Privacy policy

Protecting your privacy is a high priority, and we use this data to manage job applications and commercial or information requests. 

Introduction

Protecting your privacy is a top priority, and we use this data to manage applications and handle commercial or informational enquiries.

Here are the eight principles to which SNCF Connect & Tech and all its employees adhere:
 

  • We never collect or use data without a specific and legitimate purpose;
  • We only collect data for one of the following purposes:
    - The data is necessary for the execution of the contracts and services requested
    - You have given your express and specific consent to the processing of your data
    - We have a duly justified legitimate interest in processing your data
  • We only collect and use data that is strictly necessary for processing;
  • We only keep data for a limited period of time, consistent with the services provided;
  • We ensure data quality and security at all times;
  • We only transfer data when necessary, and in compliance with legal and security regulations;
  • We provide you with clear and transparent information at all times;
  • We ensure that your rights are respected and that you can exercise them.
     

This privacy policy applies exclusively to the ‘sncf-connect-tech.fr’ website.

What is your data used for?

SNCF Connect & Tech only collects and uses data about you for specific purposes that are limited to what is necessary for you, namely:
 

  • Managing applications and recruitment:
     
    • Create your recruitment file
    • Allow us to contact you
    • Follow-up on your file
    • Communicate with you: in the context of your application, we will only send you electronic communications, via e-mail, for the following reasons:
      • Submission of an application: you will receive an e-mail indicating that your application has been successfully registered.
      • A request for assistance or submission of questions/suggestions: SNCF Connect & Tech will respond by e-mail to the Internet user who requests assistance in consulting their application, logging on to the site, etc.

The legal basis for this processing is your consent.
 

  • Job offers: SNCF Connect & Tech may occasionally propose job offers, internships or work-study programmes based on your profile, and only if you have previously agreed to this when we contacted you by e-mail following your application. You may, however, unsubscribe from this service by clicking on the unsubscribe link at the bottom of the e-mail.

The legal basis for this processing is your consent. 
 

  • Communicating with you: SNCF Connect & Tech may send you electronic communications if you have agreed to this. We only do this on a reasonable basis, and we only send you electronic communications via e-mail.

The legal basis for this processing is your consent.
 

  • Downloading value-added content (white papers, brochures, documentation, etc.) and manage our relations with business prospects: when you wish to access certain content available on the Website, SNCF Connect & Tech may collect your data to enable you to download the requested document, to manage the follow-up of your request, to build and update its database of business prospects, and to send you communications, information or marketing messages relating to its activities, services, expertise, content or events aimed at professionals.

    The legal basis for this processing is SNCF Connect & Tech’s legitimate interest in promoting its activities to professionals. 

    The use of your data for marketing purposes can be objected to at any time, easily and free of charge, including:

  • when your data is collected, via the opt-out option provided on the form;
  • or by using the unsubscribe link included in every email.
     
  • Responding to your commercial or informative requests via the form provided on the Site. 

The legal basis for this processing is your consent. 

What is our data management policy?

What data do we collect?
 

SNCF Connect & Tech scrupulously observes the principle of minimisation, i.e. only collecting the data strictly necessary for the purposes defined below:
 

  • Identification data (surname, first name, e-mail address): this data is essential:
    • to communicate with you, if you have agreed to this;
    • to create your application file;
    • to send you the requested content, process your request and contact you in a professional capacity.
  • Data relating to your professional experience (CV and cover letter, if applicable): this data is essential for your application to be considered;
  • Technical data (browser version, operating system, terminal model, IP address, etc.): this data is necessary for optimal display and operation of the Site;
  • Browsing data (searches, number of visits, date of last visit, etc.) (statistics).

 

How do we collect it?
 

Data is collected from various sources: 
 

  • You:
    • When you fill in forms on the SNCF Connect & Tech site (application form for a job offer, commercial or information contact request);
    • When you navigate on the Site (pages consulted, duration of page consultation, and other information collected thanks to cookies and tracers);
       

When information is collected via input forms, you are informed of which data is necessary and which is optional by means of asterisks on the input forms.
 

  • Technical information
    • Your IP address;
    • Information provided by the browser about the operating system and browser used;
  • Cookies and tracers: see the 'Manage your cookies' tab.
     

 

For how long is the data stored?
 

Data is kept only for as long as is strictly necessary:
 

  • To process your application;
  • For possible new job offers;
  • To send you e-mails if you request this via the contact form.
     

SNCF Connect & Tech's general data retention policy is as follows:
 

  • Identification data: maximum of 2 years from the last date of visit to the site or your last request;
  • Professional experience data: 2 years from the date of application;
  • Cookies: maximum of 13 months from the date they are deposited on your computer or terminal;


 

What measures are taken to ensure security?
 

SNCF Connect & Tech is particularly vigilant about the security of your data, and therefore dedicates significant human and technical resources to ensure its protection. A strict security policy is in place to define the processes, working methods and technical protection rules to be implemented. Here are just a few concrete examples of the security measures we have implemented:
 

  • automated protection systems against cyber-attacks are active;
  • computer codes for SNCF Connect & tech services are subject to security-oriented code reviews;
  • automated tools periodically run security tests on websites;
  • website security is audited by expert firms;
  • access to personal customer data is subject to strict access controls;
  • cybersecurity experts can be called in at any time to deal with security incidents.

Will your data be transferred to third parties?

General framework
 

SNCF Connect & Tech's policy is very clear on this subject: we do not transfer any data to third-party companies for any reason other than one of the following:
 

  • Subcontracting : SNCF Connect & Tech uses service providers in order to operate its Site, and in particular:
    • Its main IT subcontractor is SNCF Connect & Tech Services, a 100% subsidiary of SNCF. In fact, the majority of data is internalised and does not leave the SNCF Group.
    • For customer relations: call centres, communication tools.
    • For recruitment: Workday IT solution and partner Yaggo.
    • Site optimisation: https://lanetscouade.com/ agency.
       

For all these data processing operations likely to be carried out in conjunction with third parties, we take great care to ensure the security of our relations with these companies: contracts, audits, security assurance plan, limitation of purposes, etc.


 

Specific case for transfers outside the EU
 

Our policy is to not transfer data outside the European Union.

How can you exercise your rights?

What are your rights?
 

In accordance with the provisions of Regulation No. 2016/679, also known as the General Data Protection Regulation (GDPR), you have the following rights to your data and to ensure that SNCF Connect complies with its commitments.
 

  • Right of access: You have the right to contact us to find out what data SNCF Connect has about you.
  • Right of correction and deletion: You have the right to correct data concerning you and to request its deletion.
  • Right to object: You have the right to object to SNCF Connect carrying out certain processing operations.
  • Right to portability: You have the right to ask SNCF Connect to send you your personal data (identification and order data only) in electronic format (csv file).
     

Please note, however, that the exercise of these rights is not absolute, and may be restricted for reasons of legitimate interest (customer disputes) or for legal reasons.
 

For example, for security reasons, these rights can only be exercised by the person making the request. For example, you cannot exercise these rights on behalf of a third party (including a spouse) without being authorised to do so by that person. This is why we check your identity before granting your request. Finally, we would like to point out that we will not be able to grant your request if it is unfounded, or manifestly excessive (for example, if it proves too technically complex or if you exercise your right of access multiple times, in quick succession, for data that has already been provided to you), or if the data has been deleted, in accordance with the data retention periods indicated in this charter. 

 

How can you exercise your rights?
 

For all requests concerning recruitment:
 

  • If you created a personal profile on the Workday platform when you applied:
  • If you do not receive a response, please contact the Human Resources Department at the following email address: [email protected].
     

For all other requests: 
 

Rights of access, correction, deletion and portability:

If you have a customer account, you can carry out most of these operations directly by logging into your customer account.

Otherwise, you can contact SNCF Connect & Tech via the following page 'https://forms.sncf-connect.com/form-50364/' or by post at the following address: Customer Service - SNCF Connect & Tech - 2, place de la Défense - CNIT 1 - BP 440 - 92053 Paris la Défense Cedex
 

Right to object:

You can exercise your right to object in the following ways:
 

  • For newsletters: by clicking on the unsubscribe link at the bottom of newsletters sent to you, you will be unsubscribed and will no longer receive newsletters from us.
  • For personalisation and cookies: by using the cookie management system at your disposal  (https://www.sncf-connect.com/app/account/consentManagement).
  • For any other request: by sending your requests to SNCF Connect & Tech via the following page  'https://forms.sncf-connect.com/form-50364/' or by post to the following address: Customer Service - SNCF Connect & Tech - 2, place de la Défense - CNIT 1 - BP 440 - 92053 Paris le Défense Cedex
     

For all these requests, and for security purposes, you will be asked to identify yourself, and to provide our customer service department with a copy of your ID if we are unable to identify you by other means. 


 

What should I do if I have a complaint?
 

If you are not satisfied with a response to one of these rights, or if you have a dispute about the use made of your data, you can send your requests to:
 

And what about social media?

The Site uses social network plug-ins, in particular YouTube, X, and LinkedIn. If you interact with these plug-ins (by activating the 'Like' or 'Share' buttons), information relating to your browsing and operations carried out on the Site will be transmitted to the company operating the social network concerned.

Moreover, if you do not wish a social network to which you belong to link the information collected when browsing the Site, you must disconnect from the social network in question before visiting it.

In any case, the use of these plug-ins or of data collected when browsing with an activated social network is exclusively governed by the Terms and Conditions of Use of the social networks concerned. For this reason, we invite you to consult the personal data protection policies of these social networks, so that you can find out exactly what information is collected and how it is used.

What is SNCF Connect & Tech's cookies policy?

What is a cookie?
 

Cookies are files deposited in the browser of your computer or terminal during your browsing on the SNCF Connect & Tech website. These files are then automatically sent by the browser to SNCF Connect & Tech servers during your browsing, in order to:

  • Track customer navigation on the site to ensure optimisation;
  • Manage advertising on and off SNCF Connect & Tech services.
     

 

Detailed description of cookies placed on the SNCF Connect & Tech site: 
 

Technical cookies:

These cookies are necessary for the proper functioning of the SNCF Connect & Tech site and for your browsing, and therefore cannot be configured in accordance with the recommendations of the Commission Nationale de l'Informatique et des Libertés (CNIL). 

The processing of these cookies is based on the legitimate interest as referred to in Article 6, 1 (f) of the General Data Protection Regulation (GDPR) of SNCF Connect & Tech.

Tracking cookies:
 

  • Audience measurement: statistical data on the number of visits to and use of SNCF Connect & Tech sites (targeted sections and content, user journey) in order to measure and study the operation and effectiveness of our services, and thus improve their interest and ergonomics.

The processing of these cookies is based on user consent.

How are they set up?
 

In accordance with the recommendations of the CNIL, when browsing our services, you are informed of the existence of cookies via the navigation banner that appears on your first visit or in the event of the deletion of cookies deposited by SNCF Connect & Tech.

We retain your choices concerning the deposit of cookies for a maximum of 13 months.
 

 

How can you express your choices concerning cookies?
 

You can configure your browsing preferences: