Your rights
The General Personal Data Regulations (GDPR) provide rules for the processing of personal data. NS treats its travellers' and (former) employees' data with care. The personal data we use are, and remain, your property. So you also have the right to view, change, delete, limit or transfer to someone else any of your data that is in our possession. In some cases, you can do that via Mijn NS or the request form. You can also send an e-mail to fg@ns.nl, stating which of the rights listed below you wish to exercise. Please include your data as they are known to NS. NS uses your data to verify your identity. NS also works to prevent your personal data from becoming known to the wrong person. Your request will only be processed after we have verified your identity. You have the right to submit the following requests:
Right to view
Would you like to know which data we are processing? You can always request an overview from us. We will then tell you, among other things, what we use the data for, how long we store them and what you can do if the data are inaccurate. You can view some of your personal data via Mijn NS. If you do not yet have a Mijn NS account (or a Mijn NSI or Mijn NS Zakelijk) account, you can create one now.
If you would like to view more data than that which is available in Mijn NS, then you can submit a request to inspect your personal data using the request form. Naturally, we have to be certain that we are providing the right person with the personal data. So please send your data as they are known to NS.
Correcting or supplementing your data (rectification)
Is the data we are using no longer correct or incomplete? You can easily correct some of the data using Mijn NS. If you do not yet have a Mijn NS account{sp} (or Mijn NS Zakelijk), you can create one now. If you would like to correct data that are not available in Mijn NS, then you can submit a request for rectification using the request form.
Deleting your personal data (erasure)
Under certain circumstances, you may request that we delete your data from our system by filling in the request form. As a consequence of this, we will no longer be able to provide you with our products and services.
Objecting to the processing of your data
In certain situations, you may object to the (further) processing of your data. For example, on the grounds of your personal circumstances. You can request this using the request form. We will evaluate your request and then inform you of how we can accommodate it.
Temporarily stopping the processing of your personal data (restriction)
Would you like to temporarily pause the processing of your personal data? Then you can fill in the request form.
Transferring your data (data portability)
If you wish, you can receive a copy of your data that are in our possession. You can transfer these data yourself, or request that we do so. You can request this and make your choice known using the request form.
These rights are not absolute. We will consider your request in accordance with the General Data Protection Regulation. We will inform you of any actions undertaken regarding your request as quickly as possible, or within a month of the receipt of your request. We may extend this period by two months due to the complexity of your request or the number of requests received. In that event, we will inform you of the extension.
Opt out of travel data analysis for marketing purposes
If you would prefer not to receive information and offers from NS based on your OV-chipkaart usage or customer profile, you can opt out here. NS needs you to fill in your personal data for this purpose so that we can identify you and process your request to opt out properly.
We are keen to maintain our relationship with you. If we do this for marketing related to passenger growth and passenger allocation, we have a (commercial) interest in using certain inferred travel information. We call these travel data “maandtellers”. “Maandtellers” are data on travel frequency, time since most recent journey, travel during peak/off-peak hours, preferred routes, preferred stations, OV-fiets, storage on account, and travel yield. We use this information for analyses to identify trends and to adjust our products accordingly. By linking this information with individual travel information, we can achieve better business results and improve customer satisfaction. For the analyses, we use aggregated or anonymous data as much as possible. The information we use only tells us about your travel behaviour. We can't use this data to 'track' you. If you do not wish to receive information and deals derived from using your OV-chipkaart, you can indicate this in the application form.
Submitting a complaint
You retain the right to submit a complaint to the Personal Information Authority at any time. If the DDMA Code of Conduct applies, you can lodge a complaint with the DDMA Privacy Authority.