Data processing: Video cameras
Schiphol Nederland B.V. ('Schiphol') attaches great importance to the protection of your privacy. In this document, we explain how we collect and use your data if you are filmed by our cameras and bodycams at Schiphol. We want you to have a clear understanding of what happens to your information
Cameras
What personal data do we process?
There are video cameras at Schiphol that are used to make camera images. This means that if you are at or around the airport, camera images may also be taken of you.
Why do we process your personal data?
Based on the Dutch Aviation Act, we have the task of securing Schiphol. The use of camera images is necessary to carry out this task of public interest.
In addition, we need the images from the video cameras for operational and security purposes. For example, we use these cameras for your safety and the safety of others. This includes preventing crimes, managing the crowd, and ensuring overall security at the airport. Our 'legitimate interest' is the legal basis for the processing of camera images for operational and security purposes.
How long do we keep your personal data?
The camera images are not stored for more than 28 days. Only if necessary, for example for further investigation, do we retain the camera images for a longer period.
Who do we share your personal data with?
Schiphol grants the Royal Netherlands Marechaussee access to all video images made by the security cameras at Schiphol.
Depending on the area of operation, we share some of the images taken with the video cameras with the Dutch Customs and the Koninklijke Luchtvaart Maatschappij (KLM).
Robert Bosch B.V. (Bosch) carries out the technical management on behalf of the parties and in that context needs access to the camera images.
Are the camera images sufficiently secured?
We take strong security measures to protect your data. This includes encrypting images and restricting access to only authorized personnel.
Who are the data controllers?
Schiphol Nederland B.V., the Royal Netherlands Marechaussee, Dutch Customs and KLM are jointly responsible for the processing of camera images.
The video cameras installed at the train station at Schiphol are controlled by ProRail. ProRail then shares these camera images with Schiphol and the Royal Netherlands Marechaussee.
What are your rights?
Access, modification and deletion of your personal data
You have the right to know which personal data the joint controllers process about you. Because Schiphol is unable to assess whether camera images are relevant to national security without the cooperation of the Royal Netherlands Marechaussee, we generally do not independently provide access to camera images. Schiphol therefore advises that a request for access to camera images should always (also) be addressed to the Royal Netherlands Marechaussee. For more information about this, see also the website of the Ministry of Defence.
You can also request the Royal Netherlands Marechaussee to delete camera images and stop their use.
If you believe that we are not processing your data correctly, you can ask the Royal Netherlands Marechaussee to restrict the processing.
Object
In addition to a request for deletion or restriction of processing, you can also object to the processing of camera images with the Royal Netherlands Marechaussee.
Would you like to file a complaint with the Dutch Data Protection Authority?
If you are not satisfied with the way we handle your privacy or the handling of your request or objection, you can submit a complaint to the Dutch Data Protection Authority.
Want to contact our DPO?
Do you have a question? Please email our Data Protection Officer (DPO) via dpo@schiphol.nl. We strive to respond to your request in a timely manner.
Where can you find the latest version of this privacy statement?
If necessary, we will update this privacy statement. This may be due to changes in policy, changes in data processing or in the systems through which we process data.
This version is from April 2024.
Bodycams at the Fire Brigade
What personal data do we process?
The Fire Brigade at Schiphol uses bodycams. Camera images are made with the bodycams. This means that if you are at or around the airport, camera images of you may also be taken with the bodycams.
Why do we process your personal data?
- The Fire Brigade uses bodycams to investigate their added value in firefighting, emergency response and crisis management.
- The Fire Brigade will deploy bodycams for training purposes. The (blurred) camera images are used in training materials.
- The use of bodycams offers the possibility of monitoring and giving directions during firefighting, emergency response and crisis management when the situation calls for it.
Schiphol relies on the 'legitimate interest' legal basis for processing camera images for these three purposes.
How long do we keep your personal data?
A retention period of up to 5 years is maintained for visual material that has been selected to be used for learning and training purposes. For the visual material that has not been selected to be used for learning and training purposes, a retention period of 28 days applies.
Who do we share your personal data with?
Schiphol has engaged a supplier to store the images in a cloud environment. Schiphol has entered into a data processing agreement with this cloud provider.
Are the camera images sufficiently secured?
We take strong security measures to protect your data. This includes encrypting images and restricting access to only authorized personnel.
Who is the data controller?
Schiphol Nederland B.V. is responsible for the processing of the camera images with bodycams by the Fire Brigade.
What are your rights?
Access to and deletion of your personal data
You have the right to know which personal data Schiphol processes about you.
You can also request that we delete personal data and stop using it.
Restriction of processing
If you believe that we are not processing your data correctly, you can request that the processing be restricted.
Object
In addition to a request for deletion or restriction of processing, you can also object to the processing of personal data by Schiphol.
If you object, we will, in principle, temporarily stop or restrict the processing. If your objection is upheld, we will permanently stop or limit the processing.
Your request and our response
Do you have a question, a request or do you want to object? Please email our Data Protection Officer (DPO) via dpo@schiphol.nl. We strive to respond to your request in a timely manner.
If necessary to confirm your identity, we may ask you to send a copy of a valid ID. You can find out how to make a safe copy on the website of the Dutch government.
If we do not find your request clear, we may ask you to specify and/or supplement your request so that we can provide you with the best possible service.
Would you like to file a complaint with the Dutch Data Protection Authority?
If you are not satisfied with the way we handle your privacy or the handling of your request or objection, you can submit a complaint to the Dutch Data Protection Authority.
Want to contact our DPO?
Schiphol has a Data Protection Officer (DPO) for all your privacy-related questions. The DPO also advises us and supervises Schiphol's compliance with privacy laws and regulations.
Do you have any questions or requests regarding your data? Send an e-mail to the DPO via dpo@schiphol.nl. Please provide your name, address, e-mail address and telephone number with your request.
Where can you find the latest version of this privacy statement?
If necessary, we will update this privacy statement. This may be due to changes in policy, changes in data processing or in the systems through which we process data.
This version is from April 2024.