1. General.

Protecting your identity and your privacy is important to SBB AG and Elvetino AG. With this privacy policy, we inform you which personal data is processed in connection with the use of the MyCoffeeNow ordering platform, for what purposes and what rights you have.

Your personal data is processed in accordance with the provisions of the Swiss Data Protection Act (DSG).

2. Responsibility.

SBB AG and Elvetino AG have joint responsibility for processing personal data in connection with MyCoffeeNow.

SBB AG has the leading role in operating the technical platform, the system architecture, technical operation and further development of the application.

Elvetino AG is responsible for operational order processing, rendering the catering service, customer service, refunds and commercial processing. For this purpose, Elvetino AG receives such personal data and transaction information as are necessary for order processing, settling payments and fulfilling statutory obligations.

Contact for data privacy queries

Elvetino AG
Vulkanplatz 11
CH-8048 Zurich
Switzerland
E-mail: mycoffeenow@elvetino.chLink opens in new window.

Data privacy queries are received by Elvetino AG and – wherever necessary – processed jointly with SBB AG.

3. What personal data do we process?

In connection with the use of MyCoffeeNow, we process, in particular, the following personal data:

• e-mail address
• seat entered by the customer
• automatically determined train and coach number
• products ordered
• time of the order
• information on payment processing (e.g. payment status, payment method and transaction reference)
• technical information that is required for safe operation of the platform

Elvetino AG and SBB AG do not store complete credit card, debit card or TWINT data.

4. For what purposes do we process personal data?

We process personal data only to the extent that it is necessary for operating MyCoffeeNow. This includes in particular:

• providing and operating the ordering platform
• receiving and executing your order
• delivering the ordered products to your seat
• processing and settling payments
• sending the order confirmation
• processing customer queries and refunds
• obtaining voluntary customer ratings to measure customer satisfaction and improve our offering
• analysing and continuously developing MyCoffeeNow
• fulfilling statutory and regulatory obligations

Your personal data is not used for showing personalised advertising or mailing newsletters.

5. Payment processing.

Payments are processed via the Worldline payment service provider.

Payment information processing is encrypted. Elvetino AG does not receive complete credit card or TWINT data, but only the transaction information that is necessary for settling payment, accounting, refunds and customer service.

6. Sharing of personal data.

Personal data is shared only to the extent that it is necessary for operating MyCoffeeNow.

Processing is performed:

• within SBB AG
• within Elvetino AG
• by the Worldline payment service provider to process the payment

Beyond this, personal data is not passed on to third parties unless required by law.

7. Cookies and technical data.

MyCoffeeNow uses only technically necessary cookies or comparable technologies that are necessary for safe operation and proper functioning of the ordering platform.

These include:

• session administration
• system security
• technical provision of the platform

No cookies or comparable technologies are used for marketing and advertising purposes.

8. Retention period.

Personal data is only retained for as long as this is necessary to execute the order, process refunds, settle payments, assure the quality of service, analyse and advance the development of MyCoffeeNow and meet statutory obligations.

Order and transaction data are generally retained for 12 months.

Data that are subject to statutory retention obligations are retained for longer in accordance with the statutory requirements.

9. Data security.

SBB AG and Elvetino AG take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, modification or disclosure.

Encryption is used for transmitting data and processing payment.

10. Your rights.

Under applicable data privacy law, you have, in particular, the right:

• to request information about the personal data held about you
• to have incorrect personal data corrected
• to demand erasure or restriction of processing where this does not conflict with statutory retention obligations
• to assert further rights under the Swiss Data Privacy Act.

Queries can be sent to mycoffeenow@elvetino.chLink opens in new window. at any time.

11. Changes to this privacy policy.

This privacy policy can be amended as necessary, in particular when statutory requirements change or MyCoffeeNow undergoes further development.

The current version published on the landing page sbb.ch/en/mycoffeenow is the only version in force.

Version: 7 August 2026.