Privacy Policy

1. Introduction

This privacy policy aims to inform users of the website https://www.tramwaydumontblanc.fr/ about how their personal data is collected, used and protected.

Personal data is processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and applicable French law

2. Data controller

The data controller for personal data is:

Régie Départementale du Tramway du Mont-Blanc
70 Avenue de la gare
74170 SAINT-GERVAIS
SIRET : 101 732 808 0028

Email : accueil@tramwaydumontblanc.fr

The data controller determines the purposes and means of processing personal data.

3. Personal data collected

Depending on how the site is used, the following data may be collected:

Data provided directly by the user

last name and first name
email address
phone number
information relating to a contact request
information required for a booking or ticket purchase

Data collected automatically

When browsing the site:

IP address
browser type
pages visited
date and time of connection
data from cookies or trackers

4. Purposes of processing

Data is collected for the following purposes:

managing contact requests
managing bookings and ticket purchases
managing orders or bookings
administrative and commercial management
improving the user experience and site navigation
website security

5. Legal basis for processing

Processing is based on the following legal grounds:

performance of a contract (booking or ticket purchase)
legitimate interest of the data controller (site improvement, security)
consent of the user (non-essential cookies, newsletter)
legal obligations applicable

6. Data recipients

Personal data is intended solely for:

the Régie Départementale du Tramway du Mont-Blanc
technical service providers involved in operating the site (hosting, maintenance, ticketing, payment)
administrative or judicial authorities where required by law

These providers act as data processors and are subject to confidentiality and security obligations.

7. Data hosting

The site is hosted by :

Novius
55 avenue Galline
69100 Villeurbanne
France

Data is hosted on servers located within the European Union.

8. Data retention period

Personal data is kept only for as long as necessary for the purposes for which it was collected:

Data types

Contact form
Customer account
Order data
Cookies

Duration

3 years maximum
Duration of the relationship + 3 years
10 years (accounting obligation)
13 months maximum

9. Cookies

The site uses cookies and similar technologies in order to:

ensure the site functions properly
measure audience
improve the user experience

Non-essential cookies are only deposited after consent.

Users may change their preferences at any time via the site’s cookie banner.

10. Data security

The Régie Départementale du Tramway du Mont-Blanc implements appropriate technical and organisational measures to guarantee the security and confidentiality of personal data and to prevent unauthorised access to it.

11. Users rights

In accordance with applicable regulations, you benefit from various rights over your data.

The right to be informed: An organisation that collects information about you must provide you with clear information on how your data is used and on how to exercise your rights. Good information lets you know how your data will be processed, how to exercise your rights, and therefore decide whether or not to entrust your data to an organisation.

The right to data portability: The right to portability gives you the ability to retrieve part of your data in a machine-readable format. You are free to store this portable data elsewhere or to transfer it easily from one system to another, with a view to reusing it for other purposes.

The right of access: Anyone can find out about all the data concerning them held in a file by contacting those who hold it directly, and obtain a copy free of charge.

The right to rectification: You can request the correction of inaccurate or incomplete information about you. This right helps prevent an organisation from using or disseminating incorrect information about you.

The right to erasure: You have the right to ask an organisation to erase personal data concerning you. You can obtain its erasure if at least one of the following situations applies to you:

Your data is used for prospecting purposes;
The data is no longer necessary for the purposes for which it was originally collected or processed;
You withdraw your consent to the use of your data;
Your data is subject to unlawful processing (for example, publication of hacked data);
Your data was collected while you were a minor in connection with information society services (blog, forum, social network, website, etc.);
Your data must be erased to comply with a legal obligation;
You have objected to the processing of your data and the data controller has no legitimate or compelling reason not to act on this request.

The right to object: You can object at any time to an organisation using your data. The right to object allows you to oppose the use of your data by an organisation for a specific purpose.

The right to restriction: The right to restrict the processing of your data is provided for by the GDPR. If you dispute the accuracy of the data used by the organisation, or if you object to your data being processed, the law allows the organisation to carry out a verification or review of your request within a certain period. During this period, you may ask the organisation to freeze the use of your data. In practice, it must stop using the data but must still retain it.

You may exercise your rights by contacting the data protection officer at the Régie Départementale du Train du Montenvers:

By e-mail to: accueil@montenverstrain.com or DPO@rgpd-id.fr

Proof of identity may be requested to verify the request.

The Régie undertakes to respond within one month of receiving your request. This period may be extended by two months if the complexity of the request justifies it. If applicable, you will be informed of this extension and the reasons justifying the delay.