How does SNCB/NMBS process your personal data?

Unless you have purchased your ticket or travel pass via a machine or at the ticket window, SNCB/NMBS collects and processes the following personal data

• Last name, first name and address

In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address).

• Age or date of birth

If it is necessary to be able to deliver you the right product, we will also ask you for your age or date of birth (for example, tickets for seniors or young people).

• Data concerning the method of payment used

For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment.

• National registration number

If you choose to link your ticket to your electronic identity card, SNCB/NMBS will ask for your national registration number in order to make this link possible.  

What do we use your data for?

If you conclude a contract with us by, for example, purchasing a train ticket or travel pass, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket to make the train travel possible but also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.

We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we no longer need your data for other processing as stated in the privacy conditions, we will keep your data as collected according to online purchases for six months to be calculated from the date of purchase. We store national registration numbers for four weeks. 

Except in certain cases in which the international train operator allows anonymous travel, SNCB/NMBS collects and processes the following personal data

• Last name, first name and address

In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address).

• Age or date of birth

If it is necessary to be able to deliver you the right product (for example, tickets for seniors or young people) or if the foreign rail company that operates your journey requires this for on-board ticket control, we will also ask you for your age or date of birth

• Data concerning the method of payment used

For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment.

What do we use your data for?

If you conclude a contract with us by, for example, purchasing a train ticket or rail season tickets, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket to make the train travel possible but also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.

We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We provide your data to the various train operators that you use in your route so that they can offer you the desired service. They will inform you about what they will use your data for.

If the features of the purchased travel require it, for example, because you also purchased other services along with your train ticket offered by one of our partners, we will also share your personal data with that partner (for example, the requested hotel, car transport or the travel agent you used).

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we no longer need your data for other processing stated in these privacy conditions, we will keep the data for twelve months, calculated from the date of purchase.

Because rail season tickets are always by name, SNCB/NMBS collects and processes the following personal data:

• Last name, first name and address

In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address).

• Date of birth

To ensure that we sell you the correct rail season tickets and can distinguish you from other clients with the same name, we may also ask for your date of birth.

• Data concerning the method of payment used

For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment.

• Personnel number

When the rail season tickets are entirely or partially refunded by your employer, we will also process your personnel number.

What do we use your data for?

If you conclude a contract with us by, for example, purchasing a rail season ticket, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket to make the train travel possible but also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.

We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need to have your personal data for a processing that requires a longer storage period, we will store your personal data for eight years to be calculated from the end of the of the rail season tickets. This enables us to meet our tax obligations.

If you request a MOBIB card or use one as a train/rail company for tickets of SNCB/NMBS, we collect and process the following personal data:

• Last name, first name and address

In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address).

• Date of birth

In order to distinguish you from other clients with the same name, we may also ask for your date of birth.

• Data concerning the method of payment used

For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment.

• MOBIB card number

If you upload SNCB/NMBS tickets onto your MOBIB card, we will process the MOBIB card number. This is also the case when our train conductors check your ticket as based on your MOBIB card.

What do we use your data for?

When you request a MOBIB card from SNCB/NMBS, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket, so that you can upload tickets on this card later, to make the train travel possible as based on tickets booked onto the card and also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.

We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

Because the MOBIB card can be used as a valid medium for a valid ticket on the network of several Belgian public transport operators, personal data is exchanged between the operators concerned. This concerns personal data of the MOBIB card holder (for example: first and last name) and information about the MOBIB card and the uploaded ticket. Thanks to this exchange, the operator concerned can manage the tickets, and carry out the after-sales, fraud management, technical management and client management. For products for which the various public transport operators work together and where your first and last name and validation data are exchanged between them, these public transport operators will be jointly responsible for the processing of these data. For all other processing activities that each public transport operator performs in its own system, each of them will act as a separate controller, in accordance with their privacy policy. For additional information, we refer you to the current privacy policy available on the respective websites of these public transport operators.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EEA or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EEA. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we need your personal data for a processing that requires a longer storage period, we will store the personal data stated above for the duration of validity of the MOBIB card plus one year.

Which data do we process?

Because discount cards and specific travel permits (e.g. free carer, Priority to a Seat Card) are by name and their allocation is subject to a series of conditions, SNCB/NMBS processes the following data:

• Last name, first name and address

In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the authorization to use the discount or permit you have requested (postal address or email address).

• Date of birth

To ensure that we sell you the correct discount and can distinguish you from other clients with the same name, we may also ask for your date of birth.

• Specific personal characteristics

Discount cards and specific travel permits are linked to specific characteristics of the traveller. Depending on the type of discount card, we may ask for info concerning your profession (for example, member of the military or journalist), and your medical status (for example, physical disability or pregnancy).

Without this information, SNCB/NMBS cannot check whether you are eligible for the discount or permit.

In certain cases, we will ask for evidence of the characteristic that is linked to the discount or permit. If we request medical certificates we will always ask your consent before we process these.

What do we use your data for?

We process your personal data to evaluate if you are eligible for the requested discount or permit. Without this data, this would be impossible for us and the discount or permit cannot be granted.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need to have your personal data for a processing that requires a longer storage period, we will keep the personal data stated above for the duration of the transport contract to which a discount or permit is linked, extended by a period of thirteen months.

In order to check the validity of your ticket during train travel, we process the following personal data:

• Personal data stated on your rail season tickets
• MOBIB card number
• Personal data stated on the discount card you use
• Personal data stated on your identity card

Our train conductors have the right to verify your identity as based on your valid identity document. At that moment, we will check the information on the identity card against the information found on your ticket. Here, we pay particular attention to the photo, your last name and first name, and address. If you travel with children who benefit from a discount based on their age, our train conductors have the right to check the childrens’ age by means of a valid identity document or any other official document that may attest to their age. 

We use video cameras to increase the safety of persons and objects in or in the vicinity of our trains, stations and platforms. The images generated by these cameras are watched live. Only in case of incidents, we will try to identify the persons on these images. 

To get a correct view on how busy trains, stations, platforms or (bicycle) parkings are, we can use camera images or the Device-ID of the mobile phones of the persons that are present in the trains, stations or platforms. In principle, this will be done on an anonymous basis (video cameras) or pseudonymous basis (Device ID) because no link will be established between your identity and your Device ID. As soon as we can provide you this service and only when you give us your consent, we can use your personal data to offer you additional information on your train ride or the services that are available in the station. 

What do we use your data for?

We process your personal data in order to determine whether you are travelling with a valid ticket. We use camera images to increase the safety of travellers and visitors in and in the vicinity of the stations, the platforms and the trains. 

To whom may we provide your data?

For this purpose (checking your ticket), your data is not provided to third parties.

How long will we keep your data?

If we do not need to have your personal data for a processing that requires a longer storage period, the data acquired during the ticket check is deleted daily, unless an irregularity is established. The camera images are kept for three months, unless they can serve as evidence regarding an incident. In that case the retention period applicable for the follow up of that incident will apply.
The Device IDs we would obtain to get a view on how busy it is on the trains, in the stations or on the platforms, will only be stored until the statistics are drawn up. 

In order to handle your questions or feedback, we collect and process the following personal data

• Last name and first name

In principle, we process your last name and first name at the very least.

• Telephone number or address

So that we can respond to your question or feedback, we also collect the address where we can contact you (postal address of email address) or your telephone number.

• Data concerning the method of payment used

If you request compensation or reimbursement, we will also ask for information about the method of payment you would like to use for this.

• Other information

If the specific characteristics of your question or feedback require us to have additional personal data or you voluntarily supply us with it, we will use this data.

What do we use your data for?

We use your data to handle your question or feedback and, if applicable, to make the requested repayment. Without this data we cannot evaluate your question or feedback.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

If you have a question or feedback concerning international train travel in which other train operators are also involved, we will provide the latter with the personal data that the other train operator needs to be able to handle your question or feedback.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need to have your personal data for a processing that requires a longer storage period, we will store the personal data stated above for up to two years after the full settlement of your question or feedback.

If one of our employees on the train finds a lost object with personal data on it which enables us to identify the owner of the lost object, SNCB/NMBS shall process this data. In addition, SNCB/NMBS shall also process your personal data when you contact us requesting to receive information about a lost object or if you wish to pick this object up at SNCB/NMBS. SNCB/NMBS collects and processes the following personal data for this:

• Last name, first name and address

• Date of birth

To be able to distinguish you from persons with the same last name and first name, we also process your date of birth.

• Telephone number or email address

If we find this information on the lost object or if you submit this information to us along with your request, we may use it to inform you that we have found the lost object on the train.

• Information concerning your bank account (IBAN number and BIC Code)

If the lost object concerns money, if we found it, and you wish to be reimbursed, we will process the details of your bank account so that we are able to carry out the payment.

• Other information

If the lost object shows specific characteristics or if you deliberately mentioned specific characteristics of the object in order to facilitate our search for this object, we will use this data.

What do we use your data for?

We use your information to handle your question, message or request and, if possible, to return the lost object to you. Without this information, we cannot fully process your request.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

If you have lost an object during an international train trip in which other train operators are also involved, we shall provide the latter with the personal data they need in order to search for your lost object and, if possible, get it to you.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need your personal data for a processing that requires a longer storage period, the data stated above will be stored for fifty days starting from the day on which we found the object or from the day on which you provided us with this data.

When you have indicated that you would like to receive commercial offers from us, we will use your personal data to provide you with our newsletters and advertising campaigns. SNCB/NMBS collects and processes the following personal data for all of these:

• Last name and first name

In principle, we process your last name and first name at the very least.

• Telephone number or (email) address

We process this information in order to be able to deliver commercial offers and surveys which you have agreed to receive.

• Age

In order to make offers to you that are relevant to you, we also use your age information.

• Gender

We process your gender information to be able to address you correctly.

• Your preferences

In certain cases you can inform us of your preferences, e.g., your preferred language in which you would like to receive our communications, the type of product or real estate you are interested in or your preferred geographical region for our real estate offers.

• Order history

Based on the purchases you have made in the past or the item you have loaded into your shopping cart when purchasing tickets online, we may make personalised commercial offers to you. For this reason, we also store this data.

What do we use your data for?

Your personal data is used to provide you with commercial offers for our products and services.

In order to carry out targeted advertising campaigns in connected environments, we may share audiences with third party partners such as Google or Facebook. In this case, your data is always transferred in an encrypted and pseudonymised way to guarantee the respect of your data and privacy. 

We also use your data to adapt the content of our advertising campaigns and, in the future, even to adapt the content of our website according to your preferences and characteristics. We apply profiling to achieve this: based on the information that we have about you, we assign you to one of the marketing segments we use. This profiling has no other legal consequences or impact on you: only the advertising that you are shown or shall receive will be adapted to fit the segment you belong to.

The data that you will fill in on our real estate pages will be used to send you our newsletter and to include your preferences in our database so that we can provide you with SNCB/NMBS real estate offers in line with those preferences.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need your personal data for a processing that requires a longer storage period, the data stated above will be stored by us until you let us know that you no longer want us to use your data for direct marketing.

To create a MySNCB/NMBS account, we need the following information:

• Last name, first name and address

• Email address

This is used to identify you and to distinguish you from other users.

• Date of birth

This is used to identify you and to distinguish you from other users.

• Gender

We process your gender information to be able to address you correctly.

To create a MyTrain account (for booking and managing international rail journeys), we need the following information:

• Last name and first name

• Email address

This is used to identify you and to distinguish you from other users.

• Date of birth

This is used to identify you and to distinguish you from other users.

• Country
  This is used to adapt our international services to your location. 
  
  
• Gender

We process your gender information to be able to address you correctly.

What do we use your data for?

We use your information to create a MySNCB/NMBS or MyTrain account and to ensure that this account is unique.

In order to carry out targeted advertising campaigns in connected environments, we may share audiences with third party partners such as Google or Facebook. In this case, your data is always transferred in an encrypted and pseudonymised way to guarantee the respect of your data and privacy.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need your personal data for a processing that requires a longer storage period, the data stated above will be stored by us until you delete your MySNCB/NMBS account.

If you have violated one of our transport conditions, we process the following information:

• Last name, first name and address

If you are a minor, we will also process the identity information of your parent(s) or guardian.

• Your identity document and the information on your identity document

This includes your nationality, the national registration number, your date of birth and your gender

• Camera images or photos

If there are camera images of your violation, we will also process these as evidence of your violation.

• Precedents

If the storage period for this information has not expired, we will also process your personal data concerning a prior violation.

• Your telephone number or email address

In order to contact you to follow up on the (payment of the) sanction for the violation, we will use your telephone number or email address.

What do we use your data for?

We use your information to establish the violation and to further process this, including the fulfilment of the payment of the sanction related to the violation, including all correspondence we must carry out in this respect.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need your personal data for a processing that requires a longer storage period, for example, to enable us to receive full payment of the outstanding sums to be received or because we need to complete the processing of a legal dispute that has arisen as a result of the violation, the information stated above will generally be stored for five years and 10 years if the violation concerns travelling without a valid ticket, to be calculated from the date of the incident.

When you, as a physical person, are a supplier or professional client of ours, or you act as contact person for a supplier or professional client of ours, we collect and process the following information:

• Last name, first name and address

In principle, we process your last name and first name at the very least.

• Telephone number or email address

We process this information in order to be able to contact you.

• Gender

We process your gender information to be able to address you correctly.

• Results of, and personal data included in a credit worthiness evaluation

 To accept you as a supplier, we are sometimes required to carry out a credit worthiness evaluation.

What do we use your data for?

We use your information in order to be able to carry out the contract we have with you or the supplier or professional client for whom you act and to keep you or the latter informed on important information, including commercial information that is necessary for carrying out the contract.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

If we do not need to have your personal data for a processing that requires a longer storage period, we will keep your personal data throughout the duration of the contract with you, as a professional client or supplier or with the supplier or professional client for whom you act as contact person plus one year.

If you were the victim of an accident on a location owned or managed by SNCB/NMBS, we process the following information:

• Last name, first name and address

If you are a minor, we will also process the identity information of your parent(s) or guardian.

• Your identity document and the information on your identity document

This includes your nationality, the national registration number, your date of birth and your gender

• Camera images or photos

If there are camera images of your accident, these will also be processed as evidence of the accident.

• Your telephone number or email address

In order to contact you to follow up on the (payment of the) sanction for the violation, we will use your telephone number or email address.

The specific characteristics of your accident and the damage

In order to be able to follow up on your damage, for example, with our insurer, we will also process the specific characteristics of your accident or damage you have suffered, including the physical damage. If we process your medical information, we will ask for your explicit consent to do so unless high urgency, e.g. providing first aid, should prevent us from doing so in order to guarantee your vital interests.

What do we use your data for?

We use your information to make a detailed assessment of the accident and to make following up possible and to reimburse you if you are entitled to reimbursement for damage suffered, possibly with the intervention of our insurer.

We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.

To whom may we provide your data?

We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.

We shall also provide your data to our insurer.

In addition, we are sometimes required to provide your data to the competent authorities.

In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in European Economic Area. Even when our cloud providers would store your data in countries outside of the EER or our Indian-based IT providers would access your date, all required contractual protection measures are in place to guarantee you a protection level equal to that within the EER. You can obtain more information on these contractual protection measures, via [email protected]. If we are to deviate from this principle, we will inform you of this and ask for your consent.

How long will we keep your data?

We will keep your information until the file has been completely settled plus one year. If the handling of your file cannot be completed on short notice, we will keep your information for a period of thirty years and six months if you have suffered damage to your property and 20 years and six months if you have suffered physical damage. With damage to objects combined with physical damage, a longer storage period applies.

When you visit our websites and use our apps, you provide certain personal data to SNCB/NMBS, even by only opening these websites.

A) Area of application

Read this section to learn more about how we collect and process your personal data on our websites (particularly www.sncb.be, www.nmbs.be, www.belgianrail.be, www.sncb-international.com, www.nmbs-internationaal.com, www.b-europe.com and hereinafter referred to as the "Website") and, as the case may be, by downloading the apps (mobile applications under the name ‘SNCB/NMBS’ on smartphones and tablets via app stores, hereinafter referred to as the ‘Apps’).

By purchasing tickets for domestic and/or cross-border trips by train and related products, by reserving services via the Website and the Apps, by using the Website and/or Apps and by sharing personal data, you confirm that you have read through the stated conditions below under which SNCB/NMBS collects, processes and shares personal data.

B) Collection, processing and purposes of personal data on the Website and the Apps

With each visit to the Website or use of the Apps, various kinds of personal data is shared and log files about you are collected, particularly your IP address, the website from which you were linked to the Website, the date and duration of your visit, your browser, your operating system, your surfing behaviour and especially the pages you visit.

We only use this information for statistical purposes and to analyse and optimise the use and functioning of the Website and the Apps. For this, we utilise the services of third parties with whom we share this information for this purpose.

When your visit is not limited to a general request for information and, more specifically, when you purchase a ticket or related product via the Website and/or Apps

1. when you purchase a ticket or related product,

2. when you pay a fixed online indemnity concerning an irregularity,

3. reserve a service or assistance,

4. contact SNCB/NMBS,

5. register for a MySNCB/NMBS or MyTrain account,

6. participate in a competition,

7. agree to receive our newsletter and/or other information about our products and services,
8. agree to participate in future surveys (e.g., by completing the form you can find via https://www.belgiantrain.be/en/support/forms/need-info)
9. with your consent to activate certain services upon downloading the Apps, such as localisation, use of contacts and/or calendar,
10. use our chatbots and provide personal data in your communication with such chatbot

other information will also be requested and/or collected, including, as the case may be, your gender, name, email address, your current job, password, order history (if applicable), telephone number, address information and language preference.

We use such information

1. to supply a ticket, a related product or service and, if necessary, to further inform you about it, to deliver the purchased products or services to you and to follow-up, and to guarantee you a quality after-sale service;

2. to be able to handle and, if necessary, answer your question or respond to your communication or request;

3. to enable you to pay fixed indemnities in relation to an irregularity;

4. to enable you to benefit fully from all the advantages of having your MySNCB/NMBS account, including My Train Info rail season tickets (sms text message upon delay of one of your preferred trains if you possess a valid train ticket), simplifying certain actions (online assistance for persons with limited mobility, the purchase of validations for your train ticket or MOBIB card, etc., the payment of a fixed indemnity for an irregularity), access to your order history and your data in order to manage it, as well as for personalised marketing purposes;

5. to allow you to participate in a competition and to keep you informed on the outcome and results of the competition;

6. to send you newsletters;

7. to improve the services we offer you, and adapt these to fit your needs, more specifically tailored to you, as based on the created client profiles, and offer adapted services that may interest you;

8. to keep you informed, allow you to participate in market studies and to carry out satisfaction surveys about our products and services;

9. to allow you to benefit from the additional services on the Apps, such as mapping out the nearest station, saving a travel route in your calendar or informing others of your travel route;

and this may be passed onto third parties or subcontractors for this purpose.

C) Specific processing upon purchase of tickets

To prevent possible fraud with the purchase of tickets, SNCB/NMBS verifies the information you share with each transaction. SNCB/NMBS shall process that information and, based on that processing, will decide whether to refuse or suspend the purchase of tickets. SNCB/NMBS is not required to inform you in advance if it decides to refuse or suspend your purchase. SNCB/NMBS may decide to refuse or suspend whenever it suspects that a contractual obligation is not complied with and/or fraud or deceit is involved. This suspicion may, for example, be based on doubts about the identity of the client or traveller, the fact that the quantity of the products ordered is unusual or when there have been problems in the past with the payments made by the client or traveller concerned.

Within the context of online ticket orders, SNCB/NMBS uses the “Fraud Expert” tool, linked to a remote processing by a subcontractor of SNCB/NMBS. For this, your personal data shall be provided to and processed by Ingenico e-Commerce Solutions SPRL (hereinafter: “Ingenico”). Ingenico processes your data to prevent and combat fraud (which includes, among others: determining a level of risk associated with the transaction, detection and management of certain warnings arising from this, informing the sales point so they it can decide as based on this information, manually verifying transactions that have a certain risk level, compiling a model as based on scores). Your personal data is provided to the relevant departments of Ingenico, to SNCB/NMBS and to third parties who act as subcontractors for Ingenico or SNCB/NMBS to make the payment process and the offered services possible.

Fraud can lead to our personal data being registered in a specific file that Ingenico maintains concerning fraud. The aim of this file is, namely, to store the data concerning fraud in the past to estimate the risk criteria of transactions and to determine the scoring model that is linked to it. When your data is included in that file, it could mean that you will be considered as a higher fraud risk and your order may be refused when you place your next order with SNCB/NMBS or with another seller that is active in the same sector as SNCB/NMBS and also uses the services of Ingenico.

In accordance with the statutory privacy requirements, you have the right to access, inspect and improve the data that Ingenico keeps about you in the framework of the “Fraud Expert” tool, while taking into account the statutory restrictions, the right to oppose the processing of data that is irrelevant or excessive. You can exercise these rights by submitting a written request to: Ingenico e-Commerce Solutions BVBA- Legal Service “protection of privacy”, Woluwelaan 102, B-1200 Brussels (Belgium) or by sending an electronic request via email to: [email protected]. In order to be valid, this request must always be accompanied by a signed copy of a valid identity document.

D) Cookies

The Website uses so-called "cookies", small information files that are temporarily or permanently stored by the server of a website via the browser on your computer or device and that simplify, complete and personalise the use of the website.

On the website you can chose which cookies you allow, with the exception of strictly necessary cookies which will always be used.

In your browser, you can turn off the storage of cookies or delete stored cookies, but this may lead to diminished functionality, delays or the disablement of certain parts of the Website.

For more information about cookies and how you can delete them depending on the type of browser you use, we would like to refer you to the following website: www.allaboutcookies.org.

We use the following cookies: 

(i)      Strictly necessary cookies

These are cookies that enable you to view the Website, use the functions on the Website (such as your shopping cart with orders or using the live chat functionnality) and to gain access to the secured or registered sections. If the use of these cookies is turned off, you will no longer be able to use certain sections of the Website properly.

(ii)    Functionality cookies

These are cookies that enable us to keep track of your choices and preferences (such as language choice and such), to enhance the ease of use of the Website and show you relevant information.

(iii)    Performance-enhancing cookies

These are cookies whose aim is to collect information about how you use the Website, such as information concerning the pages visited or the number of displayed error messages, for the purpose of analysing and optimising the use of the Website. 

Performance-enhancing cookies are also known as analytical cookies. It is possible that the information that is acquired from the use of these cookies is collected by a third party. These third parties act as subcontractors for SNCB/NMBS to provide information to SNCB/NMBS to improve the Website and its services. Below, please find more information about these third parties and how they use the information that is collected via the cookies.

Google Analytics

The Website uses Google Analytics. This web analysis service is offered by Google Inc. (“Google”), and uses analytical cookies. The information that is collected via the cookies about the use of the website by a visitor, together with the visitor's IP address, is sent to Google and stored by Google.

Google may use this information for the following:

1. Supply reports concerning the advertisement activity to advertisers and websites that host those advertisements and ensure that those website publishers are paid

2. It helps website and app owners who use Google Analytics to understand how visitors interact with their sites or apps

3. Detect and combat fraud and other security risks to protect users and partners

4. Comply with statutory obligations

5. Improve its products.

For all these activities with the exception of point 2) Google acts as the processor, and the processing of the information that they collect about the use of the Website is Google's own responsibility.