Personal data

At CNR, your private life is a priority

To ensure as much transparency as possible for you, this policy to protect personal data describes how the Compagnie Nationale du Rhône (“CNR”, “we”, “our”) uses your personal data collected from this site.

This policy gives you more information on:

• Who we are
• The data we collect
• The data sent by third parties
• How we use your data
• The recipients of your data
• The transfer of your data
• How we conserve your data
• Your rights
• Who you can contact

Our personal data protection policy

The processing of the personal data collected on this site is done by CNR, a joint stock company with a paid-up capital of €5,488,164, registered on the Trade and Companies Registry of Lyon under number 957 520 901, whose head office is located at 4 rue André Bonin 69004 Lyon – France.

What is personal data exactly?

They are data that can be used to identify you directly or indirectly.

The data we can collect from you directly are the following:

• Contact data (for sites with forms): name, first name, email address, telephone number.
• Contents (for sites providing the possibility of leaving a message): contributions, messages, questions, etc.
• Statistics and use data: your interaction with our website and our services, the pages and links consulted, information on the system configuration, the functions used and the queries submitted, and connection and timing data associated with the use of services,
• Information related to marketing and communication: Preferences regarding the newsletter, including any opposition that you may have expressed.
• Data resulting from your interaction with us: Technical information. Information linked to the device or browser that you use to access our website and services.

Some of the data listed above are mandatory to benefit from our services, and without which it will not be possible to access them. Mandatory data are indicated by an asterisk on our website. All the other data are optional.

Data obtained from third parties or from other sites

Besides the personal data that we obtain from you, we can obtain, in conformity with the law applicable on the subject, certain personal data when you interact with us or with our content via online advertising or social networks from which we receive data originating from your interaction with said advertising or content (for example, data you have accepted to share, basic profile data or the content consulted and data on advertising that has been shown to you or on which you have clicked). By interacting with our advertising and social networks, you consent to our use of the data originating from these networks in conformity with the present confidentiality policy. To know more about how the data originating from a third party social network are obtained by CNR, or to refuse the sharing of said data, we invite you to visit the site of the third party social network concerned.

Your data are essential for our services and your experience

We process your personal data for the following purposes:

Purposes	Legal basis
Communicate with you. To answer your demands, we supply information concerning our activities and/or services	The performance of pre-contractual measures taken at your demand and/or the performance of the contract.
Share our contents. On-lining contributions and opinions on public surveys, guestbooks, digital murals, etc.	Legitimate interest
To keep you informed. To propose you personalised data on our news, activities and/or services depending on your profile, your centres of interest and recent interactions with CNR.	Your consent
Site availability. To deposit and reading of cookies required for the site to function.	Our legitimate interest
Audience analysis and measurement. To analyse the use of the website to measure and improve its performance.	Your consent and legitimate interest (more information in the cookie banner).
Archiving. To archive personal data to protect our rights and the rights and security of third parties.	Our legitimate interest in protecting our rights and the rights and security of third parties.

Your data are in good hands

Your personal data are sent to each of the following people, services and organisations concerned by them:

• to persons authorised in CNR’s services: sales, accounting, marketing and information technology;
• to the companies of the CNR group (subsidiaries; shareholders)
• to service providers and subcontractors assigned by CNR to assist in the management of:
  – the website (hosting, maintenance, video integration,)
  – its sales activities (emailing, routine activities (consulting)).
• to the purchaser of our company or its assets in the event of a purchase or in the case of a change of control.
• Your personal data can be disclosed to a third party if CNR is obliged by a law or a regulatory provision, a judicial order or if said disclosure is required in the framework of an investigation or procedure (judicial or administrative) in France or abroad, or necessary to recover unpaid invoices, investigate, prevent, or take measures regarding illegal activities or presumed frauds.

Protection in all countries

In the framework of its services, CNR can call on service providers, resources or servers located anywhere in the world and in particular the United States of America. Your personal data can therefore be transferred to a country outside the European Economic Area (EEA), in which the level of data protection may be considered as insufficient by the European Commission. In such cases, your data are protected sufficiently by contractual clauses approved by the European Commission and by any other procedure recognised by the applicable legislation. You can obtain a copy of the transfer procedure on demand.

We never conserve your data for longer than necessary

The data collected via contact forms are archived for purposes of proof for 2 years counting from the processing of the demand.

The personal data used for sending the newsletter are kept for 3 years counting from their collection or from the last contact with you unless you object to such conservation.

Contributions to public surveys are conserved for as long as you do not make the request to delete your contribution or when such a decision has become definitive (exempt from any recourse).

Contributions to guest books are placed online until the request to delete them is made.

To know more about durations of conservation of the data stored via cookies, we invite you to consult our cookie policy accessible at the foot of the page of the internet site.

Your rights: access, rectify, oppose, etc.

Your rights as the person concerned are:

• Right of access (Article 15 of the GDPR): you are entitled to demand if CNR processes your personal data, and if so, access to your personal data and to information on the conditions under which they are processed.
• Right of rectification (Article 16 of the GDPR): you are entitled to demand us to correct or complete your personal data.
• Right to deletion (Article 17 of the GDPR): you are entitled to demand the deletion of your personal data that we conserve, unless processing is required to ensure freedom of expression and information, the performance of a legal obligation, for reasons in the public interest or for the establishment, exercise or defence of legal claims.
• Right of limitation (Article 18 of the GDPR): you are entitled to limit the processing of your personal data, insofar as you contest the exactness of the data, that their processing is illicit, but that you refuse to delete them or that we no longer need the data, but you need them to establish, exercise or defend a legal claim or you are opposed to the processing of your data and you wish to limit their utilisation during the verification focusing on knowing whether the legitimate reasons that we pursue justify continuing said processing.
• Right to portability (Article 20 of the GDPR): you can demand your personal data that you have provided to us in an organised, common format readable by machine or to demand that they be transferred to another processing manager. We inform you that this right cannot be implemented unless your data are processed automatically and on the basis of your prior consent or on that of the performance of a contract concluded with you.
• Right of opposition (Article 21 of the GDPR): you are entitled to oppose at any moment the processing of your personal data necessary for the purposes of the legitimate interests we pursue. We draw your attention to the fact that despite your request, we may be led to continuing this processing if there are legitimate or imperative reasons justifying the processing or for the establishment, exercise or defence of legal claims.
• Digital will: you have the right to provide us with specific instructions relating to the fate of your personal data after your decease and in particular concerning their conservation or deletion.
• Right to withdraw consent (Article 7, al. 3 of the GDPR): when processing is based on consent, it is possible to withdraw said consent at any moment.
• Cancellation of subscription and newsletter: You can decide at any moment to choose not to receive our newsletter by using the subscription cancellation link included in every message. You can also inform us of your desire to cancel your subscription by email by contacting our Data Protection Manager (see below).

To exercise these rights, contact the Data Protection Manager (DPM) directly by letter or email, and provide your name, first name and email address:

CNR
Délégué à la Protection des données, DJEA
2 rue André Bonin
69316 Lyon Cedex 04
données.personnelles@cnr.tm.fr

In case of difficulty, you have the right to submit a complaint to the authority competent in the matter (the CNIL for France).

Updating and modification of the present personal data protection policy

The present personal data protection policy was updated in October 2024. The present policy may be modified at any time, in particular due to the introduction of new services or technologies, or changes in the legislation and regulations. We invite you to consult this page regularly to learn of any possible modifications.