This Privacy Policy describes how we, Eurail B.V ( “we”, “our” or “us”), collect, store, use and disclose personal information regarding individuals (“you”) who visit or otherwise interact with us at https://benefitsportal.eurail.com/ (“Site”).
This Privacy Policy pertains to Eurail B.V as the “data controller”, meaning that we determine the means and purposes for processing personal information.
We deem careful handling of personal information very important, and we are committed to making our practices regarding collection and processing of personal information fair and transparent.
Under the General Data Processing Regulation (GDPR) and Dutch Data Privacy legislation personal information is considered any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together and can lead to the identification of a particular person, also constitute personal information.
Note: Use of our Sites and Service are subject to terms and conditions per our Website Terms of Use.
Eurail takes best efforts approach to provide responsible secure partnerships with third parties linked on our Site. We do not take any responsibility for third party websites linked to our Site. Eurail is not liable in any way for any (personal) information you share with third parties using any links provided via our Site.
This policy describes our practices regarding:
A. Data Collection
B. Data Use
C. Data Location and Retention
D. Data Sharing
E. Cookies and Tracking Technologies
F. Data Security
G. Data Subject Rights
H. Additional Information
We collect limited personal information of visitors to the Site. Such data is collected and generated through your interaction with us or our Services and can be directly from you or through our Benefit Partners. Data collected and described under this section is referred to as “Personal Information” in this Privacy Policy.
Data automatically collected or generated
When you visit, interact, or use our Service, we collect, record or generate technical data about you. We do so with the help of third-party Service Providers using cookies and other tracking technologies (detailed in section e). This data consists of connectivity, technical and aggregated usage data such as IP addresses and general locations, time zone, device information and/or application data like browser version, language settings, sessions, clicks, use of features, and other interactions with our Site.
Data received from other third parties
We may receive data which relates to you from other sources such as if you participate in promotions or events that we sponsor or participate in, we may receive your personal information from its organisers.
Data obtained through analytics tools
We use website analytics tools such as Google Analytics, to collect analytics data about the use of our Site and/or Service such as which pages are visited, when they are visited, which ad or email or webpage brought you to our Site, how the user interacts with and uses our Service and Site pages and various features etc. This is strictly collected based on consent by opting in for our analytics or marketing cookies in the Cookie banner on our Site. Refer for more information to section e.
We process your personal information in accordance with the requirements for the processing of personal information laid down in Dutch privacy legislation.
We process personal information for our Site based on your explicit consent to data collection as described in section a).
We process your personal information for the following purposes:
We store your data in multiple locations and for as long as necessary in accordance with our reasonable business needs. This is done in accordance with our data retention policy at our reasonable discretion.
Eurail B.V. is headquartered in the Netherlands which is included in the European Union and therefore required to offer an adequate level of protection for personal information of EU member state residents. Data is stored and transferred within the EEA for these purposes. If data is transferred to non-EEA countries such as the United Kingdom or U.S., we rely on EU data transfer adequacy decisions as well as standard contractual clauses apply as approved by the European Commission.
We share your Personal Information with third parties in accordance with legal requirements. Data sharing is always limited and restricted to only what is necessary.
We can provide your personal information to third parties for the following reasons:
The following third parties can process your personal information:
We, our Benefit Partners and Service providers use cookies and other technologies for performance, analytics, and personalisation purposes.
Cookies are small information files that can be automatically stored on or read out from the device (including a PC, tablet or smartphone) of the website visitor, while visiting a website. This is done through the web browser on the device. The information that can be transmitted by a cookie, over the use of our Site, can be transferred to the secured servers of Eurail or to the servers of a third party.
We use cookies on our Site for the following purposes:
Performance Cookies
These cookies are technical and/or functional and helps us to secure and manage the performance and functionality of our Service and Sites;
Analytics Cookies
These cookies generate statistics and analytics data by tracking user behaviour on our website to gain insight into the use of our Service and Sites by you every time your visit us, in order to optimise and improve our website and services. Your browser will tell us if you have these Cookies and whether you allow new Cookies to be placed, we will then generate and place new ones to allow us to analyse your use of our Service;
Marketing and Advertising Cookies
These cookies allow us to make our Service offer more interesting for you by displaying advertisements that fit your interests and to personalise the ads and content on our website and in our newsletters based on your interests and click and surf behaviour. We may use Cookies set by another organisation, so we can more accurately target advertisements to you. We also set Cookies on certain other sites that we advertise on, if you receive one of these Cookies, we may use it to identify you as having visited that site and viewing our ad there if you later visit our Services. We can then target our advertisements based on this information. These cookies include those placed on Social Media Channels;
Google Analytics is used for analytical and tracking cookies for the purpose of creating statistics regarding traffic and uses of the various components of our Sites, to create studies to improve our Services and Site. If users do not wish for Google Analytics to collect or use their information, they can opt out here: Google Opt-Out.
Third-party Integration Cookies
To provide our Service, we make use of third parties (as detailed in section d), these third parties may also set their own Cookies. They do this to enable and improve the performance and interoperability between our platforms and services offered to you. Please note that we have no control over how third parties use the cookies, and information and personal information collected via the cookies, themselves. For more information about these parties and how they use cookies, we recommend that you read their privacy policies (please be aware that such policies may be revised regularly).
“Do Not Track” requests
Some web browsers can send a “Do Not Track” request to websites telling them not to follow its online movements, because of differences in how web browsers interpret this feature, there is a lack of standardization and its not always clear whether visitors and Customers intend for these signals to be transmitted or whether they are aware of them at all. Therefore, as many other reputable websites and online platforms, we do not change our practices in response to a “Do Not Track” request from your browser or mobile application. However, your browser allows you to control cookies, including whether to accept them and how to remove them. You can also set most browsers to notify you if you receive a cookie, or to block or remove cookies altogether, this is detailed for you below.
You can prevent the placement of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling some functionality and certain features of this website. Therefore, it is recommended not to disable cookies.
Most cookies have an expiration date. This means, that they will automatically expire after a certain period and no longer register any data concerning your visit of the website. Another option is to remove the cookies manually before the expiration date. To do this, consult the instruction manual of your browser.
We implement and monitor security measures in place to protect your personal information.
We will never request you to provide your personal information over the phone or via social media and we will only contact you via the registered email address on your account. If you are unsure, please contact us via our Customer service contact form.
We secure your data using industry standards and best practices for physical, procedural and technical measures.
Please be aware that regardless of any security measures used, we cannot and do not guarantee the absolute protection and security of any personal information stored with us or with any third parties as detailed in section d.
As an individual you have rights concerning your personal information. For all such personal information that we process as a Data Controller and detailed in section a, you may exercise your rights by contacting us.
If you have provided personal information via any of our Site you can send us a request for insight, inspection, rectification, restriction, modification, data portability or deletion of your personal information. You can send this request to our Privacy Team at privacy@eurail.com.
To prevent abuse, we ask that your request be sent from the same email address to which your account with us is registered so that we may validate your identity. We may ask you to provide further proof of your identity if necessary to correctly identify you in our systems. Such additional data of requests and/or identify validation will be retained by us for legal purposes i.e., as proof of the identity of the person who submitted the request.
Persons under the age of 18 may use our Site only under the supervision of their parents or legal representatives. We do not knowingly collect personal information from children. If we learn that a minor is using our Service without representation, we will attempt to block such use and make our best efforts to promptly delete any personal information stored with us with regard to the child.
National supervisory authority
If you are a GDPR-protected individual, if you have any complaints about the processing of your personal information, based on privacy legislation, you have the right to lodge a complaint with the national supervisory authority responsible for the protection of personal information against our processing of your personal information. For the Netherlands, this is the “Autoriteit Persoonsgegevens”, which you can contact here.
For questions on our services or technical issues, please contact customer service via the contact form.
Eurail B.V. has a privacy officer appointed for monitoring and advising on ongoing privacy compliance and serving as a point of contact on privacy matters for data subjects and supervisory authorities. If you have any questions about your privacy or about this privacy policy, you can send an email to privacy@eurail.com.
We reserve the right to update this statement as required. Changes will be published on our Site and previous versions will continue to be available on request. We recommend that you check this statement regularly, so that you are informed of any changes.
Effective Date of Policy Update: 23/08/2024