Right to access
Would you like to know which personal data we process about you? You can always request an overview from us. We will explain what we use the data for, how long we keep it and what you can do if any details are incorrect. You can view some of your personal data yourself in Mijn NS. If you do not yet have a Mijn NS account (or a Mijn NSI account or Mijn NS Zakelijk) you can create one straight away.
If you want to see more data than is available in Mijn NS, you can also submit a request for access to your personal data using the request form. We must be certain we give the personal data to the right person. Please include the details as they are known to NS.
Correcting or completing your data (rectification)
Are the personal details we hold about you incorrect or incomplete? You can correct some of the information yourself in Mijn NS. If you do not yet have a Mijn NS account (or Mijn NS Zakelijk) you can create one straight away. If you need to correct data that is not in Mijn NS, you can submit a rectification request via the request form.
Deleting your personal data (right to be forgotten)
In certain circumstances you can ask us to remove your data from our systems by completing the request form. Please bear in mind this may mean we can no longer provide services or products to you.
Objecting to the processing of your data
In some situations you can object to the (further) processing of your data, for example for reasons linked to your personal circumstances. You can indicate this in the request form. After we review your request we will let you know if and how we can comply.
Temporarily suspend the processing of your personal data (restriction)
If you want the processing of your data temporarily paused, you can complete the request form.
Transferring your data (data portability)
If you wish, you can receive a copy of the data we hold about you. You can transfer this data yourself or ask us to transfer it to a third party. Request this and indicate your preference using the request form.
Opt out of using monthly counters for analysis purposes
We value our relationship with you and want to maintain it. When we use data for marketing aimed at increasing passenger numbers and spreading travel demand, we have a commercial interest in using certain derived travel data. We call this data Maandtellers. Maandtellers include data on travel frequency, time since your last journey, travel inside or outside peak hours, preferred routes, preferred stations, OV-fiets, Stallen op rekening via NS Flex and travel revenue. We use these data for analysis to spot trends and adapt our products accordingly. Linking these data to individual travel records helps us achieve better business results and higher customer satisfaction. For analysis we use aggregated or pseudonymised data wherever possible. The data only tell us about travel behaviour. We cannot ‘track’ you using this information. If you do not want your pseudonymised travel data included in these analyses, you can indicate this via the request form. You will only receive offers based on your travel data if you give NS permission to do so.
We will assess your request in accordance with the General Data Protection Regulation. We will inform you as soon as possible, and in any case within one month of fully receiving your request, about the actions we have taken in response. We may extend this period by two months if your request is complex or we receive a high number of requests. We will notify you of any such extension within one month of receiving your request.
Access to camera footage
For camera footage we distinguish between requests for images needed in a criminal investigation and requests to view your own personal data. This guidance applies to all footage held by NS, including bodycams and cameras at stations, on and in trains and in bicycle storage facilities.
Camera footage in connection with a criminal offence
If you are the victim of a possible criminal offence, contact the police as soon as you can. Tell them where and when the incident happened and that there may be camera footage. The police will decide whether the footage is needed for their investigation and can request it from NS. NS will provide any requested footage to the authorised investigative authority. You do not need to have the footage yourself to report the incident.
The GDPR right of access does not give a general right to receive or view all footage from a location or period in order to try to identify a possible perpetrator yourself.
Access to your own personal data
Would you like to view your personal data on camera footage? Submit a request using the request form and specify the location, date and estimated time as precisely as possible. Also provide identifying details that will help us find you or your data, such as your clothing, route or where you were standing. This information lets us search in a focused way. If your request is too general we will ask you for more details.
We will determine which footage contains your personal data and how we can give you access. We will protect the rights and freedoms of others, for example by making them unrecognisable. If we cannot identify you on the footage or a legal exception to the right of access applies, we will inform you.
Camera footage is only kept for a short time. Please contact the police as soon as possible or submit an access request to us without delay.
Filing a complaint
You have the right at any time to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If a DDMA code of conduct applies, you can also file a complaint with the DDMA Privacy Autoriteit.