Rede Expressos is committed to protecting the privacy of its Customers and users in the websites and applications it makes available. In this context, it has developed this Privacy, Security and Data Protection Policy, in order to affirm its commitment and respect for the rules of privacy and protection of personal data.
The use and navigation of our websites, applications, digital products/services, online filling forms and data provided directly or indirectly, imply the knowledge and acceptance of the terms and conditions of this privacy and security policy, General Terms and Conditions and other specific terms, policies and conditions of the subscribed services. When subscribing to our services, carefully read the inherent terms and conditions. By making your personal data available, you are authorizing the collection, treatment, usage and disclosure of such data in accordance with the rules hereby stated.
Who is responsible for collecting and processing data?
RNE - Rede Nacional de Expressos, Lda. (Hereinafter referred to as Rede Expressos or RNE) is the entity responsible for the collection and processing of personal data, and may, within the scope of its activity, use other entities subcontracted by itself to pursue the purposes stated here.
What is personal data?
Personal data is any information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable person. Any person who can be identified directly or indirectly, through an identification number or one or more specific elements of his / her physical, physiological, psychic, economic, cultural or social identity, shall be considered identifiable.
What personal data is collected and processed?
Rede Expressos collects and manages, among others, the following personal data: name, telephone number, Personal Tax Number (NIF), Identity Card (Citizen's Card or Passport) and email address.
Rede Expressos assumes that such data has been provided by the owner or that the user has given authorization to do so and will presume that it is correct, true and up to date.
How does Rede Expressos collect your data?
As a rule, personal data is collected when you subscribe one of our products or services, or when you make a reservation/booking, request or contact through our websites, applications or via our Contact Center. Personal data may be collected by the following means:
c) Contact Center;
d) In person;
e) Through apps installed on mobile devices.
The collected data is processed and stored in a computer database, respecting strict rules, in compliance with the legislation of protection of personal data; it is stored in a specific database, created for this purpose, by Rede Expressos or by the entities subcontracted by it.
Some of the personal data collected on the website is mandatory and, in case of lack or insufficiency of such data, Rede Expressos may not be able to provide you with the services or information requested. In each case, Rede Expressos will inform you of the mandatory nature of the provision of the personal data in question.
What is the purpose of the data collected?
Your data is intended to integrate a personal data file that Rede Expressos may use for the following purposes:
a) User Opinion;
b) Contacts Database;
c) Profile Update;
f) Suggestions and Complaints;
g) Budget Request;
h) Advertising on our media;
i) Purchase of tickets;
j) Transportation Cards Requests;
k) Internet Invoices;
m) Lost & Found service;
n) Compliance with other legal or regulatory obligations;
o) Conducting market studies, evaluation surveys and statistical analyzes;
p) Information about bus stops near the user.
q) Promotional and direct marketing actions carried out by means of automatic calling machines, fax machines, electronic mail, SMS, MMS, or other means that allow the reception of messages regardless of the intervention of the recipients;
In order to achieve the purposes identified above, Rede Expressos may proceed to the interconnection of the data collected, with the purpose of updating and completing such data.
What is the basis for processing your data?
The usage associated with the purposes of points e), d), and l) are based on their consent, as well as the use of data for direct marketing that may be associated with purposes i) j) and q).
The usage associated with the purposes of points a), b), c), g), h), i), j), k) and m) is based on the contractual relationship established between you and the company. The management associated with purposes f) (Suggestions and Complaints) and n) (Compliance with other legal or regulatory obligations) is based on compliance with legal obligations.
The management associated with the purposes of point p) is based on the demanded support of clients using the myRNE app, when they use the 'find nearest stop' function. This function can be disabled by the user in the management of the application on the mobile phone, as well as other remaining permissions inherent to the application.
With who is your data shared?
The data collected and held by the Company may be transmitted, with due respect for the duty of confidentiality and the principle of the purpose that led to its collection, to the following entities:
a) Other companies of the group Rede Expressos is part of;
b) AMT - Autoridade da Mobilidade e dos Transportes;
c) IMT – Instituto da Mobilidade e dos Transportes;
d) Judicial or administrative authorities, in cases where such assignment is mandatory
e) Recruitment and selection companies;
f) Subcontractors who will process the data on behalf of Rede Expressos and in accordance with the purposes determined by RNE. Thus, any entity subcontracted by Rede Expressos will treat the personal data of Customers and / or users, in the name and on behalf of Rede Expressos, in the strict obligation to take the necessary measures to ensure the protection of personal data against destruction, accidental or illegal , accidental loss, alteration, dissemination or unauthorized access and any other form of illicit treatment.
Cookies are small fragments of information that can help identify your browser and can store information such as User settings and preferences, to make browsing easier.
Rede Expressos may, in the future, store cookies on your device to personalize and facilitate browsing to the fullest, not providing those same cookies, references or personal data of the User.
For more information you should read our Cookies Policy when it becomes active and available.
For how long is your data stored?
The length of time during which the data is stored changes according to the purpose for which the information is processed. Where there is no specific legal requirement, data shall be stored and retained only for the minimum period necessary for the purposes for which it was collected or later processed, after which time the data shall be deleted. Eg: e-ticket PDF’s are kept securely for 2 years, since customers regularly ask for copies of such tickets with this specified delay.
Is your data safe?
Rede Expressos is committed to ensuring the protection and security of your data. To that end, the Company has adopted a series of technical and organizational security measures in order to protect the personal data you make available to us, against its unauthorized diffusion, loss, misuse, alteration, treatment or access, as well as against any other form of illicit treatment. Rede Expressos requires its subcontractors and its partners to adopt safety measures equivalent to those it practices. Notwithstanding the security measures practiced by Rede Expressos, the end User must take additional security measures, such as: ensuring that you use properly configured security-enhanced equipment and a Browser with an active firewall, anti-virus and antispyware, you should be aware of the authenticity of other websites you visit on the internet, avoiding websites that you do not trust.
Rede Expressos acknowledges that it will might be necessary to communicate data of Users solely within the scope of mergings, acquisitions and / or incorporation processes of which it might take part of, not considering that communication as a transfer of data to third parties, nor if there is any subcontracted treatment.
Rede Expressos may also transmit data to third parties in the context of investigations, inquiries and judicial, administrative and / or similar proceedings, provided that it is duly ordered by a court order accordingly.