Personal data and cookies

Updated on

I. Personal data protection policy for SNCF entities

At SNCF, we’re committed to maintaining the highest ethical standards, in particular when it comes to protecting personal data.

In the course of our business, we collect and process personal data concerning our customers, our employees, and our partners (such as suppliers and service providers).

In an effort to promote innovation while at the same time building strong, lasting relationships based on mutual respect and shared, socially responsible values, we use technical and organizational measures to protect the personal data that we process.

This policy describes SNCF’s commitments concerning the protection of personal data.

We inform our customers, employees, and partners of the processing of their data.

SNCF’s aim in collecting personal data is optimizing management of our relationships with our customers, employees, and partners.

When SNCF processes data, we do so for specific purposes. Each time we process data, there is a legitimate, defined, and explicit purpose.

We ensure that the data is retained in a form that permits identification of the data subjects for no longer than is necessary to accomplish the purposes of this processing.

Each time SNCF processes data, we undertake to collect and use only such data as are adequate, relevant, and limited to what is necessary for the purposes for which the data is processed.

At SNCF, the security of personal data is a high priority.

We take technical and organizational measures to ensure that data is processed in a manner that ensures protection against accidental loss, destruction, or damage that could undermine its confidentiality or integrity.

When developing, designing, selecting, and using tools for the processing of personal data, we ensure (where applicable, working together with the tools’ publishers) that they provide an optimal level of protection for processed data.

SNCF takes measures that comply with the principles of data protection by design and data protection by default. To that end, when possible and/or necessary, we use the techniques of pseudonymizing and encrypting data.

When using a service provider, we communicate personal data only after obtaining the provider’s commitment to comply with SNCF security rules.

We conduct audits of our own departments and of our service providers to verify compliance with data security rules.

SNCF follows strict authorization policies to ensure that the data we process is transmitted only to persons that are authorized to have access to it.

When we need to transfer data to a location outside the European Union, we do so only in accordance with specific contractual provisions and in compliance with the requirements of the competent supervisory authorities.

At SNCF, we’re particularly careful to respect the rights of data subjects:

  • the right to be informed;
  • the right to access;
  • the right to rectification;
  • the right to erasure (the “right to be forgotten”);
  • the right to restrict processing;
  • the right to data portability;
  • the right to object; and
  • the right to issue directives regarding the retention, erasure, and communication of personal data after the data subject is deceased.

 

SNCF is able to respond to requests by data subjects to exercise their rights throughout processing, in compliance with the conditions and time limits imposed by applicable regulations.

Data subjects may make requests to exercise their rights by electronic means and/or by post, using the contact information provided in information notices, application and website terms of use, data collection forms, etc.

Data subjects must clearly state their first and last name, attach a copy of a form of identification, and indicate the address to which they would like the response to be sent.

We inform all data subjects wishing to exercise their rights if it is impossible to comply with their request.

 

II. Access to personal data collected during experiments now underway

We are currently conducting experiments within SNCF Group. For access to the personal data collected in each experiment, please visit the URL below.

III. Information about personal data and the SNCF.com website

Warning: the SNCF website centralizes and facilitates access to other, external sites.

We do not directly collect data submitted through forms on external websites accessible through the SNCF site. Our data management team will not process requests to exercise personal data rights (such as the right of access, erasure, or objection) relating to such forms.

Please send any such requests to the relevant data controller and refer to the data processing information on the relevant websites.


For example, to request data related to the “Mon compte” (My account) page, please visit https://moncompte.SNCF/faq/questions and click on the “Mes informations personnelles” (My personal information) tab.

The following paragraphs relate only to processing of personal data conducted directly on the SNCF.com website.

III.1. Information about the SNCF.com website

We hereby inform you that personal data concerning you is processed under the supervision of the Communications & Branding Division for purposes of managing the SNCF.com website and, more generally, for our external communications.

SNCF has appointed a data protection officer, reachable at dpo-sncf@sncf.fr. This email address does not accept job applications. For job inquiries, please refer to the information or terms of use on the relevant website.

This processing is conducted to further our legitimate interest in informing and facilitating communication with our customers.

The categories of data processed include personal information (état civil), contact information, and connection data (cookies). The data is generated directly by your use of the site.

Data is retained for a maximum of thirteen (13) months and is reserved solely for the use of the unit that manages the SNCF.com website.

Subject to the conditions and limits provided by law, any data subject has the right to request access to their personal data from the data controller and to request that their data be rectified or erased, as well as the right to limit or object to the processing of their data.

To exercise your rights, please write to donneespersonnellesdusiteSNCFcom@sncf.fr and provide proof of your identity if necessary.

That email address responds only to requests to exercise rights relating to the processing of personal data conducted on the SNCF.com website. To apply for a job or to exercise your rights under the GDPR relating to ticket purchases or forums, please refer to the information or terms of use on the relevant websites.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the French National Data Protection Commission (CNIL) or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

III.2. Cookies on the SNCF.com website

When you visit the SNCF.com website, cookies are set on your computer, mobile phone or tablet to enhance your use of the site and improve its performance. Here’s what you need to know about how cookies work and what tools are available to manage them.

We collect two types of cookies on SNCF.com:

  • cookies created and generated by SNCF.com
  • third-party cookies from non-SNCF companies including YouTube, Twitter and Facebook, as well as third-party cookies from SNCF subsidiaries and services

All third-party cookies are listed in the Source column in the table below.

We ask you to accept our cookie policy when you visit SNCF.com for the first time.

WYou can withdraw your consent at any time, but changing your cookie preferences will not affect data that has already been processed.

PTo deactivate cookies, go to the “How to delete cookies” tab.

Learn more about cookies on the website of the French National Data Protection Commission (CNIL)

Delete your cookie preferences

Customize your cookie preferences

How cookies are used

Cookies are small files that are created when you visit a website.

What are they for? On SNCF.com, cookies store your information to identify you, to manage your on-line activity, and to offer products and services customized to your profile. They help us understand you better and improve your user experience.

When you visit SNCF.com, cookies are set on your computer, mobile or tablet to support navigation and offer optimized services that are tailored to you. This website does not collect user-specific information.

  • Necessary cookies

These cookies are necessary for the site to work properly and for you to move through it smoothly and easily. Disabling them may impair the site’s normal performance or prevent it from working at all.

  • Performance cookies

These cookies specialize in collecting information. They give us a better understanding of your user behaviour so we can analyse, enhance and optimize the site’s performance, but they do not collect personal information.

  • Functionality cookies

These cookies allow our website to remember your choices and preferences, so we can personalize your navigation and present relevant content. In the process, they improve your user experience.

  • Third-party cookies

These cookies are set by third-party companies referenced on the site. When you visit SNCF.com, third-party cookies may store data collected by SNCF Group partners, who use them for marketing and presentation purposes and to deliver targeted, personalized advertising.

The SNCF.com website has no control over data collected by third parties, which are acting on their own behalf.

Want to disable cookies on our site?

At any time, you can choose to disable cookies or to be informed whenever SNCF.com sets cookies on your device. You can accept or refuse cookies on a case-by-case basis.

If you set your browser to refuse cookies, please remember that you may not be able to access some of the functionalities on SNCF.com.

Disabling all cookies may have a negative impact on our website’s usability, and you may be prevented from accessing some areas or features that are normally available. The SNCF.com website has no control over third-party cookies used in the browsers listed below and disclaims all liability with regard to their use. Please refer to each third-party website for more information on their specific cookie policies.

Disable cookies using your browser

External web services

Our site may use external web services to post external content such as images, videos or customer feedback forms on our webpages. As with the social media buttons, we cannot prevent these external sites or domains from collecting data on user interaction with this integrated content. Cookies set by these external websites are third-party cookies.

Our site uses tracking technologies to measure what users do with certain content, such as email communications.

If you don’t want our sites to register cookies allowing interaction with social media, you can express your preferences directly on:

Cookies required to make SNCF.com work

Name Source Retention Purpose
_alert-express_session

Heroku

alert-express.herokuapp.com
Session Third-party cookie. Vigi-express external on-line form. Preserves the user's session state across page requests.
tarteaucitron

NA

sites.ina.fr
1 year Third-party cookie. External INA.fr timeline. INA.fr uses this cookie to make the website’s Tag Manager GDPR-compliant by saving the user’s express agreement to collect user data.
cookie-agreed SNCF 13 months SNCF cookie. This cookie determines whether the user has agreed to the cookie policy pop-up.
CookieConsent SNCF 1 year SNCF cookie. Stores the user's cookie consent state for the current domain.
SNCSESSION SNCF Session SNCF cookie. Preserves the user's session state across page requests.
SNCSESSIONMIV SNCF Session SNCF cookie. Preserves the user's session state across page requests for the passenger information module.
SSESS# SNCF 23 days SNCF cookie. Preserves the user's session state across page requests.
HafasStorageLSTest sncf-maps.hafas.de (SNCF Voyageurs ?) Persistent Third-party cookie. Mapping. Required for the itinerary search map and train details to work properly.
hfsFavorites_SNCF_vs_jpl_prod_1.0.0 sncf-maps.hafas.de (SNCF Voyageurs ?) Persistent Third-party cookie. Mapping. Required for the itinerary search map and train details to work properly.
local_storage_support_test

Twitter

twitter.com

Persistent Third-party cookie. Twitter. This cookie is used with the browser’s local-storage function, which enables the website to load faster by pre-loading certain procedures.

 

Preference cookies

Name Source Retention Purpose
lang

Twitter

cdn.syndication.twimg.com
Session Third-party cookie. Remembers which language the user selected for a website.
hypermediav4 Fresque externe INA.fr sites.ina.fr Session Third-party cookie. Allows users to view the INA video timeline.

 

Performance cookies

Name Source Retention Purpose
SERVERID_resa_wwprod01

SNCF Voyageurs

fg.SNCF
Session Third-party cookie. External on-line quote request form for group travel. This cookie tells us where quote requests come from.
Xtvrn

INA

ina.fr
1 year Third-party cookie. External INA.fr timeline. This cookie counts visits to a site by assigning every visitor a unique random ID, so each visitor is only counted once.
_ga

TER

latitude-cartagene.com
2 years Third-party cookie. External TER tourist attraction map. Registers a unique ID that generates statistical data on how visitors use the site.
_ga_2417W5B76Y

TER

latitude-cartagene.com
2 years Third-party cookie. External TER landmark map. Registers a unique ID that generates statistical data about the quote request form.
browser_family

INA

sites.ina.fr
Session Third-party cookie. External INA.fr timeline. Provides information on the browser in use.
browser_version

INA

sites.ina.fr
Session Third-party cookie. External INA.fr timeline. Provides information on the browser in use.
flash_version

INA

sites.ina.fr
Session Third-party cookie. External INA.fr timeline. Provides information on the browser in use.
_ga SNCF 13 months SNCF cookie. Registers a unique ID that generates statistical data on how visitors use the site.
_gat SNCF 1 day SNCF cookie. Google Analytics uses this cookie to drastically reduce request rates.
_gid SNCF 1 day SNCF cookie. Registers a unique ID that generates statistical data on how visitors use the site.
SNC_city SNCF Session SNCF cookie. Identifies the SNCF server in use.
personalization_id

Twitter

twitter.com
2 years Third-party cookie. Twitter. This cookie allows Internet users to share website content to their Twitter profiles.
atid

INA

xiti.com
13 months Third-party cookie. The external INA.fr timeline uses Xiti, which records statistical data on user behaviour on the website. This allows the website operator to conduct internal analyses.
atidx

INA

xiti.com
13 months Third-party cookie. The external INA.fr timeline uses Xiti, which records statistical data on user behaviour on the website. This allows the website operator to conduct internal analyses.
idrxvr

INA

xiti.com
13 months Third-party cookie. The external INA.fr timeline uses Xiti, which collects data on the user’s visits to the website, such as which pages were viewed.

 

Marketing Cookies

Name Source Retention Purpose
IDE doubleclick.net 1 year SNCF cookie. Doubleclick. Used to record and relay users’ actions after they have seen or clicked on ads, enabling us to measure ad effectiveness and introduce more targeted ads to users.
test_cookie doubleclick.net 1 day SNCF cookie. Doubleclick. Used to verify whether the user’s browser supports cookies.
fr

Facebook

facebook.com
3 months Third-party cookie. Facebook. Used to deliver a series of advertisement products, such as real-time offers from third-party advertisers.
tr

Facebook

facebook.com
Session Third-party cookie. Facebook. Used to deliver a series of advertisement products, such as real-time offers from third-party advertisers.
NID

Google

google.com
6 months

Third-party cookie. Google map. External map for bicycle rental companies. Registers an ID that identifies a user’s device so the user can receive more targeted advertisements.

_gaexp SNCF 66 days Google Analytics installs this cookie to determine whether the user participates in its marketing experiments.
__widgetsettings

Twitter

twitter.com
Persistent Third-party cookie. Twitter. Collects data on Internet user behaviour and interactions to optimize the website and make advertising more relevant.
i/jot

Twitter

twitter.com
Session Third-party cookie. Twitter. Sets a unique ID for the visitor that allows third-party advertisers to deliver targeted ads. Third-party advertising hubs perform this pairing service, making real-time bidding easier for advertisers.
i/jot/syndication

Twitter

twitter.com
Session Third-party cookie. Twitter. Collects data on Internet user behaviour and interactions to optimize the website and make advertising more relevant.
_fbp weborama.fr 3 months SNCF cookie. Weborama. Used to deliver a series of advertisement products, such as real-time offers from third-party advertisers.
AFFICHE_W weborama.fr 3 months SNCF cookie. Weborama. Used by the Weborama marketing platform to determine visitors’ interests based on which webpages they visit, the content they click on and other site activity.
GPS

Youtube

youtube.com
1 day Third-party cookie. YouTube. Registers a unique ID on mobile devices so the device can be tracked using GPS location.
VISITOR_INFO1_LIVE

Youtube

youtube.com
179 days Third-party cookie. YouTube. Tries to estimate users’ bandwidth on pages with embedded YouTube videos.
YSC

Youtube

youtube.com
Session Third-party cookie. YouTube. Registers a unique ID to keep statistics on YouTube videos viewed by the user.
yt-remote-cast-installed

Youtube

youtube.com
Session Third-party cookie. YouTube. Stores the user’s video streaming preferences for embedded YouTube videos.
yt-remote-connected-devices

Youtube

youtube.com
Persistent Third-party cookie. YouTube. Stores the user’s video streaming preferences for embedded YouTube videos.
yt-remote-device-id

Youtube

youtube.com
Persistent Third-party cookie. YouTube. Stores the user’s video streaming preferences for embedded YouTube videos.
yt-remote-fast-check-period

Youtube

youtube.com
Session Third-party cookie. YouTube. Stores the user’s video streaming preferences for embedded YouTube videos.
yt-remote-session-app

Youtube

youtube.com
Session Third-party cookie. YouTube. Stores the user’s video streaming preferences for embedded YouTube videos.
yt-remote-session-name

Youtube

youtube.com
Session hird-party cookie. YouTube. Stores the user’s video streaming preferences for embedded YouTube videos.

 

These persistent cookies allow us to capture the last events in a session. They do not store any personal data.