Products entitling holders to pass through stations

We are installing gates at more and more stations. For various target groups, NS has passage products that enable them to access stations. NS makes no distinction between the people who request these products and we only process the personal data if strictly necessary. The products in question are Interwijkpassen, Keycards, Toegangspassen, Service & Toegangspassen.

When you request an NS passage product, we process the contact details and personal data that you provide to us.

When you pass through a gate, the number of your passage product will also be processed.

The basis for this processing is: entering into and performing a contract

We use your personal data to create the selected passage product and send it to your address, as well as to provide services such as communications on issuing/reissuing cards, loss or theft. 

The basis for data processing is: legitimate interest.

The chip in the passage product does not store any personal data such as your name or home address. When you pass through a gate, the number of your passage product is processed. We use these passage transactions for instance to draw up anonymous reports and carry out statistical analysis. This information is not recorded at individual level. If it is suspected that a passage product is not being used in accordance with the terms and conditions of use, NS reserves the right to analyse the transactions for this passage product. Only in that case will a link be made between your contact details and the passage transactions.

We contract third parties to provide IT services. These third parties process our data solely for our own internal use, and for no other purpose. We have made agreements with these parties pertaining to the processing of personal data.

We are authorised to provide your personal data to parties outside the European Economic Community under certain circumstances. In that event, we will take suitable measures with these parties, for example by agreeing to the standard provisions required by the European Commission.

We store your contact details for 24 months after your request. We retain your transaction data for 18 months.