Naar hoofdcontent

Privacy Statement

Last updated: March 26, 2025

What we do

Your privacy is very important to Qbuzz B.V. (‘Qbuzz’). We therefore comply with applicable privacy legislation, including the General Data Protection Regulation (‘GDPR’). This means that we:Clearly define our purposes before processing your personal data, via this privacy statement;  


  • Clearly state our purposes before processing your personal data, through this privacy statement;

  • Store as little personal data as possible, and only the data necessary for our purposes;

  • Explicitly ask for your permission to process your personal data, if consent is required;

  • Take necessary security measures to protect your personal data and impose these obligations on third parties processing data for us;

  • Respect your rights, such as the right to access, correct, or delete your personal data held by us.


Your data is safe with us, and we will always use it properly. In this privacy statement, we explain what we do with information we obtain about you. If you have any questions or want to know exactly what we store about you, please contact Qbuzz using the contact details at the end of this privacy and cookie statement.  

How to contact us

You can reach us in various ways, such as by phone (regular or via TeleTolk), WhatsApp, chat, email, or our contact form. You're also welcome to give us feedback. If you have questions about your personal data, feel free to reach out. We process your data in order to respond to your questions.  


When you contact us, we may use the following data:  

  • Name and address
  • Email address
  • IP address
  • Phone number
  • Card details
  • Any information you provide in your message
  • Any details required to handle your request

We use this data to respond to your inquiry based on your request and the performance of the agreement. We store this data until we’re sure you’re satisfied with our response, and no longer than 18 months for handling inquiries, complaints, or refund requests.

Data Processing for travel payments

When you travel with us, we need the following data:


  • Travel product details
  • Card information


This data is necessary to facilitate your travel and is processed to perform our contract with you. Depending on your payment method, different retention periods apply. You can refer to Translink’s privacy and cookie statement for more information.

Newsletters & Functional/Service messages

Newsletters 
   

We send newsletters only with your consent. These may include product updates, service changes, and other relevant information. You can sign up via our website. We use:

  • First and last name

  • Email address 

We process this based on your consent and store it as long as you’re subscribed. If you don't log in to your "Mijn Qbuzz" account for over 1.5 years, your account and newsletter subscription will expire.

Each newsletter contains a personalized unsubscribe link. After unsubscribing, your data will be placed on a blocklist to prevent future mailings.


Functional and Service messages  


We send non-promotional messages such as product updates, changes, or disruptions. We comply with DDMA’s guidelines on personal advertising. Based on our customer relationship, we may send important travel information like delays or disruptions using your profile data:

  • First and last name 

  • Email address 

  • Profile data 

These messages are sent as part of our services, based on legitimate interest. You can unsubscribe via Mijn Qbuzz. We keep this data up to 18 months after the end of the customer relationship.

If you’ve consented, we may also share your data with other public transport operators to send you service updates. You can opt out via Mijn Qbuzz.


Advertising


We send promotional emails only with your consent. Data used includes:

  • Name

  • Email address  

You can unsubscribe via this link. Data is retained as long as you’re subscribed, and no longer than 18 months after ending your customer relationship.

Ordering and payment

To purchase a travel product, we need:

  • Name
  • Email address 
  • Contact info
  • Date of birth (for certain travel products) 
  • Payment details 
  • Debtor details 
  • Travel product details 
  • Card details 

This data is processed to fulfil our contract with you. Financial data is stored for at least 7 years in compliance with legal obligations. For other retention periods, refer to Translink

Inspection & Security

While traveling, you must carry a valid ticket. For inspection purposes, we may use:


  • Name
  • Card details
  • ID document (e.g., to verify subscription or identify fare evasion)


This is based on our legitimate interest in business continuity.

Creating an account

Creating an account lets you manage subscriptions, preferences, and saved journeys. Required data:

  • Name
  • Card details
  • Contact details
  • Date of birth (if applicable)
  • Financial info
  • Travel product info 


This is processed under the performance of our agreement. Financial data is retained for at least 7 years. Other data is retained for 18 months. We share this with Translink for administrative purposes. See Translink ’s privacy statement for more information.

Research

To improve public transportation, we conduct statistical research with Translink and other providers. We process


  • Transactional travel pattern data
  • Check-in and check-out data


This is based on legitimate interest. Pseudonymized data is stored up to 18 months post-travel. For opt-out and more information, contact Translink at: privacy@ov-chipkaart.nl.

Surveillance and Safety

Our vehicles have visible surveillance cameras. BOAs may wear bodycams. We process footage (including audio) based on legitimate interest to protect passengers, staff, and ourselves. Footage is deleted after 4 weeks unless retained for legal purposes.

See our privacy statement Police Data Act

Job Applications

If you apply for a job at Qbuzz, we process your data for recruitment, such as:


  • Full name
  • Phone number
  • Email address
  • CV info
  • Photo (if submitted)
  • Motivation, work/residence permits
  • Any other info you provide


If offered a job, we may verify your ID, education, and work history and request a certificate of conduct. Data is stored for up to 1 year with your consent.

Advertising & Cookies


We only send advertising if we have your permission. You can unsubscribe anytime.

Encrypted email addresses may be used for Meta or Google ads with your consent. You can withdraw it at any time. We use cookies on our websites only with your consent. See our [cookie statement] for details.

Sharing Data with Other Companies or Institutions

We only share your data when legally permitted, such as:Necessary to execute the agreement with you; 

  • When necessary for contractual obligations
  • With your consent
  • Based on legitimate interest
  • Due to legal obligations (e.g., tax laws or police investigations)
  • In cases of mergers or acquisitions


Examples of third-party processors include:

  • Insurers
  • Accountants
  • IT service providers
  • Payment processors 

We have processing agreements with these parties to safeguard your data.


If we use services outside the European Economic Area (EEA), we ensure:

  1. The country has an adequacy decision from the EU Commission;
  2. Suitable safeguards are in place (e.g., EU Standard Contractual Clauses);
  3. You’ve given explicit consent.

Complaints and service

You can file questions or complaints, and create an account for managing travel products. Required data:

  • Name and address

  • Date of birth (if applicable) 

  • Email

  • IP address  

  • Phone number  

  • Financial data

  • Travel product data

  • Anymessage content you provide

We use this data to fulfill your request and retain it for up to 18 months.

Accessibility

You can request travel assistance from the Qbuzz customer service. For this, we need your details; 

  • Full name

  • Card details 

  • Travel details  

  • Description of the assistance needed

This is retained for up to 18 months in connection with your request.

Flexible transport

Services like bestelBuzz and flexBuzz require personal data to schedule and coordinate rides. We collect:

  • Full name 

  • Phone number 

  • Email address 

  • Location data   

  • Financial data   

Data is used to fulfill your booking and is retained up to 18 months.

DMG, U-OV and Zuid-Holland Noord

Fryslân

iLost

We work with iLost for lost and found items. iLost retains data in user accounts for up to 5 years. See iLost’s privacy statement for details.

Wi-Fi

When using our Wi-Fi, we process:

  • Device identification number  

  • Internet traffic volume


We may be required to share your data by law (e.g., in case of illegal activity). We also use this data to assess network capacity and costs. Device data is stored for 24 hours. In rare cases, data may be stored longer to protect our rights or enforce terms of use.

Submitting a complaint

You can file a complaint using our form. Required data:

  • Email
  • Name
  • Phone number
  • Message content and any attachments


If you believe your data is mishandled, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can submit your complaint here.   

Changes to this privacy statement

If our website changes, we’ll update this privacy statement accordingly. Check the date above and review the document regularly. We'll notify you of major changes.

Your rights

If you have any questions or want to know which personal data we have about you, you can always contact us. See the contact details below.


  • Access, correction, and deletion: You may always ask us to access, correct, or supplement your personal data. You can also request to have it deleted or to process less data. Additionally, you can have your data transferred to another party.
  • Withdraw consent: You may withdraw your consent for the use of your data at any time.
  • File a complaint: If you believe we are not handling your data properly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
  • Object: You may object to the way we process your personal data.


Please make sure to clearly identify yourself so that we can be certain we do not change or delete someone else’s data by mistake. We will generally respond to your request within one month. However, this period may be extended due to reasons related to the specific rights of data subjects or the complexity of the request. If we extend this period, we will inform you in a timely manner.


If you have any further questions, please contact us using the information below.


The Data Protection Officer can be reached via fg@qbuzz.nl 


Contact details  

Qbuzz B.V.  
Piet Mondriaanplein 31 
3812 GZ Amersfoort 
Email address: privacy@qbuzz.nl. 
Phone: 033-4601580 
KvK number: 32134138