I. Personal data protection policy for SNCF entities
At SNCF, we’re committed to maintaining the highest ethical standards, in particular when it comes to protecting personal data.
In the course of our business, we collect and process personal data concerning our customers, our employees, and our partners (such as suppliers and service providers).
In an effort to promote innovation while at the same time building strong, lasting relationships based on mutual respect and shared, socially responsible values, we use technical and organizational measures to protect the personal data that we process.
This policy describes SNCF’s commitments concerning the protection of personal data.
We inform our customers, employees, and partners of the processing of their data.
SNCF’s aim in collecting personal data is optimizing management of our relationships with our customers, employees, and partners.
When SNCF processes data, we do so for specific purposes. Each time we process data, there is a legitimate, defined, and explicit purpose.
We ensure that the data is retained in a form that permits identification of the data subjects for no longer than is necessary to accomplish the purposes of this processing.
Each time SNCF processes data, we undertake to collect and use only such data as are adequate, relevant, and limited to what is necessary for the purposes for which the data is processed.
At SNCF, the security of personal data is a high priority.
We take technical and organizational measures to ensure that data is processed in a manner that ensures protection against accidental loss, destruction, or damage that could undermine its confidentiality or integrity.
When developing, designing, selecting, and using tools for the processing of personal data, we ensure (where applicable, working together with the tools’ publishers) that they provide an optimal level of protection for processed data.
SNCF takes measures that comply with the principles of data protection by design and data protection by default. To that end, when possible and/or necessary, we use the techniques of pseudonymizing and encrypting data.
When using a service provider, we communicate personal data only after obtaining the provider’s commitment to comply with SNCF security rules.
We conduct audits of our own departments and of our service providers to verify compliance with data security rules.
SNCF follows strict authorization policies to ensure that the data we process is transmitted only to persons that are authorized to have access to it.
When we need to transfer data to a location outside the European Union, we do so only in accordance with specific contractual provisions and in compliance with the requirements of the competent supervisory authorities.
At SNCF, we’re particularly careful to respect the rights of data subjects:
- the right to be informed;
- the right to access;
- the right to rectification;
- the right to erasure (the “right to be forgotten”);
- the right to restrict processing;
- the right to data portability;
- the right to object; and
- the right to issue directives regarding the retention, erasure, and communication of personal data after the data subject is deceased.
SNCF is able to respond to requests by data subjects to exercise their rights throughout processing, in compliance with the conditions and time limits imposed by applicable regulations.
Data subjects must clearly state their first and last name, attach a copy of a form of identification, and indicate the address to which they would like the response to be sent.
We inform all data subjects wishing to exercise their rights if it is impossible to comply with their request.
II. Access to personal data collected during experiments now underway
III. Information about personal data and the SNCF.com website
Warning: the SNCF website centralizes and facilitates access to other, external sites.
We do not directly collect data submitted through forms on external websites accessible through the SNCF site. Our data management team will not process requests to exercise personal data rights (such as the right of access, erasure, or objection) relating to such forms.
Please send any such requests to the relevant data controller and refer to the data processing information on the relevant websites.
For example, to request data related to the “Mon espace TGV INOUI” (My TGV INOUI) page, please visit https://tgvinoui.sncf/faq/questions and click on the Besoin d'aide” (Need help) tab.
The following paragraphs relate only to processing of personal data conducted directly on the SNCF.com website.
III.1. Information about the SNCF.com website
We hereby inform you that personal data concerning you is processed under the supervision of the Communications & Branding Division for purposes of managing the SNCF.com website and, more generally, for our external communications.
This processing is conducted to further our legitimate interest in informing and facilitating communication with our customers.
The categories of data processed include personal information (état civil), contact information, and connection data (cookies). The data is generated directly by your use of the site.
Data is retained for a maximum of thirteen (13) months and is reserved solely for the use of the unit that manages the SNCF.com website.
Subject to the conditions and limits provided by law, any data subject has the right to request access to their personal data from the data controller and to request that their data be rectified or erased, as well as the right to limit or object to the processing of their data.
To exercise your rights, please write to donneespersonnellesdusiteSNCFcom@sncf.fr and provide proof of your identity if necessary.
If you believe that processing of your data has violated the law, you have the right to submit a claim to the French National Data Protection Commission (CNIL) or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.
III.2. Cookies on the SNCF.com website
When you visit the SNCF.com website, cookies are set on your computer, mobile phone or tablet to enhance your use of the site and improve its performance. Here’s what you need to know about how cookies work and what tools are available to manage them.
We collect two types of cookies on SNCF.com:
- cookies created and generated by SNCF.com
- third-party cookies from non-SNCF companies including YouTube, Twitter and Facebook, as well as third-party cookies from SNCF subsidiaries and services
All third-party cookies are listed in the Source column in the table below.
You can withdraw your consent at any time, but changing your cookie preferences will not affect data that has already been processed.
To deactivate cookies, go to the “How can I delete cookies?” entry.
To view a complete list of cookies and learn how they’re used, click “Customize your cookie preferences” below.
How cookies are used
Cookies are small files that are created when you visit a website.
What are they for? On SNCF.com, cookies store your information to identify you, to manage your on-line activity, and to offer products and services customized to your profile. They help us understand you better and improve your user experience.
When you visit SNCF.com, cookies are set on your computer, mobile or tablet to support navigation and offer optimized services that are tailored to you. This website does not collect user-specific information.
- Necessary cookies
These cookies are necessary for the site to work properly and for you to move through it smoothly and easily. Disabling them may impair the site’s normal performance or prevent it from working at all.
- Performance cookies
These cookies specialize in collecting information. They give us a better understanding of your user behaviour so we can analyse, enhance and optimize the site’s performance, but they do not collect personal information.
- Functionality cookies
These cookies allow our website to remember your choices and preferences, so we can personalize your navigation and present relevant content. In the process, they improve your user experience.
- Third-party cookies
These cookies are set by third-party companies referenced on the site. When you visit SNCF.com, third-party cookies may store data collected by SNCF Group partners, who use them for marketing and presentation purposes and to deliver targeted, personalized advertising.
The SNCF.com website has no control over data collected by third parties, which are acting on their own behalf.
Want to disable cookies on our site?
Disabling all cookies may have a negative impact on our website’s usability, and you may be prevented from accessing some areas or features that are normally available. The SNCF.com website has no control over third-party cookies used in the browsers listed below and disclaims all liability with regard to their use. Please refer to each third-party website for more information on their specific cookie policies.
Disable cookies using your browser
External web services
Our site may use external web services to post external content such as images, videos or customer feedback forms on our webpages. As with the social media buttons, we cannot prevent these external sites or domains from collecting data on user interaction with this integrated content. Cookies set by these external websites are third-party cookies.
Our site uses tracking technologies to measure what users do with certain content, such as email communications.
If you don’t want our sites to register cookies allowing interaction with social media, you can express your preferences directly on:
We use persistent cookies to capture the last events in a session. They do not store any personal data.
Learn more about the confidentiality policies of leading third-party cookies and their settings.
- Google / YouTube / DoubleClick:
IMPORTANT: If you have already given your consent to YouTube directly, YouTube will set cookies on your device regardless of the choice you make on the sncf.com website. To decline YouTube cookies, please visit https://www.youtube.com/ and use your browser to clear all of them.