Data processing: Crowd management

Which personal or other data do we process?
To ensure that you experience a smooth passage through the airport, we at Schiphol monitor passenger flows.

We do this in two ways. First of all, sensors (known as people counters) are situated at various locations in the terminal that measure the numbers of people passing by. These sensors do not store any data other than the number of people passing a particular sensor. This meta data is not personal in nature. The images that the people counter takes are only stored during a short testing period when we are testing the people counters in a new area.

Second, we use Wi-Fi and Bluetooth tracking. This means that if the Wi-Fi or Bluetooth function of your telephone, laptop or another device is on, our sensors will detect your device.

When this happens, we store an encrypted version of your device’s unique reference (a ‘hash’ of your MAC address). This allows us to follow the route you take as you move through the terminal at Schiphol. We take a number of technical measures to ensure your privacy is protected.

Why do we process your (personal) data?
We use the data collected by the people counters and the Wi-Fi and Bluetooth trackers to optimise visitor flows at Schiphol. This is extremely important for Schiphol as not doing so could result in long queues or even dangerous situations. Consequently, we have a legitimate interest in collecting these data.

We also produce general reports about visitor flows at Schiphol. These reports do not contain information about individual visitors. We use the reports to optimise and identify the visitor flows.

How long do we retain your details?
The images taken by the people counters are converted into numbers in the camera. The images only leave the camera in exceptional circumstances, when we store these images to test whether the people counter is working properly. We delete the camera footage as soon as the testing has been completed.

The encrypted version of the unique reference of your device collected with Wi-Fi and Bluetooth tracking is saved for 24 hours. That means that we can follow your device for 24 hours. After this period, we delete this information and will no longer be able to follow your device.

Who do we share your data with?
We do not share your details with other parties. We sometimes share general reports on visitor flows with the other companies located at Schiphol.

Who is the controller?
Schiphol Nederland B.V.

This version was issued in February 2020.