Security-related video and calls

Updated on

On a trial basis and in accordance with Article 113 of Law No. 2019-1428 on Mobility Orientation and its implementing decree, SNCF Voyageurs (9 rue Jean-Philippe Rameau 93633 la Plaine Saint Denis cedex) has equipped some of its sworn officers with individual mobile cameras (officers in accordance with Article L.2241-1 4 ° of the transport code).

This processing of camera data is based on the legitimate interest in ensuring the safety of people. The main purpose is to prevent incidents during operations and, in the event of violations, to establish criminal offenses or to collect evidence with a view to possible prosecution of the perpetrators.

The recording does not take place continuously, but only in the case of verbally or physically aggressive customers, dangerous situations or at the request of the person concerned.

The recorded persons are informed verbally about the start of the recording. This notification can be postponed if there is immediate danger to life or limb and will be given as soon as circumstances allow.

As part of this processing, SNCF Voyageurs processes audio-visual data (images and sounds) from mobile cameras and the connection data to images of their officers.

Audio-visual data is retained for 30 days from the time it is recorded, and image connection data is deleted after three years. These data are only accessible to authorized SNCF Voyageurs employees, its subcontractor SNCF and the technical service provider.

The persons affected by the processing of personal data have the right, in accordance with the regulations, to ask the data controller for access to their personal data, to correct or delete them, and to set guidelines on the fate of their data after death.

To exercise your rights, please contact the following address, stating your personal details:

SNCF Direction Sécurité Voyageurs​ 

Campus Acrobates (Bât Cap Lendit)​
Pole Sûreté​
1-7 place aux étoiles​
93212 La Plaine St Denis Cedex

Or by email to camera-pieton.sncf-voyageurs@sncf.fr

You have the right to lodge a complaint with the CNIL or the French data control authority (www.cnil.fr).

SNCF Voyageurs has appointed a data protection officer who you can contact at the following addresses:

  • by post: SNCF Voyageurs, Direction juridique et de la conformité, département Données Personnelles, DPO, 9 rue Jean-Philippe Rameau 93633 la Plaine Saint Denis cedex 
  • by email: dpo-sncf-voyageurs@sncf.fr

Under French law, SNCF security officers are authorized to wear body cameras on an experimental basis. For more on the law, please see Section L2251-4-1 of the French Transport Code, and Deliberation 2017-289 of 16 November 2017 by the French National Data Protection Commission (CNIL). Use of the cameras is regulated under Decree No. 2016-1862 of 23 December 2016.

SNCF has a designated data protection officer, who may be reached by email at dpo-sncf@sncf.fr

We process data from the cameras for two purposes: (1) to prevent incidents when SNCF security officers need to intervene; and (2) to gather evidence of violations and prosecute perpetrators.

The legal basis for processing the data is fulfilment of a public service mission.

The data is stored for six months, starting from the date it is recorded. It is used solely by the individuals responsible for processing it in the course of their duties, and it can be released only to authorities with the legal right to access it.

We will conduct the body camera experiment from January 2018 to December 2019 on eight sites under four SNCF regional security divisions (Directions de Zone Sûreté, or DZS): Montparnasse and Juvisy (DZS Paris Rive Gauche, 17 bd de Vaugirard, 75015 Paris); Grenoble and Lyon Part-Dieu (DZS Sud-Est, 44 rue de la Villette, 69003 Lyon); Bordeaux and La Rochelle (DZS Sud-Ouest, 1 rue Charles Domercq, 33080 Bordeaux; Lille and Calais (DZS Nord, place de la gare, 59800 Lille).

All data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure, the right to restrict or oppose processing of their data, the right of portability, and the right to issue directives on the handling of their personal data after their death.

Under the provisions of France’s Data Protection Act No. 78-17 of 6 January 1978, all persons have the right to access and rectify their data, and therefore anyone may exercise these rights by providing proof of identity and submitting a request to the appropriate DZS.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the CNIL or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

SNCF’s Security Division uses a system that records and plays back calls made to and from the French national rail security centre (Centre National de Sûreté Ferroviaire, or CNSF). SNCF has a designated data protection officer, who may be reached by email at dpo-sncf@sncf.fr

We process data from the calls for the following purposes: (1) to determine whether CNSF employees are handling calls properly and take corrective action to improve service quality; (2) to determine whether employees of the Public Rail Group are using the CNSF appropriately; and (3) to preserve evidence that may be used in legal proceedings.

The legal basis for processing the data is the data controller’s legitimate interest, i.e. proper delivery and improvement of the services.

The data is stored for one month, starting from the date it is recorded. It is used solely by the individuals responsible for processing it in the course of their duties, and it can be released only to authorities with the legal right to access it.

All data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure, the right to restrict or oppose processing of their data, the right of portability, and the right to issue directives on the handling of their personal data after their death.

You may exercise your rights by providing proof of identity and contacting CNSF at: Direction de la Sûreté, Centre National de Sûreté Ferroviaire, 116 rue de Maubeuge, 75010 Paris.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the CNIL or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

Information:

For research and development purposes, the SNCF Security Department is experimenting with a pseudonymisation solution for video protection flows. This involves irreversible anonymisation of customer faces (face blurring) passing over the video protection camera streams in various stations in Île-de-France area in order to build up a library of images for the internal development of video analysis solutions aimed at improving the safety of goods and people within SNCF stations.

No biometric data will be processed during this experiment.

Controller:

SNCF Security Department

DPO :

SNCF has appointed a Data Protection Officer whose contact details are: dpo-sncf@sncf.fr.

Purpose of data processing:

The purpose of the experiment is to irreversibly pseudonymise videos from the SNCF's security camera system in real time in order to create a library of images that can be used internally by SNCF for research and development purposes.

Scope of the project:

The experiment will take place in a limited number of stations in the Ile-de-France area.

Data collected:

The only data processed are the images from the existing security camera system. These are kept for a maximum period of 7 days and automatically deleted after that.

Only certain pseudonymised video sequences will be archived in order to build up a library of images for research and development purposes.

Legal basis for processing:

The legal basis of the processing is the legitimate interest of the Directorate of Security.

Contact:

In accordance with the regulation relating to the protection of personal data (General Data Protection Regulation, known as "GPDR"), you have the right to access, rectify, oppose, limit and delete your data. To exercise your rights or for any further information, an e-mail address is available to you at the following address :

sf.edii-video@sncf.fr

You can also correspond by post to the following address:

Direction de la Sûreté – EDII (Département Expertise Digitale, Industrielle et Innovation)
116 rue de Maubeuge
75010 Paris

If you consider that the processing of data concerning you is in breach of the regulations, you have the right to submit a claim to the CNIL (Commission Nationale de l'Informatique et des Libertés) 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.

About the project :

In order to improve the safety of goods and people, the SNCF Security Department experiments an intelligent video solution aimed at detecting the presence of unauthorised people in areas closed to the public (intrusions) and at detecting abnormally high densities of people on the platforms (people density measurement).

No biometric data will be processed during this experiment.

Controller:

SNCF Security Department

DPO:

SNCF has appointed a data protection officer whose contact details are: dpo-sncf@sncf.fr

Purpose of data processing:

Intrusion detection : testing the reliability of intrusion detection algorithms in order to enable the controller to improve the effectiveness of its mission to secure goods and people.

People density measurement: testing the reliability of people density measurement algorithms in order to allow the controller to improve the efficiency of its mission of securing goods and people and to ensure the proper functioning of the service.

Scope of the project:

The experimentation takes place in Gare du Nord in Paris, for a period of 7 weeks from 25 May 2021. It concerns 20 cameras for intrusion detection and 20 cameras for people density measurement.

Data collected:

The only data processed are the images from the existing video protection system. These are kept for a maximum period of 7 days and automatically deleted after that.

Legal basis for processing:

The legal basis for the processing is the legitimate interest of the controller.

Contact details:

In accordance with the regulations in force relating to the protection of personal data (General Data Protection Regulation, known as "RGPD"), you have the right to access, rectify, oppose, limit and delete your data. To exercise your rights or for any additional information, an e-mail address is available: sf.edii-video@sncf.fr

You can also send a letter to the following address :

Direction de la Sûreté - EDII (Digital, Industrial and Innovation Expertise Department)
116 rue de Maubeuge
75010 Paris

Furthermore, if you consider that the processing concerning you constitutes a violation of the regulations, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.