Privacy statement for Autonomous Buses

Schiphol Nederland B.V. (Schiphol) attaches great value to protecting your privacy. In this privacy statement we explain how we treat the personal data that we process when you use our autonomous buses.

Which personal data do we process?

Whilst using our autonomous buses, we process two different types of personal data.

On the outside of the bus there are LiDAR sensors. These sensors capture a three dimensional image of the environment it is able to scan. Based on the scans by the LiDAR sensor, a three dimensional image might be seen by the sensor. The sensor can only see a silhouette of a person, but it doesn’t see a person like a typical camera. The LiDAR image of you is unlikely to lead to an identifiable image of you.

On the inside of the bus there is a security camera. This is a typical camera that captures a typical image and it can see all the passengers in the bus.

Why do we process your personal data?

The LiDAR image is processed, because the bus needs these images to find the right path to its destination. When the LiDAR sensor recognises an object or a person, then the bus will react accordingly so that the object or person is avoided.

We process the camera images inside the bus so that we can ensure your safety inside the bus.

We process your personal data based on our legitimate interests.

How long do we retain your personal data?

We retain your personal data only inside the LiDAR sensor and the camera. We don’t retain any personal data outside of these devices. The images will not be stored longer than one month on both these systems.

Who do we share your data with?

The personal data will not be shared with other systems, applications or other organisations.

Do we process personal data outside of the European Union or European Economic Area?

Schiphol doesn’t process process your personal data outside of the European Union or the European Economic Area.

Which privacy rights do you have?

Access to, amendment and deletion of your personal data
You have the right to know what personal data of your are processed by Schiphol. If we have not obtained the data directly from you, you also have the right to know from what source they derive and to receive a copy thereof.

If your personal data proves to be incorrect, you can ask us to amend your data. You can also request us to delete personal data and to discontinue their use.

Restriction of processing and right to transfer your data
If Schiphol, according to you, doesn’t process your personal data in a correct manner, then you can request a restriction of the processing of your personal data.

You can also ask us to transfer your digital personal data to you or to another party in a readable and usable form.

Lodging an objection
Naast een verzoek om verwijdering of beperking van de verwerking, kan je ook bezwaar maken tegen de verwerking van persoonsgegevens door Schiphol. Besides requesting or restriction of the processing of your personal data, you can also object to the processing of personal data by Schiphol. If you lodge an objection, we can temporarily discontinue or restrict the processing. If your objection is accepted, then we will definitively discontinue or restrict the processing.

Your request and our response
If you have a question, a request or if you wish to lodge an objection, email our Data Protection Officer (DPO) via dpo@schiphol.nl. We will do our utmost to respond to your request in a timely manner.

We may ask you to send us a copy of a valid ID if this is necessary in order to confirm your identity. You can make a safe copy of your ID via this website of the Dutch government.

If any part of your request is unclear to us, we may ask you to specify your request and/or to supplement it, to enable us to provide you with the best possible service.

Whose privacy statement is this and how can you contact us?

This privacy statement is issued by Schiphol Nederland B.V. Our contact details:

Schiphol Nederland B.V.
P.O. Box 7501
1118 ZG Schiphol

How can you contact our Data Protection Officer (DPO)?

Schiphol has a Data Protection Officer (DPO) for all your questions concerning privacy. The DPO also provides advice to us and monitors compliance with the privacy laws and regulations by Schiphol.

Do you have any questions or requests concerning your data? If so, you can send an email to the DPO via dpo@schiphol.nl or send a letter to our postal address, for the attention of the Data Protection Officer. Together with your request, please provide your name, address, email address and telephone number.

How can you lodge a complaint with the Dutch data protection authority?

If you are dissatisfied with the way in which we treat your privacy or handle your request or objection, you can file a complaint with the Dutch Data Protection Authority.

Where can you find the latest version of this privacy statement?

You will find the latest version of this privacy statement on this web page. If necessary, we will update this privacy statement. This may be due to changes in policies, changes in the data processing operations or changes in the systems we use to process data.

This version was issued on 18 July 2023.