Privacy policy
Préeamble
The company “Keolis Gironde” makes every effort to protect your personal data in accordance with applicable European and French regulations.
This Privacy Policy (hereinafter the “Privacy Policy”) aims to inform you about the purposes and conditions under which we may process personal data collected through our various channels, such as our commercial services, our website https://keolis-gironde.com, our social media, and any events we may organize.
Our Cookie Management Policy, accessible at https://keolis-gironde.com/politique-de-gestion-des-cookies/, complements this Privacy Policy by providing information on the purposes and conditions for using cookies or browsing data that may be deployed on our websites and mobile applications.
We encourage you to take the time to read this Privacy Policy to ensure you have all the relevant information to understand how we use your personal data and to freely and fully exercise the rights granted to you by applicable laws and by this Privacy Policy.
I- General provisions
- Data Controller
The data controller for your personal data is Keolis Gironde.
- Terms of Use
The Privacy Policy is an integral part of the terms of use for the website and online services and should be read in conjunction with them (these terms are accessible under Legal Notice: https://keolis-gironde.com/mentions-legales/).
- Applicable Law and Competent Regulatory Authority
The Privacy Policy is governed by the General Data Protection Regulation No. 2016/679 (“GDPR”) and by the French Data Protection Act No. 78-17 of January 6, 1978, as amended (“Loi Informatique et Libertés”), under the regulatory supervision of the French Data Protection Authority, the CNIL (Commission Nationale de l’Informatique et des Libertés – www.cnil.fr).
- Links to Third-Party Websites
Our website may contain or use links to websites, mobile applications, products, or services operated by third parties (including advertising sites, partners, or social networks). Please note that this Privacy Policy does not extend to these third parties over whom we have no control and for whom we cannot be held responsible.
We encourage you to review the privacy policies, procedures, and practices of these third parties.
II – The personal data we collect
The Privacy Policy applies to personal data we may collect from or about you (see below) from the following sources:
- Completion of our paper or electronic data collection forms during events or operations organized by Keolis Gironde in which you participate;
- Contact requests or exchanges via email/mail and/or phone with our customer relations services.
III – Use of collected data and retention periods
We collect and use your personal data for the main purposes described below:
- Responding to your requests and providing information, based on your consent.
- Better understanding your needs and expectations regarding the website and its use, measuring its usage to evolve it, based on your consent.
- Processing the exercise of your rights and your complaints, based on legal obligations.
- Complying with laws, regulations, and legal requests and orders.
We retain your personal data only for as long as necessary to fulfill the various purposes defined in the section above titled “Use of Your Personal Data,” unless the law permits or requires us to retain it longer.
The table below summarizes the different maximum retention periods applicable to us based on the purposes for which your personal data may be processed. These maximum durations apply unless you request the deletion or cessation of the use of your data before their expiration for a reason compatible with any legal obligation that may apply to us.
| Purposes | Retention Period |
|---|---|
| Processing your information requests | 1 year from the request |
| Processing your job applications | Retained for 2 years after the submission of information or the last contact with the candidate, unless otherwise indicated by the candidate |
| Managing complaints | 5 years from the closure of the complaint |
| Audience measurement, website personalization, and management of cookies/tracers | 13 months from the deposit of the cookie and/or tracer |
| Managing requests for access, rectification, deletion, opposition, limitation, and portability of personal data | 5 years from the receipt of the request |
IV – Data transmission
Your personal data may be communicated by us:
- Internally
To authorized departments of Keolis that need to know for the purposes mentioned above, including individuals dedicated to the Marketing and Commercial Department who manage occasional transport services. - Within the Keolis Group
We may share your personal data with certain entities within the Keolis Group to ensure continuity in responding to your requests for quotes. Your data will be transmitted to the subsidiary concerned with your quote request so that it can respond. The relevant subsidiary will handle your request as a distinct data controller. Your data will then be processed in accordance with the general terms and conditions of sale and use of the services of the subsidiary, which will be provided to you by the subsidiary, and the privacy policy of the relevant subsidiary, which you can consult by contacting them directly. - To third-party service providers
We may share your personal data with trusted third parties, located inside or outside the European Union, to help us operate the site and ensure its proper functioning. - To third parties for legal reasons
In cases where we are required to comply with laws and regulations and legal requests or orders, or if permitted by law. - In any case
We always require these recipients to provide sufficient guarantees of confidentiality and security and to take the necessary physical, organizational, and technical measures to protect and secure your personal data, in accordance with applicable legislation. Any transfers of data outside the European Union are governed by mechanisms validated by the European Commission or competent authorities.
V – Data security
We secure your personal data by implementing appropriate physical, organizational, and technical measures to prevent unauthorized access, use, disclosure, alteration, or destruction, in accordance with applicable regulations.
These measures include, in particular:
- Storage on secure servers within the European Union;
- Limited access to your data based on a “need to know” basis.
Although we take all possible measures to protect your personal data, we cannot guarantee the security of information transmitted over the website if a security breach affects your device or browser.
VI – Your rights regarding your personal data
Under the GDPR and the Data Protection Act, you have various rights, including:
- Access, modification, updating, and deletion of your personal data
You can request access to your personal data held and processed by us, review it, obtain a paper or electronic copy, and request correction, updating, or deletion.
- Opposition
You may, at any time, request that certain data of yours no longer be subject to processing.
- Portability
You can request that your data being processed be provided to you in a machine-readable and open format, whether for your personal use or to transfer it to another data controller.
- Limitation of processing
In certain cases, you can request that the processing of your data be limited.
- Complaint to a Supervisory Authority
Without prejudice to any other legal remedies, you have the right to file a complaint with the supervisory authority of the EU country in which you reside, work, or believe that a violation of your rights has occurred.
- Post-mortem fate of your data
You have the option to define the post-mortem fate of your data.
You can exercise all these rights by sending us a written request, accompanied by proof of identity (where necessary to verify your identity), to the contacts mentioned in Article VIII “Contact Us.”
We will strive to respond to your requests as quickly as possible and in accordance with applicable regulations. However, in certain cases, we may not be able to respond favorably in order to comply with our legal or contractual obligations.
VII – Modification of the privacy policy
Keolis Gironde may make changes to the Privacy Policy.
We encourage you to regularly check this page to stay informed about any modifications and to learn about the measures we take to protect your personal data.
VIII – Contact us
To exercise your rights or for any questions regarding the Privacy Policy, please contact us at the email address keolis-gironde@keolis.com or at the postal address ZA d’Issac 33160 Saint-Médard-en-Jalles.
For any questions regarding the processing of your personal data, you can also contact our Data Protection Officer at dpd.aquitaine@keolis.com.
The Privacy Policy was last updated on 01/10/2024.