Privacy Statement
Last updated: March 26, 2025
What we do
Your privacy is very important to Qbuzz B.V. (‘Qbuzz’). We therefore comply with applicable privacy legislation, including the General Data Protection Regulation (‘GDPR’). This means that we:Clearly define our purposes before processing your personal data, via this privacy statement;
Clearly state our purposes before processing your personal data, through this privacy statement;
Store as little personal data as possible, and only the data necessary for our purposes;
Explicitly ask for your permission to process your personal data, if consent is required;
Take necessary security measures to protect your personal data and impose these obligations on third parties processing data for us;
Respect your rights, such as the right to access, correct, or delete your personal data held by us.
Your data is safe with us, and we will always use it properly. In this privacy statement, we explain what we do with information we obtain about you. If you have any questions or want to know exactly what we store about you, please contact Qbuzz using the contact details at the end of this privacy and cookie statement.
How to contact us
You can reach us in various ways, such as by phone (regular or via TeleTolk), WhatsApp, chat, email, or our contact form. You're also welcome to give us feedback. If you have questions about your personal data, feel free to reach out. We process your data in order to respond to your questions.
When you contact us, we may use the following data:
- Name and address
- Email address
- IP address
- Phone number
- Card details
- Any information you provide in your message
- Any details required to handle your request
We use this data to respond to your inquiry based on your request and the performance of the agreement. We store this data until we’re sure you’re satisfied with our response, and no longer than 18 months for handling inquiries, complaints, or refund requests.
Data Processing for travel payments
When you travel with us, we need the following data:
- Travel product details
- Card information
This data is necessary to facilitate your travel and is processed to perform our contract with you. Depending on your payment method, different retention periods apply. You can refer to Translink’s privacy and cookie statement for more information.
Newsletters & Functional/Service messages
Newsletters
We send newsletters only with your consent. These may include product updates, service changes, and other relevant information. You can sign up via our website. We use:
First and last name
Email address
We process this based on your consent and store it as long as you’re subscribed. If you don't log in to your "Mijn Qbuzz" account for over 1.5 years, your account and newsletter subscription will expire.
Each newsletter contains a personalized unsubscribe link. After unsubscribing, your data will be placed on a blocklist to prevent future mailings.
Functional and Service messages
We send non-promotional messages such as product updates, changes, or disruptions. We comply with DDMA’s guidelines on personal advertising. Based on our customer relationship, we may send important travel information like delays or disruptions using your profile data:
First and last name
Email address
Profile data
These messages are sent as part of our services, based on legitimate interest. You can unsubscribe via Mijn Qbuzz. We keep this data up to 18 months after the end of the customer relationship.
If you’ve consented, we may also share your data with other public transport operators to send you service updates. You can opt out via Mijn Qbuzz.
Advertising
We send promotional emails only with your consent. Data used includes:
- Name
Email address
You can unsubscribe via this link. Data is retained as long as you’re subscribed, and no longer than 18 months after ending your customer relationship.
Ordering and payment
To purchase a travel product, we need:
- Name
- Email address
- Contact info
- Date of birth (for certain travel products)
- Payment details
- Debtor details
- Travel product details
- Card details
This data is processed to fulfil our contract with you. Financial data is stored for at least 7 years in compliance with legal obligations. For other retention periods, refer to Translink
Inspection & Security
While traveling, you must carry a valid ticket. For inspection purposes, we may use:
- Name
- Card details
- ID document (e.g., to verify subscription or identify fare evasion)
This is based on our legitimate interest in business continuity.
Creating an account
Creating an account lets you manage subscriptions, preferences, and saved journeys. Required data:
- Name
- Card details
- Contact details
- Date of birth (if applicable)
- Financial info
- Travel product info
This is processed under the performance of our agreement. Financial data is retained for at least 7 years. Other data is retained for 18 months. We share this with Translink for administrative purposes. See Translink ’s privacy statement for more information.
Research
To improve public transportation, we conduct statistical research with Translink and other providers. We process
- Transactional travel pattern data
- Check-in and check-out data
This is based on legitimate interest. Pseudonymized data is stored up to 18 months post-travel. For opt-out and more information, contact Translink at: privacy@ov-chipkaart.nl.
Surveillance and Safety
Our vehicles have visible surveillance cameras. BOAs may wear bodycams. We process footage (including audio) based on legitimate interest to protect passengers, staff, and ourselves. Footage is deleted after 4 weeks unless retained for legal purposes.
Job Applications
If you apply for a job at Qbuzz, we process your data for recruitment, such as:
- Full name
- Phone number
- Email address
- CV info
- Photo (if submitted)
- Motivation, work/residence permits
- Any other info you provide
If offered a job, we may verify your ID, education, and work history and request a certificate of conduct. Data is stored for up to 1 year with your consent.
Advertising & Cookies
We only send advertising if we have your permission. You can unsubscribe anytime.
Encrypted email addresses may be used for Meta or Google ads with your consent. You can withdraw it at any time. We use cookies on our websites only with your consent. See our [cookie statement] for details.
Sharing Data with Other Companies or Institutions
We only share your data when legally permitted, such as:Necessary to execute the agreement with you;
- When necessary for contractual obligations
- With your consent
- Based on legitimate interest
- Due to legal obligations (e.g., tax laws or police investigations)
- In cases of mergers or acquisitions
Examples of third-party processors include:
- Insurers
- Accountants
- IT service providers
- Payment processors
We have processing agreements with these parties to safeguard your data.
If we use services outside the European Economic Area (EEA), we ensure:
- The country has an adequacy decision from the EU Commission;
- Suitable safeguards are in place (e.g., EU Standard Contractual Clauses);
- You’ve given explicit consent.
Complaints and service
You can file questions or complaints, and create an account for managing travel products. Required data:
Name and address
Date of birth (if applicable)
Email
IP address
Phone number
Financial data
Travel product data
Anymessage content you provide
We use this data to fulfill your request and retain it for up to 18 months.
Accessibility
You can request travel assistance from the Qbuzz customer service. For this, we need your details;
Full name
Card details
Travel details
Description of the assistance needed
This is retained for up to 18 months in connection with your request.
Flexible transport
Services like bestelBuzz and flexBuzz require personal data to schedule and coordinate rides. We collect:
Full name
Phone number
Email address
Location data
Financial data
Data is used to fulfill your booking and is retained up to 18 months.