IDstation.online is a service of DPS - Digital Photo Systems BV, The Netherlands. DPS acts as the data controller with respect to the processing of personal data described in this Privacy Policy.
The objective of IDstation.online is to securely store your digital passport photo for max 6 months in order for you to be able to use your digital passport photo in online applications or when applying for an official ID document or to download your digital passport photo for personal use.
This Privacy Policy applies to all personal data processed via:
• the IDstation.online platform
• associated services, including photo upload, storage, and retrieval
• the website https://idstation.online
Primary data
• Digital passport photos and ID photos (facial image)
Identification and access data
• Unique personal code or identifier linked to the photo
• Your email address or phone number if you choose to add this information when uploading the photo. Adding your email address or phone number is not required.
Technical and usage data
• Device information that uploaded the photo
• Store details that uploaded the photo
• ICAO test report of the photo
• EXIF header information of the photo
Purposes of Processing
We process personal data solely for the following purposes:
• Providing secure storage of digital passport photos
• Enabling retrieval and reuse of photos for official applications
• Facilitating user-controlled sharing with third-party applications
• Complying with legal and regulatory obligations
Legal Basis for Processing
Consent is obtained during the upload process when the photographer will inform you about the upload procedure and how we process the photo. The photographer will ask for your consent to actually upload your photo. The photographer cannot upload your photo unless explicitly confirmed by clicking on two confirmation checkboxes. The Photographer may ask you to click on the two confirmation checkboxes yourself.
In case of self-service systems you will need to give you consent yourself by clicking on two confirmation checkboxes yourself.
Users may withdraw consent at any time by deleting their data. The website https://idstation.online allows users to access their photo and to download and or delete the photo. When deleting the photo the other uploaded data will also be deleted.
Special Categories of Data
A passport photo may qualify as biometric data under Article 9 GDPR if processed for identification purposes. DPS does not perform biometric identification or analysis on uploaded photos. Photos are stored solely as images for retrieval and user-controlled sharing.
Data Retention
• Personal data is stored for a maximum period of 6 months
• Data may be deleted earlier upon user request
• After the retention period, data is permanently deleted
Data Sharing and Recipients
We do not sell personal data. Personal data may be shared with User-authorized third parties for official applications (e.g. passport renewal systems) only after:
o user initiation
o entry of a personal code
o explicit approval
All personal data is stored on servers located within The Netherlands (NL).
Security Measures
We implement appropriate technical and organisational measures, including:
• Encryption of data at rest and in transit
• Access control and authentication mechanisms
• Logging and monitoring of access
• Secure key management
• Regular security updates and vulnerability management
Data Breach Notification
In the event of a personal data breach:
• We will assess the risk to individuals
• Where required, we will notify:
o the relevant supervisory authority
o affected individuals
This will be done in accordance with Articles 33 and 34 GDPR.
Cookies and Tracking
The website uses cookies only for essential functionality and security. We do not place non-essential cookies. Users can manage cookie preferences via:
• browser settings
• cookie consent tools on the website
Your Privacy Rights
We are committed to protecting your personal data and comply with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Under these laws, you have the following rights regarding your personal data:
• Access – You can request a copy of the personal data we hold about you
• Correction – You can ask us to correct inaccurate or incomplete data
• Deletion – You can request that we delete your personal data
• Restriction – You can ask us to limit how we use your data
• Right to data portability
• Right to object or ithdraw consent at any time
You also have the right to lodge a complaint with your local data protection authority or another relevant supervisory authority.
Responsibility of Retailers and Photographers
Retailers and photographers uploading photos must:
• inform users about the storage and processing of their photo
• obtain valid consent prior to upload
We may update this Privacy Policy from time to time.
The latest version will always be available on the website.
This Privacy Policy shall be governed by and interpreted in accordance with Dutch law.
If you want to contact us please follow the link below: