This privacy statement was last amended on 1 April 2026

General

De Mobiliteitscentrale Zeeland B.V. (hereinafter: ‘De Mobiliteitscentrale’) provides public transport in Zeeland together with the Zeeland municipalities and the province. The Zeeland municipalities and the province have structured this cooperation through the Joint Regulation Public Transport Zeeland (hereinafter: ‘the Joint Regulation’). This privacy statement provides you with a general overview of the way we handle your personal data, which measures we take to safeguard your privacy and which rights you have with regard to the processing of your data.

This privacy statement applies to the website www.reizendoorzeeland.nl, the Reizen door Zeeland app and all related services offered via Reizen door Zeeland.

Our privacy statement in brief

Your privacy is very important to us. We therefore comply with the General Data Protection Regulation (GDPR). This means that we:

Clearly define our purposes before we process your personal data, via this privacy statement.
Store as little personal data as possible and only the data needed for our purposes.
Explicitly ask for consent for the processing of your personal data, if consent is required.
Take the necessary security measures to protect your personal data. We also impose these obligations on parties that process personal data for us.
Respect your rights, such as the right to access, correct or delete your personal data processed by us.

What are personal data?

Personal data are any data relating to a person or that can be traced back to a person. This can include a name, address, telephone number, e-mail address or a photo. But also a citizen service number (BSN) or bank account number. When these data are brought together, they can reveal which person it concerns.

Which laws and regulations apply?

Since 25 May 2018, the General Data Protection Regulation (GDPR) has applied to all organisations in the Netherlands that work with personal data. This law ensures that your data are used safely and properly. With the Dutch GDPR Implementation Act (UAVG), the Netherlands can set additional rules on certain points.

Who is the data controller?

Who is responsible for processing your personal data depends on the service you use.

Flex transport

For these services, the Joint Regulation is the data controller. They determine why and how your data are processed. De Mobiliteitscentrale carries out these processing activities on behalf of the Joint Regulation.

Target group transport (WMO transport, pupil transport, youth care transport)

For target group transport, the municipality where you submitted your application and received your indication is the data controller. De Mobiliteitscentrale processes your data on behalf of the Joint Regulation, which in turn acts on behalf of the municipality. For more information about the processing of your data for these purposes, we refer you to the municipality.

Website and other services

For the processing of personal data on this website (such as handling contacts and complaints, applications and the newsletter), De Mobiliteitscentrale acts as the data controller.

For what purposes do we process your personal data?

We may process various personal data about you. For each purpose, we indicate which data we process about you, for what purpose we process these data and how long they are retained. If you have questions or want to know exactly what we keep about you, please contact us. The contact details can be found at the bottom of this privacy and cookie statement.

Visiting the website

You can visit this website without having to register. Without your consent, we do not collect any data that can personally identify you. However, (anonymous) statistical data are collected via cookies, such as the number of visits per page. We use this information to improve the website. More information can be found in the Cookie Statement.

Traveller account management

To book a trip via the Reizen door Zeeland app or our call centre, you need an account. When creating and managing your account, we process the following personal data:

First and last name;
E-mail address;
Telephone number;
Date of birth;
Favourite addresses (such as home and work address).

We process these data to create and manage your account, to log you in and to send you messages related to the use of the service (performance of the agreement). We retain your account data for as long as your account is active. You can delete your account and the associated data at any time via the app. After deletion, your personal data will be deleted. Trip data are anonymised so that they can no longer be traced back to you

Account management for target group transport

If you use target group transport (WMO transport, pupil transport, youth care or day activity transport), your data are processed in order to be able to provide the transport for which you have an indication. In addition to the data processed for a regular account, the following data are also processed for target group transport:

Indication data (the type of indication and the associated transport conditions)
Type of disability and any aids
Data about companions or carers
Contact details of an emergency contact

Your indication data are provided by the municipality where you submitted your application. The municipality is the data controller for these data. De Mobiliteitscentrale cannot amend these indication data. If your data change, you must therefore report this to your municipality. For more information on how your municipality handles your personal data, we refer you to your municipality’s privacy statement.

Booking a trip

You can book a trip via the Reizen door Zeeland app or by phone via the call centre. When you book by phone, the call centre looks up your account based on your name and/or telephone number. In both cases, we process the following (personal) data to plan, carry out and handle your trip:

Customer number;
First and last name;
E-mail address;
Telephone number;
Pick-up address and destination address;
Desired date and time;
Number of passengers;
Any travel limitations (aids, need for assistance);
Optional: contact details of an additional passenger or emergency contact.

In addition, during the execution of the trip the vehicle’s location can be tracked via GPS. This is necessary to inform you about the arrival time, to optimise the route and/or to improve the service. The driver who carries out your trip may contact you by phone before the trip, for example to confirm your presence. For this purpose, your telephone number is shared with the driver.

We process these data in order to be able to carry out the trip you requested (performance of the agreement). After completion of the trip, we retain the trip data that are necessary for the financial administration in accordance with the statutory retention period of 7 years. Other trip data are anonymised upon deletion of your account.

Handling contacts and complaints

When you send us an e-mail message, contact us by phone, fill in the contact form or contact us in another way, you accept our offer to get in touch with us (legitimate interest and/or performance of the agreement).

For this purpose, we process the following personal data:

First and last name;
E-mail address;
Request for assistance;
Trip data;
Pass number (WMO customers);
Optional: telephone number.

We store these contact moments with the personal data you provided in order to handle the contact and, if applicable, to deal with your complaint. We retain this information for as long as necessary for this contact or up to a maximum of 2 years after we last had contact with you, because we want to be sure that we have handled your question or complaint properly.

Working at (a carrier of) De Mobiliteitscentrale

Have you responded to one of our vacancies or submitted an unsolicited application? Then we process your personal data in order to process your application, and in preparation for possibly entering into an employment contract.

For this purpose, we process the following personal data:

First and last name
Address details (address, house number and postcode)
Contact details (e-mail address and telephone number)
Curriculum Vitae
Cover letter
Passport photo
Salary indication
References
Any other information you include with your application

We retain your application data for up to 6 weeks after the position has been filled. We keep these data so that we can contact you if the position becomes available again within the probation period. If we cannot offer you a position at that time, we may – with your consent – retain the application data for a further year. You can withdraw your consent at any time by sending us an e-mail. If you come to work with us, we store your application data in the personnel file. This file is retained for as long as necessary and, with regard to the application data, for up to 2 years after employment.

On our website you can subscribe to our newsletter. We only send the newsletter if you have given your consent. For this purpose, we only process your e-mail address.

You can withdraw your consent at any time by unsubscribing via the link at the bottom of each newsletter or by contacting us. We retain your e-mail address for these purposes until you withdraw your consent or unsubscribe.

When can we share your personal data with third parties?

De Mobiliteitscentrale only shares your data with third parties when this is permitted under current legislation. It may occur that we provide your personal data to third parties because:

we have engaged them to process certain data;
we have a legal basis for doing so;
we are legally obliged to do so (for example, if the police require it in case of suspicion of a crime).

The parties that process personal data on our or your behalf are:

Party	Registered location	Purpose
Siemens Mobility B.V.	The Netherlands	Provision and management of the platform used to plan and carry out trips
Padam Mobility SAS	France	Provision and management of the platform used to plan and carry out trips
Amazon Web Services (AWS)	Legally established in the United States	Hosting takes place in Ireland. Hosting of the platform used to plan and carry out trips
Brevo	France	Sending the newsletter
BS Automatisering	The Netherlands	Processes trip data and indication data for the purpose of registration and invoicing of target group transport
Contracted carriers	The Netherlands	Carrying out trips

International transfer of personal data

It may happen that some of our suppliers process personal data outside the European Economic Area (EEA). When sharing your personal data with these parties, we take appropriate safeguards to protect your privacy.

The European Commission has adopted an adequacy decision for 15 countries. On the basis of an adequacy decision, personal data can be safely transferred from the EEA to companies in these countries without additional data protection safeguards being required.

If we share data with companies in other countries without an adequacy decision (or US companies that do not fall under the EU-US Data Privacy Framework), we take additional protective measures in the form of so-called appropriate safeguards. This means that we take extra action to protect your personal data. For this, we use, among other things, standard contractual clauses (“SCCs”).

When we transfer your personal data to parties outside the EEA on the basis of SCCs, you have the following rights:

Request information about the transfer, including a copy of the SCCs.
Contact both us and the receiving party for information.
Lodge complaints with the receiving party, the Dutch Data Protection Authority, a competent court in the EEA or an independent dispute resolution body.
Claim compensation in the event of breach of the SCCs.

These rights exist in addition to your general privacy rights under the GDPR.

Which privacy rights do you have?

Right of access: you have the right to access the personal data we process about you.
Right to rectification: you have the right to correct or supplement the personal data we process about you if they are incorrect or incomplete.
Right to object: you can object to the processing of your personal data, including to direct marketing.
Right to erasure: you can request that we delete your personal data.
Right to withdraw your consent: if you have given us consent to process personal data, you can withdraw this consent at any time.
Right to data portability: if technically possible, you have the right to have the personal data we process about you transferred to a third party.
Right to restriction of processing: in some cases you can request that we restrict the processing of your personal data (temporarily or otherwise).

With your request, we may ask you to identify yourself. For this, we request data to ensure that you are the correct person to whom the personal data belong.

In principle, we will comply with your request within one month. However, this period may be extended for reasons related to the specific privacy rights or the complexity of the request. If we extend this period, we will inform you in good time.

If you wish to exercise one of your rights, you can make this known via privacy@reizendoorzeeland.nl.

How are your personal data secured?

Security of personal data is very important to us. We therefore take appropriate technical and organisational measures with regard to the processing of personal data to be carried out, against loss or against any form of unlawful processing (such as unauthorised access, impairment, alteration or disclosure of personal data). We continuously adapt security and pay close attention to what could go wrong.

We take, among other things, the following security measures:

logical access control on our laptops and systems, using passwords;
physical measures for access security, including access chips and camera security in our office building;
encryption of digital files;
organisational measures for access security;
securing network connections via Transport Layer Security (TLS) technology;
purpose-based access restrictions.

Who oversees privacy?

De Mobiliteitscentrale has appointed a Data Protection Officer (DPO) to oversee compliance with privacy legislation and internal policy regarding the processing of personal data. The DPO is an independent supervisor and is the point of contact within Reizen door Zeeland for questions and complaints about the protection of your personal data. You can contact our DPO via privacy@reizendoorzeeland.nl.

Where can you go with questions and/or complaints?

Do you have questions or comments about this privacy statement or the processing of your personal data by De Mobiliteitscentrale? Please feel free to contact us via privacy@reizendoorzeeland.nl.

Can’t we resolve it together? Then you have the right to seek legal advice or lodge a complaint with the Dutch Data Protection Authority. The contact details and more information can be found on their website: www.autoriteitpersoonsgegevens.nl.

Amendment of privacy statement

De Mobiliteitscentrale may amend this privacy statement without prior notice. The latest version of the privacy statement can always be found on our website. We recommend that you check regularly to see whether anything has changed.

Notificaties

Privacy Policy