Privacy statement: digital quarantine declaration form (mandatory quarantine)
This privacy statement explains how we process the personal data that you provide on the digital quarantine declaration form. We recommend that you read this privacy statement carefully.
1 About the quarantine declaration form and mandatory quarantine requirement
You have been asked to complete the digital quarantine declaration form so that the authorities can determine whether you are required to self-quarantine after travelling to the Netherlands from abroad and can check whether you are complying with the mandatory quarantine requirement. The personal data you provide will be processed. If you cannot show a completed quarantine declaration form, you will not be allowed to board your transport to the Netherlands. If you travel to the Netherlands from a very high-risk area by car, you may be checked at the border by a representative of the supervisory authority. If you do not have a completed quarantine declaration form, you may receive a fine.
Your declaration form may be forwarded to a call team working on behalf of the Ministry of Health, Welfare and Sport. The call team will phone you to provide information about complying with the mandatory quarantine requirement and the services available to help you during the quarantine period. During the call, they will also check whether you are complying with the mandatory quarantine requirement.
If the call team suspects that you are not complying with the mandatory quarantine requirement, or if they cannot reach you at the phone number you provided, they may report this to the supervisory authority. After receiving a report from the call team, a representative of the supervisory authority may check whether you are complying with the quarantine requirement and take enforcement action if necessary.
Below you will find information about how the personal data in your digital quarantine declaration form is processed.
2 Who is responsible for processing your personal data?
Multiple parties are responsible for determining how and for what purpose your personal data is processed. These parties are regarded as ‘controllers’, as defined in the General Data Protection Regulation (GDPR).
First and foremost, the Minister of Health, Welfare and Sport is the data controller that is responsible for receiving quarantine declaration forms, selecting which travellers will be called, securely transmitting the declaration forms to the call team and, if a person is suspected of not complying with the mandatory quarantine requirement, sending their declaration form to the supervisory authority.
Declaration forms received by the supervisory authority can be used for the purposes of checking and enforcing compliance. For these purposes, the supervisory authority is considered to be the data controller.
3 For what purpose is your personal data processed?
The overarching goal of processing the personal data provided on quarantine declaration forms is to limit the spread of COVID-19 by ensuring that travellers arriving from very high-risk areas self-quarantine.
More specifically, this personal data is processed to determine which travellers are required to self-quarantine, and to inform them about the mandatory quarantine requirement. In addition, personal data is used to check whether people are complying with the mandatory quarantine requirement and, if necessary, take enforcement action.
4 What is the legal basis for processing personal data?
The Minister of Health, Welfare and Sport processes personal data to comply with a legal obligation (as referred to in article 6, paragraph 1 (c) of the GDPR). When monitoring the implementation of the mandatory quarantine requirement, the minister processes personal data to perform a task carried out in the public interest (as referred to in article 6, paragraph 1 (e) of the GDPR).
During the compliance monitoring and enforcement phase, the supervisory authority processes personal data to perform a task carried out in the public interest (as referred to in article 6, paragraph 1 (e) of the GDPR).
5 What personal data is processed?
The personal data you provide on the quarantine declaration form is processed in connection with the mandatory quarantine requirement.
Initials and surname
Date of birth
Address (if your quarantine address is not the same as your home address, you must provide both)
Country of departure
Date of arrival in the Netherlands
Confirmation (by means of a check mark) that you have completed the quarantine declaration form fully and truthfully
Quarantine period you selected
Whether you declare to be exempt of the mandatory self-quarantine
If you are a minor (under 18), you will be asked to fill in your parent or guardian’s phone number or e-mail address.
6 Statistical information
Personal data provided on the quarantine declaration form is used only for the purposes described in this privacy statement.
7 Is personal data shared with third parties?
The Ministry of Health, Welfare and Sport does not share any personal data with third parties.
Your personal data will be shared only with the call team and, if necessary, the designated supervisory authority.
In no circumstances will your personal data be processed outside the territory of the European Economic Area (EEA).
8 How long is personal data stored?
Different retention periods apply during the different phases.
After you complete your quarantine declaration and the confirmation has been sent to your e-mail address, your form may be randomly selected and sent to the call team. The unselected quarantine declarations are immediately deleted.
If your quarantine declaration form is sent to the call team, it will be deleted immediately after you are called if there is no reason to suspect you are not complying with the mandatory quarantine requirement.
If there is reason to suspect that you are not complying with mandatory quarantine requirement, your quarantine declaration form will be sent to the supervisory authority. The call team will then immediately delete your personal data.
The supervision and enforcement process is carried out by the competent supervisory authority. For information about that process, see Government.nl.
9 Securing your personal data
The Ministry of Health, Welfare and Sport takes data protection seriously, and takes suitable measures to combat abuse, loss, unauthorised access, unwanted publication or unauthorised alteration of data.
10 Your rights with respect to your personal data
When it comes to your personal data, you have several rights, such as the right to access and rectify your data. If you wish to know what personal data of yours we have processed, you can submit a request to this end. The Ministry of Health, Welfare and Sport will respond to your request within one month.
If you wish to exercise one or more of your privacy rights, don’t forget you will need to provide proof of identity. Documents that can be used as valid proof of identity include a passport or driving licence. You can use the smartphone app KopieID to make a secure copy of your identity document. The app is an initiative of the Ministry of the Interior and Kingdom Relations. Check how to download the KopieID app.
If you wish to access sensitive personal data, including criminal record and judicial data and data relating to minors, you will be required to produce proof of identity when you collect the information concerned. This helps us ensure that we are giving the information to the right person.
You can submit a request to us in one of two ways:
Send an email to: firstname.lastname@example.org
By post (don’t forget to sign the letter):
Ministerie van Volksgezondheid, Welzijn en Sport
2500 EJ The Hague
If it should turn out that your data is incorrect, incomplete or irrelevant, you can submit an additional request for your data to be rectified or supplemented.
Data Protection Officer
If you have a specific question or wish to lodge a complaint, you can contact the Ministry’s data protection officer. You can do this in two ways:
Send an email to: FG-VWS@minvws.nl.
Send a letter to:
Ministerie van Volksgezondheid, Welzijn en Sport
Directie Bestuurlijke en Politieke Zaken
2500 EJ The Hague
You have the right to lodge a complaint about the processing of your personal data with the Data Protection Authority or the court. More information is available here.
Changes to this privacy statement
This privacy statement may be amended. An amended privacy statement will apply as soon as it is published on our website. We will inform you if the changes are relevant to you.
Most recent update: July 12th 2021.