Information notice concerning the assessment of the integrity of third parties in a business relationship with SNCF Voyageurs
October 21, 2024 version
SNCF Voyageurs uses the "Compliance for business" platform published by the company Ellisphère, accessible via the individual link you received by e-mail at the e-mail address you gave us.
SNCF Voyageurs - Direction de la Conformité - Campus Voyageurs - 1, rue Camille Moke - CS 20012 - 93200 SAINT-DENIS - FRANCE
Your personal data is used to assess and mitigate the corruption risks of customers and suppliers with whom SNCF Voyageurs has, or intends to have, a business relationship.
The use of your data is based on SNCF Voyageurs' compliance with the obligation imposed by Article 17 of Law No. 2016-1691 of December 9, 2016 on transparency, combating corruption and modernizing economic life.
The data used for processing are :
- Identity data
- Professional details
- Professional life
- Political life
- Decisions and sanctions made public
- Your answers to our questionnaires
- Economic situation
Some of this data comes from our partner Ellisphère, which uses publicly accessible sources such as court decisions, newspaper articles, etc. For more information on Ellisphère's data processing practices, please consult Ellisphère's data protection policy here.
Your data is kept for the duration of the commercial relationship concerned by the evaluation, then archived for a period of 5 years corresponding to the limitation period for legal action.
Answers to boxes marked with an asterisk are compulsory and necessary to complete the evaluation.
Your data may be communicated to our employees in charge of risk assessment and to the compliance officers of SNCF Voyageurs and other SNCF group companies for the purposes of risk assessment and management.
The SNCF group companies are the only ones to use the data that you communicate directly to us.
Your data is hosted in France. It is not transferred outside the European Union.
No automated decisions are made on the basis of your data.
Within the limits and conditions authorized by the regulations in force, you may exercise your right to access, rectify, delete and port your personal data, your right to limit and object to the use of your personal data, as well as your right to define the directives applicable to the conservation, deletion and communication of such data after your death.
You can exercise these rights by sending an e-mail to [email protected].
If, after contacting us, you feel that your rights have not been respected, you also have the right to lodge a complaint with the CNIL.