What does GVB use your personal data for?
GVB has the right to operate public transport in the Amsterdam Concession. We must observe the terms and conditions of the concession. We are accountable for this to the client of the concession, Vervoerregio Amsterdam. We do that through reports.
GVB also produces reports that Vervoerregio Amsterdam needs to perform its duties and responsibilities. For example, the development of transport plans and for the drafting of public transport policy within the Amsterdam public transport region and for transport outside of the concession boundary.
We also draft internal management reports and conduct market analyses, for example for the development of products and services and for better attunement of public transport and the deployment of our employees (for example Special Investigating Officers) to its use by passengers and for our general business strategy. This enables us to improve our services, efficiency and quality, as well as to develop new products and services, so that we can be of even better service to you.
GVB also conducts statistical research, for example into occupancy and use of public transport. This enables us to make better operational choices. In addition, GVB may use data (or allow it to be used) for scientific research, such as to investigate the effects of the NoordZuidlijn (or have them investigated).
What personal data does GVB process?
GVB may use your personal data (mainly travel transaction data, but, for example, also data concerning fare dodgers) for reports, scientific research and statistical purposes.
Before we use your data for this, we will apply appropriate safeguards. For example, your personal data will be pseudonymised first. This involves the encryption of any identifying characteristics in the data. This means that the data cannot be traced to an individual without the use of supplementary information.
In addition, the pseudonymised data is merged into quantities by means of aggregation (for example numbers of passengers at a stop or numbers of transferring passengers on the NoordZuidlijn). Only then is the data used for reports, scientific research or statistical purposes.
The content of reports therefore does not contain any personal data. Neither is any personal data used for the conduct of statistical and scientific research or analyses.
Basis for processing
GVB has a legitimate interest in the drafting of reports, management reports and analyses. We are thereby able to fulfil our obligations to our client and prove that we are satisfying the terms and conditions of the concession. Furthermore, we have an interest in well-substantiated operational choices; our aim is to offer our passengers transport, products and services that are beneficial to them. We pseudonimise and aggregate data. For example, no personal data is included in the reports or used in investigations or analyses. This allows us to safeguard the privacy of our passengers as much as possible.
The use of personal data for scientific research and statistical purposes is a further processing of personal data which, according to the GDPR, is deemed compatible with the purposes for which this data was initially obtained. GVB may further process this data on the basis for which the personal data was initially obtained.
Retention period
GVB only uses personal data for reports, scientific research and statistical purposes of which the retention periods have not yet expired. Following pseudonimisation and aggregation of the personal data, this data can no longer be traced back to a person and retention periods no longer apply to it.
With whom do we share the data?
Once pseudomised and aggregated, we use data for reports, statistical purposes or scientific research. We may share this data with academic institutions, such as universities, or public organisations such as our client Vervoerregio Amsterdam and municipalities.
The data received by these third parties is no longer personal data to them. If these third parties need data for statistical purposes or scientific research concerning several transport companies, they may request this through open information management. Further information: 'Open Information Management'.
GVB may call in third parties for the drafting of reports or the conducting of research or analyses. These third parties then become processors of GVB. We have established agreements with them in relation to the processing of the data.