“Keolis Gironde” company makes every effort to protect your personal data in accordance with the applicable European and French regulations.
This privacy policy (“Privacy Policy”) is intended to inform you about the purposes and conditions under which we process personal data that we may collect through our various channels, such as our commercial services, our websites https://30direct.com/, our social networks, or our possible events.
Our Cookie Management Policy, available at https://30direct.com/cookies-management/, complements this Privacy Policy to inform you of the purposes and conditions of use of cookies or navigational data that may be deployed on our websites and mobile applications.
Please take the time to read this Privacy Policy so that you have all the information you need to understand how your personal data is used and to freely and fully exercise your rights under applicable laws and this Privacy Policy.
I – GENERAL DISPOSITIONS
1) Person in charge of the treatment
The controller of your personal data is Keolis Gironde, except where we are acting on the instructions and exclusively on behalf of our principals. In this case, we will inform you of this (I) either when we collect your personal data, (II) or in this Privacy Policy, or (III) when you wish to take steps with us to protect your personal data.
2) General Terms and Conditions of Use
The Privacy Policy is an integral part of, and should be read in conjunction with, the Terms of Use of the Site and Online Services (these terms are available in the Legal section: https://30direct.com/legal-information/
3) Applicable law and competent administrative authority
The Privacy Policy is governed by the General Data Protection Regulation n°2016/679 (“GDPR”) and by the French Data Protection Act n° 78-17 of January 6, 1978 as amended (“Loi Informatique et Libertés”), under the regulatory control of the French personal data protection authority, the CNIL (Commission Nationale de l’Informatique et des Libertés – https://www.cnil.fr/en/)
4) Links to third-party websites
Our site may contain or use links to websites, mobile applications, products or services that are operated by third parties (including advertising sites, our partners or social networks). We remind you that the Privacy Policy does not extend to these third parties over which we have no control and for which we cannot be held responsible.
We encourage you to review the privacy policies, procedures and practices of these third parties.
II – THE PERSONAL DATA WE COLLECT
The Privacy Policy applies to personal data that we may collect from or about you (see below), including from the following sources :
- Completion of our subscription or collection forms on paper or electronically or during operations or events organised by Keolis Gironde in which you participate;
- Visiting one of our physical sales outlets and/or purchasing one of our services;
- Request for contact or exchanges by e-mail/mail and/or telephone with our customer relations departments;
- Receipt of supplier/prospect information in the context of managing pre-contractual and contractual relations;
- Processing of video-protection images from cameras installed in our facilities open to the public (commercial agencies, transport vehicles);
- Validation of tickets, access control to our services (urban and interurban transport, collective or individual, medical, vehicle rental or parking, etc.) or processing of offences and recovery of fines;
- Use of our services, including our ticketing systems and applications.
- Violation processing and fine collection;
- Browsing our websites https://30direct.com/
- Receiving and sending e-mails, text messages and other electronic messages between you and Keolis Gironde;
- Telephone or voice exchanges between you and Keolis Gironde or one of its service providers;
- Exercising your rights under the RGPD by letter and/or e-mail to Keolis Gironde.
III- USE OF COLLECTED DATA AND RETENTION PERIODS
We collect and use your personal data for the main purposes described below:
- To respond to your requests and provide you with information, based on your consent,
- To better understand your needs and expectations regarding the site and its use, to measure its use in order to improve it, based on your consent,
- To process the exercise of your rights and your claims, based on legal obligations,
- To comply with the law, regulations, and legal requests and orders.
IV – DATA TRANSMISSION
Your personal data may be communicated by us:
1) In the Keolis Group
We may share your personal data with certain entities of the Keolis Group, in order to ensure the continuity of responses to your requests.
2) To third-party providers
We may share your personal data with trusted third parties, located inside or outside the European Union, to help us operate the site and in particular to ensure its proper functioning.
4) To third-parties for legal reasons
In the event that we are required to comply with laws and regulations and legal requests and orders or if permitted by law.
5) In any case
We always require these recipients to provide sufficient guarantees of confidentiality and security and to take the physical, organizational and technical measures necessary to protect and secure your personal data, in accordance with the legislation in force. Any transfers of data outside the European Union are governed by the mechanisms validated by the European Commission or the competent authorities
V – DATA SECURITY
We secure your personal data by implementing appropriate physical, organizational, and technical measures to prevent unauthorized access, use, disclosure, modification, or destruction in accordance with applicable regulations.
These measures include:
- Storage on secure servers within the European Union;
- Security of your data, in particular through pseudonymization processes, encryption of transmitted data and the implementation of means to guarantee the confidentiality, integrity and availability of your data;
- Limited access to your data on a “need to know” basis.
Although we take all possible measures to protect your personal data, we cannot guarantee the security of information transmitted on the website when a security flaw affects your terminal or browser.
VI – YOUR RIGHTS REGARDING YOUR PERSONAL DATA
Under the RGPD and the Data Protection Act, you have various rights including:
1) Access, modification, update and deletion of your personal data
You may request access to your personal data held and processed by us, view it, obtain a paper or electronic copy, and request that it be corrected, updated or deleted.
2) Opposition
You may, at any time, request that some of your data no longer be processed.
3) Portability
You may request that your data, which is being processed, be provided to you in an open, machine-readable format, either for your own use or for transfer to another controller.
4) Limitation of treatment
In some cases, you can request that the processing of your data be restricted.
5) Complaint to a Supervisory Authority
Without prejudice to any other legal remedy, you have the right to lodge a complaint with the supervisory authority of the country of the European Union in which you reside, work or in which you consider that a violation of your rights has been committed.
6) Post-mortem fate of your data
You have the possibility to define the post-mortem fate of your data.
You may exercise all of these rights by sending us a written request, accompanied by proof of identity (where this is necessary to verify your identity), to the contacts mentioned in Article IX “Contacting us”.
We will endeavour to respond to your requests as quickly as possible and in accordance with the applicable regulations. Nevertheless, in some cases, we may not be able to respond favorably to your request in order to meet our legal or contractual obligations.
VII – RETENTION PERIODS FOR COLLECTED DATA
We keep your personal data only for as long as is necessary to fulfill the purposes set out in the “Use of your personal data” section above, except where we are permitted or required by law to keep it longer.
The table below summarizes the different maximum retention periods applicable or imposed on us according to the purposes for which your personal data may be processed. These maximum retention periods apply unless you request the deletion or cessation of use of your data prior to its expiry for a reason consistent with any legal obligation that may be imposed on us.
| Purposes | Retention time |
| Processing your information requests | 1 year from the date of request |
| Processing your applications | Retained 2 years after transmission of information or last contact with the applicant, unless otherwise specified by the applicant |
| Claims management | 5 years from the closing of the claim |
| Audience measurement and personalization of the site and management of cookies/trackers | 13 months from the deposit of the cookie and / or the tracer |
| Management of requests for access, rectification, deletion, opposition, limitation, portability of personal data | 5 years from receipt of the request |
VIII – CHANGES TO THE PRIVACY POLICY
Keolis Gironde may make changes to the Privacy Policy from time to time.
We encourage you to check this page periodically for changes and to stay informed about the steps we take to protect your personal information.
IX – CONTACT US
To exercise your rights or if you have any questions about the Privacy Policy, please contact us at 30direct@keolis.com or Zone D’Activité Issac, 33160 Saint-Médard-en-Jalles, France.
If you have any questions about the processing of your personal data, you can also contact our Data Protection Officer dpd.aquitaine@keolis.com.
The Privacy Policy was updated on 11/07/2023.