Privacy policy

General information

Car Rouge is a brand of EUROBUS AG. EUROBUS AG, Schwimmbadstrasse 1, 5210 Windisch, Switzerland ("we"), is the controller responsible for the collection and processing of your personal data in connection with this website and our Car Rouge tours. Our task is to offer our customers a comprehensive range of travel services.

In this privacy policy we explain how we process your personal data and how you can control and manage it. Our data processing may also be covered by further privacy notices, in particular those contained in the General (Travel) Conditions, or may result from the circumstances or be regulated by law.

This privacy policy meets the requirements of Swiss data protection law and – where and to the extent applicable – the General Data Protection Regulation (GDPR) of the European Union.

1. Does this notice concern you?

This privacy policy applies to you if you:

• are one of our customers or have a contractual relationship with us;
• are a fellow traveller of one of our customers. 
• are interested in our products or services and therefore provide us with your personal data (e.g. at an agency, on our websites and apps or at events) so that we can contact you. 

If you provide us with the personal data of other people, please make sure that you inform them of the disclosure of their personal data and ask them to read this privacy policy. We will make sure that we do the same wherever possible (e.g. if we have the person's contact details).

2. How can you control our processing of your personal data? 

You have rights that enable you to effectively control your personal data and the way in which we process it. Below we explain your rights in connection with your personal data. 

If you wish to exercise the rights listed below, please submit a request by e-mail to office@car-rouge.ch or by post to the following address:

EUROBUS AG, Car Rouge
Schwimmbadstrasse 1
5210 Windisch
Switzerland

If you have questions about the use of your personal data under this privacy policy, please address them to: office@car-rouge.ch

2. General information and mandatory disclosures

2.1 You can request information about your personal data

If you would like information about your personal data, we will provide you with a copy of the personal data you have requested, together with information about how it is processed.
Your right of access may be restricted in the cases provided for by law. 

2.2 You can request the correction of your personal data

If you believe that your personal data is inaccurate or incomplete, you can request that this personal data be amended or completed accordingly. In some cases, supporting documents may be required.

2.3 You can request the deletion of your personal data

If you wish, you can request the deletion of your personal data, to the extent permitted by law.

2.4 You can object to the processing of your personal data on the basis of legitimate interests

If you do not agree with processing based on a legitimate interest, you can lodge an objection on grounds relating to your individual situation. In that case, please inform us in detail about the processing concerned and the reasons for your objection. We will stop processing your personal data unless there are compelling legitimate grounds or the processing serves to establish, exercise or defend legal claims.

2.5 You can object to the processing of your personal data for direct marketing purposes

You have the right to object at any time to the processing of your personal data for direct marketing purposes. This also applies to profiling, insofar as it is connected with such direct marketing.

2.6 You can request the restriction of the processing of your personal data

If you dispute the accuracy of the personal data we use or object to the processing of your personal data, we will review or reconsider your request. You can ask us to restrict the processing of your personal data while we review your request.

2.7 You have rights in relation to automated individual decision-making

As a matter of principle, you have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you. However, we may automate such a decision if it is necessary for entering into or performing a contract with us, is permitted by law or if you have given your consent.
In any case, you have the right to contest the decision, to express your point of view and to request that a competent person review the decision.

2.8 You can withdraw your consent

Where processing is based on consent you have given, you can withdraw that consent at any time.

2.9 You can request the portability of part of your personal data

You can request a copy of the personal data you have provided in a structured, commonly used and machine-readable format. Where technically feasible, you can request that we transmit this copy to a third party.

2.10 Complaint to the Federal Data Protection and Information Commissioner 

In addition to the rights listed above, you can lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

3. For what purpose and on what legal basis do we use your personal data?

3.1 Performance of the contract and legitimate interest

In this section we explain for what purpose we process your personal data and on what legal basis. Primarily, we use your personal data to perform a contract to which you are a party or, at your request, to carry out pre-contractual measures. However, we may also process your personal data to fulfil our legitimate interest or that of third parties.        
Your personal data is processed in particular where this is necessary for entering into or performing a contract, in order to:

• conclude a (travel) contract with you. We may process personal data to register you as a new customer, to conclude a contract and to perform it with you;
•  provide you with the products and services you have purchased under the respective contract;
• carry out settlement, invoicing and debt collection;
•  provide you with services in connection with the preparation and implementation of a tour;
• for insurance purposes;
• offer advisory services;
• be able to help you if necessary should you run into difficulties during the tour;
• give you access to our digital platforms. We may process personal data when you use our digital platforms for various purposes (e.g. to manage your personal information or to gain access to travel information);
• to grant access to our premises and facilities. We may process personal data when you visit us at our premises in order to carry out appropriate access and security checks;
• to communicate with you. We may process personal data when you wish to contact us, when you ask us for information about our company or our services, or when the contract needs to be updated;
• answer your enquiries and support you;
• manage the termination of the contract.

Where we base a processing activity on a legitimate interest, we weigh this interest against your interests or fundamental rights and freedoms to ensure that they are proportionate. In the course of our business as a travel provider, we also use your personal data to:

• further develop our products and services; 
• improve cyber security, manage our platforms and websites and ensure business continuity;
• implement IT solutions;
• carry out maintenance of IT systems during ongoing operation;
• improve the automation and efficiency of our operational processes and our customer services (e.g. automatic completion of complaints, tracking of your enquiries and improving your satisfaction on the basis of personal data collected during our interactions with you, such as telephone recordings, e-mails or chats);
• enable the assertion of legal claims and defence in connection with legal disputes and official proceedings;
• organise competitions and promotions and carry out opinion polls and customer satisfaction surveys.

3.2 Advertising and marketing

If you are a customer and unless you object, we may send you offers for our products and services. We make sure that these commercial offers relate to products or services that are relevant to your needs and complement the offers you have already used. You can object to this at any time. 

3.3 Consent

For certain processing of personal data we will inform you specifically and ask for your consent. Of course, you can withdraw your consent at any time.
In particular, we ask for your consent for:

• The transfer of particularly sensitive personal data to third parties;
• Tailoring our offers and products or services on the basis of a complex profile in order to predict your needs and behaviour;
• all electronic offers for products and services that are not similar to those you have purchased, or for products and services from our trusted partners. 

Where necessary, we may ask you for further consent to the processing of your personal data, which, however, has no effect on data processing that has already taken place. 

4. What types of personal data do we collect?

We collect and use your personal data, i.e. all information that identifies you or makes it possible to identify you. 

Depending on the type of product or service we offer you and the interactions we have with you, we collect different types of personal data about you: 

• Contact information, (private or business) postal address, e-mail address, telephone number;
• Personal details, e.g. gender, date of birth and age, marital status, nationality, passport details, etc.
• Lifestyle, e.g. hobbies and interests, travel;
• Travel details, such as travel dates, itinerary/destination, airline, hotel, price, customer requests, information about your fellow travellers, frequent flyer programmes, etc.;
• Health data, e.g. information on special health-related needs or illnesses and accidents during a tour;
• Financial details, e.g. payment information, credit card number, account details;
• Data about your habits and preferences in relation to the use of our products and services (e.g. meal preferences);
• Data from our interactions with you, e.g. your comments, suggestions and needs collected during our exchanges with you in person at our locations and during telephone communication (call notes or call recordings), communication by e-mail, chat, chatbot, exchanges on our social media and any complaints you may have. Your connection and tracking data (e.g. collected via cookies for non-advertising or analytical purposes on our websites), online services and other applications;
• Data about your devices (mobile phone, computer, tablet, etc.), such as IP address, technical data and unique identifiers;
• Personalised login data or security features used to connect you to our website and apps.

5. From whom do we collect personal data?

We generally collect personal data directly from you. However, we may also collect it from other sources.

Sometimes we collect data from public sources:

• Publications/databases made available by official authorities or third parties (e.g. the Swiss Official Gazette of Commerce or the commercial register);
• Websites/social media presences of legal entities or corporate customers containing information you have disclosed (e.g. your own website or your social media presence);
• public information, e.g. information from the media.

We also collect personal data from third parties:

• from our customers (e.g. as fellow travellers);
• from our business partners (e.g. tour operators, service providers abroad);
• from third parties such as credit reference agencies and fraud prevention agencies;
• from address research service providers, who are themselves responsible for collecting the relevant information lawfully.

6. To whom do we disclose your personal data and why?

To fulfil some of the purposes described in this privacy policy, in particular the carrying out of a tour, we may disclose your personal data to others where appropriate. These may include the following:

• Our service providers in the country of travel (e.g. agencies, tour guides, hotel reservations, transfer and excursion services), transport providers (airline, train, car hire, etc.) and accommodation providers (hotels, hostels, etc.);
• Processors who provide services on our behalf (e.g. IT services, logistics, printing services, telecommunications, debt collection, consulting and sales, and marketing);
• certain regulated professions such as lawyers, notaries or auditors, where this is necessary in certain circumstances (legal disputes, audits, etc.), and our insurers;
• Partners for carrying out advertising, market research and opinion polls;
• Partners to assist in the investigation of criminal offences (e.g. fraud) and the assertion, exercise or defence of legal claims;
• Authorities and official bodies (e.g. tax authorities, embassies of the destination country) where there is a legal or official obligation (e.g. retention obligations, obtaining visas, obtaining entry requirements).

7. International transfer of personal data

International transfers from Switzerland and the European Economic Area (EEA) to a non-EEA country (third country) may involve the cross-border transfer of your personal data. In particular, you must expect your data to be transferred to your countries of travel. But also to countries in Europe, the USA and worldwide, where the service providers and suppliers we use are located. If the FDPIC or the European Commission has recognised that a third country offers an adequate level of data protection, your personal data may be transferred on that basis.

For transfers to a third country whose level of protection has not been recognised as adequate by the FDPIC and the European Commission, we rely either on an exception applicable to the particular situation (e.g. where the transfer is necessary for the performance of our contract with you) or apply one of the following appropriate safeguards to ensure the protection of your personal data:

• standard contractual clauses approved by the FDPIC and the European Commission;
• binding corporate rules.

To obtain a copy of these safeguards or information on where they are available, you can submit a written request in accordance with section 2.

8. How long do we retain your personal data?

We will retain your personal data for as long as is necessary to fulfil our contractual obligations and to comply with applicable laws and regulations, or for another period in view of our legitimate business interests, such as proper accounting and responding to legal claims or official enquiries.

9. Data security

We use appropriate technical and organisational security measures to protect the personal data you have stored with us against manipulation, partial or complete loss and unauthorised access by third parties (e.g. encryption of data transmission, access controls, etc.). Our security measures are continually improved in line with technological developments.

We take reasonable precautions to protect your data. The transmission of information via the internet and other electronic means always involves certain security risks, and we cannot guarantee the security of information transmitted in this way.

10. How you can follow the development of this privacy policy

In a world in which technologies are constantly evolving, we review this privacy policy regularly and update it as necessary.

The version currently published on our website applies. We recommend that you view the latest version of this document online. We will inform you of changes via our website or our usual communication channels.

11. Visiting our website

Hosting and storage locations

This website is operated on servers of a hosting provider in the European Union. We deliver the tour images and catalogue cover images from a data store in Switzerland. The providers process the data exclusively on our behalf and in accordance with our instructions.

Server log files

When you access our website, your browser automatically transmits technical information, which we store in log files: IP address, date and time of access, address requested, status code, amount of data transferred, referrer, and browser and operating system. We use this information to operate the website securely and reliably and to detect errors or misuse. The log files are generally deleted after 14 days.

Security reports

Our website uses a so-called Content Security Policy to determine which content your browser may load. If your browser blocks a piece of content, it can send us a technical report (page accessed without search parameters, blocked address, rule concerned). We store these reports without IP address for 30 days in order to fix errors.

12. Cookies and browser storage

We only set cookies where they are necessary for the website to function, or with your consent:

• Session cookie: Only on pages with a form do we set a technically necessary session cookie, which provides protection against forged form submissions and redisplays your entries in the event of an error. It expires at the end of the session (after two hours at the latest).
• Booking confirmation: If you return to our website after a booking, we store your title and name for 15 minutes in an encrypted cookie that applies only to the confirmation page, so that we can greet you by name there.
• Consent cookie: Stores your selection in the cookie banner (see section 13).
• Telephone number for advertising campaigns: If you reach our website via an online advertisement, we store the advertisement's identifier in a cookie for 30 days in order to show you a dedicated telephone number and to evaluate the effectiveness of our advertisements.
• Wish list: Tours that you save we store only in your browser (local storage). This information is not transmitted to us and remains until you remove it or delete your browser data.
• Avoiding double counting: We store the booking number of the confirmation page for 30 days only in your browser (local storage), so that a booking is not measured twice if the page is opened again.

You can delete or block cookies in your browser settings at any time; some functions (e.g. forms) may then not work.

13. Consent and cookie banner (Cookiebot)

For analytics and marketing services we obtain your consent via the Cookiebot service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot stores your selection, a random identifier, the date of consent and shortened technical details in order to be able to prove your consent. You can change or withdraw your consent at any time: Change cookie settings.

14. Analytics and advertising

With your consent, we use Google Tag Manager to integrate analytics and advertising services. The Tag Manager itself does not evaluate any usage data. Depending on your selection in the cookie banner, the following services can be loaded through it:

• Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): Analysis of how our website is used (pages viewed, time spent, origin, device, approximate location). IP addresses are not stored by Google.
• Google Ads (Google Ireland Limited): Measuring whether an advertisement has led to an enquiry or booking (conversion tracking), and displaying advertisements to people who have visited our website (remarketing).
• Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland): Measuring success and displaying our advertisements on Facebook and Instagram.

After an online booking, with your consent we transmit to these services only details of the booking (booking number, tour code, amount, number of participants), no names or contact details. The providers may transfer data to the USA; they are certified under the EU-US or Swiss-US Data Privacy Framework or use standard contractual clauses. Without your consent, these services are not loaded.

15. Forms and e-mail delivery

If you contact us via a form (contact, voucher order, VIP Travel-Club registration, incident report), we process your details in order to answer your request or fulfil your order. The details are sent by e-mail to our team in Switzerland; incident reports are handled by the customer service of EUROBUS AG (help@eurobus.ch). On request you will receive a brief confirmation of receipt without your message.

Your submission remains on the website's server only until it has been delivered; after that we delete the content immediately and keep only an entry without personal data (form, time, status). If a submission cannot be delivered immediately because of a fault, it remains stored in encrypted form until delivery succeeds, but for 7 days at most. To protect against misuse, we store your IP address only in shortened form and irreversibly encrypted (hashed), and limit the number of submissions per connection.

For sending e-mails we use the Mailgun service (Mailgun Technologies, Inc., USA) with servers in the European Union. Mailgun processes the messages solely for delivery on our behalf; the transfer is secured by standard contractual clauses or the Data Privacy Framework.

16. Catalogues and newsletter

If you order catalogues or subscribe to our newsletter, we transmit your details to our reservation and customer data provider TourData (Switzerland), which maintains our customer data on our behalf. If you tick the newsletter box when ordering a catalogue, we additionally register you for the Car Rouge newsletter.

We send the Last Minute newsletter using CleverReach (CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany). For this purpose we transmit your title, your name and your e-mail address to CleverReach. You will receive an e-mail with which you confirm your subscription (double opt-in).

The processing is based on your consent. You can unsubscribe from any newsletter at any time via the unsubscribe link in the newsletter or at Unsubscribe from newsletter. Your details are stored until you unsubscribe.

17. Online booking

You make bookings in the Car Rouge Reisemarkt (reisemarkt.car-rouge.ch), which is operated by TourData on our behalf. We process the data collected there to handle your tour in accordance with our General Travel Conditions. After the booking is completed, the Reisemarkt redirects you back to our confirmation page; in doing so we immediately remove your name from the address and use only the booking details for measurement (see sections 12 and 14).

18. Embedded content

Google Maps

On the pages of our boarding points we embed maps from Google Maps (Google Ireland Limited). When you access these pages, your browser loads the map from Google's servers; your IP address and the page accessed are transmitted to Google, possibly also to the USA. We use Google Maps so that you can find our boarding points easily.

YouTube

We embed videos in YouTube's extended privacy mode (youtube-nocookie.com, Google Ireland Limited). YouTube only stores cookies when you play a video; when the page loads, technical details such as your IP address are transmitted to YouTube.

360-degree views of our coaches

We deliver the 360-degree views of our Premium coaches ourselves; no data is transmitted to third parties in the process.

19. Campaign short links

If you access a short link from a printed advertisement (e.g. car-rouge.ch/opern26), we count this access via a service provider of our corporate group. Only the name of the campaign is transmitted, no IP address and no further details about you.

20. Last updated

This privacy policy was updated in October 2026.