Open information management
Information about how your details are used to gain insight into passenger travel patterns.
What do we use your personal data for?
NS, Translink and the other public transport companies want to ensure a public transport system that's as efficient and effective as possible. That is why the public transport companies and Translink have a justified interest in gaining insight into the travel patterns of its passengers. These insights are also important for third parties, such as the authorities that govern (public) transport and that commit their efforts towards improving the service provided to passengers.
We obtain this insight through statistical research. NS, Translink and the other public transport companies (collectively referred to as 'we' or 'us') have jointly decided which personal data may be used to gain this insight and the ways in which the data may be used. We also refer to this as Information Management. These agreements are set out in a Cooperation Agreement between the public transport companies and Translink.
The public transport companies and Translink share responsibility for the processing of personal data for the purposes of information management.
What personal data do we use?
We only use transaction data for the purposes of statistical research into travellers' travel patterns. When we process your customer data, such as your name or date of birth, we do not use these data for statistical research. Below you can read which personal data we process for statistical research when you travel with an OV-chipkaart, debit card or other form of ticket.
Privacy legislation permits us to use transaction data for statistical research, because it is necessary for our justified interest and the justified interest of third parties, such as government agencies. The justified interest is to optimise public transport and improve services to travellers.
Transaction data are created when you check in or out with a transport company using your OV-chipkaart. These data are used to process your travel transactions. The transaction data are read via the chip-ID embedded in your card. You can find the transaction data in your transaction overview for your OV-chipkaart (www.ov-chipkaart.nl).
We save the transaction data for statistical research in a separate database at Translink. Before we store the data in this database, we ensure that the data are made anonymous. Any identifying characteristics in the data are encrypted to make them anonymous. The data therefore cannot be traced to a specific person without additional information. Once the data have been made anonymous, Translink creates research files on behalf of public transport companies. This results in a set of statistical data. With the aggregated, statistical research files, Translink or other specialist companies can produce information products. These research files and information products do not contain personal data.
Transaction data are created when you check in or out with a transport company using your debit card. These data are used to process your travel transactions. You can find the transaction data for your debit card in the OVpay app. If you do not use the OVpay app, then you can view the transaction data for your debit card via the OVpay website. You can enter the 'service reference ID' for public transport journeys displayed on your bank statement.
We save the transaction data for statistical research in a separate database at Translink. The transaction data for a debit card therefore cannot be traced to a specific person without additional information. We have a contract with Translink for the creation of research files. This results in a set of statistical data. With the aggregated, statistical research files, Translink or other specialist companies can produce information products. These research files and information products do not contain personal data.
Central point of contact
We have set up a central point of contact to answer all your questions about how your data are processed to compile research files and information products. You can contact us via email@example.com to submit a request to exercise your GDPR rights.
If you do not want us to use your transaction details for statistical research into travel patterns, you can indicate this by sending an e-mail to firstname.lastname@example.org.
With whom do we share data?
NS, Translink and other public transport companies utilise the services of data processing companies. We always make written agreements with processing companies by entering into what is known as a 'processor's agreement' in which we set forth, among other things, agreements regarding the security and use of your Personal Data.
Making the data anonymous makes it more difficult to trace the data to individual persons.
Translink or other specialist companies can use the research files to produce information products. This allows them to observe trends in traveller flows, for example, which can be used to determine where new public transport routes should be provided. We may transfer these kinds of information products to government bodies and third parties active in the field of (public) transport, and to improve services provided to travellers. The information products do not contain personal data.
We do not pass on your personal information to (legal) entities outside the European Economic Area.
How long do we store your data?
We store the transaction details and pseudonymised transaction details for up to 18 months after the trip in question.