Privacy Policy

Terms and Conditions – Protection of Personal Data

These Terms and Conditions supplement the Site’s General Terms and Conditions of Use and Sale (‘GTCS’), which can be accessed here.

The Publisher is responsible for the processing of personal data carried out by the Site; you will find the Publisher’s contact details here.

The purpose of these Special Terms and Conditions is to inform you of the purposes and conditions under which we may process data concerning you, and to identify and enable you to exercise the rights you hold in respect of such data.

When you access the Site or in the course of providing our services, we may collect and process personal information about you for the purposes set out in the table below:

Purposes for which data may be processed Categories of data processed* Main legal basis for processing
Online reservations
  • data identifying the main passenger (surname, first name, email address, telephone number and country);
  • connection logs
  • Execution of a contract (‘Terms of Use’ and ‘Conditions of Sale’)

 
Claims management, lost and found management, management of requests for information
  • personal data (nature of request, details of request, response given, date of exchanges, route taken, order number, resolution indicators)
  • Your consent

 
Audience management and measurement of traffic or usage; improvements to our tools and services
  • technical data (IP addresses, technical identifiers, geolocation)
  • browsing data (pages visited, services used)
  • Your consent

 
Managing participation in promotional campaigns, measuring user satisfaction  

  • identification data and preferences
  • communication data (nature of the communication, date of the event, monitoring indicators)
  • Your consent
Video protection system management
  • video and audio recordings
  • Legitimate interest of the data controller
Measuring and improving the quality of our services and those of suppliers
  • identification and contact data, – connection or usage data for the services concerned,
  • assessments
  • Legitimate interest of the data controller
Managing the purchase of tickets and other products and services
  • identification data,- data relating to the nature of purchases,
  • payment details
  • Execution of a contract with you
Validation of transport tickets
  • identification data, – location data, time stamps
  • technical data
  • Legitimate interest of the data controller
Fraud management, and penalty management
  • identification data, – location data, time stamping
  • date of birth, nature of offence, amount, time limits, procedural stages,
  • payment details
  • Legitimate interest of the data controller
Ensuring the security of IT systems
  • identification data, – technical and usage data
  • Legitimate interest of the data controller
Recruitment management
  • CV (contact details, training, professional experience, etc.)
  • Your consent
Passenger frequency measurements
  • means of communication data (MAC address)
  • location data, timestamp
  • Legitimate interest of the data controller

(*) The types of data indicated in parentheses allow you to identify examples of data processed during the processing considered, these examples are not exhaustive.

When you access or use certain services, we may provide you with additional or specific information relating to the data processing implemented for these services.

Some data concerning you may be provided to us by partners.

Unless we obtain your specific consent, we will not communicate or make available to third parties any data concerning you for the purposes of commercial or promotional prospecting for third-party products or services.

When processing is based on your consent, you are reminded that your consent may be withdrawn at any time.

No decision with legal effects against you is taken by exclusively automated processing.

Some data collected is required to be able to access our Services and those of our partners. In this case, the required fields or information are indicated to you for this purpose. If you choose not to provide certain required personal data, we may not be able to provide you with the services you have requested or to fulfill the purposes for which we process personal data.

Additionally, we may publish, disclose and use aggregated information (information about all users or specific groups or categories of users combined in such a way that an individual user can no longer be identified or referenced) or non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.

Retention periods

Your data is only kept for the period necessary to fulfill the purposes for which it was collected.

You are hereby informed that the general principles of data retention are:

  • data relating to the management of your requests and complaints may be retained for two calendar years from the date of their collection;
  • data collected as part of video surveillance may be retained for a maximum period of one month from the date of their capture;
  • data relating to purchasing management may be retained for five calendar years from the date of their collection;
  • data relating to cookie management may be retained for a period of 6 months from the date of their collection;
  • data relating to recruitment management may be retained for a period of two calendar years from the date of their collection;
  • data relating to attendance measurement are subject to anonymisation for a maximum of 6 hours after their collection

 

Some specific data processing operations that we implement may have different retention periods, in particular if their retention is made necessary by a legal obligation or to allow us to exercise our rights.

If you would like to obtain more details on the retention rules specific to a given processing operation, you can contact our Data Protection Department and/or the Data Protection Officer: contact@magicalshuttle.fr

 

Security and data transfers

In accordance with the regulations in force, we take the necessary measures to ensure that personal information is protected in terms of its security, integrity and confidentiality.

Any transfers of data are carried out in accordance with the regulations, and are governed in particular by the standard contractual clauses established by the European Commission.

For the purposes of the objectives specified above, we may communicate information concerning you to other companies in the Transdev Group and to our subcontractors and service providers; some of these companies may be located outside the European Union and outside countries recognized by the European Union as having laws guaranteeing adequate protection of personal data.

Information concerning you may be communicated to any person or public or private entity, in particular administrations or professional bodies, when this communication is provided for by law or regulation.

We may also process information about you for the purposes of managing and monitoring compliance with our internal policies and procedures, auditing, or to administer, manage or defend against claims or legal actions.

In the event that we are involved in a merger, acquisition, sale of assets or receivership, we may be required to transfer or share all or part of our assets, including personal data.

Exercise of rights

In accordance with the regulations, you can exercise your rights of consultation, rectification, opposition, deletion, limitation of processing and portability, under the conditions of the applicable regulations, on your personal data that we may hold, by sending a request stating your surname, first name, address and attaching a copy of proof of identity, by the means of your choice:

  • By post to: Val d’Europe Airports SAS – Data Protection, 3 AV JOSEPH PAXTON – 77164 FERRIERES-EN-BRIE
  • By email to: contact@magicalshuttle.fr

If necessary, you can also send your request to the Transdev Group Data Protection Officer (Group DPO) at the following address: dataprivacy@transdev.com.

For any request relating to data processing implemented as part of video surveillance, please specify the line number, stops and time slot.

You can also send the Data Protection Department your instructions regarding the fate of your personal data in the event of death, and in particular the manner in which you wish the aforementioned rights to be exercised.

In general, the Data Protection Officer and the Data Protection Department remain at your disposal for any additional information or complaint relating to the processing of personal data that we implement. We undertake to respond to you as soon as possible, in accordance with the deadlines imposed by the applicable regulations.

Please be informed that the supervisory authority in France for data processing is the National Commission for Information Technology and Civil Liberties, www.cnil.fr, to which you can request any information or lodge a possible complaint.

Updates and changes to the Special Conditions

We reserve the right to modify these Special Conditions on our processing of personal data at any time. Their effective date is mentioned at the beginning of the text. Please refer to them periodically and in particular each time you provide us with personal information.

 

***