Data processing: Access to Schiphol (for travellers)

Schiphol processes boarding pass data that are scanned at the security checkpoints (Self Service Boarding Pass-control).

By law, Schiphol is obliged to check whether you have a valid boarding pass. We do this by scanning your boarding pass. We therefore process your personal data to comply with a legal obligation.

Secondly, in the event of (an) incident(s), Schiphol uses your personal data to trace the time at which you passed the Self Service Boarding Pass-control. Schiphol process your personal data in this respect for the purposes of the legitimate interest of Schiphol.

Thirdly, we share your personal data with your airline so that they know you are at the airport. We share your personal data on behalf of your airline on the basis of the legitimate interest of your airline.

Fourthly, Schiphol uses your personal data to calculate how long it took you to go from the baggage drop-off point to the Self Service Boarding Pass Check ports. We do this by linking the time of baggage drop-off and the time of passage through the Self Service Boarding Pass Check ports. This gives us more insight into the flow of travellers. Schiphol process your personal data in this respect for the purposes of the legitimate interest of Schiphol.

Schiphol retains boarding pass data for a maximum of 14 days in the context of dealing with a potential incident.

We share your personal data with your airline once your pass the Self Service Boarding Pass-control. This informs them that you are at the airport. We do not share your personal data with other parties.

Schiphol Nederland B.V. for the boarding pass check and the handling of potential incidents. Schiphol Nederland B.V. is the data processor of your data when Schiphol shares your personal data with your airline.

Access to, amendment and deletion of your personal data
You have the right to know what personal data on you are processed by Schiphol. If we have not obtained the data directly from you, you also have the right to know from what source they derive and to receive a copy thereof.

If your personal data prove to be incorrect, you can ask us to amend your data. You can also request us to delete personal data and to discontinue their use. If we process your personal data on the basis of your consent, and there is no other legal basis for the processing, you have the right to withdraw that consent and we will comply with your request to delete them. In some cases, we may refuse your request.

Restriction of processing and right to transfer your data
If in your opinion we are not processing your data in a correct manner, you can request a restriction of the processing.
You can also ask us to transfer your digital personal data to you or to another party in a readable and usable form.

Lodging an objection
Besides requesting deletion or restriction of the processing, you can also object to the processing of personal data by Schiphol. First, you can do so if you do not agree to Schiphol using your personal data for direct marketing (for instance by profiling).

Second, you can object to the use of your personal data owing to your specific situation. If you lodge an objection, we will in principle temporarily discontinue or restrict the processing. If your objection is accepted, we will definitively discontinue or restrict the processing.

Your request and our response
If you have a question, a request or if you wish to lodge an objection, email our Data Protection Officer (DPO) via dpo@schiphol.nl. We will do our utmost to respond to your request in a timely manner.

We may ask you to send us a copy of a valid ID if this is necessary in order to confirm your identity.

If any part of your request is unclear to us, we may ask you to specify your request and/or to supplement it, to enable us to provide you with the best possible service.

This privacy statement is issued by Schiphol Nederland B.V. Our contact details:

Schiphol Nederland B.V.
P.O. Box 7501
1118 ZG Schiphol
paxflow@schiphol.nl

How to contact our Data Protection Officer (DPO)?
Schiphol has a Data Protection Officer (DPO) for all your questions concerning privacy. The DPO also provides advice to us and monitors compliance with the privacy laws and regulations by Schiphol.

Do you have any questions or requests concerning your data? If so, you can send an email to the DPO via dpo@schiphol.nl or send a letter to our postal address, for the attention of the Data Protection Officer. Together with your request, please provide your name, address, email address and telephone number.

If you are dissatisfied with the way in which we treat your privacy or handle your request or objection, you can file a complaint with the Dutch Data Protection Authority.

If necessary, we will update this privacy statement. This may be due to changes in policies, changes in the data processing operations or changes in the systems we use to process data.