For what purpose do we use your data?
GVB and the other transport companies want to ensure that public transport is as efficient and effective as possible. That’s why the transport companies are interested in obtaining insight into the travel patterns of travellers. This insight is also important for third parties, such as authorities who are tasked with transport or public transport, external organisations who develop activities with an interest in transport or public transport, and those who advocate for the improvement of service to travellers.
We receive this insight by means of statistical research. GVB and other transport companies (jointly “we” or “our”) have collectively decided which personal data may be used to obtain insight and in which way the personal data may be used. We also refer to that as Open Information Management. These agreements are recorded in a collaboration agreement between the transport companies.
We may also use transaction data in accordance with the privacy legislation for statistical research on the grounds which we have listed in our privacy statement.
Which personal data do we use?
We have decided that, for the performance of the statistical research into the travel patterns of travellers, use may only be made of the so-called transaction data and not of customer data such as name or date of birth.
Transaction data develop when you check in and out with your public transport chip card and it is read using your card’s chip ID. This data is used to settle your travel transactions. This process is performed by Trans Link Systems B.V. (“Translink”). You can find the transaction data in your transaction overview of your public transport chip card.
We store the transaction data for statistical research at Translink in a separate database. Before we store the data there, we have the data pseudonymised. In this pseudonymisation, the identifying attributes in the data are encrypted. This makes the data unable to be traced to an individual without the use of supplementary information. After the data are pseudonymised, we have research files created under the management of Translink. This concerns a set of statistical data. With these aggregated statistical research files, Translink or other specialised companies can create information products. The research files and information products contain no personal data.
Central point of contact
We have set up a central point of contact who you can contact with all your questions about the processing of your data for the composition of research files and information products. You can contact Translink via privacy@ov-chipkaart.nl. At Translink, you can also submit a request to exercise your privacy rights.
If you do not want us to use your transaction data for statistical research into travel patterns, you can indicate this via e-mail. To do so, send an e-mail to Translink at privacy@ov-chipkaart.nl. In your e-mail, mention your card number and clearly indicate your objection to the use of the transaction data linked to the card in question for statistical purposes.
With whom do we share the data?
Your data is processed by Translink on our behalf. We have made agreements with Translink about this in a processor agreement, such as about the security and the separate storage of data.
Translink engages a party for the pseudonymisation of the transaction data. Because of the pseudonymisation, it is more difficult to associate the data with individuals. Translink then composes aggregated statistical research files which are no longer traceable to individuals.
Translink or other specialised companies can create information products based on the research files. For example, they can indicate trends in traveller flows which can then be used to determine where new public transport routes must be created. We can forward these sorts of information products to government agencies and to third parties who are tasked with developing activities with an interest in transport or public transport and the improvement of service to travellers. The information products contain no personal data and are exclusively made available:
to transport companies and governments, on the basis of the performance of the agreement with the traveller;
to science, on the basis of a legitimate interest;
to knowledge institutes, on the basis of a legitimate interest;
to parties with a commercial purpose, on the basis of a legitimate interest;
publicly, on the basis of a legitimate interest.
For this purpose, we do not provide your personal data to individuals and legal entities outside the European Economic Area.
How long do we retain your data?
We retain the transaction data and the pseudonymised transaction data for at most 18 months after the trip made by you.