As a transport operator, the unified public group (GPU) SNCF is required to ensure the safety and security of persons and property, in accordance with France’s Transport Code.

To fulfill this mission, the Railway Security Division has established an alert system that allows users of SNCF transport services to report dangerous situations. This system includes a dedicated service enabling users to contact the French national rail security centre (Centre National de Sûreté Ferroviaire, or CNSF) directly by telephone or SMS.

This allows us to respond appropriately to such reports.

In these circumstances, the collection, recording and retention of personal data are essential.

Personal data concerning you is processed under the supervision of our Rail Operations Security Division, located at 116 rue de Maubeuge, 75010 Paris, France.

The legal basis for processing the data in these circumstances is consent. This means that the individual has agreed to the processing of their personal data for specific purposes.

Furthermore, consent is obtained through clear, affirmative action by the individual.

When handling calls from individuals in difficult or emergency situations, we process the following categories of personal data:

• the caller’s identity
• their telephone number
• their travel information
• the recording of the phone calls and SMS messages
• the caller’s geolocation, obtained with their consent (including when location services are enabled in the app)

In emergency calls, health data may be collected to safeguard the caller and then coordinate an emergency response.

This health data results from the questions asked by the operator. The caller’s telephone number and call and SMS message content are recorded.

Written data are retained for one year, and voice recordings for one month, exclusively for use by the unit(s) involved.

Disclosure of this data is limited to: The French national rail security centre (Centre National de Sûreté Ferroviaire, or CNSF), the transport providers that use the service (TER, Transilien, SNCF Voyages, Intercités, RATP), for relevant calls, and the authorities with legal authorization to access them.

We process data from the 31 17 and 31 17 7 hotlines for the following purposes:

• to respond to and assist individuals who call the hotline or send messages via SMS or the app
• to contact individuals for follow-up when necessary
• to record calls for service-quality and training purposes
• to provide recordings to the police in the event of legal proceedings
• to log statements made by individuals
• to produce anonymous statistics

The data is hosted in France and is not transferred outside the European Union.

No automated decisions are made in connection to the data processed in the circumstances described here.

In accordance with applicable regulations, you may access and obtain a copy of your personal data, object to its processing, and request its rectification or erasure. You also have the right to request the restriction of processing of your data.

You may exercise your rights, subject to proof of identity, by writing to the entity responsible for the processing at the following address:

Direction de la Sûreté, CNSF, 116 rue de Maubeuge, 75010 PARIS – [email protected]

If, after contacting us, you believe that your data protection rights have not been respected, you may file a complaint with the French National Data Protection Commission (CNIL).