Personal Data
General notices on data protection
- EU Regulation 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),
- Law No. 78-17 of 6 January 1978 as amended relating to information technology, files and freedoms and Decree No. 2019-536 of 29 May 2019 taken for the application of the aforementioned Law No. 78-17
Identity of the data controller
The data controller is the Société de la Ligne Nouvelle Provence Côte d’Azur, as a legal entity, represented by Mr. Folco LAVERDIERE, General Director, 27 place Jules Guesde 13481 MARSEILLE Cedex 20.
The subcontractors
The Société de la Ligne Nouvelle Provence Côte d’Azur may use subcontractors. It guarantees that it verifies and requires that these subcontractors provide sufficient guarantees in terms of personal data protection.
Processing purposes
Legal basis for the purposes of processing and mandatory or optional nature of the collection
For each of the purposes of each specific processing of personal data that we collect from you, we will indicate the legal basis for that purpose (consent, contractual performance, legal obligation, performance of a public interest mission with which the Société de la Ligne Nouvelle Provence Côte d’Azur is entrusted).
Institutional communication falls under the public interest of the Société de la Ligne Nouvelle Provence Côte d’Azur.
Governance management falls under legitimate interest.
The management of the financial revenues of the public establishment falls under legal obligation.
It will also be specified whether the collection of your personal data is mandatory or optional as well as the possible consequences if you choose not to provide them.
If the processing is based on your consent, you may withdraw your consent at any time.
Recipients of your personal data.
For each specific processing of personal data that the Société de la Ligne Nouvelle Provence Côte d’Azur collects from you, we will indicate the recipients of this data. These recipients may be the teams of the public establishment and its subcontractors.
The subcontractors of the Société de la Ligne Nouvelle Provence Côte d’Azur will have limited access to only the personal data strictly necessary for the performance of the services concerned, and have a contractual obligation to use them in compliance with the regulations in force regarding personal data.
The Société de la Ligne Nouvelle Provence Côte d’Azur commits to not transmitting your personal data to any third party other than its subcontractors. Under no circumstances does the Société de la Ligne Nouvelle Provence Côte d’Azur sell, transfer or exchange your personal data to third parties for commercial purposes.
Retention period of personal data
The retention period of your personal data is strictly linked to the legal basis of the processing (contractual, legal and regulatory or other), the nature of the personal data concerned and the purpose of the processing.
For each specific processing, the Société de la Ligne Nouvelle Provence Côte d’Azur will inform you of the retention period. Regarding financial resource management, the retention period is that of the occupation by the person concerned of the position of manager or preferred contact of the Société de la Ligne Nouvelle Provence Côte d’Azur for the management of tax revenues.
At the end of the retention period strictly necessary for the aforementioned purpose or in the event of the exercise of your rights, the Société de la Ligne Nouvelle Provence Côte d’Azur commits to destroying all your personal data within the limits and conditions provided for in terms of compliance with its legal obligations (see below “Your rights”).
Security of personal data
In the context of implementing its public policies, the Société de la Ligne Nouvelle Provence Côte d’Azur attaches the utmost importance to the security of your personal data. The Société de la Ligne Nouvelle Provence Côte d’Azur commits to taking all necessary precautions and implements appropriate technical and organisational security measures to permanently guarantee a level of protection adapted to the risks of infringement of your privacy and your personal data against alterations, destructions, violations and unauthorised access.
Personal data is stored on hosting servers located in the European Union or in third countries whose level of security in terms of personal data protection is in line with that offered in the European Union and the European Economic Area.
In accordance with current regulations, Arsud maintains a register of personal data processing activities.
Your rights
Right of access:
You have the right to request information about the personal data we hold about you.
Right of rectification :
You have the right to request the rectification of your personal data if it is inaccurate, including to complete your incomplete personal data.
Right to erasure/right to be forgotten :
You have the right to request, at any time, the erasure of all your personal data processed by the Société de la Ligne Nouvelle Provence Côte d’Azur in the following cases:
- Your personal data is no longer necessary for the purposes for which it was collected;
- You decide to withdraw your consent on which the processing is based and there is no other legal basis for the processing;
- You object to the processing and there are no overriding legitimate grounds for the processing;
- Your personal data has been the subject of unlawful processing;
- A legal obligation requires the erasure of your personal data.
However, these obligations do not apply to the extent that this data processing is necessary:
- For the exercise of the right to freedom of expression and information;
- To comply with a legal obligation to which the data controller is subject;
- To perform a task in the public interest or in the exercise of official authority vested in the data controller;
- For the establishment, exercise or defence of legal claims.
Right to object to the processing of your data:
You have the right to object at any time to the processing of your personal data unless the Société de la Ligne Nouvelle Provence Côte d’Azur presents legitimate and overriding grounds for the processing.
Right to restriction of processing:
You have the right to request that the Société de la Ligne Nouvelle Provence Côte d’Azur restrict the use of your personal data in the following circumstances:
- You contest the accuracy of your personal data;
- The processing is unlawful and you object to its erasure and request instead the restriction of its use;
- The Société de la Ligne Nouvelle Provence Côte d’Azur no longer needs your personal data for the purposes of the processing but it is still necessary for you for the establishment, exercise or defence of legal claims,
- You have objected to the processing during the verification as to whether legitimate grounds override the processing.
You can exercise these rights by sending an email to the following address: dpd@slnpca.fr
Right to lodge a complaint with a supervisory authority
If you consider that the processing of your personal data constitutes a violation of the legislation in force, you have the possibility of lodging a complaint with the Commission nationale de l’informatique et des libertés (CNIL).
The Data Protection Officer (DPO)
Confidentiality of personal data
The Société de la Ligne Nouvelle Provence Côte d’Azur guarantees the confidentiality of your personal data processed and ensures that the persons authorised to process it also commit to respecting this obligation of confidentiality.