Personal data
"When you use our website, we may collect and process your personal data (hereafter referred to as “Personal Data”). Your privacy and the protection of your Personal Data are very important to us. The purpose of this Personal Data Management Policy is to inform you of the use we make of your personal data, in compliance with applicable French and European legislation, in particular French law no. 78-17 as amended relating to Information Technology, Files, and Freedoms, (the “Data Protection Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of Personal Data and on the free movement of such Personal Data (“GDPR”) (hereafter referred to collectively as the “Applicable Regulations”). By accessing and/or using our website accessible at the web address https://ratpconnect.com, you agree to the collection and processing of your personal data in accordance with the terms and conditions set out below. If you refuse the processing of all or some of the requested personal data, you may not be able to take advantage of all our online services."
Identity of the data controller
With regard to the collection of Personal Data, the provision of information to users and the effective implementation of your rights, the party responsible for processing your Personal Data is RATP Connect, a public industrial and commercial establishment, whose address is 54, quai de la Râpée 75012 Paris, registered in the Paris Trade and Companies Register under number 411 759 962, intracommunity VAT no. FR 30 411 759 962 (hereafter “RATP Connect”, “we”, “us”, “our”).
Type of data collected
As part of our digital activities, we may collect the following types of Personal Data
Purposes and legal basis of the data processing
Your Personal Data is collected and/or processed when you use our online services for the following purposes:
Legal bases: Legitimate interest
Purposes: Managing solicitations of prospective customers
Legal bases: Consent or Legitimate Interest depending on the type of tracker
Purposes: Audience measurement and website security via trackers, third-party cookies (sharing, videos)
Recipients of your Personal Data
The Personal Data collected and/or processed when you use our website is intended for use by RATP Connect's Sales Department, as well as subcontractors and service providers acting on behalf of RATP CONNECT.
Cookies management
Data relating to the login settings and the user's device, collected or processed while using our website, in particular the identifier of the device used to view the website, are intended for RATP Connect and its subcontractors, in order to improve the services offered, in particular to adapt the display of site content, collect statistics to optimize the features and security of our website, save preferences and parameters and allow you to access videos and share content.
What is a cookie?
A cookie is a file that we may store on the hard disk of your device through your web browser when you use the website, subject to your agreement or unless you object. A cookie is a small text file that may be stored by your browser on the hard disk of your device when you use the website. Once installed on your device, cookies enable us to recognize you each time you visit our website, so that you can take advantage of all its features. Cookies are not active files, and therefore cannot host viruses. To find out more, visit allaboutcookies.org. This policy is written to explain what we use cookies for and what they do.
What purpose is served by the cookies on the website?
Only the sender of a cookie can read or modify the information contained in it. When you log in to and use the website, we and our subcontractors may, subject to your choices, install various cookies on your device, enabling us to recognize your device's browser for the duration of the cookie's validity. Cookies are used for the purposes described below, subject to your choices, which you may express and modify at any time via the settings of the web browser used to view the website.
The cookies on the website enable the following:
As such, it is up to you to configure your browser in order to manage cookies in accordance with your preferences (see “Your choices concerning cookies” below). "The cookies on the website are session cookies (whose duration is limited to the time you spend viewing the website) and persistent cookies (whose duration, although limited, is longer than the time you spend viewing the website). Session cookies are only active while you are viewing the website and are deleted when you close your browser. Persistent cookies remain stored on the hard disk of your device once your browser has been closed, until you or your browser software purge them after a certain configured period or at any time."
What cookies do we use?
Retention periods for your Personal Data
The data controller makes a commitment not to retain your Personal Data longer than is strictly necessary for the purposes for which it was collected, and in accordance with the Applicable Regulations. The data controller makes a commitment to archive or delete your Personal Data as soon as the defined purpose and/or retention period expires. In all cases, the maximum durations are those set out in the table below. These maximum periods apply unless you request the deletion or cessation of processing of your Personal Data before the expiry of these periods, if their retention is no longer justified by legal requirements. Name of the type of processing: Audience measurement, management of cookies and other trackers. Associated retention period: See the durations indicated in previous paragraph. Name of the type of processing: Management of requests to exercise rights to Personal Data. Associated retention period: 5 years from the date of replying to the request. Name of the type of processing: Management of interactions with customers. Associated retention period: 3 years from last user-initiated interaction.
What are your rights concerning your Personal Data?
In accordance with the Applicable Regulations, you have a right of access to your Personal Data and, where applicable, a right of rectification, a right of opposition, limitation, as well as a right to erasure, under the conditions of the Applicable Regulations. Where the processing of your Personal Data is based on your consent, you may withdraw your consent at any time, either by the means we make available to you, or by writing to us using the contact details detailed below. For any information about the processing of your data or to exercise your rights, you can contact the RATP Data Protection Officer at the following address: RATP – Secrétariat et Direction générale Groupe – Délégué à la protection des données – 54 quai de la Râpée – LT73 – 75012 Paris or at the following email address: dpo@ratpgroup.com If you do not receive a reply from RATP, or if you do not agree with the way your data has been processed, you may lodge a complaint with the French Data Protection Authority (CNIL).
Your data are secure.
In accordance with the Applicable Regulations, RATP Connect processes Personal Data with the utmost security and confidentiality. In particular, RATP Connect implements all technical and organizational measures to guarantee the security and confidentiality of the Personal Data collected and processed, and in particular to prevent them from being distorted, damaged, or disclosed to unauthorized third parties, by ensuring a level of security appropriate to the risks associated with the processing and the nature of the Personal Data to be protected, taking into account the level of technology and the cost of implementation. Our website includes links to external websites and sources. You acknowledge that this Data Protection Policy applies only to the use of our website and does not in any way cover information collected and/or processed on external websites or sources, which may be linked to our website. Consequently, RATP Connect cannot be held responsible for the practices of such external websites or sources with regard to the collection and processing of personal data, which are governed, where applicable, by the personal data policies specific to each of those external websites or sources. RATP Connect makes a commitment to transfer data only to third parties located within the European Union or in non-European countries that have been granted an adequacy decision by the European Commission or pursuant to a contractual arrangement that complies with regulations.
