Security-related video and calls

Updated on

Under French law, SNCF security officers are authorized to wear body cameras on an experimental basis. For more on the law, please see Section L2251-4-1 of the French Transport Code, and Deliberation 2017-289 of 16 November 2017 by the French National Data Protection Commission (CNIL). Use of the cameras is regulated under Decree No. 2016-1862 of 23 December 2016.

SNCF has a designated data protection officer, who may be reached by email at dpo-sncf@sncf.fr

We process data from the cameras for two purposes: (1) to prevent incidents when SNCF security officers need to intervene; and (2) to gather evidence of violations and prosecute perpetrators.

The legal basis for processing the data is fulfilment of a public service mission.

The data is stored for six months, starting from the date it is recorded. It is used solely by the individuals responsible for processing it in the course of their duties, and it can be released only to authorities with the legal right to access it.

We will conduct the body camera experiment from January 2018 to December 2019 on eight sites under four SNCF regional security divisions (Directions de Zone Sûreté, or DZS): Montparnasse and Juvisy (DZS Paris Rive Gauche, 17 bd de Vaugirard, 75015 Paris); Grenoble and Lyon Part-Dieu (DZS Sud-Est, 44 rue de la Villette, 69003 Lyon); Bordeaux and La Rochelle (DZS Sud-Ouest, 1 rue Charles Domercq, 33080 Bordeaux; Lille and Calais (DZS Nord, place de la gare, 59800 Lille).

All data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure, the right to restrict or oppose processing of their data, the right of portability, and the right to issue directives on the handling of their personal data after their death.

Under the provisions of France’s Data Protection Act No. 78-17 of 6 January 1978, all persons have the right to access and rectify their data, and therefore anyone may exercise these rights by providing proof of identity and submitting a request to the appropriate DZS.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the CNIL or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

SNCF’s Security Division uses a system that records and plays back calls made to and from the French national rail security centre (Centre National de Sûreté Ferroviaire, or CNSF). SNCF has a designated data protection officer, who may be reached by email at dpo-sncf@sncf.fr

We process data from the calls for the following purposes: (1) to determine whether CNSF employees are handling calls properly and take corrective action to improve service quality; (2) to determine whether employees of the Public Rail Group are using the CNSF appropriately; and (3) to preserve evidence that may be used in legal proceedings.

The legal basis for processing the data is the data controller’s legitimate interest, i.e. proper delivery and improvement of the services.

The data is stored for one month, starting from the date it is recorded. It is used solely by the individuals responsible for processing it in the course of their duties, and it can be released only to authorities with the legal right to access it.

All data subjects have the right, within the terms and limits of the law, to ask the data controller for access to their personal data, as well as the right to rectification and erasure, the right to restrict or oppose processing of their data, the right of portability, and the right to issue directives on the handling of their personal data after their death.

You may exercise your rights by providing proof of identity and contacting CNSF at: Direction de la Sûreté, Centre National de Sûreté Ferroviaire, 116 rue de Maubeuge, 75010 Paris.

If you believe that processing of your data has violated the law, you have the right to submit a claim to the CNIL or to the controlling authority in the country where you ordinarily reside, where you work, or where the violation took place.

Information

For your comfort, safety and security, SNCF’s Security Directorate is trialling some solutions to assist with personnel tracking. We are testing the possibility of locating a volunteer, the owner of abandoned luggage or someone who has just committed a crime or offence in the station and reconstructing their movements. This is done using only non-biometric data, i.e. data that does not relate to physical, biological or behavioural characteristics strictly relating to one person (e.g. clothing worn).

No biometric data will be processed during this trial.

Controller

SNCF Security Directorate

DPO

SNCF has appointed a data protection officer, contact details: dpo-sncf@sncf.fr

Purpose of the data processing

The trial has three aims:

  • Technical
    To test the algorithms of the Personnel Tracking Assistance without the use of biometric data, identifying and tracking volunteers in railway environments, and based on the use of existing video-protection systems.
  • Security
    To improve the security of persons and property by enabling the Security Directorate’s video operators to locate and track more effectively the owners of abandoned luggage or the perpetrators of a crime or offence just committed.
  • SNCF’s role as a regulated undertaking
    To limit disruption to traffic and so provide an improved response to SNCF’s contractual obligations in terms of quality of service, by enabling the Security Directorate’s video operators to locate and track the owners of abandoned luggage more effectively.

Scope of the project

  • Geographical area of the trial
    The trial as a whole will take place at a maximum of five stations within the Ile de France region and four provincial stations, with the number of cameras restricted to 30 per station.
    The experiment takes in Paris Gare du Nord station.
  •  Duration of the trial
    The trial occurs until December 2020, 31st.

Data collected

The data is collected in the form of thumbnails taken from the video-protection cameras selected for the trial.

This data is retained for a maximum of six hours and is then automatically deleted.

* thumbnail: an image of a person extracted from the system

Contact

In accordance with the regulation relating to the protection of personal data (General Data Protection Regulation, known as "GPDR"), you have the right to access, rectify, oppose, limit and delete your data. To exercise your rights or for any further information, an e-mail address is available to you at the following address :

sf.edii-video@sncf.fr

 

You can also correspond by post to the following address:

Direction de la Sûreté – EDII (Département Expertise Digitale, Industrielle et Innovation)
116 rue de Maubeuge
75010 Paris

If you consider that the processing of data concerning you is in breach of the regulations, you have the right to submit a claim to the CNIL (Commission Nationale de l'Informatique et des Libertés) 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.

Information

For your comfort, safety and security, SNCF’s Security Directorate is trialling some solutions to detect abnormal behaviours. We are testing the possibility of automatically detecting intrusion acts in a regulated area and illegal selling acts.  

No biometric data will be processed during this trial.

Controller

SNCF Security Directorate

DPO

SNCF has appointed a data protection officer, contact details: dpo-sncf@sncf.fr

Purpose of the Data Processing

The trial has two aims:

  • to detect the presence of a person in an unauthorised zone (illegal intrusion)
  • to detect the presence of hawkers (illegal selling acts)

Scope of the Project

  • Geographical area of the trial
    The trial will take place in Paris Gare du Nord with a number of 20 cameras (10 cameras for the detection of intrusion acts and 10 cameras for the detection of illegal selling acts)
  • Duration of the trial
    The trial will take place from December 19th 2019 to December 31st 2020.

Collected Data

The only collected data are the images from the existing video-protection system. No other data will be treated or retained during the experiment.

These data are retained for a maximum duration of three days and will be automatically deleted after this period.

Legal Basis For Processing

Processing is necessary for the performance of a task carried out in the public interest.

Contact

In accordance with the regulation relating to the protection of personal data (General Data Protection Regulation, known as "GPDR"), you have the right to access, rectify, oppose, limit and delete your data. To exercise your rights or for any further information, an e-mail address is available to you at the following address :

sf.edii-video@sncf.fr

You can also correspond by post to the following address:

Direction de la Sûreté – EDII (Département Expertise Digitale, Industrielle et Innovation)

116 rue de Maubeuge

75010 Paris

If you consider that the processing of data concerning you is in breach of the regulations, you have the right to submit a claim to the CNIL (Commission Nationale de l'Informatique et des Libertés) 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.

Information:

For research and development purposes, the SNCF Security Department is experimenting with a pseudonymisation solution for video protection flows. This involves irreversible anonymisation of customer faces (face blurring) passing over the video protection camera streams in various stations in Île-de-France area in order to build up a library of images for the internal development of video analysis solutions aimed at improving the safety of goods and people within SNCF stations.

No biometric data will be processed during this experiment.

Controller:

SNCF Security Department

DPO :

SNCF has appointed a Data Protection Officer whose contact details are: dpo-sncf@sncf.fr.

Purpose of data processing:

The purpose of the experiment is to irreversibly pseudonymise videos from the SNCF's security camera system in real time in order to create a library of images that can be used internally by SNCF for research and development purposes.

Scope of the project:

The experiment will take place in a limited number of stations in the Ile-de-France area.

Data collected:

The only data processed are the images from the existing security camera system. These are kept for a maximum period of 7 days and automatically deleted after that.

Only certain pseudonymised video sequences will be archived in order to build up a library of images for research and development purposes.

Legal basis for processing:

The legal basis of the processing is the legitimate interest of the Directorate of Security.

Contact:

In accordance with the regulation relating to the protection of personal data (General Data Protection Regulation, known as "GPDR"), you have the right to access, rectify, oppose, limit and delete your data. To exercise your rights or for any further information, an e-mail address is available to you at the following address :

sf.edii-video@sncf.fr

You can also correspond by post to the following address:

Direction de la Sûreté – EDII (Département Expertise Digitale, Industrielle et Innovation)
116 rue de Maubeuge
75010 Paris

If you consider that the processing of data concerning you is in breach of the regulations, you have the right to submit a claim to the CNIL (Commission Nationale de l'Informatique et des Libertés) 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.