Reports

We use aggregated data, such as travel information, to draw up reports and conduct statistical research. We do not use individual names, e-mail addresses, or other directly identifiable data, nor do we use sensitive personal data, such as medical data.

The basis for data processing is: legitimate interest.

We conduct statistical and other research on service and product use, in order to provide feedback to NS management on developments pertaining to services and products. This includes calculating how much rolling stock is needed. We also use these studies for franchise management. We report to the Ministry of Infrastructure on performance indicators, such as traveller punctuality. More information about the data we use to study the performance indicators in the context of our franchise and the transport plan can be found here.We also combine and analyse different types of information for the studies described above.

Compatible use: scientific research and statistical purposes.

Finally, we may conduct or commission scientific or other research for statistical purposes. This research may involve the processing of personal data. It may be necessary to process personal data for this research, in which case we will take sufficient measures to guarantee privacy, such as pseudonymisation, considering the context in which the data were collected, and only publishing after ruling out the possibility that further processing will have consequences for the persons involved.

In the case of scientific research or statistical purposes, we may share the data with scientific organisations, such as universities, or organisations of a public nature, such as municipalities, the Ministry of Infrastructure, or ProRail. These organisations will not be able to attribute the data to an individual person. The organisations use the data to perform their duties and responsibilities in the station area in order to attune the facilities to the travellers' needs.

We also publish data that cannot be attributed to an individual person, so that it can be used for scientific or statistical purposes.

We contract third parties to provide IT services. These third parties process our data solely for our own internal use, and for no other purpose. We have made agreements with these parties pertaining to the processing of personal data.

We may engage a third party to draw up reports on our behalf. These third parties process our data solely for our own internal use, and for no other purpose. We have made agreements with these parties pertaining to the processing of personal data.

We are authorised to provide your personal data to parties outside the European Economic Community under certain circumstances. In that event, we will take suitable measures with these parties, for example by agreeing to the standard provisions required by the European Commission.

We store the reports for up to 48 months after they are published.Reports written for the purpose of franchise management are stored for the duration of the franchise plus one year, for a total of 11 years.