Privacy Statement

Last updated: March 26, 2025

What we do

Your privacy is very important to Qbuzz B.V. (‘Qbuzz’). We therefore comply with applicable privacy legislation, including the General Data Protection Regulation (‘GDPR’). This means that we:Clearly define our purposes before processing your personal data, via this privacy statement; 

Clearly state our purposes before processing your personal data, through this privacy statement;

Store as little personal data as possible, and only the data necessary for our purposes;

Explicitly ask for your permission to process your personal data, if consent is required;

Take necessary security measures to protect your personal data and impose these obligations on third parties processing data for us;

Respect your rights, such as the right to access, correct, or delete your personal data held by us.

Your data is safe with us, and we will always use it properly. In this privacy statement, we explain what we do with information we obtain about you. If you have any questions or want to know exactly what we store about you, please contact Qbuzz using the contact details at the end of this privacy and cookie statement.

How to contact us

You can reach us in various ways, such as by phone (regular or via TeleTolk), WhatsApp, chat, email, or our contact form. You're also welcome to give us feedback. If you have questions about your personal data, feel free to reach out. We process your data in order to respond to your questions.

When you contact us, we may use the following data:

Name and address

Email address

IP address

Phone number

Card details

Any information you provide in your message

Any details required to handle your request

We use this data to respond to your inquiry based on your request and the performance of the agreement. We store this data until we’re sure you’re satisfied with our response, and no longer than 18 months for handling inquiries, complaints, or refund requests.

Data Processing for travel payments

When you travel with us, we need the following data:

Travel product details

Card information

This data is necessary to facilitate your travel and is processed to perform our contract with you. Depending on your payment method, different retention periods apply. You can refer to Translink’s privacy and cookie statement for more information.

Newsletters & Functional/Service messages

Newsletters

We send newsletters only with your consent. These may include product updates, service changes, and other relevant information. You can sign up via our website. We use:

First and last name

Email address

We process this based on your consent and store it as long as you’re subscribed. If you don't log in to your "Mijn Qbuzz" account for over 1.5 years, your account and newsletter subscription will expire.

Each newsletter contains a personalized unsubscribe link. After unsubscribing, your data will be placed on a blocklist to prevent future mailings.

Functional and Service messages

We send non-promotional messages such as product updates, changes, or disruptions. We comply with DDMA’s guidelines on personal advertising. Based on our customer relationship, we may send important travel information like delays or disruptions using your profile data:

First and last name

Email address

Profile data

These messages are sent as part of our services, based on legitimate interest. You can unsubscribe via Mijn Qbuzz. We keep this data up to 18 months after the end of the customer relationship.

If you’ve consented, we may also share your data with other public transport operators to send you service updates. You can opt out via Mijn Qbuzz.

Advertising

We send promotional emails only with your consent. Data used includes:

Name

Email address

You can unsubscribe via this link. Data is retained as long as you’re subscribed, and no longer than 18 months after ending your customer relationship.

Ordering and payment

To purchase a travel product, we need:

Name

Email address

Contact info

Date of birth (for certain travel products)

Payment details

Debtor details

Travel product details

Card details

This data is processed to fulfil our contract with you. Financial data is stored for at least 7 years in compliance with legal obligations. For other retention periods, refer to Translink

Inspection & Security

While traveling, you must carry a valid ticket. For inspection purposes, we may use:

Name

Card details

ID document (e.g., to verify subscription or identify fare evasion)

This is based on our legitimate interest in business continuity.

Creating an account

Creating an account lets you manage subscriptions, preferences, and saved journeys. Required data:

Name

Card details

Contact details

Date of birth (if applicable)

Financial info

Travel product info

This is processed under the performance of our agreement. Financial data is retained for at least 7 years. Other data is retained for 18 months. We share this with Translink for administrative purposes. See Translink ’s privacy statement for more information.

Research

To improve public transportation, we conduct statistical research with Translink and other providers. We process

Transactional travel pattern data

Check-in and check-out data

This is based on legitimate interest. Pseudonymized data is stored up to 18 months post-travel. For opt-out and more information, contact Translink at: privacy@ov-chipkaart.nl.

Surveillance and Safety

Our vehicles have visible surveillance cameras. BOAs may wear bodycams. We process footage (including audio) based on legitimate interest to protect passengers, staff, and ourselves. Footage is deleted after 4 weeks unless retained for legal purposes.

See our privacy statement Police Data Act

Job Applications

If you apply for a job at Qbuzz, we process your data for recruitment, such as:

Full name

Phone number

Email address

CV info

Photo (if submitted)

Motivation, work/residence permits

Any other info you provide

If offered a job, we may verify your ID, education, and work history and request a certificate of conduct. Data is stored for up to 1 year with your consent.

Advertising & Cookies

We only send advertising if we have your permission. You can unsubscribe anytime.

Encrypted email addresses may be used for Meta or Google ads with your consent. You can withdraw it at any time. We use cookies on our websites only with your consent. See our [cookie statement] for details.

Sharing Data with Other Companies or Institutions

We only share your data when legally permitted, such as:Necessary to execute the agreement with you;

When necessary for contractual obligations

With your consent

Based on legitimate interest

Due to legal obligations (e.g., tax laws or police investigations)

In cases of mergers or acquisitions

Examples of third-party processors include:

Insurers

Accountants

IT service providers

Payment processors

We have processing agreements with these parties to safeguard your data.

If we use services outside the European Economic Area (EEA), we ensure:

The country has an adequacy decision from the EU Commission;

Suitable safeguards are in place (e.g., EU Standard Contractual Clauses);

You’ve given explicit consent.

Complaints and service

You can file questions or complaints, and create an account for managing travel products. Required data:

Name and address

Date of birth (if applicable)

IP address 

Phone number 

Financial data

Travel product data

Anymessage content you provide

We use this data to fulfill your request and retain it for up to 18 months.

Accessibility

You can request travel assistance from the Qbuzz customer service. For this, we need your details;

Full name

Card details

Travel details

Description of the assistance needed

This is retained for up to 18 months in connection with your request.

Flexible transport

Services like bestelBuzz and flexBuzz require personal data to schedule and coordinate rides. We collect:

Full name

Phone number

Email address

Location data

Financial data

Data is used to fulfill your booking and is retained up to 18 months.

DMG, U-OV and Zuid-Holland Noord

Fryslân

iLost

We work with iLost for lost and found items. iLost retains data in user accounts for up to 5 years. See iLost’s privacy statement for details.

Wi-Fi

When using our Wi-Fi, we process:

Device identification number

Internet traffic volume

We may be required to share your data by law (e.g., in case of illegal activity). We also use this data to assess network capacity and costs. Device data is stored for 24 hours. In rare cases, data may be stored longer to protect our rights or enforce terms of use.

Submitting a complaint

You can file a complaint using our form. Required data:

Name

Phone number

Message content and any attachments

If you believe your data is mishandled, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can submit your complaint here.

Changes to this privacy statement

If our website changes, we’ll update this privacy statement accordingly. Check the date above and review the document regularly. We'll notify you of major changes.

Your rights

If you have any questions or want to know which personal data we have about you, you can always contact us. See the contact details below.

Access, correction, and deletion: You may always ask us to access, correct, or supplement your personal data. You can also request to have it deleted or to process less data. Additionally, you can have your data transferred to another party.

Withdraw consent: You may withdraw your consent for the use of your data at any time.

File a complaint: If you believe we are not handling your data properly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Object: You may object to the way we process your personal data.

Please make sure to clearly identify yourself so that we can be certain we do not change or delete someone else’s data by mistake. We will generally respond to your request within one month. However, this period may be extended due to reasons related to the specific rights of data subjects or the complexity of the request. If we extend this period, we will inform you in a timely manner.

If you have any further questions, please contact us using the information below.

The Data Protection Officer can be reached via fg@qbuzz.nl

Contact details

Qbuzz B.V.
Piet Mondriaanplein 31
3812 GZ Amersfoort
Email address: privacy@qbuzz.nl.
Phone: 033-4601580
KvK number: 32134138