Unless you have purchased your ticket or tra vel pass via a machine or at the ticket window, SNCB/NMBS collects and processes the following personal data:
- Name, first name and address
In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address). - Age or date of birth
If it is necessary to be able to deliver you the right product, we will also ask you for your age or date of birth (for example, tickets for seniors or young people). - Data concerning the method of payment used
For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment. - National registration number
If you choose to link your ticket to your electronic identity card, SNCB/NMBS will ask for your national registration number in order to make this link possible.
What do we use your data for?
If you conclude a contract with us by, for example, purchasing a train ticket or travel pass, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket to make the train travel possible but also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.
We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task. At the moment, only our subsidiary company YPTO NV that manages our systems and data banks, has access to your personal data.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we no longer need your data for other processing as stated in the privacy conditions, we will keep your data as collected according to online purchases for six months to be calculated from the date of purchase. We store national registration numbers for four weeks.
Except in certain cases in which the international train operator allows anonymous travel, SNCB/NMBS collects and processes the following personal data:
- Last name, first name and address
In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address). - Age or date of birth
If it is necessary to be able to deliver you the right product (for example, tickets for seniors or young people) or if the foreign rail company that operates your journey requires this for on-board ticket control, we will also ask you for your age or date of birth. - Data concerning the method of payment used
For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment.
What do we use your data for?
If you conclude a contract with us by, for example, purchasing a train ticket or rail season tickets, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket to make the train travel possible but also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.
We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We provide your data to the various train operators that you use in your route so that they can offer you the desired service. They will inform you about what they will use your data for.
If the features of the purchased travel require it, for example, because you also purchased other services along with your train ticket offered by one of our partners, we will also share your personal data with that partner (for example, the requested hotel, car transport or the travel agent you used).
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we no longer need your data for other processing stated in these privacy conditions, we will keep the data for twelve months, calculated from the date of purchase.
Because rail season tickets are always by name, SNCB/NMBS collects and processes the following personal data:
- Last name, first name and address
In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address). - Date of birth
To ensure that we sell you the correct rail season tickets and can distinguish you from other clients with the same name, we may also ask for your date of birth. - Data concerning the method of payment used
For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment. - Personnel number
When the rail season tickets are entirely or partially refunded by your employer, we will also process your personnel number.
What do we use your data for?
If you conclude a contract with us by, for example, purchasing a rail season ticket, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket to make the train travel possible but also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.
We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need to have your personal data for a processing that requires a longer storage period, we will store your personal data for eight years to be calculated from the end of the of the rail season tickets. This enables us to meet our tax obligations.
If you request a MOBIB card or use one as a train/rail company for tickets of SNCB/NMBS, SNCB/NMBS collects and processes the following personal data:
- Last name, first name and address
In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the product you have requested (postal address or email address). - Date of birth
In order to distinguish you from other clients with the same name, we may also ask for your date of birth. - Data concerning the method of payment used
For electronic purchases (online, via a machine or at the ticket window with a bank card) we will also process data concerning this method of payment. - National registration number
In order to make a MOBIB card for you, SNCB/NMBS will ask for your national registration number. This way, SNCB/NMBS can print your photo on the card and SNCB/NMBS can verify the submitted identity. - MOBIB card number
If you upload SNCB/NMBS tickets onto your MOBIB card, we will process the MOBIB card number. This is also the case when our train conductors check your ticket as based on your MOBIB card.
What do we use your data for?
When you request a MOBIB card from SNCB/NMBS, we will process your data in order to be able to carry out this contract. We then use your data to be able to provide you with the ticket, so that you can upload tickets on this card later, to make the train travel possible as based on tickets booked onto the card and also to be able to handle your questions, messages or requests and to be able to offer you the service you desire and provide after-sales service.
We also process your data in order to comply with the statutory obligations of SNCB/NMBS. This includes, of course, ensuring the safety in the trains and at the stations and also the transfer of your data to competent authorities in the context of threatening or pending legal procedures. These third parties act as "processors" when carrying out this and other processing of the personal data. For more information about this processing, we refer you to the applicable privacy policy of these third parties.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
Because the MOBIB card can be used as a ticket that is valid on the network of several Belgian public transport operators, personal data is exchanged between the operators concerned. This concerns personal data of the MOBIB card holder and information about the MOBIB card and the uploaded ticket. Thanks to this exchange, the operator concerned can manage the tickets, and carry out the after-sales, fraud management, technical management and client management. The statutory obligations concerning the protection of privacy are complied with during this exchange. During the exchange, the operators concerned act as processors of this data in their system, in accordance with their privacy policy. For additional information, we refer you to the current privacy policy available on the respective websites of these public transport operators.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we need your personal data for a processing that requires a longer storage period, we will store the personal data stated above for the duration of validity of the MOBIB card plus one year.
Because discount cards and specific travel permits (e.g. free carer, Priority Seating Card) are by name and their allocation is subject to a series of conditions, SNCB/NMBS processes the following data:
- Last name, first name and address
In principle, we process at least your last name and first name, as well as an address where we can contact you or where we can send you the authorization to use the discount or permit you have requested (postal address or email address). - Age or date of birth
To ensure that we sell you the correct discount and can distinguish you from other clients with the same name, we may also ask for your age or date of birth. - Specific personal characteristics
Discount cards and specific travel permits are linked to specific characteristics of the traveller. Depending on the type of discount card, we may ask for info concerning your profession (for example, member of the military or journalist), and your medical status (for example, physical disability or pregnancy).
Without this information, SNCB/NMBS cannot check whether you are eligible for the discount or permit.
In certain cases, we will ask for evidence of the characteristic that is linked to the discount or permit. If we request medical certificates we will always ask your consent before we process these.
What do we use your data for?
We process your personal data to evaluate if you are eligible for the requested discount or permit. Without this data, this would be impossible for us and the discount or permit cannot be granted.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need to have your personal data for a processing that requires a longer storage period, we will keep the personal data stated above for the duration of the transport contract to which a discount or permit is linked, extended with a period of thirteen months.
In order to check the validity of your ticket during train travel, we process the following personal data:
- Personal data stated on your rail season tickets.
- MOBIB card number
- Personal data stated on the discount card you use
- Personal data stated on your identity card
Our train conductors have the right to verify your identity as based on your valid identity document. At that moment, we will check the information on the identity card against the information found on your ticket. Here, we pay particular attention to the photo, your last name and first name, and address. If you travel with children who benefit from a discount based on their age, our train conductors have the right to check the childrens’ age by means of a valid identity document or any other official document that may attest to their age.
What do we use your data for?
We process your personal data in order to determine whether you are travelling with a valid ticket.
To whom may we provide your data?
For this purpose (checking your ticket), your data is not provided to third parties.
How long will we keep your data?
If we do not need to have your personal data for a processing that requires a longer storage period, the data acquired during the ticket check is deleted daily, unless an irregularity is established.
In order to handle your questions or feedback, we collect and process the following personal data:
- Last name and first name
In principle, we process your last name and first name at the very least. - Telephone number or address
So that we can respond to your question or notification, we also collect the address where we can contact you (postal address of email address) or your telephone number. - Data concerning the method of payment used
If you request compensation or reimbursement, we will also ask for information about the method of payment you would like to use for this.
- Other information
If the specific characteristics of your question or feedback require us to have additional personal data or you voluntarily supply us with it, we will use this data.
What do we use your data for?
We use your data to handle your question or feedback and, if applicable, to make the requested repayment. Without this data we cannot evaluate your question or feedback.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
If you have a question or feedback concerning international train travel in which other train operators are also involved, we will provide the latter with the personal data that the other train operator needs to be able to handle your question or feedback.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need to have your personal data for a processing that requires a longer storage period, we will store the personal data stated above for up to two years after the full settlement of your question or feedback.
If one of our employees on the train finds a lost object with personal data on it which enables us to identify the owner of the lost object, SNCB/NMBS shall process this data. In addition, SNCB/NMBS shall also process your personal data when you contact us requesting to receive information about a lost object or if you wish to pick this object up at SNCB/NMBS. SNCB/NMBS collects and processes the following personal data for this:
- Name, last name and address
- Date of birth
To be able to distinguish you from persons with the same last name and first name, we also process your date of birth. - Telephone number or email address
If we find this information on the lost object or if you submit this information to us along with your request, we may use it to inform you that we have found the lost object on the train. - Information concerning your bank account (IBAN number and BIC Code)
If the lost object concerns money, if we found it, and you wish to be reimbursed, we will process the details of your bank account so that we are able to carry out the payment.
- Other information
If the lost object shows specific characteristics or if you deliberately mentioned specific characteristics of the object in order to facilitate our search for this object, we will use this data.
What do we use your data for?
We use your information to handle your question, message or request and, if possible, to return the lost object to you. Without this information, we cannot fully process your request.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
If you have lost an object during an international train trip in which other train operators are also involved, we shall provide the latter with the personal data they need in order to search for your lost object and, if possible, get it to you.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need your personal data for a processing that requires a longer storage period, the data stated above will be stored for fifty days starting from the day on which we found the object or from the day on which you provided us with this data.
When you have indicated that you would like to receive commercial offers from us, we will use your personal data to provide you with our newsletters and advertising campaigns. SNCB/NMBS collects and processes the following personal data for all of these:
- Last name and first name
In principle, we process your last name and first name at the very least. - Telephone number or email address
We process this information in order to be able to deliver commercial offers and surveys which you have agreed to receive. - Age
In order to make offers to you that are relevant to you, we also use your age information. - Gender
We process your gender information to be able to address you correctly. - Order history
Based on the purchases you have made in the past or the item you have loaded into your shopping cart when purchasing tickets online, we may make personalised commercial offers to you. For this reason, we also store this data.
What do we use your data for?
Your personal data is used to provide you with commercial offers for our products and services.
We also use your data to adapt the content of our advertising campaigns and, in the future, even to adapt the content of our website according to your preferences and characteristics. We apply profiling to achieve this: based on the information that we have about you, we assign you to one of the marketing segments we use. This profiling has no other legal consequences or impact on you: only the advertising that you are shown or shall receive will be adapted to fit the segment you belong to.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need your personal data for a processing that requires a longer storage period, the data stated above will be stored by us until you let us know that you no longer want us to use your data for direct marketing.
To create a MySNCB/NMBS account, we need the following information:
- Last name, first name and address
- Email address
This is used to identify you and to distinguish you from other users. - Date of birth
This is used to identify you and to distinguish you from other users. - Gender
We process your gender information to be able to address you correctly.
Om een MyTrain account te kunnen aanmaken (voor aankoop en beheer van internationale treinreizen) hebben we de volgende gegevens nodig:
- Last name and first name
- Email addres
This is used to identify you and to distinguish you from other users. - Date of birth
This is used to identify you and to distinguish you from other users. - Country
This is used to adapt our international services to your location. - Gender
We process your gender information to be able to address you correctly.
What do we use your data for?
We use your information to create a MySNCB/NMBS or MyTrain account and to ensure that this account is unique.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need your personal data for a processing that requires a longer storage period, the data stated above will be stored by us until you delete your MySNCB/NMBS account.
If you have violated one of our transport conditions, we process the following information:
- Last name, first name and address
If you are a minor, we will also process the identity information of your parent(s) or guardian.
- Your identity document and the information on your identity document
This includes your nationality, the national registration number, your date of birth and your gender. - Camera images or photos
If there are camera images of your violation, we will also process these as evidence of your violation. - Precedents
If the storage period for this information has not expired, we will also process your personal data concerning a prior violation. - Your telephone number or email address
In order to contact you to follow up on the (payment of the) sanction for the violation, we will use your telephone number or email address.
What do we use your data for?
We use your information to establish the violation and to further process this, including the fulfilment of the payment of the sanction related to the violation, including all correspondence we must carry out in this respect.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need your personal data for a processing that requires a longer storage period, for example, to enable us to receive full payment of the outstanding sums to be received or because we need to complete the processing of a legal dispute that has arisen as a result of the violation, the information stated above will generally be stored for five years and 10 years if the violation concerns travelling without a valid ticket, to be calculated from the date of the incident.
When you, as a physical person, are a supplier or professional client of ours, or you act as contact person for a supplier or professional client of ours, we collect and process the following information:
- Last name, first name and address
In principle, we process your last name and first name at the very least.
- Telephone number or email address
We process this information in order to be able to contact you. - Gender
We process your gender information to be able to address you correctly. - Results of, and personal data included in a credit worthiness evaluation
To accept you as a supplier, we are sometimes required to carry out a credit worthiness evaluation.
What do we use your data for?
We use your information in order to be able to carry out the contract we have with you or the supplier or professional client for whom you act and to keep you or the latter informed on important information, including commercial information that is necessary for carrying out the contract.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
If we do not need to have your personal data for a processing that requires a longer storage period, we will keep your personal data throughout the duration of the contract with you, as a professional client or supplier or with the supplier or professional client for whom you act as contact person plus one year.
If you were the victim of an accident on a location owned or managed by SNCB/NMBS, we process the following information:
- Last name, first name and address
If you are a minor, we will also process the identity information of your parent(s) or guardian.
- Your identity document and the information on your identity document
This includes your nationality, the national registration number, your date of birth and your gender. - Camera images or photos
If there are camera images of your accident, these will also be processed as evidence of the accident. - Telephone number or email address
In order to contact you to follow up on the (payment of the) sanction for the violation, we will use your telephone number or email address. - The specific characteristics of your accident and the damage
In order to be able to follow up on your damage, for example, with our insurer, we will also process the specific characteristics of your accident or damage you have suffered, including the physical damage. If we process your medical information, we will ask for your explicit consent to do so unless high urgency, e.g. providing first aid, should prevent us from doing so in order to guarantee your vital interests.
What do we use your data for?
We use your information to make a detailed assessment of the accident and to make following up possible and to reimburse you if you are entitled to reimbursement for damage suffered, possibly with the intervention of our insurer.
We also process your data in order to constantly improve our services, to carry out market studies, to prevent fraud and to develop new products. It is possible that your data is processed in the context of internal audit activities. These activities correlate to the legitimate interest of SNCB/NMBS. In this, we make sure to always give as much attention to your interests as we do to those of SNCB/NMBS.
To whom may we provide your data?
We may provide your personal data to other natural persons or entities that act as subcontractors for SNCB/NMBS. In this case, they only have access to the data they need for their task.
We shall also provide your data to our insurer.
In addition, we are sometimes required to provide your data to the competent authorities.
In principle, we only provide your personal data to natural persons or entities that are located in a country that offers a level of protection for your personal data that is at least equal to what you have in Belgium. If we are to deviate from this, we will inform you of this and ask for your consent.
How long will we keep your data?
We will keep your information until the file has been completely settled plus one year. If the handling of your file cannot be completed on short notice, we will keep your information for a period of thirty years and six months if you have suffered damage to your property and 20 years and six months if you have suffered physical damage. With damage to objects combined with physical damage, a longer storage period applies.
When you visit our websites and use our apps, you provide certain personal data to SNCB/NMBS, even by only opening these websites.
A) Area of application
Read this section of our Privacy Statement to learn more about how we collect and process your personal data on our websites (particularly www.sncb.be, www.nmbs.be, www.belgianrail.be, www.sncb-interntional.com, www.nmbs-internationaal.com, www.b-europe.com and hereinafter referred to as the "Website") and, as the case may be, by downloading the apps (mobile applications under the name ‘SNCB/NMBS’ on smartphones and tablets via app stores, hereinafter referred to as the ‘Apps’).
By purchasing tickets for domestic and/or cross-border trips by train and related products, by reserving services via the Website and the Apps, by using the Website and/or Apps and by sharing personal data, you confirm that you have read through the stated conditions below under which SNCB/NMBS collects, processes and shares personal data.
B) Collection, processing and purposes of personal data on the Website and the Apps
With each visit to the Website or use of the Apps, various kinds of personal data is shared and log files about you are collected, particularly your IP address, the website from which you were linked to the Website, the date and duration of your visit, your browser, your operating system, your surfing behaviour and especially the pages you visit.
We only use this information for statistical purposes and to analyse and optimise the use and functioning of the Website and the Apps. For this, we utilise the services of third parties with whom we share this information for this purpose.
When your visit is not limited to a general request for information and, more specifically, when you purchase a ticket or related product via the Website and/or Apps
i. when you purchase a ticket or related product,
ii. when you pay a fixed online indemnity concerning an irregularity,
iii. reserve a service or assistance,
iv. contact SNCB/NMBS,
v. register for a MySNCB/NMBS account,
vi. participate in a competition,
vii. agree to receive our newsletter and/or other information about our products and services,
viii. with your consent to activate certain services upon downloading the Apps, such as localisation, use of contacts and/or calendar,
other information will also be requested and/or collected, including, as the case may be, your gender, name, email address, your current job, password, order history (if applicable), telephone number, address information and language preference.
We use such information
i. to supply a ticket, a related product or service and, if necessary, to further inform you about it, to deliver the purchased products or services to you and to follow-up, and to guarantee you a quality after-sale service;
ii. to be able to handle and, if necessary, answer your question or respond to your communication or request;
iii. to enable you to pay fixed indemnities in relation to an irregularity;
iv. to enable you to benefit fully from all the advantages of having your MySNCB/NMBS account, including My Train Info rail season tickets (sms text message upon delay of one of your preferred trains if you possess a valid train ticket), simplifying certain actions (online assistance for persons with limited mobility, the purchase of validations for your train ticket or MOBIB card, etc., the payment of a fixed indemnity for an irregularity), access to your order history and your data in order to manage it, as well as for personalised marketing purposes;
v. to allow you to participate in a competition and to keep you informed on the outcome and results of the competition;
vi. to send you newsletters;
vii. to improve the services we offer you, and adapt these to fit your needs, more specifically tailored to you, as based on the created client profiles, and offer adapted services that may interest you;
viii. to keep you informed, allow you to participate in market studies and to carry out satisfaction surveys about our products and services;
ix. to allow you to benefit from the additional services on the Apps, such as mapping out the nearest station, saving a travel route in your calendar or informing others of your travel route;
and this may be passed onto third parties or subcontractors for this purpose.
C) Specific processing upon purchase of tickets
To prevent possible fraud with the purchase of tickets, SNCB/NMBS verifies the information you share with each transaction. SNCB/NMBS shall process that information and, based on that processing, will decide whether to refuse or suspend the purchase of tickets. SNCB/NMBS is not required to inform you in advance if it decides to refuse or suspend your purchase. SNCB/NMBS may decide to refuse or suspend whenever it suspects that a contractual obligation is not complied with and/or fraud or deceit is involved. This suspicion may, for example, be based on doubts about the identity of the client or traveller, the fact that the quantity of the products ordered is unusual or when there have been problems in the past with the payments made by the client or traveller concerned.
Within the context of online ticket orders, SNCB/NMBS uses the “Fraud Expert” tool, linked to a remote processing by a subcontractor of SNCB/NMBS. For this, your personal data shall be provided to and processed by Ingenico e-Commerce Solutions SPRL (hereinafter: “Ingenico”). Ingenico processes your data to prevent and combat fraud (which includes, among others: determining a level of risk associated with the transaction, detection and management of certain warnings arising from this, informing the sales point so they it can decide as based on this information, manually verifying transactions that have a certain risk level, compiling a model as based on scores). Your personal data is provided to the relevant departments of Ingenico, to SNCB/NMBS and to third parties who act as subcontractors for Ingenico or SNCB/NMBS to make the payment process and the offered services possible.
Fraud can lead to our personal data being registered in a specific file that Ingenico maintains concerning fraud. The aim of this file is, namely, to store the data concerning fraud in the past to estimate the risk criteria of transactions and to determine the scoring model that is linked to it. When your data is included in that file, it could mean that you will be considered as a higher fraud risk and your order may be refused when you place your next order with SNCB/NMBS or with another seller that is active in the same sector as SNCB/NMBS and also uses the services of Ingenico.
In accordance with the statutory privacy requirements, you have the right to access, inspect and improve the data that Ingenico keeps about you in the framework of the “Fraud Expert” tool, while taking into account the statutory restrictions, the right to oppose the processing of data that is irrelevant or excessive. You can exercise these rights by submitting a written request to: Ingenico e-Commerce Solutions BVBA- Legal Service “protection of privacy”, Woluwelaan 102, B-1200 Brussels (Belgium) or by sending an electronic request via email to: privacy@ecom.ingenico.com. In order to be valid, this request must always be accompanied by a signed copy of a valid identity document.
D) Cookies
The Website uses so-called "cookies", small information files that are temporarily or permanently stored by the server of a website via the browser on your computer or device and that simplify, complete and personalise the use of the website.
In your browser, you can turn off the storage of cookies or delete stored cookies, but this may lead to diminished functionality, delays or the disablement of certain parts of the Website.
For more information about cookies and how you can delete them depending on the type of browser you use, we would like to refer you to the website www.allaboutcookies.org.
We use the following cookies:
(i) Strictly necessary cookies
These are cookies that enable you to view the Website, use the functions on the Website (such as your shopping cart with orders or using the live chat functionality) and to gain access to the secured or registered sections. If the use of these cookies is turned off, you will no longer be able to use certain sections of the Website properly.
(ii) Functionality cookies
These are cookies that enable us to keep track of your choices and preferences (such as language choice and such), to enhance the ease of use of the Website and show you relevant information.
(iii) Performance-enhancing cookies
These are cookies whose aim is to collect information about how you use the Website, such as information concerning the pages visited or the number of displayed error messages, for the purpose of analysing and optimising the use of the Website.
Performance-enhancing cookies are also known as analytical cookies. It is possible that the information that is acquired from the use of these cookies is collected by a third party. These third parties act as subcontractors for SNCB/NMBS to provide information to SNCB/NMBS to improve the Website and its services. Below, please find more information about these third parties and how they use the information that is collected via the cookies.
Google Analytics
The Website uses Google Analytics. This web analysis service is offered by Google Inc. (“Google”), and uses analytical cookies. The information that is collected via the cookies about the use of the website by a visitor, together with the visitor's IP address, is sent to Google and stored by Google.
Google may use this information for the following:
i. Supply reports concerning the advertisement activity to advertisers and websites that host those advertisements and ensure that those website publishers are paid;
ii. It helps website and app owners who use Google Analytics to understand how visitors interact with their sites or apps;
iii. Detect and combat fraud and other security risks to protect users and partners;
iv. Comply with statutory obligations;
v. Improve its products.
For all these activities with the exception of point 2) Google acts as the processor, and the processing of the information that they collect about the use of the Website is Google's own responsibility.
How can you manage which information is sent to Google?
Here are a number of ways you can manage which information is shared by your browser when you visit the Website:
- If you do not want Google Analytics to be used in your browser, you can install the browser-add-on voor Google Analytics. More information about Google Analytics and privacy.
- If you are logged on to your Google account, you can - depending on your account settings - view and edit certain information that Google collects from the sites you have visited and apps you have used.
- With hte incognito mode in Chrome, you can surf the Internet without the web pages and files being stored in your browser history. Cookies are deleted after you have closed all incognito windows and tabs. Your bookmarks and settings are stored until you delete them.
- with Advertisement settings you can manage which Google advertisements you will be shown on the Internet. You can find out how advertisements are selected for you, you can sign out from Personalisation of advertisements and block specific advertisers. More information about advertisements.
Firebase Analytics
In the Apps, SNCB/NMBS uses Firebase Analytics, an analytical tool developed by Google. This tools collects statistical information about how users use the app, for example, which functions they use, which information they submit.
The tool works on the basis of the advertisement ID that is linked to the Android or iOS operating system on your smartphone or tablet. This ID is not linked to the telephone number of the smartphone nor the physical user of it. In other words, based on that advertisement ID, it is impossible for SNCB/NMBS to identify you.
In the first phase, the collected information shall only be used to improve the app.
Would you prefer that Firebase not to keep track of how you use the App?
Then you must do the following:
- In the settings of an iPhone, you go to ‘Privacy’ and then to ‘Advertisement’ (at the bottom). Click on 'Reset Advertisement ID' and slide the 'Limit advertisement tracking' to 'On'.
- For an android phone, you go to 'Settings', then 'Google' and 'Advertisements'. Press 'Reset Advertisement ID'. You then make sure that 'Sign off for personalisation of advertisements' is selected.
Social networks
SNCB/NMBS can store IT applications of third parties on the Website or the Apps that give you the option of sharing the content of the Website with others, let them know that you have consulted the website or to share your opinion on certain content of the Website or Apps with others. This is particularly the case with such buttons as 'Share' and 'Like' of social network sites such as 'Facebook', 'Twitter', 'LinkedIn' etc. Social networks that offer such app buttons may place cookies and identify you based on this button. A social network can possibly also place cookies when you visit the SNCB/NMBS page on the social network. SNCB/NMBS invites you to consult the privacy policy of these social networks to get acquainted with the purposes (including advertising purposes) for which the browse information collected by them in this context may be used.
(iv) Advertising cookies
These are cookies we use to offer you personalised and relevant advertisements, to determine how many times a certain advertisement is displayed, to calculate the effectiveness of a certain advertising campaign, to keep track of past visits and to share the collected information with the third parties involved, such as the advertisers. These are used on the Website and placed on your device by third parties such as the companies that are linked to SNCB/NMBS and the advertisers that are part of the publicity network of the Website.
SNCB/NMBS uses the following publicity cookies:
The Website uses Google Remarketing. This tool places cookies on your device in order to show you personalised advertisements. These advertisements take your earlier visits to the Website into account. In point (iii) above, under Google Analytics, you will find more information about what Google does with the collected information. Additional information can be found via the following link.
The Google Remarketing tool uses Google's Display Advertising network.
You can always turn off these cookies in the settings of your browser, via the following Google link or the link offered by www.youronlinechoice.com.
The Website also uses Facebook Pixel. This is an image not visible to you that is included on the pages of our website and is stored on the servers of Facebook. Every time you open a page on our site where the Facebook pixel is included, this pixel is downloaded onto your device from that Facebook server. In this, the following information is provided to Facebook: your IP address and the specific characteristics of your device (for example: type, operating system, specific software and hardware).
While we cannot link this information to you personally, Facebook can if you also have a profile on Facebook. In this, Facebook acts as processor for the processing. SNCB/NMBS invites you to consult the privacy policy of Facebook to get acquainted with the purposes (including advertising purposes) for which the browse information collected by them in this context can be used.
From Facebook we only receive statistical information and therefore not your personal data.
If you wish not to receive certain advertisements, you can adapt your advertisement preferences in your personalised Facebook page. Via the settings of your mobile device you can also indicate that the machine information is not to be shared with third parties.
Lastly, the Website uses Criteo retargeting cookies that are used to display Criteo personalised advertisements via the advertisers network (based on your earlier visits to the website), regardless of which device you use for your internet connection (computer, tablet or smartphone). By bundling your searches and purchases on various websites, the Criteo retargeting cookies can recognise and identify the same user - even though this person remains anonymous - and this regardless of the browser used. Just like with all other cookies, you can sign out for the Criteo cookies according to the instructions on www.criteo.com/deactivate-criteo-banners/. In this case, signing out applies to all devices that you use with an Internet connection.