As a transport operator, the unified public group SNCF is required to ensure the safety and security of persons and property, in accordance with France’s Transport Code. To fulfill this mission it must process personal data.

SNCF Group’s Security Division uses a system that records and plays back calls made to and from the French national rail security centre (Centre National de Sûreté Ferroviaire, or CNSF).

Personal data concerning you is processed under the supervision of our Rail Operations Security Division, located at 116 rue de Maubeuge, 75010 Paris, France.

The legal basis for processing the data is the controller’s legitimate interest in ensuring the proper delivery of the passenger transport service.

When handling calls from individuals in difficult or emergency situations, we process the following categories of personal data:

• the caller’s identity
• their telephone number
• their travel information
• the voice recording of the call
• the caller’s geolocation, where applicable.

In emergency calls, health data may be collected to safeguard the caller and then coordinate an emergency response. This health data results from the questions asked by the operator.

The caller’s telephone number and the content of the call are recorded.

Voice recordings are retained for one month.

These data are used solely by the CNSF and by authorities legally authorized to access them.

We process data from the calls for the following purposes:

• to determine whether CNSF employees are handling calls appropriately and to take corrective action to improve service quality
• to determine whether SNCF Railway Security officers are using the CNSF appropriately
• to preserve evidence that may be used in legal proceedings

The data is hosted in France and is not transferred outside the European Union.

No automated decisions are made in connection with the data processed in the circumstances described here.

In accordance with applicable regulations, you may access and obtain a copy of your personal data, object to its processing, and request its rectification or erasure. You also have the right to request the restriction of processing of your data.

You may exercise your rights, subject to proof of identity, by writing to the entity responsible for the processing at the following address:

Direction de la Sûreté, CNSF, 116 rue de Maubeuge, 75010 PARIS – [email protected]

If, after contacting us, you believe that your data protection rights have not been respected, you may file a complaint with the French National Data Protection Commission (CNIL).