Privacystatement API
Schiphol Nederland B.V. (“Schiphol”) is committed to protecting your personal data. In this privacy statement, Schiphol explains how Schiphol collects, uses and protects your personal data within the context of booking a timeslot through the Timeslot service.
What type of personal data do we process and why do we process?
| Processing activity | Personal data | Purpose |
|---|---|---|
| Registration and Logging into the API platform | Emailaddress Username First and last name Intent of use Password | Providing access to the API platform |
| Audittrail | User activity Username Access requests | Securing Schiphol's API platform from (possible) cyber threats |
| Sending e-mail notifications regarding platform status and maintaince updates | Emailaddress | Inform users on technical updates about their APIs |
Why do we process your personal data?
| Processing activity | Legal basis |
|---|---|
| Registration and Logging into the API-platform | Legitimate interest (Article 6(1)(f) GDPR). Upon request, you can ask us for information about the balancing of interest test we have carried out for this purpose. |
| Audittrail | Legitimate interest (Article 6(1)(f) GDPR). Upon request, you can ask us for information about the balancing of interest test we have carried out for this purpose. |
| Sending e-mail notifications regarding platform status and maintaince updates | Legitimate interest (Article 6(1)(f) GDPR). Upon request, you can ask us for information about the balancing of interest test we have carried out for this purpose. |
How long do we retain your personal data?
| Processing activity | Personal data | Retention period |
|---|---|---|
| Registration and Logging into the API-platform | Emailaddress Username First and last name Intent of use Password | For as long as your account is active. |
| Audittrail | User activity Username Access requests | 7 days. |
| Sending e-mail notifications regarding platform status and maintaince updates | Emailaddress | For as long as your account is active. |
From who do we receive your personal data?
If we do not obtain your data directly from you, we receive it through our authentication system.
Who do we share your data with?
The softwareprovider of The API Platform has access to your personal data. A data processing agreement has been concluded with this party.
We send you regular email notifications about the API platform status and maintaince updates through Outlook. A data processing agreement has been concluded with Microsoft.
Do we process your personal data outside of the European Economic Area (EEA)?
Our softwareprovider for the API platform and Microsoft do not process your personal data outside of the EEA.
What are your rights?
Access to, change and deletion of your personal data
You have the right to know what personal data on you are processed by Schiphol. If we have not obtained the data directly from you, you also have the right to know from what sources they derive and to receive a copy thereof.
If your personal data prove to be incorrect, you can ask us to change your data. You can also request us to delete personal data and to discontinue their use. In some cases, we may refuse your request.
Restriction of processing and right to transfer your data
If in your opinion we are not processing your data in a correct manner, you can request a restriction of your processing.
You can also ask us to transfer your electronic personal data to you or to another party in a readable and usable form.
Lodging an objection
Besides requesting deletion or restriction of the processing, you can also object to the processing of personal data by Schiphol. You can object to the use of your personal data owing to your specific situation. If you lodge an objection, we will in principle temporarily discontinue or restrict the processing of your personal data. If your objection is accepted, we will definitively discontinue or restrict the processing.
Your request and our response
If you have a question or a request or if you wish to lodge an objection, send an email to our Data Protection Officer via dpo@schiphol.nl. We will do our best to respond to your request in time.
If any part of your request is unclear to us, we may ask you to specify your request and/or to supplement it, to enable us to provide you with the best possible service.
Whose privacy statement is this and how can you reach us?
Who is the data controller?
This Privacy Statement is issued by Schiphol Nederland B.V.
Our contact details
Schiphol Nederland B.V.
Postbus 7501
1118 ZG Schiphol
How to contact our Data Protection Officer
Schiphol has a Data Protection Officer for all your questions concerning privacy. The Data Protection Officer also provides advice to us and monitors compliance with the privacy laws and regulations by Schiphol.
Do you have any questions or requests concerning your data? If so, you can send an email to the Data Protection Officer via dpo@schiphol.nl or send a letter to our postal address, for the attention of the Data Protection Officer. Together with your request, please inform us of your name, address, email address, and telephone number.
How to lodge a complaint with the Dutch Data Protection Authority
If you are dissatisfied with the way in which we treat your privacy or handle your request or objection, you can file a complaint with the Dutch Data Protection Authority.
Where can you find the latest version of this Privacy Statement?
If necessary, we will update this Privacy Statement. This may be due to changes in policies, changes in the data processing operations or changes in the systems we use to process data. You can find the most recent version of the Privacy Statement on our website. We advise you to check this regularly.
This version of the privacy statement was issued in September 2026.