Vy profile privacy policy
Here you will find information about what personal data is processed and how it is processed when you create and use a Vy profile.
What is a Vy profile?
By creating a Vy profile, we can recognise you across devices. This will also enable you to retain your purchase history in the app and to add favourite routes, notifications about deviations etc.
Creation and administration of customer profiles
You can easily create a Vy profile via the Vy app or at vy.no.
In order to create a Vy profile, we require the following personal data:
- Name: used for ticket details and to verify your user account.
- Email: used to verify your user account and issue PDF tickets and receipts.
- Phone number: used to verify your user account.
You can also provide additional, optional data that can help provide you with a better user experience, such as:
- Payment details: makes it easier for you to pay for a service.
- Favourite routes: provides quicker access to your regular journeys.
- Family and friends: simplifies the entering of data for those you often travel with.
- My locations.
Our legal basis for processing your personal data is your consent.
Age limit
You must be 13 years of age or older to create a Vy profile.
Rights of the data controller
How do we use your personal data?
Your personal data is mainly used to offer you services from Vy and other partners, provide you with good customer service, or refunds/compensation when you are entitled to these. Below you will find a list of our various processing activities and the information we may process during each activity.
Buying and amending tickets and travel services
When you buy a ticket or other travel services from us, we enter into an agreement with you. To be able to fulfil our part of the agreement, we have to have information about you and whatever you have purchased. We process data about your active, ongoing and planned trips so that you yourself can amend any trip you have purchased.
Sending relevant travel information
We send out necessary information linked with your trips, such as your ticket, your purchase receipt, information on timetable changes and deviations. For this, we may use notifications by email or text messages, or notifications directly in the Vy app (‘push notifications’). You can choose for yourself what kind of notifications you want to receive in the Vy app.
We do this in order to fulfil the agreement we have with you, and also to fulfil our obligations in accordance with applicable regulations relating to passenger rights.
Sharing personal information
We only share your personal information in the following cases:
- With third parties, when part of the order includes services supplied by a third party, such as other carriers and/or suppliers of mobility services sold or supplied via our channels.
- With third party suppliers performing tasks or working on behalf of or at the instruction of Vy and for the purposes specified in this privacy policy, such as system suppliers and providers of payment services.
- With public authorities where so required in accordance with the law or enforceable decisions from authorities.
We may also share aggregated data – that is, data that cannot be linked to individuals – with our business partners and group companies to improve our services and analyse such data.
Your data may in some cases be transferred to partners or other parties located outside the EU/EEA. In this case, we take necessary precautions to ensure that your data is protected in line with applicable personal data regulations.
Profiling
We also use your personal data to improve and personalise our services to ensure you have the best possible customer experience. We have a legitimate interest in processing data in this way.
Storage and deletion of personal data
We do not store your personal data for longer than necessary. We will retain your profile data for as long as you have an active customer relationship with us. Your Vy profile will be deleted automatically if it is not used for three years.
Purchase and travel history is normally deleted after 410 days. Storage of purchase and travel history data in this period is necessary so that we can protect our interests in the event of any complaints.
In some cases, we may retain data beyond this where necessary in order to protect their interests in the event of any complaints or if we are required to do so in accordance with accounting and bookkeeping legislation.
Group customer register
Short version:
Vy is a group comprising several companies working together. We would therefore like to share your user details between the companies in order to make it easier for you and us if you wish to travel by e.g. rail and bus.
Longer version
Vygruppen is a mobility group with a number of companies sharing a group customer register.
Th Vy Group consists of:
- Vygruppen AS
- Vy Tog AS
- Vy Buss AS
- Vy Gjøvikbanen AS
- Vy Mobility AS
- Vy Tåg AB
- Vy Buss AB
The purpose of the group customer register is to manage customer relationships and coordinate the provision of services from the different companies in the group.
The group customer register contains general profile data about you such as your name, contact details, customer number, payment information, search, sales and travel history and how you use our products and services.
Vy has a legitimate interest in managing customer relationships and coordinating the provision of services from the various companies in the group.
The companies in The Vy Group share responsibility for the processing of the information in the register.