Privacy policy
Data protection
Special Conditions – Protection of Personal Data
These Special Terms and Conditions supplement the Site’s General Terms and Conditions of Use and Sale (‘GTCS’), which can be accessed here.
The Publisher is responsible for the processing of personal data carried out by the Site; you will find the Publisher’s contact details here.
The purpose of these Special Terms and Conditions is to inform you of the purposes and conditions under which we may process data concerning you, and to identify and enable you to exercise the rights you hold in respect of such data.
When you access the Site or in the course of providing our services, we may collect and process personal information about you for the purposes set out in the table below:
| Purposes for which data may be processed | Categories of data processed* | Main legal basis for processing |
|---|---|---|
| Online reservations | – data identifying the main passenger (surname, first name, email address, telephone number and country) – connection logs | Performance of a contract (Conditions of Use and Sale) |
| Claims management, lost and found management, management of requests for information | – personal data (nature of request, details of request, response given, date of exchanges, route taken, order number, resolution indicators) | Your consent |
| Audience management and measurement of traffic or usage; improvements to our tools and services | – technical data (IP addresses, technical identifiers, geolocation) browsing data (pages visited, services used) | Your consent |
| Managing participation in promotional campaigns, measuring user satisfaction | – identification data and preferences – communication data (nature of communication, date of event, monitoring indicators) | Your consent |
| Video protection system management | – video and audio recordings | Legitimate interest of the data controller |
| Measuring and improving the quality of our services and those of suppliers | – identification and contact data, connection or usage data for the services concerned, evaluations | Legitimate interest of the data controller |
| Managing the purchase of tickets and other products and services | – identification data,- data relating to the nature of purchases, – payment data | Execution of a contract with you |
| Ticket validation | – identification data, location data, time stamps, technical data | Legitimate interest of the data controller |
| Fraud management, fine management | – identification data, location data, time stamps – fine number, date of birth, type of offence, amount, time limits, stages of the procedure, means of payment data | Legitimate interest of the data controller |
| Ensuring the security of information systems | – identification, technical and usage data | Legitimate interest of the data controller |
| Recruitment management | – CV (contact details, training, professional experience, etc.) | Your consent |
| Measurement of traffic | – means of communication data (MAC address) – location data, timestamp | Legitimate interest of the data controller |
(*) the types of data indicated in brackets enable you to identify examples of data processed in the course of the operations in question. These examples are not exhaustive.
When you access or use certain services, we may provide you with additional or specific information relating to the data processing carried out for these services.
Certain data concerning you may be supplied to us by partners.
Unless we obtain your specific consent, we will not communicate or make available to third parties any data concerning you for the purposes of commercial or promotional prospecting for third party products or services.
Where processing is based on your consent, you are reminded that your consent may be withdrawn at any time.
No decision having legal effects against you is taken by exclusively automated processing.
Some of the data collected is required to access our Services and those of our partners. In this case, the fields or information required are indicated to you for this purpose. If you choose not to provide certain required personal data, we may not be able to provide you with the services you have requested or fulfil the purposes for which we process personal data.
In addition, we may publish, disclose and use aggregated information (information about all users or specific groups or categories of users combined in such a way that an individual user can no longer be identified or referred to) or non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.
Conservation periods
Your personal data will only be kept for as long as is necessary to fulfil the purposes for which it was collected.
Please note that the general principles for data retention are :
- data relating to the management of your requests and complaints may be kept until the end of two calendar years from the date of collection;
- data collected in the context of video protection may be kept for a maximum of one month from the date of capture;
- data relating to the management of purchases may be kept for a maximum of five calendar years from the date of collection;
- data relating to the management of cookies may be kept for up to 6 months from the date of collection;
- data relating to recruitment management may be kept for up to two calendar years from the date of collection;
- data relating to the measurement of visitor numbers is anonymised no more than 6 hours after it is collected.
Certain specific data processing operations that we carry out may have different retention periods, in particular if their retention is made necessary by a legal obligation or to enable us to exercise our rights.
If you would like more details on the specific retention rules for a particular processing operation, please contact our Data Protection Department and/or the Data Protection Officer: contact.tdtravel@transdev.com
Sécurité et transferts de données
In accordance with the regulations in force, we take the necessary measures to ensure that personal information is protected in terms of its security, integrity and confidentiality.
Any transfers of data are carried out in accordance with the regulations, and are governed in particular by the standard contractual clauses established by the European Commission.
For the purposes of the objectives specified above, we may communicate information concerning you to other companies in the Transdev Group and to our subcontractors and service providers; some of these companies may be located outside the European Union and outside countries recognized by the European Union as having laws guaranteeing adequate protection of personal data.
Information concerning you may be communicated to any person or public or private entity, in particular administrations or professional bodies, when this communication is provided for by law or regulation.
We may also process information about you for the purposes of managing and monitoring compliance with our internal policies and procedures, auditing, or to administer, manage or defend against claims or legal actions.
In the event that we are involved in a merger, acquisition, sale of assets or receivership, we may be required to transfer or share all or part of our assets, including personal data.
Exercise of rights
In accordance with the regulations, you can exercise your rights of consultation, rectification, opposition, deletion, limitation of processing and portability, under the conditions of the applicable regulations, on your personal data that we may hold, by sending a request stating your surname, first name, address and attaching a copy of proof of identity, by the means of your choice:
- By post to: Transdev Travel – Data Protection, 3 AV JOSEPH PAXTON – 77164 FERRIERES-EN-BRIE
- By email to: contact.tdtravel@transdev.com
If necessary, you can also send your request to the Transdev Group Data Protection Officer (Group DPO) at the following address: dataprivacy@transdev.com.
For any request relating to data processing implemented as part of video surveillance, please specify the line number, stops and time slot.
You can also send the Data Protection Department your instructions regarding the fate of your personal data in the event of death, and in particular the manner in which you wish the aforementioned rights to be exercised.
In general, the Data Protection Officer and the Data Protection Department remain at your disposal for any additional information or complaint relating to the processing of personal data that we implement. We undertake to respond to you as soon as possible, in accordance with the deadlines imposed by the applicable regulations.
Please be informed that the supervisory authority in France for data processing is the National Commission for Information Technology and Civil Liberties, www.cnil.fr, to which you can request any information or lodge a possible complaint.
Updates and modifications to the Specific Conditions
We reserve the right to modify these Special Conditions on our processing of personal data at any time. Their effective date is mentioned at the beginning of the text. Please refer to them periodically and in particular each time you provide us with personal information.
***