Home
Confidentiality

Privacy

Special Terms and Conditions - Protection of Personal Data

These Special Terms and Conditions supplement the Website’s General Terms and Conditions of Use (“GTCU”), which can be accessed here.

The Publisher is responsible for the processing of personal data carried out by the Website; you will fine the Publisher’s contact details here.

The purpose of these Special Terms and Conditions is to inform you of the conditions under way which we may process data concerning you, and to identify and enable you to exercise the rights you hold in respect to such data.

When you access to the Website or in the course of providing our services, we may collect and process personal information about you for the purposes set out in the table below:

 

Purposes for which data may be processed

Categories of data processed *

Principal legal base for processing

Account creation: account access management (online)

·  identifying data (title, surname, first name, username, password, technical identifiers, e-mail address, telephone number (optional), date of birth (optional) etc);

·  connection logs

Execution of a contract (Terms and Conditions of Use)

Complaints management, lost property management, management of information requests

·  identification data (surname, first name, title, telephone number, e-mail address)

·  personal data (nature of request, details of request, response given, date of exchanges, resolution indicators)

Your consent

Creation of an employee card for the airport platform;

·  identification data (title, surname, first name, username, password, technical identifiers, e-mail address, telephone number (optional), date of birth (optional), place of work and employer’s company name, manager’s name and e-mail address, passport photograph, identity card, type of contract (fixed-term, permanent, temporary))

·  connection logs

Your consent

Audience management and measurement of traffic or usage; improvements to our tools and services, route planning

·  technical data (IP addresses, technical identifiers, geolocation)

·  navigation data (pages visited, services used)

Your consent

Management of newsletters, participation in promotional campaigns, measurement of user satisfaction

·  identification data and preferences

·  communication data (nature of the communication, date of the event, monitoring indicators)

Your consent

Subscribe to text messages for real-time traffic information (1)

·  telephone number with choice of period

Your consent

Management of video protection systems

·  video and audio recording

Legitimate interests of the data controller

Measuring and improving the quality of our services and those of suppliers

·  identification and contact data,

·  connection or usage data for the services concerned.

·  evaluations

Legitimate interests of the data controller

Management of purchases of transport tickets and other products or services

·  identification data,

·  data relating to the nature of purchases,

·  payment data,

Execution of a contract with you 

Validation of transport tickets

·  identification data,

·  location data, time stamps

·  technical data

Legitimate interests of the data controller

Ensuring the security of information systems

·  identification data,

·  technical and usage data

Legitimate interests of the data controller

Provision of press titles available online;

Technical and identifying data, geolocation and time-stamp data

Your consent

 (*) the types of data indicated in brackets enable you to identify examples of data processed in the course of operations in question. These examples are not exhaustive.

(1) to unsubscribe, send STOP in response to the text message you receive.

When you access or use certain services, we may provide you with additional or specific information relating to the processing of data carried out for these services.

Certain data relating to you may be supplied to us by Sytral Mobilités or by partners.

Unless we obtain your specific consent, we will not communicate or make available to third parties any data relating to you for the purposes of commercial or promotional marketing for third party products or services.

Where processing is based on your consent, you are reminded that your consent may be withdrawn at any time.

No decision having legal effects against you is taken by exclusively automated processing.

Some of the data collected is required to access our Services and those of our partners. In this case, the fields or information required are indicated to you for this purpose. If you choose not to provide certain required personal data, we may not be able to provide you with the services you have requested or fulfil the purposes for which we process personal data.

In addition, we may publish, disclose and use aggregate data (information about all users combined in such a way that an individual user can no longer be identified or referred to) or non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.

 

Retention periods

Your personal data will only be kept for as long as is necessary to fulfil the purposes for which it was collected.

Please note that the general principles for data retention are as follows:

Data relating to the management of your requests and complaints may be kept until the end of collection;

Data collected relating to video surveillance may be kept for a maximum period of one month from the time it is collected;

Data relating to the management of purchases may be kept until the end of five calendar years from the date of collection;

Data relating to the management of cookies may be kept for up to 6 months from the date of collection;

Data relating to your customer account is kept for up to 3 years from the date of activation of the account

Certain specific data processing operations that we carry out may have different retention periods, in particular if their retention is made necessary by a legal obligation or to enable us to exercise our rights.

If you would like more details on the specific retention rules for a particular processing operation, you can contact our Data Protection Department and/or the Data Protection Officer (contact details below).

 

Security and data transfers

In accordance with current regulations, we take the necessary measures to ensure that personal information is protected in terms of its security, integrity and confidentiality.

Any transfers of data are carried out in accordance with the regulations, and are governed in particular by the standard contractual clauses established by the European Commission.

We may communicate, for the purposes above, information relating to you to companies in the TCL Relations Usagers and to our subcontractors and services providers; some of these companies may be located outside the European Union and outside countries recognised by the European Union as having laws guaranteeing adequate protection of personal data.

Information relating to you may be communicated to any person or any public or private entity, in particular administrations or professional bodies, where such communication is provided by law or regulation.

We may also process information relating to you for the purposes of managing and monitoring compliance with our internal policies and procedures, auditing or to administer, manage or defend ourselves against claims or legal proceedings.

In the event that we become involved with a merger, acquisition, sale of assets or receivership, we may be required to sell or share some or all of our assets including personal data.

In the event of termination of the public service concession, or in the course of such termination in the event of an audit, data concerning you will be communicated to the granter of the transport service designated in the preamble.

 

Exercise of rights

In accordance with the regulations, you may exercise your rights of consultation, rectification, opposition, deletion, limitation of processing and transferring, under the conditions of the applicable regulations, on your personal data that we hold, by sending a request mentioning your surname, first name, address, and enclosing a copy of proof of identity, by the means of your choice.

By post to TCL Relations Usagers - Protection des données, 19 Boulevard Vivier Merle 69003 LYON

If necessary, you can also send your request to the TCL Relations Usagers Data Protection Officer (DPO Group) at the following address: dataprivacy@tcl.fr

For all requests relating to data processing in connection with video protection, please specify the line number, stops and time period.

You may also send the Data Protection Department your instructions concerning the handling of your data in the event of you death, and in particular the way in which you wish the aforementioned rights to be exercised.

In general, the Data Protection Officer and the Data Protection Department remain at your disposal for any additional information or complaint relating to the processing of personal data that we implement. We undertake to respond to you promptly, in accordance with the time limits imposed by the applicable regulations.

Please note that the supervisory authority in France for data processing is the Commission Nationale de l'Informatique et des Libertés, www.cnil.fr, from which you may request any information or lodge any complaint.

 

Updated and amendments to the Special Terms and Conditions.

We reserve the right to amend these Special Terms and Conditions at any time with regard to our processing of personal data. Their date of entry into force is mentioned at the beginning of the text. Please refer to them periodically and in particular each time you provide us with personal information.