Open information management
Information about how your data is used to gain insight into passenger travel patterns.
What do we use your personal data for?
NS, Translink and the other public transport companies want to ensure a public transport system that's as efficient and effective as possible. That is why the public transport companies and Translink have a legitimate interest in gaining insight into the travel patterns of its passengers. These insights are also important for third parties, such as the authorities that govern (public) transport and are committed to improving services provided to travellers.
We obtain these insights through statistical research. NS, Translink and the other public transport companies (collectively referred to as 'we' or 'us') have jointly decided which personal data may be used to gain this insight and the ways in which the data may be used. We also refer to this as Information Management. These agreements are set out in a Cooperation Agreement between the public transport companies and Translink.
The public transport companies and Translink share responsibility for the processing of personal data for the purposes of information management.
What personal data do we use?
We only use transaction data for the purposes of statistical research into travellers' travel patterns. When we process your customer data, such as your name or date of birth, we do not use this data for statistical research. Below you can read which personal data we process for statistical research when you travel with an OV-chipkaart, debit card or other type of ticket.
Privacy legislation permits us to use transaction data for statistical research, because it is in our legitimate interest and in the legitimate interest of third parties, such as government agencies. The legitimate interest is to optimise public transport and improve services provided to travellers.
OV-chipkaart
Transaction data is created when you check in or out with a transport company using your OV-chipkaart. This data is used to process your travel transactions. The transaction data is read via the chip-ID in your card. You can find the transaction data in your transaction overview for your OV-chipkaart (www.ov-chipkaart.nl).
We store the transaction data for statistical research in a separate database managed by Translink. Before we store the data in this database, we ensure that the data are anonymised. Any identifying characteristics in the data are encrypted to make them anonymous. The data can therefore not be used to identify a specific person with additional information. Once the data have been anonymised, Translink creates research files on behalf of public transport companies. This results in a set of statistical data. With the aggregated, statistical research files, Translink or other specialist companies can produce information products. These research files and information products do not contain personal data.
Debit card
Transaction data is created when you check in or out with a transport company using your debit card. This data is used to process your travel transactions. You can find the transaction data for your debit card in the OVpay app. If you do not use the OVpay app, you can view the transaction data for your debit card via the OVpay website. You can enter the 'service reference ID' for public transport journeys displayed on your bank statement.
We store the transaction data for statistical research in a separate database managed by Translink. The transaction data for a debit card can therefore not be used to identify a specific person without additional information. We have a contract with Translink for the creation of research files. This results in a set of statistical data. With the aggregated, statistical research files, Translink or other specialist companies can produce information products. These research files and information products do not contain personal data.
Central point of contact
We have set up a central point of contact to answer all your questions about how your data is processed to compile research files and information products. You can contact us via privacy@ov-chipkaart.nl to submit a request to exercise your GDPR rights.
If you do not want us to use your transaction details for statistical research into travel patterns, please notify us by sending an e-mail to privacy@ov-chipkaart.nl.
With whom do we share data?
NS, Translink and other public transport companies utilise the services of data processing companies. We always make written agreements with processing companies by entering into what is known as a 'processor's agreement' in which we set forth, among other things, agreements regarding the security and use of your Personal Data.
Anonymising data makes it more difficult to use the data to identify specific persons.
Translink or other specialist companies can use the research files to produce information products. This allows them to observe trends in traveller flows, for example, which can be used to determine where to add new public transport routes. We may transfer these kinds of information products to government bodies and third parties active in the field of (public) transport, and to improve services provided to travellers. The information products do not contain personal data.
We do not pass on your personal information to (legal) entities outside the European Economic Area.
How long do we store your data?
We store the transaction details and pseudonymised transaction details for up to 18 months after the trip in question.