Privacy statement under the Police Data Act

The municipality of Hilversum employs special investigative officers (boas) to supervise and maintain public order. When boas perform investigative tasks during their work, the Police Data Act (Wpg) applies.

 This includes issues such as urinating in public, incorrectly presenting waste, using alcohol on public roads and stray dogs. Just like the General Data Protection Regulation (GDPR), the Wpg sets requirements for the processing of data.

This privacy statement applies to all police data that the municipality of Hilversum collects and processes for the purpose of criminal enforcement by boas employed by the municipality. In this privacy statement we explain how the municipality of Hilversum handles your police data, what your rights are and how you can exercise these rights. 

What police data do we collect from you? 

Which police data we process about you depends on the criminal offense you are suspected of. In addition, our police officers also process police data from witnesses, victims and other third parties to the extent necessary in the context of their investigative tasks. We may process the following categories of police data about you: 

  • Personal data (including name and address, nationality data, date of birth, place of birth, actual place of residence)

  • Contact details (including telephone number) 

  • Identity data (including BSN, place of issue, date of issue, type of ID)

  • Data relating to the criminal offense (including offense category, offense description, type of offense, place of commission, date and times, license plate number, insurance details and other data relating to the vehicle) 

  • Image and sound material (including camera images, photos)

For what purposes do we use your data? 

We process police data for various purposes. Think about:

  • stopping, arresting and/or interrogating a suspect; 

  • tracking down suspects of criminal offences
  • drawing up an official report in the context of a criminal investigation

  • Handling, administering and financially settling payments related to official reports

What is the legal basis? 

Police data may not be processed simply. A so-called processing basis is required for this. The basis on which the boas process data is to fulfill a legal obligation. More specifically, the boas process police data on the basis of: 

How long do we keep your police data?

A fixed statutory retention period applies to police data in accordance with the Wpg. The majority of the data that our police officers process is processed up to 1 year after the first processing date for the purpose of carrying out daily police tasks. In the four years that follow, police data can only be consulted and processed with a targeted search query. For example, by searching for a name, address or license plate number. After this period, the police data will be kept for another five years. The data will then only be available to a very limited extent, for example with a view to the handling of complaints by the Dutch Data Protection Authority or accountability in audits. After that, the data is usually permanently destroyed.

Who do we share police data with? 

Your data will only be shared with other organizations or persons if this is necessary for the execution of a law, task or process.

In the case of a criminal investigation, it is sometimes necessary for a boa to share police data with third parties. For example, to the police or the Public Prosecution Service following an incident, to the Regional Information and Expertise Centers (RIECs) regarding the fight against subversive crime or to our partners at the Gooi en Vechtstreek Care and Safety House in the context of the person-oriented approach (PGA) and the Top-X approach (prioritizing people who cause excessive nuisance or require a lot of attention due to (criminal) behavior.

In addition, we sometimes share personal data with processors who process personal data on behalf of and for the municipality. These processors include cloud and hosting parties and IT service providers. A processing agreement has been concluded with these processors, in which the mutual rights and obligations for the processing are laid down. 

Police data will not be passed on to countries outside the European Economic Area.

Exercise your rights

If the municipality processes your personal data, you have certain rights under the Wpg. These rights are intended to give you the opportunity to maintain control over your data. You have the right to:

  • to view the police data that the municipality processes about you
  • to supplement and/or improve your police data

  • to have your police data deleted

  • to request a restriction of the processing of your data

  • submit a complaint to the Dutch Data Protection Authority if you believe that your personal data is being processed in violation of the Wpg

For more information on how to exercise your rights, please visit our general privacy statement .  

Please note: the above rights are not absolute. This means that we do not have to comply with a request in all cases, for example if one of the legal grounds for exception applies. For example, we have the right to reject your request for:

  • avoidance of obstruction of judicial investigations or proceedings;

  • avoiding adverse consequences for the prevention, detection, investigation and prosecution of criminal offenses or the execution of criminal penalties;

  • protecting public safety;

  • protection of the rights and freedoms of third parties

  • protection of national security; and

  • in the event of a manifestly unfounded or excessive request

More information

For more information about the careful handling of police data, please visit the website of the Dutch Data Protection Authority.

Questions or complaints 

Would you like to know more about this privacy statement, your rights or our further handling of your personal data? Please contact us at privacy@hilversum.nl. 

Despite our careful approach, you may have a complaint about the way we handle your personal data. In that case, you can submit a complaint via the municipality's complaints handling procedure. More information about submitting complaints can be found on our Complaints page.

Have we handled your complaint and do you disagree with the outcome or how your complaint was handled? Then you can do this at any time to file a complaint with the Dutch Data Protection Authority. 

Data protection officer

The municipality of Hilversum has appointed an independent, external supervisor. This data protection officer (FG) supervises and advises on the protection of your personal and police data. The FG is registered with the Dutch Data Protection Authority. If your question or complaint has not been answered (sufficiently), you can contact the FG via the e-mail address: fg@hilversum.nl. 

Privacy statement change

This privacy statement can be changed by the municipality of Hilversum at any time, without prior notice. Changes take effect from the moment they are published. We therefore recommend that you regularly consult this privacy statement so that you are aware of the changes. This page is continuously updated.

also look at