Student transportation privacy statement
The municipality processes personal data about the student and applicant. This privacy statement tells you what this means for you and your data. For the municipality's general privacy statement, please visit https://www.sonenbreugel.nl/privacyverklaring.
Why does the municipality collect this data?
In order to process your data, the municipality complies with the General Data Protection Regulation (AVG). Municipality of Son and Breugel collects this data for the performance of a statutory task; namely, the provision of suitable transport facilities for pupils who cannot travel to school independently.
The municipality performs these tasks on the basis of:
- Ordinance funding pupil transport Son en Breugel 2022
- Article 4 - Primary Education Act
- Section 8.28 - Secondary Education Act 2020
- Section 8.29 - Secondary Education Act 2020
- Article 4 - Expertise Centers Act
To enable these services and provide you with the requested service, the municipality processes your personal data for the following purposes:
- Issuing decisions: to assess an application for pupil transport, the municipality processes personal data.
What personal data does the municipality process?
To assess applications and provide appropriate transportation services, the municipality may process the following personal data:
Ordinary personal data:
- Name (student and applicant)
- Date of birth (student)
- Address (student and applicant)
- Residence (student and applicant)
- Postal code (student and applicant)
- Gender (student)
- Phone (applicant)
- E-mail (applicant)
- Signature (applicant)
Sensitive personal data:
- Family composition
- Income statement (applicant)
Special personal data:
- Wheelchair indication (student)
- Type of education (student)
- Category of disability with explanation by parents (student)
- Social circumstance at school statement (leerlin
- Explanatory travel advice (student)
- Social medical advice (student)
- Religious or philosophical beliefs (student and applicant)
Verification via DigiD
To apply for pupil transportation, log in with DigiD. DigiD is a national government login system that works on the basis of the user's citizen service number (BSN). However, the municipality does not receive or store this BSN when making an inquiry via DigiD. The BSN is only used by DigiD to verify your identity. The municipality processes your personal data only from the moment you submit the request.
How long does the municipality keep your personal data?
Personal data and documents of the student and the applicant are not kept longer than 1 to 10 years. The municipality uses the time limits from the Archives Act; the 2020 Municipal and Intermunicipal Bodies Selection List. This states:
- How long the municipality must keep information.
- What information the municipality must destroy after a certain amount of time.
- What information the municipality must archive. The retention period of the digital file depends on the outcome of the application:
- Provide pupil transportation: 10 after termination of pupil transportation provision.
- Not processed/rejected application: 5 years after processing the application.
- Aborted application: 1 year after processing the application.
What are your rights?
If your data is processed, you have a number of rights under the General Data Protection Regulation (GDPR). If you indicate that you want to make use of these, the municipality must allow this, or indicate why this is not possible. For example, consider the right to see what data about you is being processed. The General Privacy Statement page explains what rights you have and how to exercise them.
What is the municipality doing to protect your data?
The municipality tries to prevent someone who is not entitled to it:
- Gain access to your data/the student's data.
- Your data/the student's data may change.
- May disclose your information/the student's information.
The municipality does this by, for example:
- Personal data encryption,
- control access to computer systems,
- give access to computer systems only to persons who are allowed and or have a duty of confidentiality,
- classify documents and e-mails (indicate how stringently they should be protected) and secure them.
These measures fall under the Baseline Information Security Government (BIO) with which the municipality must comply.