Data Controller:

Direction de la Sûreté SNCF – 116, rue de Maubeuge – 75010 Paris

DPO:

SNCF has appointed a Data Protection Officer: [email protected]

About:

The VIESTA project, in which SNCF is a partner, aims to develop security incident detection solutions as part of a project funded by Bpifrance. Within the framework of this project, an anonymization solution is being developed to build a library of anonymized CCTV images (no longer containing any data that could identify individuals present in the images) that can be used for training or validating image analysis algorithms. The processing has no impact on data subjects as the process is irreversible and does not allow identification of any person in the images. Only anonymized images are retained. 
No biometric data will be processed or stored.

Purposes:

The processing serves a Research & Development purpose. It aims to anonymize CCTV images to allow their retention beyond the legal 30-day period for algorithm development and training purposes without using personal data.

Project scope:

Train stations concerned:

• Paris Gare du Nord, located at 18 rue de Dunkerque 75010 Paris
• Paris Gare de Lyon, located at place Louis Armand 75012 Paris

The selection of images to be anonymized will be made randomly without criteria for dates, times, or zones over a defined period from 15/01/2026 to 31/01/2026 and concerns a maximum of 50 cameras.

Data retention period:

The only data processed are images from the existing CCTV system. These are retained for the duration of processing for a maximum legal period of 30 days.

Data recipients:

The anonymized images will be retained and used by the VIESTA consortium partners for algorithm training. No personal data is retained or shared.

Data Transfer Outside the EU:

The data is hosted in France. It is not subject to any transfer outside the European Union.

Legal basis:

The legal basis for processing is the legitimate interest of the data controller.

Contact: 

In accordance with current regulations on the protection of personal data (General Data Protection Regulation, known as "GDPR"), you have the right to access, object to, and erase your data. To exercise your rights or for any additional information, an email address is available: [email protected]

If you believe, after contacting us, that your data rights are not being respected, you may file a complaint with the CNIL.