Privacy Policy

Version: 11 September 2026

This policy explains how Future Bus Tours GmbH processes personal data when you visit viennabustransfer.com, contact us or book our transport and tour services.

1. Responsible company

Vienna Bus Transfer is a service operated by Future Bus Tours GmbH, the controller responsible for the processing described here.

Future Bus Tours GmbH
Grillgasse 6/17
1110 Vienna, Austria
Company registration: FN 523647w
VAT identification number: ATU75085337
Email: booking@viennabustransfer.com
Telephone: +43 676 437 38 16

2. Information we process

Depending on how you use our services, we may process:

• Your name, email address and telephone number.
• Pickup and destination addresses, travel dates and times.
• Flight details provided for airport transfers.
• Passenger numbers, luggage information and child-seat requests.
• Billing details, payment status and transaction references.
• Booking correspondence, changes, cancellations and refund records.
• Technical information such as IP address, browser, device information and website interactions.
• Your cookie and consent preferences.

Please provide only information relevant to your inquiry or journey. If you supply another passenger’s details, ensure that you are entitled to do so and inform them about this policy.

3. Inquiries, bookings and legal bases

We use inquiry and booking information to prepare quotations, confirm bookings, arrange journeys, communicate with you, process payments and handle changes or refunds.

Processing necessary to take steps at your request before a contract or perform a contract is based on Article 6(1)(b) GDPR. Processing required for accounting and other legal obligations is based on Article 6(1)(c) GDPR.

General correspondence, website security and the establishment, exercise or defence of legal claims may be processed on the basis of our legitimate interests under Article 6(1)(f) GDPR, subject to your rights and interests.

Where we request consent for optional processing, the legal basis is Article 6(1)(a) GDPR. You may withdraw that consent at any time.

Providing information necessary for a booking is a contractual requirement. Without it, we may be unable to arrange the requested service.

4. Hosting and technical operation

Our website is hosted using Hostinger services. Hosting and technical service providers may process connection information and server logs to deliver the website, maintain security and investigate faults.

Technical records are retained for the operational or security purpose for which they were collected and may be retained longer where needed to investigate an incident or meet a legal obligation.

5. Payments

We accept card payments through Stripe, PayPal, bank transfer and cash. Depending on your selected method, payment information is processed by the relevant payment provider or bank.

We use payment confirmations and transaction records to administer bookings, accounting and refunds. Payment providers may also process information for their own fraud-prevention and legal obligations.

Provider information: Stripe Privacy Policy and PayPal Privacy Statement .

6. Drivers and booking communications

Relevant journey information is shared with the assigned driver so that the booked service can be carried out. This may include your name, contact number, pickup and destination details, time and relevant passenger requirements.

Operational communication may take place by telephone, email or WhatsApp. These communication providers may process associated information under their own privacy terms. We limit information shared with drivers to what is relevant to the service.

If you contact us through WhatsApp, its privacy terms also apply. You can contact us by email or telephone instead. We send booking-related messages, not promotional newsletters.

7. Cookies and your choices

We use CookieYes to manage cookie preferences. Its consent cookie remembers your choices for up to one year, unless it is deleted earlier.

The consent interface distinguishes necessary, functional, analytics and advertising technologies. Necessary technologies support essential functions, including remembering your privacy choices.

You can accept optional categories, reject them or customise your selection through the CookieYes banner. You can revisit your choices using the cookie-preferences control on the website. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Refusing optional analytics or advertising consent is not a condition of booking a transfer. Some optional third-party features may be unavailable until you allow the relevant category.

CookieYes provides details of detected cookies and storage, their purposes and their reported durations in the preference panel.

8. Google Analytics, Ads and Tag Manager

We use Google Analytics 4 to understand website usage and Google Ads conversion tracking to measure actions such as successful contact-form submissions and telephone-link clicks. Google Tag Manager manages the deployment of website tags.

Depending on your choices and the relevant feature, information processed may include online identifiers, device information, pages visited, referral information and conversion events.

We use CookieYes with Google Consent Mode to communicate consent choices to Google tags. The configured default is denied for analytics, advertising, advertising user-data sharing and advertising personalisation.

A denied consent setting does not necessarily mean that all communication with Google stops. Depending on how the tags are deployed, Consent Mode can involve limited cookieless measurement signals. Those signals must not be assumed to be anonymous merely because cookies are not used.

Consent-dependent analytics and advertising storage is based on your consent. Google’s handling of information is described in the Google Privacy Policy .

9. Maps and location searches

Our booking functionality uses Google Maps-related services for location searches and journey planning. Using these services may transmit technical information, your IP address and entered locations to Google.

Only enter locations needed for your journey. Any request to use your device’s location is separate from entering an address manually and can be refused. You can also request a quotation by email or telephone.

Processing of journey details needed for your requested quotation or booking is based on Article 6(1)(b) GDPR. Where optional third-party storage or access requires consent, this is handled separately through consent choices.

10. YouTube and fonts

Some pages contain embedded YouTube videos. Loading or interacting with these videos may allow YouTube to receive technical information and use cookies or browser storage. If you are signed into Google, activity may be associated with your account.

The CookieYes inventory identifies YouTube-related technologies, including YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA and yt.innertube storage. Reported durations range from the browser session to six months; some browser storage has no automatic expiry and remains until cleared.

Website fonts may be served locally or requested from a font provider. A locally served font does not itself require a request to Google. If a font is requested from Google, connection information such as your IP address is transmitted to deliver it.

Information about Google and YouTube processing is available in the Google Privacy Policy .

11. Recipients and international processing

Recipients may include assigned drivers, hosting and IT providers, communication providers, payment providers, accounting advisers and authorities where disclosure is legally required.

Some providers operate internationally and may process information outside the European Economic Area. Applicable transfer arrangements can include an adequacy decision covering the recipient or appropriate safeguards such as Standard Contractual Clauses. The applicable arrangement depends on the provider, recipient and processing activity.

Contact us for information about the safeguards applicable to a particular provider and how to obtain a copy.

12. Retention

Inquiries that do not result in a booking are deleted once they are no longer needed for handling the inquiry or a related issue.

Booking and transaction records are archived where necessary for accounting, legal obligations or the handling of claims. Retention is determined by the applicable obligation and the purpose of the record. Accounting retention does not mean that every informal message must be kept for the same period.

Other personal information is retained only for as long as necessary for its stated purpose, unless further retention is required or permitted by law.

13. Your rights

Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction of processing and data portability.

You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you may withdraw it at any time.

GDPR also provides protections concerning decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, contact booking@viennabustransfer.com . We may request proportionate information to verify your identity.

You may lodge a complaint with a competent supervisory authority, including the Austrian Data Protection Authority .

14. Changes to this policy

We update this policy when our processing activities or applicable requirements change. The version date appears at the top of this page.