1
PRIVACY STATEMENT MOBILITY CONCEPT
Version September 2024
This Privacy Statement informs you about the way in which EY processes your personal data in the context of the use of EY
My Daily Travel (Mobility Platform) that consists of a web environement and app for which the EY entities and HVG Law
situated in the Netherlands are responsible, and how the implementation of applicable data protection legislation such as
the General Data Protection Regulation (GDPR) is ensured. More general information can be found in the HR Privacy
Statement of EY Netherlands and HVG Law.
1. Which personal data is used for what purposes?
If you receive a mobility budget from EY or HVG Law, the Mobility Platform enables you to flexibily use your mobility budget.
A separate online tool (in Dutch: keuzetool) enables you to calculate what your different travel options are including the
costs. The Mobility Platform is linked to various mobility suppliers (such as Amber, Felyx, leasefietsshop and NS) which
could be used for the utilization of your mobility budget.
For the above purposes, we process the following types of personal data:
• First name
• Prefix
• Last name
• Employee number
• Home address
• Email adress
• Mobility Category (incl. parttime percentage or fultime)
• Cost center code (for reporting purposes)
• Start data employment
• Work location
• Net monthly commute allowance (only for mobility budget)
• Brand lease car
• Model lease car
• License plate number
• Norm lease amount (incl. fuel)
• Own contribution ('eigen bijdrage')
• Mobile number
Depending on the mobility supplier you use, we could process the following types of personal data:
• NS
o Type of subscription
o Trips (incl. station checked-in, station checked-out and costs)
• Shared cars (e.g. Amber) – business and commute
o Booking details: start location, end location and costs
• Rental cars (e.g. Sixt)
o Car costs
o Tax value
o Tax addition
o Rental period
o License plate number
• Lease bikes (e.g. leasefietsshop)
o Start date contrat
o End date contract
2
o Description/frame number of the bike
o Monthly cost (lease rate)
• Lease car (e.g. Athlon Flex)
o Start date
o End date
o Norm lease amount (incl. fuel)
o License plate number
o Brand lease car
o Model lease car
• Shared scooters (e.g. Felyx and Go Sharing)
o Driver’s licence country of issue
o Driver’s licence expiration date
o Driver’s licence number
o Driver’s licence type
o Start location
o End location
o Travel date (start date and time + end date and time)
o Travel distance
o Costs
o Reservation/trip duration
The processing of your personal data is necessary for the purposes of the legitimate interests pursued by EY and HVG Law.
The specific legitimate interests pursued are providing you the possibility to use your mobility budget in a flexible manner
by using different means of transportation (including making reservations and acctual bookings) and to be able to calculate
the costs of your trip. By only processing a minimal amount of personal data, properly securing the personal data,
aggregating it where possible and deleting it in a timely manner, the impact on your privacy is limited.
You could use this Mobility Platform for private trips as well. Therefore it is important to label your trips as private or
business. The costs for trips labeled as business will be deducted from your mobility budget. If you labeled your trip as
private, EY has no access to the details of this trip. You will receive a reminder to classify your unclassified trips every week.
Please do so, because when trips are unclassified for 4 weeks (or longer) you’ll receive a notification a week before the
(financial) month-end closing that the unclassified trips will be automatically put on “private”. You can find these trips
under the option “History” in the Mobility Platform. And, where applicable, you can re-classify these trips from privat to
business until the next (financial) month-end closing.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data
concerning you based on the above legitimate interest(s).
2. How do we obtain your personal data?
Your personal data is obtained via feeds from other EY systems (e.g. SuccessFactors, Planon and Mercury). Additionally,
personal data regarding your trips and booking costs will be uploaded via in the Mobility Platform via the mobility
suppliers you use ( (e.g. NS, Sixt, Amber, Athlon Flex, leasefietsshop and Felyx).
3. Recipients of your personal data
If and insofar required to give effect to your mobility wishes and if we are entitled to do so under applicable laws and
regulations, we can provide access to or transfer your personal data to (authorized persons within) other parties.
Personal data may be accessed by or transferred to:
• The mobility suppliers that you use;
• The relevant EY entity that is primarily involved in the processing of personal data in the context of the proposal;
3
• Other entities within the EY network that provide support in providing our services, such as helpdesk or IT support.
4. Retention period
In general, we do not retain your personal data for longer than necessary in relation to the purposes for which we process
the personal data. However, exceptions may apply if longer retention of data is required by law or regulation and/or to
establish, exercise or defend our legal rights.
• The data will be retained for 7 years to comply with our fiscal retention obligations;
• Log data will be retained for 3 months.
For purposes other than those described in this Privacy Statement, your data may be retained in other EY systems for
longer periods of time.
5. Rights of individuals
With regard to the processing of your personala data in the context of the use of the Mobility Platform, you have certain
rights under the GDPR. For more information on your privacy rights and how to exercise them, please refer to the HR
Privacy Statement (EY Netherlands and HVG Law).
6. Contact and complaints
If you have any questions, remarks or complaints about the processing of your personal data, you can contact our Data
Protection Officer (DPO) via email at privacy.nl@nl.ey.com or by submitting a request via the Legal Request Tool.
You also have the right to lodge a complaint with the supervisory authority with the local supervisory authority, the
Autoriteit Persoonsgegevens (AP). For more information on how to lodge a complaint, please refer to the website of te AP.
7. Changes
We may change this Privacy Statement from time to time. The latest version can always be consulted via the Mobility
Platform. Material changes will be communicated.
