Privacy Policy

BusLinq, established at Gerrit Peuscherstraat 393, 7558 BJ Hengelo (Ov.), the Netherlands, is responsible for the processing of personal data as described in this privacy policy.

Article 1 — Contact details

BusLinq
Gerrit Peuscherstraat 393
7558 BJ Hengelo (Ov.), the Netherlands
E-mail: [email protected]
Trade register number (KvK): 82910030

Article 2 — Personal data we process

BusLinq processes personal data because you use our services and/or because you provide it to us yourself. Below is an overview of the personal data we process:

• First and last name
• Business e-mail address and phone number
• Company name, trade register number and VAT number
• Billing address and registered office address
• Data of employees and customers that you enter into the platform yourself
• Data that employees enter in the employee app (see article 4)
• IP address and login data (stored in encrypted form)
• A log of sign-ins and security actions, and of which pages and features you use in the platform (without the content of what you enter)
• Other personal data you actively provide, for example through correspondence or the contact form

Article 3 — Special and/or sensitive personal data

Our platform offers the ability to maintain personnel files. These may contain special categories of personal data, such as employees' Dutch social security number (BSN). BusLinq processes this data solely on your behalf, as the controller. We do not process data of persons under the age of 16.

Article 4 — The employee app

Companies that use BusLinq can let their employees use the BusLinq employee app for iOS and Android. For the data in the app, the employer is the controller; BusLinq processes it on the employer's behalf.

The app processes:

• Login data: the employee's e-mail address and password. The password is not stored on the device. The app only stores an access key, which expires after thirty days without use and is erased when the employee logs out.
• What the employee enters: working hours and breaks, trip data (departure and arrival times, odometer readings, remarks, costs incurred and the answers to the checklist), messages to the planners, leave requests, sick and recovery reports, expense claims with a photo of the receipt, and availability.
• What the employer provides: the employee's trips, messages from the planners and payslips.

Camera. The app only uses the camera when the employee taps a button for it: for a photo of a receipt with an expense claim, a photo with a report about a bus, and to scan the QR code on a work order. The app does not use the microphone or contacts.

Location. Only if the employer switches this on in BusLinq, the app records the location of the device once when the working day starts and once when it ends. The employee can refuse; the working time is then saved without a location. The app tracks nothing in between and never uses location in the background. BusLinq deletes the location three months after the hours have been reviewed.

Notifications. If the employee switches notifications on, they get a notification for a message from the planners and when one of their trips is new, changes or is cancelled. For this, BusLinq stores a device token. Notifications are delivered via Google Firebase Cloud Messaging and the Apple Push Notification service; they can therefore see that there is a notification, but it only contains the type (for example "New message from the planners") and no message text or trip details. The token lapses on logging out or when notifications are switched off.

Unlocking with fingerprint or face. This is optional and is checked entirely on the device. BusLinq receives nothing from it.

Sick reports. The app only asks for the day on which the employee reports sick. An explanation is not needed; do not include any medical information in it.

Storage on the device. To keep working without signal, the app stores the most recently retrieved trips, hours and messages, and anything not yet sent, in the app's own storage. Payslips the employee opens also remain on the device. When the employee logs out, the app erases all of this data from the device.

No advertising or tracking. The app contains no advertising and no analytics or tracking services, and does not share data with third parties for advertising.

Your rights. For access to, correction or deletion of data in the app, please contact your employer. BusLinq assists your employer with this. If you send your request to [email protected], we will make sure it reaches your employer.

Article 5 — Purpose and legal basis of processing

BusLinq processes your personal data for the following purposes:

• Performance of the agreement: granting access to and maintaining the platform
• Invoicing: processing payments and sending invoices
• Customer service: answering questions and providing technical support
• Legal obligations: complying with fiscal and legal retention obligations
• Legitimate interest: securing the platform, detecting and preventing misuse, helping with questions and outages, and improving our services

Article 6 — Retention periods

BusLinq does not retain personal data for longer than strictly necessary for the purposes for which it was collected. We apply the following retention periods:

• Account data: up to 30 days after termination of the subscription
• Invoices and payment data: 7 years (fiscal retention obligation)
• Contact form messages: a maximum of 1 year
• Security log (sign-ins, failed attempts, permission changes and exports): 365 days
• Usage trail (which pages and features you used, without content): 30 days

Article 7 — Sharing with third parties

BusLinq never sells your data to third parties. We only disclose data to third parties where necessary to perform our agreement with you or to comply with a legal obligation. We enter into a data processing agreement with companies that process data on our behalf. We use the following categories of processors:

• Hosting provider (server infrastructure)
• Payment service provider
• E-mail provider (for transactional e-mails)

Article 8 — Cookies and consent

BusLinq uses cookies to make the website function properly. Before placing non-essential cookies, we ask for your consent via the cookie banner. We distinguish the following categories:

• Necessary cookies: required for the website to function, to secure your session and to process forms. Examples: session cookie, CSRF security token and authentication cookie. These cookies are always placed; you cannot object to them.
• Analytics cookies: anonymous website statistics to improve the user experience. We only place these after your consent. No analytics cookies are currently actively used.
• Marketing cookies: for relevant advertising on other websites. We only place these after your consent. No marketing cookies are currently actively used.

Your cookie preference is stored in the cookie buslinq_cookie_consent (valid for 365 days, SameSite=Lax). You can change your preference at any time by deleting your browser cookies — the cookie banner will then reappear. More information on managing cookies can be found in your browser's help function.

Article 9 — Security

BusLinq takes the protection of your data seriously and has taken appropriate technical and organisational measures:

• All connections are encrypted via HTTPS/TLS
• Passwords are stored in encrypted form
• Access to production systems is restricted and secured with multi-factor authentication
• Regular backups and security audits
• Sign-ins, permission changes and exports are recorded in a log that only BusLinq administrators can view; suspicious patterns are flagged automatically

Article 10 — Your rights

You have the following rights regarding your personal data:

• Access: you can request which data we process about you
• Rectification: you can have incorrect data corrected
• Erasure: you can request the deletion of your data
• Restriction: you can request restriction of the processing of your data
• Objection: you can object to processing based on legitimate interest
• Data portability: you can request your data in a commonly used format

To submit a request, you can contact us via our contact form or by e-mail at [email protected]. We respond within 30 days.

Are you not satisfied with how we handle your request? You then have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Article 11 — Changes

BusLinq reserves the right to amend this privacy policy. Changes will be published on this page. We advise you to consult this page regularly. This privacy policy was last amended in November 2026.