Opencard security
Opencard is secured like every other credit card. Every card has a unique number assigned by the card issuer, which is linked with the card holder. The contact chip card is also secured with a PIN code and a technical certificate for secure communication on the internet.
Possibility of abuse
There are potential risks of misuse due to the nature of certain card services.
- If you use the card for parking payment, there is a risk that your parking voucher could be used for payment of parking meter fees by someone finding the card. If the finder attempts to exchange the parking voucher points for cash at a contact point, the cash will not be given to them.
- In the Municipal library, the card holder is identified not only electronically but also by their photograph. If the appearance of the person doesn’t correspond with the photograph, the Municipal library staff will ask for further proof of identity.
- Authorisation using the PIN is needed for access to the Portal of Prague. If the finder doesn’t know it, they can’t use the card to access the Portal.
- The public transport voucher cannot be abused because inspectors always check appearance. They also have a blacklist of blocked cards in their microform readers. They are entitled to withhold a blocked card.
Personal information on Opencard
The first name, surname and a photograph of the card holder are printed on the card. This data serves for the verification of the card holder’s identity during some operations such as public transport inspections. Date of birth is recorded in the contactless chip because this is needed when applying for the age-related discount. This data is encrypted and accessible only with the use of an authorised microform reader.
Opencard files the following card holder’s data:
- First name, surname, date of birth, and contact data are stored in the operator’s database.
- Photographs of card holders are not stored. They are only used to print on the card, and afterwards they are destroyed.
- Contact data serves for day-to-day communication with card holders, e.g. to inform them that the card has already been produced and is ready to be collected, for notification about new possibilities of use, for information regarding the life cycle of cards.
- The card holder can apply for the deletion of his/her personal data from the database, and this also means that the card is cancelled. The application has to be submitted in writing at an Opencard contact point.
Personal data of the applicant will be processed in compliance with the Declaration on processing personal data.