The General Data Protection Regulation (GDPR) came into force on 25 May 2018 in all European Union countries.
This new regulation is designed to :
- Safeguard the privacy of European citizens
- Harmonise data protection laws across the European Union
- Redefine the methods used to process and manage personal data
What kind of data concerning me does SNCF Connect collect?
The data gathered by SNCF Connect is only collected where this is really necessary for processing purposes, as we abide rigorously by the policy of keeping data collection to a minimum. Most of the data gathered consists of identification and contact information, bank details, data related to your searches and orders, data on your behaviour patterns and centres of interest and GPS-based localisation data. To view the full list of data types and associated purposes, you can view the SNCF Connect confidentiality charter on this page.
How can I access the data that SNCF Connect holds about me?
If you have a customer account, you can view and amend most of your data directly by logging in to your customer account. You can also submit your request directly via the form. You can also send a letter to the following address: Service Clients SNCF Connect – 2, place de la Défense – CNIT 1 – BP 440 – 92053 Paris la Défense Cedex SNCF Connect will provide you with a clear document showing the personal data that we hold.
How do I go about asking SNCF Connect to delete my personal data?
You can ask for your personal data to be deleted by logging in to your customer account, via the form from customer service or by sending a letter to the following address:
Service Clients SNCF Connect – 2, place de la Défense – CNIT 1 – BP 440 – 92053 Paris la Défense Cedex
Don’t forget to state exactly which data you wish to delete.
What type of information will be requested of me if I submit a request to access / delete my personal data?
The right to protection of personal data is not an absolute right, and the right of access (like the right of deletion) is not unlimited. It must be exercised in such a way that the rights of third parties are upheld. For example, it is not possible to request access to data concerning one’s spouse. Similarly, an employee of a company may not obtain data concerning a fellow employee. This is why ID will be requested if you submit a request to access or delete your personal data.
Why is my Facebook account displayed upon confirming my order?
SNCF Connect brings you this feature in order to send you the order confirmation directly via Messenger, if a Facebook session is active in the browser. To disable this feature, log out of your Facebook account before visiting SNCF Connect sites (NB: closing the Facebook session tab is not enough, you have to log out of Facebook). Generally speaking, if you don’t want a social network of which you are a member to link to information gathered while browsing SNCF Connect sites, you have to log out of the social network in question before visiting SNCF Connect sites.
Once the request has been submitted, how long does it take for the deletion to be effective and how will I be notified?
In accordance with the GDPR, we respond within one month. However, depending on the complexity of the request and/or the number of requests received, this timeline may at times be two months longer. Whatever the case, we will notify you within one month of having received the request, whether responding to the request for access or extending the timeline. Confirmation is sent out by customer service, and you will be notified by email.
How long is data concerning me held by SNCF Connect if I don’t ask for it to be deleted?
It all depends on the type of data! Whatever the case, data is only kept for the length of time really necessary for orders to be fulfilled, for legal and regulatory obligations to be met (in particular concerning dispute management) and for personalised services to be offered. As for your identification data (e.g: surname, email address) and orders (e.g. most recent purchases), SNCF Connect keeps them for a period of 3 years. After 3 years, this data is archived for a period of 10 years in order to meet legal obligations (inquiry / court proceedings and tax inspection). When data is archived, it is no longer used by SNCF Connect and only specialist technicians can access it for the legal reasons stated above. As for your bank details, SNCF Connect keeps them for 13 months after the sale, at the most, to make after-sales procedures easier (e.g.: exchange, refund, etc.). If you have saved your bank details in your customer account, they will be kept for as long as your card remains valid. Lastly, as for cookies, SNCF Connect keeps them for 13 months at the most, as from the date when they were placed on your computer or device, in accordance with the regulations in force. For more information you can view the confidentiality charter on this page.
Where is the data that SNCF Connect holds concerning me stored?
The data is stored in our data centres in France.
Does SNCF Connect engage in IP tracking?
SNCF Connect does not engage in IP tracking to adjust prices depending on the user. Prices do vary in real time as bookings are placed and cancellations carried out, but never depending on the person making the booking. Train fares are set in advance and centralised in a single database. Distributors like SNCF Connect can access this database and run price searches, but cannot change prices. However, some customers notice that in the space of a few hours or minutes the price of the tickets that they have singled out has increased. This is because train fares are structured incrementally and increase over time. Once all the tickets at a certain price have been sold, the next ones are offered at a new, higher price. This means that, if you are at the upper limit of an increment and wait a little too long before booking, it can seem like your ticket price has increased unexpectedly.
How can I manage cookies collected by SNCF Connect?
SNCF Connect allows you to adjust your preferences for cookies placed while you browse the site, on this page. For your information, disabling cookies does not necessarily remove those placed up until the present time (to do so, you have to delete cookies via your browser). However, disabling them does ensure that cookies will no longer be placed by the SNCF Connect site from that point on. To disable cookies from certain partners on the whole SNCF Connect site, you sometimes need to so via their deactivation page (this applies to Facebook Connect, AB Tasty and iAdvize). The list of the cookies that can be disabled via the deactivation feature on the SNCF Connect site is available here.
Leave a comment