Special Conditions - Protection of Personal Data

These Special Terms and Conditions supplement the General Terms and Conditions of Use ("GTCU") of the Site, which can be accessed here.

The Editor is responsible for the processing of personal data carried out by the Site. You will find the Editor's contact details on this page.

The purpose of these Special Terms and Conditions is to inform you of the purposes and conditions under which we may process data about you, and to identify and enable you to exercise your rights in relation to such data.

When you access the Site or in the course of providing our services, we may collect and process personal information about you for the purposes set out in the following table:

Purposes for which data may be processed	Categories of data processed *	Principal legal basis for processing
Audience management and measurement of traffic or usage; improvements to our tools and services	- technical data (IP addresses, technical identifiers, geolocation) - browsing data (pages visited, services used)	Your consent
Newsletter management, participation in promotional campaigns, user satisfaction measurement	- identification data (last name, first name, e-mail)	Your consent
Claims management, lost and found management, information request management	- identification data (surname, first name, address, telephone, e-mail) - personal data (nature of request, details of request, response, date of exchanges, resolution indicators)	Your consent
Management of purchases of transport tickets and other products or services	- identification data, - purchase data, - payment data	Performing a contract with you

(*) the types of data indicated in brackets enable you to identify examples of the data processed in the course of the operations under consideration. These examples are not exhaustive.

When you access or use certain services, we may provide you with additional or specific information relating to the data processing implemented for these services.

Unless we obtain your specific consent, we will not communicate or make available to third parties any data concerning you for the purposes of commercial or promotional prospecting for third-party products or services.

Where processing is based on your consent, you are reminded that your consent may be withdrawn at any time.

No decision having legal effects against you is taken by exclusively automated processing.

Some of the data collected is required to access our Services and those of our partners. In this case, the required fields or information are indicated to you for this purpose. If you choose not to provide certain required personal data, we may not be able to provide you with the services you have requested or fulfill the purposes for which we process personal data.

In addition, we may publish, disclose and use aggregated information (information about all users or specific groups or categories of users combined in such a way that an individual user can no longer be identified or referred to) or non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other commercial purposes.

SHELF LIFE

Your personal data will only be kept for as long as is necessary to fulfil the purposes for which it was collected.

Please note that the general principles of data retention are :

- data relating to the management of your requests and complaints may be kept until the end of two calendar years from the date of collection;
- data relating to the management of purchases may be kept until the end of five calendar years from the date of collection;
- data relating to the management of cookies may be kept until the end of 6 months from the date of collection;
- data relating to the sending of newsletters is kept for the duration of your subscription. You can unsubscribe at any time on request.

Some of the specific data processing operations we carry out may have different retention periods, in particular if their retention is made necessary by a legal obligation or to enable us to exercise our rights.

If you wish to obtain more details on the specific retention rules for a given processing operation, please contact our Data Protection Department and/or the Data Protection Officer (contact details below).

SECURITY AND DATA TRANSFER

In accordance with current regulations, we take the necessary measures to ensure that personal information is protected in terms of its security, integrity and confidentiality.

Any transfers of data are carried out in compliance with regulations, and are governed in particular by the standard contractual clauses drawn up by the European Commission.

For the purposes set out above, we may communicate information about you to our subcontractors and service providers; some of these companies may be located outside the European Union and outside countries recognized by the European Union as having laws guaranteeing adequate protection of personal data.

Information concerning you may be communicated to any person or any public or private entity, in particular administrations or professional orders, when such communication is provided for by law or regulation.

We may also process information about you for the purposes of administering and monitoring compliance with our internal policies and procedures, auditing, or to administer, manage or defend against claims or legal actions.

Should we become involved in a merger, acquisition, sale of assets or receivership, we may be required to sell or share all or part of our assets, including personal data.

In the event of termination of the public service concession, or during the course of the concession in the event of an audit, data concerning you will be communicated to the grantor of the transport service designated in the preamble.

EXERCISE OF RIGHTS

In accordance with the regulations, you may exercise your rights of consultation, rectification, opposition, deletion, limitation of processing and portability, under the conditions of the applicable regulations, on your personal data that we may hold, by sending a request mentioning your name, first name, address and enclosing a copy of a proof of identity, by the means of your choice:

By post to : Altibus - Protection des données, 926, avenue de la Houille Blanche 73000 CHAMBÉRY
By e-mail via our complaints form
You can also send us your instructions concerning the fate of your personal data in the event of your death, and in particular the way in which you wish the aforementioned rights to be exercised.

In general, we remain at your disposal for any additional information or complaint relating to the processing of personal data that we implement. We undertake to reply promptly, in accordance with the deadlines imposed by the applicable regulations.

Please note that the French supervisory authority for data processing is the Commission Nationale de l'Informatique et des Libertés, www.cnil.fr, from which you can request information or lodge a complaint.

UPDATES AND AMENDMENTS TO SPECIAL CONDITIONS

We reserve the right to modify these Special Terms and Conditions at any time. Their effective date is indicated at the beginning of the text. Please refer to them periodically and in particular whenever you provide us with personal information.