Data processing: Crowd management
Schiphol Nederland B.V. (“Schiphol”) is commited to protecting your personal data. In this privacy statement, Schiphol explains how Schiphol collects, uses and protects your personal data within the context of crowd management.
Which (personal) data do we process?
To ensure that your visit to Schiphol runs as smoothly as possible, we track the flow of visitors at Schiphol. We do this in two ways.
Firstly, there are sensors (so-called people counters) in various places in the terminal that measure the number of people passing through. These people counters do not store any data other than the number of people passing a particular point.
Wifi and bluetooth tracking
Secondly, we use wifi and bluetooth tracking.This means that if your phone, your laptop or any of your other devices have the wifi or Bluetooth function turned on, your device will make contact with our sensors. By turning off the wifi and bluetooth on your devices when your arrive at Schiphol, we will no longer be able to follow you via wifi and bluetooth tracking.
We store an encrypted version of the unique characteristic of your device (a so called ‘hash’ of your MAC address). We do this so that we can provide insight into passenger flows through the terminal. We take all kinds of technical measures to ensure your privacy is protected.
We convert the measurement data from both sensors into aggregated reports about arrival and departure patterns, walking routes, occupancy rates in certain areas and waiting times.
Why do we process your data?
We use the data collected by the people counters and the wifi and bluetooth trackers to optimize the flow of visitors at Schiphol. This is very important for Schiphol. We can prevent queues or even dangerous situations as much as possible. We therefore have a legitimate interest in collecting this data.
How long do we retain your data?
The images taken by the people counters are converted into numbers in the camera. The images do no leave the camera, only in exceptional cases. In these exceptional cases we do store these images to test if the people counter is working properly. Once that test is over, we delete the camera images.
We store the encrypted version of your device’s unique identifier collected by wifi and bluetooth tracking for up to 24 hours. This means we can track the encrypted version of your device for up to 24 hours. After that we delete this data and can no longer track your device.
We retain the other measurement data for 14 months for (re)calculations. The general reports on visitor flows, which do not contain any directly identifiable personal data, are retained for 5 years.
What are your rights?
Access to and amendment of your personal data
You have the right to know what personal data on you are processed by Schiphol.
If your personal data prove to be incorrect, you can ask us to amend your data. You can also request us to delete personal data and to discontinue their use. As we keep the hash of your MAC address for a maximum of 24 hours, we cannot delete or limit the processing after these 24 hours.
Lodging an objection
You can also object to the processing of personal data by Schiphol. You can object to the use of your personal data owing to your specific situation. If you lodge an objection, we will in principle stop processing your personal data if you object within 24 hours of the processing taking place.
Your request and our response
If you have a question, a request or if you wish to lodge an objection, email our Data Protection Officer (DPO) via firstname.lastname@example.org. We will do our utmost to respond to your request in a timely manner.
We may ask you to send us a copy of a valid ID if this is necessary in order to confirm your identity.
If any part of your request is unclear to us, we may ask you to specify your request and/or to supplement it, to enable us to provide you with the best possible service.
Whose privacy statement is this and how can your contact us?
Who is the controller?
This privacy statement is issued by Schiphol Nederland B.V. Our contact details:
Schiphol Nederland B.V.
P.O. Box 7501
1118 ZG Schiphol
How to contact our Data Protection Officer (DPO)
Schiphol has a Data Protection Officer (DPO) for all your questions concerning privacy. The DPO also provides advice to us and monitors compliance with the privacy laws and regulations by Schiphol.
Do you have any questions or requests concerning your data? If so, you can send an email to the DPO via email@example.com or send a letter to our postal address, for the attention of the Data Protection Officer. Together with your request, please provide your name, address, email address and telephone number.
Where can you find the latest version of this privacy statement?
If necessary, we will update this privacy statement. This may be due to changes in policies, changes in the data processing operations or changes in the systems we use to process data.
This version was issued in August 2022.