Translink`s complete privacy statement - OV

Subject:
Privacy statement for www.ovchipkaart.nl website
date:
04/07/2017
version/status: 1.0\final draft
Privacy at Translink
At Translink, we want all customers to be able to move freely and choose the way in which they travel
themselves. We can help you to fulfil this need, but sometimes we need to know something about you.
We believe that privacy is all about freedom and the ability to decide yourself how your data is used
and who by. We implement this in the following way:
1. We always keep you fully up to date on your personal data
We make sure that you know which data belonging to you or about you we use, why we use it, how
long we use it for and who can use this data.
2. We ensure that you retain control over your data
We view the data belonging to you or about you as your property. We only use your data for the
purpose for which you provided it to us, or for which we collected it from you. You can make use of
your right to view your data by sending a written request to Customer Services.
3. We protect your data
Your data is your property. We therefore handle your data carefully and process and secure it
according to the requirements of the Dutch Data Protection Act (Wbp).
Translink carries out regular audits to guarantee cardholders' privacy. If you would like to find out how
other organisations in the OV-chipkaart system process and protect your data, please see these
organisations' privacy policies.
Glossary
• Personal OV-chipkaart: your name and passport photo are shown on this card. This card is suitable
for loading a pass and you can also automatically reload the card.
• Anonymous OV-chipkaart: this card is anonymous. Your personal data is not known to us. After
loading credit or a product, the card is ready to use.
• Disposable OV-chipkaart: this card is anonymous. This card is not supplied by Translink but by the
operators themselves.
• Personal data: each piece of data concerning an identified or identifiable natural person.
• Travel data: data that consists of a combination of a specific date, time and journey data.
Why does Translink process data?
Translink processes data in order to provide the following services:
• Production and distribution of the OV-chipkaart.
• Responding to requests through OV-chipkaart Customer Services, such as blocking a personal
OV-chipkaart after loss or theft.
• Offering the possibility to use the public-transport travel history, for example, through My OV-chip.
• Managing the credit that is loaded onto the OV-chipkaarts.
• Processing transactions, such as checking in and out and loading credit.
• Fraud management, including prevention, detection and measures.
• Offering the possibility to use OV-chipkaart as a form of identification to purchase services from
other organisations.
N.B.: Translink does not process any more personal data than necessary. Translink does not process
your data for marketing purposes and will not send you any offers of services or products.
1 of 4
The OV-chipkaart and your personal data
You have a choice between two different OV-chipkaarts: the personal OV-chipkaart and the
anonymous OV-chipkaart, which also includes the disposable OV-chipkaart. Translink is the card
provider for the personal and anonymous OV-chipkaart. Translink processes your applications in
relation to the personal OV-chipkaart, such as purchase, termination, blocking in the event of loss or
theft and the application for and termination of automatic reloading.
Personal OV-chipkaart
The personal OV-chipkaart is purchased directly from Translink. So Translink is the organisation
responsible for the processing of your data in connection with your card. If you apply for a personal
OV-chipkaart, you will need to provide some personal data necessary to supply you with the card in
your name. This data is also necessary in order to provide you with service.
Personal data: for a personal OV-chipkaart, the following data is stored in the Translink systems, not
all of this data is included on your OV-chipkaart.
• Name
• Address
• Postcode and town or city
• Gender
• Telephone number
• Date of birth
• Bank account number
• OV-chipkaart card number (16 digits)
• Username (if you apply for My OV-chip at www.ov-chipkaart.nl)
• Email
Card details: a personal OV-chipkaart includes a passport photo, the name and date of birth.
Personal cards supplied before 1 January 2017 also include the gender. The following information is
also stored on the chip in the card:
• Chip number (internal number)
• Credit
• The last 10 travel transactions and last 2 loading transactions
• Automatic reloading amount (if applicable)
• Any travel products (if applicable)
• Date of birth (only for a personal OV-chipkaart, for automatic calculation of age discount)
Anonymous OV-chipkaart
When purchasing an anonymous OV-chipkaart, your personal data is not known to Translink. When
using the anonymous OV-chipkaart, travel data is created but, due to the anonymity of the card, this is
not personal data. If you provide personal data to Translink yourself, you will become known. For
example in the case that you apply to terminate the card. The data you provided will then only be used
to handle your request and for some time afterwards for control purposes.
When does Translink link your card data to your personal data?
1. Processing of data for an anonymous OV-chipkaart
If you are using an anonymous OV-chipkaart, you can pay and travel on public transport without
your identity being known. You can also consult this website anonymously and view your publictransport travel history. As soon as you make yourself known to Translink, you will no longer be
anonymous. To OV-chipkaart Customer Services for example, if you ask for information to be sent
by post. Or if you complete the contact form on the website. The data is temporarily stored in the
Translink systems.
2. Processing of data when OV-chipkaart is used as a form of identification
If a participant in the OV-chipkaart system uses the OV-chipkaart as a form of identification, we will
2 of 4
only provide the internal chip number if you give consent for this. For a subscription to the OV-fiets
bicycle-rental scheme, for example. Translink checks in advance whether:
• data is being provided for a legitimate purpose and
• the cardholder's consent is requested.
3. Processing of data on this website
This website uses temporary cookies. These are small, simple data files, which are saved on your
computer's hard drive. These cookies do not contain personal data. They are intended to make it
easier to use the site. They are also used to gather statistical information, such as visitor numbers.
4. My OV-chip
You can apply for My OV-chip on this website. You do this with a username and password. With an
OV-chipkaart account, you will be able to view your journeys easily: You can also create a
declaration overview, view your card details, change details and use a number of services.
Requests from the police or judiciary, for example
Translink provides information to the police and judiciary in relation to missing persons, as Translink
believes that this is in the public interest. Like every other company in the Netherlands, Translink is
also legally obliged to provide information in relation to criminal proceedings by the judiciary. We only
supply information in the case of a formal request and only if this request meets regulations and laws.
We test requests that are made against Art. 126 NC (and onwards) of the Code of Criminal Procedure.
Your personal data will not be provided to third parties for commercial purposes, however. Your data
will also not be sold to third parties.
How long is your data stored for?
Translink uses maximum storage periods for directly or indirectly traceable personal data. After this
period, transactions can no longer be viewed in the public-transport travel history, for example. OVchipkaart Customer Services are also unable to answer questions relating to transactions more than
18 months old.
You can find an overview of the storage periods for personal data in the table below.
Subject
Storage period
Agreement on purchase/receipt of a
18 months after the end of the lifespan or
personal OV-chipkaart
card termination
Personal OV-chipkaart transaction data
2 months after transaction
Transaction data for anonymous OV-
18 months after transaction
chipkaart
Automatic reloading data
13 months after transaction
Data in the case of contact with Customer
18 months
Services for personal OV-chipkaart
My OV-chipkaart data
18 months after termination of card
Your personal data and your rights
You have the right to view the personal data belonging to you that Translink is responsible for
processing. If you would like to make use of this right, you can submit a written request for this to
Customer Services. You will then receive a written overview of your personal data. We ask you to
include a copy of your ID to confirm the correct identity. If you have an objection to sending a copy of
your proof of ID, after making an arrangement over the phone, you can visit Translink to establish your
identity in person.
In connection with the Dutch Data Protection Act, we can only provide data about cardholders aged
under 16 to their parents and/or legal representatives.
3 of 4
Send your request together with a copy of your ID to [email protected]. We will then let you
know within four weeks whether your request can be met. You can also send any other questions
about privacy to this email address.
4 of 4