Page%1%of%8%
%
! ! ! ! ! ! ! March!2023!
!
PRIVACY(STATEMENT(
%
Introduction!
Mobility%Concept%processes%personal%data%in%accordance%with%the%General%Data%
Protection%Regulation%(hereafter%the%'GDPR').%%
%
Mobility%Concept%manages%mobility%services%and/or%mobility%policies%via%this%website%
and/or%a%mobile%application%and%processes%personal%data%on%behalf%of%your%employer.%%
%
Identity!
This%privacy%statement%is%operated%by%Mobility%Concept%B.V.,%registered%with%the%
Netherlands%Chamber%of%Commerce%under%number%52210812,%via%the%website%of%
https://www.mobilityconcept.nl%and%the%Mobility%Concept%apps%in%the%Appstore%and%
Playstore.%
%
Address:%
Kinderhuissingel%1-E%
2013%AS%Haarlem,%NL%%
%
Telephone%number:%
023%820%0985%%
%
Email%address:%
servicedesk@mobilityconcept.nl%
%
The!personal!data!collected!by!us!
If%you%have%an%account%on%this%website,%we%process%the%data%which%has%been%submitted%to%
us%by%you,%your%employer%and%a%number%of%data%providers.%
%
The%data%we%store%are%dependent%on%the%service%you%use%and%the%mobility%policy%which%is%
applicable%to%you.%
%
Planning%your%journey%
- Departure%and%arrival%location,%departure%and%arrival%time,%and%the%route%with%its%
various%modes%of%transport.%
- If%you%grant%permission,%the%app%may%use%your%current%location.%
%
Submitting%expenses%claims%
- Name,%address,%city,%work%location%(if%applicable),%gender,%Employee%number,%
bank%account%number%and%bank%BIC%number%(only%in%case%of%weekly%payments),%
email%address,%telephone%number(s),%and%the%name%of%the%authorising%manager%
(only%in%case%of%authorisation).%
- Journeys%and/or%travel%expenses%for%which%you%have%submitted%claims.%
%
Application%for%a%mobility%card%
Page%2%of%8%
%
- Your%name%(first%name,%infix,%surname%and%initials),%delivery%address%(city),%
country,%date%of%birth,%gender,%Employee%number,%email%address,%and%telephone%
number(s)%if%Mobility%Concept%is%the%one%applying%for%your%mobility%card.%
- Data%of%the%mobility%card%which%you%use%or%which%has%been%provided%to%you,%such%
as%the%card%number%and%any%personalisation%on%the%card.%
%
Applying/reserving%mobility%services%and/or%products%
- Data%necessary%to%applying%for%or%reserving%mobility%services.%These%vary%per%
mobility%service%and%could%include:%email%address,%Employee%number,%departure%
and%arrival%location,%departure%and%arrival%date%and%time,%licence%plate%number%
and%country%(parking%app),%cost%centre,%manager,%and%comments/delivery%
information.%
%
Providing%insight%into%use%and%costs,%justifying%use%of%the%mobility%card,%and/or%
calculating%the%costs%of%using%the%mobility%card%
- Data%about%your%use%of%the%mobility%card%provided%to%you,%which%Mobility%Concept%
receives%from%the%company%issuing%the%mobility%card.%These%data%include%travel%
movements%and/or%travel%costs%of%the%carrier%and%other%mobility%providers%of%the%
mobility%services%you%are%purchasing%using%the%mobility%card.%These%data%may%
include%departure%and%arrival%time,%departure%and%arrival%locations%(such%as%stops%
and%stations),%route,%class%and%costs%of%a%transaction.%Data%on%use%are%not%limited%
to%travel%and%usage%transactions%but%may%also%include%service%and%sales%
transactions.%
- The%name%of%your%authorising%manager%if%your%use%of%the%mobility%card%is%subject%
to%authorisation.%
%
Providing%insight%into%use%and%costs,%justifying%use%of%the%mobility%services,%and/or%
settling%costs%of%using%mobility%services%
- Data%about%mobility%movements%and/or%mobility%expenses%such%as%cost%of%
mobility%services%such%as%car%share,%car%hire,%bicycle%share,%taxi,%and%parking.%This%
includes%costs%for%fuel,%parking,%tolls,%and%ferries.%
- Registration%for%the%use%of%a%car%share%can%be%done%by%means%of%an%app%or%a%car%
tracking%system%provided%by%a%third%party.%
- These%data%vary%per%mobility%service%and%could%include:%email%address,%Employee%
number,%departure%and%arrival%location,%departure%and%arrival%date%and%time,%
registration%number%and%country%(parking%app),%cost%centre,%manager,%and%
comments/delivery%information.%
%
Management%of%a%mobility%policy%
- Data%for%managing%the%mobility%plan%that%is%applicable%to%you,%such%as%the%policy%
applicable%to%you,%the%distance%between%your%private%address%and%your%
workplace,%your%private%address,%work%location,%and%part-time%factor%in%case%
these%are%used%to%manage%your%plan.%
%
Management%of%lease%car%expenses%
- Registration%for%the%use%of%a%lease%car%can%be%done%by%means%of%an%app%or%car%
journey%registration%system%provided%by%a%third%party.%Data%stored%may%include%
departure%and%arrival%location,%departure%and%arrival%time,%route,%duration%of%
journey,%date,%and%distance%travelled.%
Page%3%of%8%
%
- Data%on%the%use%of%fuel%cards%including%fuel,%parking,%toll,%and%ferry%costs%and%other%
costs%which%are%ascertained%by%processing%the%invoicing%details%of%providers%of%
fuel%cards.%
%
Use%of%the%online%environment%and%app%of%Mobility%Concept%
- Data%which%you%use%to%access%the%Mobility%Concept%platform,%such%as%your%user%
name%and%password.%Mobility%Concept%will%store%your%password%in%an%encrypted%
form.%
- All%personal%data%which%you%enter%into%Mobility%Concept,%such%as%the%data%listed%
for%the%different%services.%
- Finally,%we%store%information%(including%the%IP%address%used)%for%the%purpose%of%
compiling%our%usage%statistics%as%well%as%to%secure%our%website.%
%
Reports%and%invoicing%
- Data%about%the%use%of%the%services,%as%stated%for%the%various%services.%
%
Service%provision%
- Data%which%you%provide%to%Mobility%Concept%using%telephone,%email,%or%post%as%a%
result%of%a%query%or%complaint%which%has%been%recorded%using%a%ticket.%
%
Purpose!and!lawful!basis!for!using!the!personal!data!
The%lawful%basis%for%processing%personal%data%is%determined%by%your%employer.%The%
following%lawful%bases%are%possible:%
- The%lawful%basis%is%the%interest%you%and%your%employer%have%in%granting,%allowing%
use%of,%and%use%of%Mobility%Concept%by%you%in%accordance%with%your%employer's%
policy%(legitimate%purpose).%
- Your%employer%has%selected%–%to%the%extent%possible%in%law%–%the%lawful%basis%of%
permission.%You%should%register%with%Mobility%Concept%yourself.%When%requesting%
and%reserving%mobility%services%and%products,%you%will%be%asked%explicitly%for%
your%permission.%
- Your%employer%has%selected%the%lawful%basis%of%executing%a%contract,%in%particular%
the%employment%contract.%
%
Mobility%Concept%processes%personal%data%as%part%of%executing%a%contract%concluded%with%
your%employer.%On%the%basis%of%this%contract,%personal%data%are%processed%for%the%
following%services,%which%are%applicable%to%you:%
%
Planning%your%journey%
- Being%able%to%plan%a%journey%by%different%means%of%transport%and%understanding%
travel%times%and%duration.%
%
Submitting%expense%claims%
- Submitting%and%determining%expense%claims.%
- Providing%a%payment%file%for%payment%of%the%expense%claims.%
- Providing%a%salary%file%for%payment%of%the%expense%claims.%
%
Page%4%of%8%
%
Application%for%a%mobility%card%
- Applying%for%and%organising%the%issue%of%the%mobility%card,%including%
personalisation%of%a%card%and%implementing%the%procedure,%such%as%sending%out%
the%card.%
- Carrying%out%all%procedures%in%connection%with%use%of%the%card,%such%as%issuing%a%
new%card%when%the%existing%card%is%damaged,%lost,%or%stolen.%
%
Applying/reserving%mobility%services%and/or%products%
- Applying/reserving%mobility%services%and/or%products%and%executing%the%
procedures,%such%as%sending%an%email%to%activate%the%service.%
- Executing%all%procedures%in%connection%with%the%use%of%the%mobility%services.%
%
Providing%insight%into%use%and%costs,%justifying%use%of%the%mobility%card,%and/or%settling%
the%costs%of%using%the%mobility%card%
- Providing%insight%into%the%use%of%the%mobility%card%and%travel%movements.%
- Justifying%use%of%the%mobility%card.%
- Enabling%a%manager%to%authorise%or%de-authorise%use%of%the%mobility%card.%
- Compensating%you%or%deducting%expenses%in%connection%with%use%of%the%mobility%
card%based%on%the%applicable%mobility%plan.%
- Providing%a%salary%file%for%deducting%costs%in%case%of%private%use%of%the%mobility%
card.%
%
Providing%insight%into%use%and%costs,%justifying%use%of%the%mobility%services,%and/or%
settling%the%costs%of%using%mobility%services%
- Providing%insight%into%the%use%of%the%mobility%services%and%travel%movements.%
- Justifying%use%of%the%mobility%services.%
- Enabling%a%manager%to%authorise%or%de-authorise%or%inform%them%about%the%use%of%
the%mobility%services.%
- Compensating%you%or%deducting%expenses%in%connection%with%use%of%the%mobility%
services%based%on%the%applicable%mobility%plan.%
- Providing%a%salary%file%for%deducting%costs%in%case%of%e.g.%private%use%of%the%
mobility%services.%
%
Management%of%a%mobility%policy%
- Managing%the%administration%with%regard%to%your%travel%and%managing%
administration%for%your%employer,%including%for%financial%and%tax%obligations.%
%
Management%of%lease%car%expenses%
- Transferring%the%sums%charged%to%you%to%your%employer%for%the%selection%and%use%
of%a%lease%car.%
%
Reports%and%invoicing%
- Supplying%(detailed)%reports,%insights,%and%advice%to%your%employer%about%your%
travel.%
- (Aggregated)%invoicing%for%the%use%of%the%mobility%card%and/or%transactions%in%
relation%to%your%mobility%without%mobility%card%to%your%employer.%
- Carrying%out%research%into%the%(travel)%behaviour%of%employees%who%use%a%
mobility%card,%on%behalf%of%your%employer.%
Page%5%of%8%
%
- Processing%personal%data%into%market%information,%management%information,%
product%development,%and%statistical%information.%
- Deriving%information%such%as%mobility%frequency%and%frequently%used%routes%from%
the%use%of%the%mobility%cards%or%from%your%mobility%in%order%to%provide%you%with%
appropriate%information%about%e.g.%road%works%or%delays.%
%
Use%of%the%online%environment%and%app%of%Mobility%Concept%
- Finally,%we%store%information%(including%the%IP%address%used)%for%the%purpose%of%
compiling%our%usage%statistics%as%well%as%to%secure%our%website.%
%
Service%provision%
- Communicating%with%and%informing%you%and%your%employer%by%means%of%
telephone,%email,%or%post.%
- Providing%a%service,%e.g.%when%you%contact%the%Service%Desk.%
- Providing%a%service%or%processing%complaints.%
%
We%guarantee%that%we%will%process%these%data%in%accordance%with%the%agreements%
concluded%with%your%employer.%This%means%that%when%you%mark%certain%mobility%data%as%
private,%we%will%only%disclose%overall%figures%to%your%employer.%
%
Responsibility!
Your%employer%is%the%data%controller,%i.e.%the%one%responsible%for%processing%the%data.%
Mobility%Concept%is%the%data%processor%in%as%far%as%processing%the%data%is%concerned.%In%
some%cases%third%parties%to%whom%we%disclose%the%personal%data%are%the%data%controllers.%
This%could%be%a%taxi%company,%the%operator%of%a%parking%app,%or%a%car%hire%company.%
%
To!whom!does!Mobility!Concept!disclose!personal!data?!
Mobility%Concept%can%give%you%access%to%the%personal%data%relating%to%you.%We%can%do%this%
via%email,%via%the%Mobility%Concept%Service,%or%via%the%Service%Desk.%Mobility%Concept%
discloses%your%personal%data%to%your%employer%in%several%ways.%This%can%include%(but%is%
not%limited%to)%processing%in%an%invoice,%presentation%in%overviews%or%reports%and%
disclosure%by%means%of%an%automated%electronic%link.%Mobility%Concept%may%disclose%all%
personal%data%to%your%employer%as%described%above%and%recorded%on%the%card%or%in%
Mobility%Concept,%regardless%of%the%format%or%way%in%which%this%is%done%(in%case%of%
mobility%data%which%you%have%marked%as%private,%only%the%overall%figures%will%be%
disclosed%to%your%employer).%We%would%like%to%alert%you%to%the%fact%that%use%of%a%mobility%
card%and/or%Mobility%Concept%service%will%result%in%a%file%of%personal%data%on%the%basis%of%
which%your%employer%may%take%decisions%about%the%use%of%the%mobility%card.%
%
Mobility%Concept%will%disclose%your%personal%data%to%the%mobility%card%provider%in%order%
for%him%to%produce%the%card,%with%the%relevant%card%being%issued%by%Mobility%Concept%on%
the%basis%of%a%contract%between%your%employer%and%the%card%provider.%
%
Mobility%Concept%will%disclose%your%personal%data%to%providers%of%mobility%services%and%
products%for%the%purpose%of%requesting,%reserving,%or%delivering%those%mobility%services%
on%the%basis%of%a%contract%concluded%between%you%and%the%providers%of%mobility%services.%
%
Page%6%of%8%
%
Mobility%Concept%may%disclose%your%personal%data%to%sub-processors%as%defined%by%law.%
These%are%partners%who%carry%out%activities%on%behalf%of%Mobility%Concept.%We%will%
safeguard%your%privacy%by%making%strict%agreements%with%such%sub-processors%about%
confidentiality%and%security%procedures,%which%are%recorded%in%contracts.%Mobility%
Concept%has%concluded%such%contracts%or%may%conclude%such%contracts%with%parties%such%
as%carriers,%IT%service%providers,%call%centres,%mobility%card%providers,%and%providers%of%
mobility%services%if%and%in%as%much%as%they%may%not%be%regarded%as%data%controllers.%
When%Mobility%Concept%works%in%partnerships%as%the%data%processor,%we%will%guarantee%
that%the%personal%data%are%processed%in%accordance%with%the%law%in%a%proper%and%careful%
way.%Mobility%Concept%has%no%choice%but%to%disclose%your%personal%data%if%we%are%legally%
bound%to%do%so%for%whatever%reason.%
%
Security!and!retention!period!
Mobility%Concept%has%taken%physical,%technical,%and%organisational%measures%to%protect%
your%personal%data.%Your%employer%will%determine%the%retention%period%of%the%personal%
data%collected.%In%general,%a%retention%period%of%seven%years%is%observed.%This%is%based%on%
your%employer's%legal%obligation%to%store%all%tax-related%data%for%a%period%of%seven%years.%
Until%the%end%of%that%period,%your%employer%may%request%access%to%the%mobility%data%held%
by%Mobility%Concept.%At%the%end%of%the%retention%period%determined%by%your%employer,%all%
your%personal%data%will%be%erased,%unless%the%data%have%to%be%stored%for%a%longer%period%
in%accordance%with%legal%obligations.%Erasure%implies%destruction%or%processing%in%such%a%
way%that%it%is%no%longer%possible%to%identify%you.%
In%principle%we%only%process%personal%data%within%the%EU/EEA.%However,%parties%we%
engage%may%process%the%personal%data%outside%the%EU/EEA.%If%such%parties%are%sub-
processors,%we%ensure%that%the%personal%data%are%processed%on%the%basis%of%a%data%
processor's%agreement%using%EU%model%provisions.%
%
Cookies%
We%use%cookies%on%our%website,%which%your%browser%will%store%on%your%computer.%
Cookies%are%used%to%simplify%the%process%of%logging%in.%They%store%information%(such%as%
your%user%ID)%in%order%to%facilitate%a%subsequent%visit%to%our%website.%You%can%configure%
your%browser%in%such%a%way%that%you%will%not%receive%cookies%during%a%visit%to%our%
website.%However,%this%may%mean%that%you%may%not%be%able%to%use%all%the%features%of%our%
website%or%that%you%will%not%have%access%to%all%sections%of%our%website.%
%
Currently%we%use%the%following%cookies.%
%
Cookie!
Technical!name!of!cookie!
Description!
Session%cookie%
ASP.NET_SessionId%
This%is%a%functional%cookie%used%by%
our%service%to%store%various%data%
about%the%logged-in%user.%
Authentication%
cookie%
.ASPXAUTH%
This%is%a%functional%cookie%used%by%
our%service%to%see%who%is%logged%in.%
Request%
verification%
token%
__RequestVerificationToken_%
This%is%a%functional%cookie%used%by%
our%service%to%check%that%certain%
actions%are%carried%out%consciously%
Page%7%of%8%
%
Cookie!
Technical!name!of!cookie!
Description!
by%a%user,%not%by%malware%and/or%
viruses.%
Token%cookie%
Token%
This%is%a%functional%cookie%used%by%
our%service%to%check%the%
authenticity%of%%the%logged-in%user.%
Hash%cookie%
HASH_*%
This%is%a%functional%cookie%used%to%
check%the%correctness%of%the%
cookies.%
User%settings%
cookie%% %
UserSettings%%
This%is%a%functional%cookie%that%our%
service%uses%to%store%various%data%of%
the%user%to%login.%
Token%cookie%
%
idsrv%
%
This%is%a%functional%cookie%that%our%
service%uses%to%confirm%the%
authenticity%of%the%logged%in%user.%
XSRF%cookie%
idsrv.xsrf%
This%is%a%functional%cookie%that%our%
service%uses%to%prevent%cross-side%
scripting.%
Logged-in%
applications%
cookie%
idsvr.clients%
This%is%a%functional%cookie%that%our%
service%uses%to%know%which%
applications%are%logged%in.%
Session%cookie%
idsvr.session%
This%is%a%functional%cookie%that%our%
service%uses%to%store%various%data%of%
the%logged-in%user.%
Session%cookie%
SignInMessage.*%
This%is%a%functional%cookie%that%our%
service%uses%to%know%how%you%are%
logged%in.%
Session%cookie%
SignOutMessage.*%
This%is%a%functional%cookie%that%our%
service%uses%to%know%how%you%are%
logged%in.%
%
Complaints!or!questions!
If%you%would%like%to%correct%your%data,%if%you%have%a%question,%or%if%you%object%to%the%
processing%of%your%data%by%Mobility%Concept,%please%send%a%message%to%
servicedesk@mobilityconcept.nl.%Mobility%Concept%will%reply%as%soon%as%possible%and%at%
the%latest%within%14%days,%stating%whether%we%can%meet%your%request%or%answer%your%
question.%
%
Access!and!correction!of!your!data!
You%may%always%access%your%own%data%and%your%personal%settings%on%your%%
personal%settings%page.%If%you%would%like%to%know%which%data%we%hold%about%you%%
or%if%you%would%like%to%alter%your%data,%please%contact%our%service%desk%on%
servicedesk@mobilityconcept.nl.%
Page%8%of%8%
%
%
In%case%of%questions%about%our%privacy%policy%or%access%and%correction%(or%erasure)%of%
your%personal%data,%please%contact%us%at%any%time.%In%order%to%prevent%abuse,%we%may%
request%that%you%identify%yourself%sufficiently.%
%
Under%the%GDPR%you%have%the%following%rights:%
§ The%right%of%access%to%and%correction%or%erasure%of%the%personal%data%or%to%limit%
processing,%as%well%as%the%right%to%object%to%(further)%processing.%
§ The%right%to%data%portability%and/or%transfer.%
§ If%the%processing%of%personal%data%is%based%on%the%lawful%basis%of%permission,%you%
have%the%right%to%withdraw%such%permission%at%any%time.%
§ You%have%the%right%to%lodge%a%complaint%with%the%Data%Protection%Authority%about%
our%processing%of%your%personal%data.%
We%will%always%pass%on%your%requests%to%your%employer.%We%then%await%further%
instructions%from%your%employer.%
!
Amendments!to!the!privacy!statement!
Mobility%Concept%may%amend%this%privacy%statement%at%any%time.%If%the%privacy%statement%
is%amended%significantly%at%any%time,%Mobility%Concept%will%inform%you%about%the%
amendments.%The%most%up-to-date%privacy%statement%is%accessible%at%all%times%on%the%
Mobility%Concept%website%(https://inloggen.mobilityconcept.nl).%
%%
Questions!
In%case%of%questions%about%this%privacy%statement%or%our%privacy%policy,%please%send%an%
email%to%our%service%desk%on%servicedesk@mobilityconcept.nl.%
