our website, we use links to the websites of third parties. These include reference links that direct users to our permanent partners (e.g. on the subpage media coverage) and links to social networks (e.g. Facebook and Instagram). By clicking on one of these links, you will be taken directly to the respective page. 

The website operators will only be able to see that you have visited via our website. We therefore refer you to the separate data protection policies of these websites. Providing links to the websites of third parties does not constitute our consent to their content. We do not accept any liability for the availability or content of these websites. 

Contact for enquiries, messages and requests concerning data protection policy 

For any enquiries, messages or requests concerning data protection, please write to the following address: 

Dr. Richard Linien GmbH & Co KG (controller)
Stromstraße 11
1200 Vienna
Austria 

Data Protection Coordinator for the Dr. Richard Gruppe:

Harald Stroh
Phone: +43 1 33100 151
Email: