Privacy statement

Secure Logistics attaches great importance to the protection of personal data. We handle personal data with care and take the necessary measures to ensure safe and lawful processing. For example, Secure Logistics is certified according to ISO9001, ISO27001, ISO27701. If you have any questions or suspect misuse, please contact us via info@secure-logistics.nl.

Secure Logistics only shares personal data with third parties if this is necessary for the purpose for which the data was collected or to comply with legal obligations. Personal data is never sold to third parties. A processing agreement is concluded with suppliers who process personal data so that the level of protection is guaranteed.

Cookies can be placed when visiting the website. Secure Logistics asks permission for this. Which cookies are involved can be read in the consent form (cookie consent).

Secure Logistics processes personal data during contact moments. This can be done by telephone, e-mail, filling in a contact form, using the chat function, participating in surveys, competitions or (panel) research. Personal data is also processed when using the websites, signing up for newsletters or approaching via social media.

Secure Logistics sends a newsletter to inform customers and interested parties about developments regarding our products and services. E-mail addresses of interested parties are added to the list of subscribers, with permission. Customers receive the newsletter automatically. Each newsletter contains an unsubscribe link to the communication e-mail address with which the subscription can easily be terminated.

More information about the processing of personal data:

(Card) user

When applying for a card (CargoCard, Digital Safety Passport, or PortKey) or an XS-ID, Secure Logistics processes personal data. The employer submits the application and provides the data. Based on this, the user checks the information, after which Secure Logistics retrieves additional data from certificate and diploma registers via secure links.

Purposes of the processing

Secure Logistics processes personal data to:

Enable identity verification for access to locations, systems and processes. In doing so, the user can provide the acceptor with insight into completed training courses, diplomas and certificates.
Provide access to the XS-ID Online customer portal.
Improve the service provision and customer experience, in the form of customer satisfaction surveys, research into the use of applications and UX research.

Basis for processing

The processing of personal data is based on:

Consent of the data subject.
The necessity to execute an agreement.
Legitimate interests of Secure Logistics or third parties.
Comply with legal obligations.

What data is processed?

Secure Logistics processes the following personal data:

Name, address, date of birth, country of birth, nationality and document number of an identity document, e-mail, telephone number.
Employer data and information about completed training or education.

Special personal data

When activating the card, Secure Logistics processes biometric data such as the vein pattern of a finger, a fingerprint and facial proportions. This data is stored encrypted in the chip of the card. The user can easily destroy it by cutting the chip. The information on the chip can only be accessed using Secure Logistics software. The controller for storing the data in the card is Secure Logistics. Activation on location takes place in joint processing responsibility with the acceptor.

A passport photo is requested for identification. This photo is printed on the card and used for personal verification via XS-ID Online.

Secure Logistics checks identity documents for authenticity, so that users do not have to share as much vulnerable personal data when entering locations. This check is carried out in accordance with previous rulings by the Dutch Data Protection Authority.

Retention periods

Secure Logistics uses the following retention periods:

Creation date: 2 years after discontinuation of card
Processing date: 2 years after discontinuation of card
Desired expiration date: 3 months after discontinuation of card
Initials: 2 years after discontinuation of card
Prefix: 2 years after discontinuation of card
Surname: 2 years after discontinuation of card
Date of birth: 2 years after discontinuation of card
Place of birth: 2 years after discontinuation of card
Nationality: 2 years after discontinuation of card
Passport photo: 3 months after discontinuation of card
Type of ID card: 3 months after discontinuation of card
ID card number: 3 months after discontinuation of card
ID card expiration date: 3 months after discontinuation of card
Function: 2 years after discontinuation of card
Qualifications: 2 years after discontinuation of card
Company: 3 months after discontinuation of card
Type of card: 3 months after discontinuation of card
User number: 2 years after discontinuation card

Use of the card
When using the card, the user may provide data that is recorded by the acceptor in the context of access management. In most cases, this concerns the following data:

User number
Name and EAN number of the company that applied for the card.
Name of card user
Card number (Mifare)
Type of card (CargoCard, Digital Safety Passport or PortKey)
Issue date of the card
Expiry date of the card

The processing of this is done under the processing responsibility of the acceptor.

The card also provides access to services such as truck parkings and truck washes. In this case, the user provides data to operators. The operators share this information, including transaction data, with Secure Logistics for invoicing.

The Cardholder has access to the personal data in XS-ID Online.

Inspection, correction and deletion

Users can inspect stored data and submit requests for correction or deletion. A request to this effect can be submitted via: servicedesk@secure-logistics.nl.

Complaints

Complaints about the processing of personal data can be submitted to the Data Protection Officer via FG@secure-logistics.nl. If the complaint is not handled satisfactorily, a report can be made to the Dutch Data Protection Authority.

Cardholder (Employer)

Secure Logistics processes personal data of cardholders in order to:

Conclude agreements and check creditworthiness.
Guarantee reliability for the access process of affiliated acceptors.
Provide services, including:
o Requesting, producing and delivering cards (CargoCard, Digital Safety Passport, PortKey).
o Providing access to XS-ID Online.
Invoice services provided.
Send newsletters and service messages.
Improve services and customer experience, in the form of customer satisfaction surveys,
Research into the use of applications and UX research.

Basis for processing

Secure Logistics processes personal data on the basis of the following principles:

Consent of the data subject.
The need to execute an agreement to which the data subject is a party.
The need to safeguard legitimate interests of Secure Logistics or a third party.

Processing personal data

Concluding a contract for access to the XS-ID Online customer portal (formerly Secure Online) requires an authorized signatory of the organization to have an XS-ID. If an XS-ID is not yet available, it can be requested via the Secure Logistics website. A company profile is created that contains the following data:

Chamber of Commerce number
Company name
Postal address
Telephone number
Country
Language
Information about the NIWO transport permit (CargoCard).

The XS-ID is requested via the XS-ID App. During this procedure, cooperation is requested to verify the identity. Secure Logistics informs the user about this via an e-mail. This e-mail is sent when an authorized signatory registers to conclude a contract, or when an employer sends the invitation.

During the intake process, you are asked to take a “selfie”. This photo is compared locally on the device with the photo on the ID. No “document trail” is created: after completion of the process, no data is stored in the app. The following data is required to create an XS-ID:

Phone number
Name
Email address
Date of birth
Type of ID document
Number of ID document
Expiry date of ID document
Nationality

For questions about the intake process, please contact the Secure Logistics Customer Service Desk at: servicedesk@secure-logistics.nl.

An XS-ID is always personal. If a user is not an authorized signatory but wants access to XS-ID Online, their own XS-ID must be requested. The organization will send an invitation for this. The application procedure is otherwise the same as described above.

When applying for a contract as an XS-ID Holder, Secure Logistics shares personal data with third parties in the following situations:

For credit assessment and control: Data such as Chamber of Commerce number, registered trade name and authorized signatory are verified with Creditsafe. • For findability within XS-ID Online: This ensures that links within the system are possible.
To comply with legal obligations: Secure Logistics provides data to investigative authorities or supervisors when this is required by law.

Retention periods
After terminating a contract, Secure Logistics deletes the data within three months, unless a legal obligation requires a longer retention period. A retention period of 7 years applies to tax administration.

Complaints and questions
Complaints about the processing of personal data can be submitted to the Data Protection Officer via FG@secure-logistics.nl. If the complaint is not handled satisfactorily, a report can be made to the Dutch Data Protection Authority.

Acceptor (location)

Secure Logistics processes personal data of acceptors in order to:
• Conclude agreements and process payments.
• Deliver our services and products.
• Send service messages and newsletters.

Responsibilities
Card acceptors receive data directly from card users (= user CargoCard, Digital Safety Passport, PortKey). This includes name, company information and card data. Secure Logistics supports card acceptors in processing data, for example in service requests. Secure Logistics concludes a processing agreement for this purpose.

For questions about the use of data in connection with CargoCard, Digital Safety Passport or PortKey, please contact the Data Protection Officer of Secure Logistics via FG@secure-logistics.nl. This also applies when it is difficult to find the right person or the right answer. In case of urgency, please include the Customer Service Desk in the CC (servicedesk@secure-logistics.nl).

Changes to the privacy statement
Secure Logistics may change this privacy statement. Check this page regularly for updates.