Privacy Policy
This privacy policy covers erpu.eu and the ERPU newsletters.
(1) Who we are
The European Rail Passenger Union is currently just a private undertaking of four individuals: Jon, Patrick, Martin and Jedidjah. We are working on scaling up and incorporating as a formal legal entity somewhere in 2026. When that happens, we will adjust this page.
(2) When you browse our main page https://erpu.eu
In brief: We provide you with this page, make sure it stays secure and get an anonymous statistic to see if we succeeded in doing so.
Purpose: We process your personal data for two purposes: (A) to provide this page to you (“traffic data” such as your IP address) and (B) to use your personal data for ensuring the security of the page.
Storage: (A) Traffic data is not stored. (B) Security log data (e.g. when the software identifies an “incident”) are deleted within 6 months, unless there is a particular reason to keep information for a longer period of time (e.g. individual IP addresses are blocked).
Legal Basis: (A) Your consent to receive our page and (B) our legitimate interests (for security reasons we process personal information, IP addresses, on this page) in maintaining the security of our page and fulfilling our legal duty to keep the page secure.
Processors: We only use trustworthy processors that only process your personal data on our behalf (“processors”) – our current hosting provider is Hetzner Online GmbH. The particular provider may be subject to change over time.
Other Recipients: Usually none.
Third Country Transfers: None. We process your data within the EEA/EU.
Cookies: We only use functional cookies on erpu.eu.
(3) Additional Processing when you sign up to ERPU updates
In brief: In addition to the processing described under (1), we use your email to send you the requested update(s) and any additional data you have provided when signing up.
Purpose: Sending you our newsletter and customize elements in newsletters (like country-specific information).
Storage: Your data is removed from the mailing list when you cancel your subscription. Your personal data is consequently deleted within 24 hours.
Legal Basis: Your consent for sending emails.
Processors: We only use trustworthy third parties that only process your personal data on our behalf (“processors”). For mailing we currently use our own system hosted by Hetzner. This may change over time.
Other Recipients: Usually none.
Third Country Transfers: None. We process your data within the EEA/EU.
Cookies: We use a session cookie (named “PHPSESSID”), to process your signup, which holds a random string. It is deleted when you close your browser.
(4) Additional Processing when you share our page on external networks or follow links
It’s simple: We currently cannot really guarantee other people’s compliance, so please be aware of that.
More Details: If you click on any button that allows you to share our page (e.g. Mastodon or Bluesky) or follow a link to a third party page, you will be redirected to this other page; you are then subject to the privacy policy of this third party.
(5) In all cases, you have the following rights
It’s simple: Just send us a message at founders@erpu.eu and we’ll take care of things!
More Details: You have the right to access, to rectify, to erasure, to object, to restrict processing, to data portability, to withdraw your consent and to launch a complaint with your local data protection authority.
Copyright and Open Source for erpu.eu
All content on erpu.eu that we have created is licensed under the Creative Commons Attribution and Non-Commercial Licence (CC BY-NC 3.0), unless indicated otherwise. This means you can always use content from erpu.eu if you do not make a profit from it or use it in commercial settings, and if you refer to us (at least as “erpu.eu” or “ERPU” or "European Rail Passengers Union") when using our content.
In addition to this licence, we extend this licence for:
- Commercial journalistic purposes (including blogs, social media and alike) when reporting about us
- Commercial academic and research purposes
If you want to use any content beyond this general licence above (e.g. content for your company webpage, book and alike), just send us an email at founders@erpu.eu, we are happy to agree to any other use!
This serves as attribution that this page was adjusted from the privacy and legal page of noyb.eu.