From DutchNews.nl:
Dutch Rail (NS) has invaded the privacy of owners of the public transport smart payment card by using their personal information for marketing purposes without permission, privacy watchdog CBP said on Tuesday.
Even holders of the ‘anonymous’ smart card, which does not contain personal information or carry a photo, have been the victims, the CBP said. After activating their card on the NS website, their email addresses were used for marketing campaigns.
Read more on DutchNews.nl