The General Data Protection Regulation (GDPR) has specified new rules that apply to the processing of personal data. NS handles the information of passengers and (former) employees carefully and securely. The personal data that we use are still obviously yours. That is why you have the right to view, change, delete, limit or transfer to another party any of your information that is in our possession. In some cases this can be done using Mijn NS, or using the request form. You have the right to demand the following from us:
Right to view
Would you like to know which data we are processing? You can always request an overview from us. We will then tell you, among other things, what we use the data for, how long we store them and what you can do if the data are inaccurate. You can view some of your personal data via Mijn NS. If you do not yet have a Mijn NS account (or Mijn NS Zakelijk), you can create one now.
If you would like to view more data than that which is available in Mijn NS, then you can submit a request to inspect your personal data using the request form. Naturally, we have to be certain that we are providing the right person with the personal data. For this reason, we ask that you send a copy of your valid passport or proof of identity with the form. We kindly request that you conceal your BSN number and your passport photo.
Correcting or supplementing your data (rectification)
Is the data we are using no longer correct or incomplete? You can easily correct some of the data using Mijn NS. If you do not yet have a Mijn NS account (or Mijn NS Zakelijk), then you can create one now. If you would like to correct data that are not available in Mijn NS, then you can submit a request for rectification using the request form.
Deleting your personal data (erasure)
Under certain circumstances, you may request that we delete your data from our system by filling in the request form. As a consequence of this, we will no longer be able to provide you with our products and services.
Objecting to the processing of your data
In various situations, you may object to the (further) processing of your data. For example, based on your personal circumstances.You can state this on the request form. After assessment, we will inform you of whether your request can be complied with.
Temporarily stopping the processing of your personal data (restriction)
Would you like to temporarily pause the processing of your personal data? Then you can fill in the request form.
Transferring your data (data portability)
If you wish, you can receive a copy of your data that is in our possession. You can transfer these data yourself, or request that we do so. You can request this and make your choice known using the request form.
These rights are not absolute. We will consider your request in accordance with the General Data Protection Regulation. We will inform you of any actions undertaken regarding your request as quickly as possible, or within a month of the receipt of your request. We may extend this period by two months due to the complexity of your request or the number of requests received. In that event, we will inform you of the extension.
Submitting a complaint
You retain the right to submit a complaint to the Personal Information Authority at any time. If the OV-Chipkaart Code of Conduct or the DDMA Code of Conduct applies, you can also appeal to the Public Transport Mediation Committee or the DDMA Privacy Authority, depending on the applicable code of conduct.