{"id":38491,"date":"2025-12-24T14:17:28","date_gmt":"2025-12-24T13:17:28","guid":{"rendered":"https:\/\/www.cnr.tm.fr\/vos-donnees-personnelles\/"},"modified":"2026-08-11T17:38:32","modified_gmt":"2026-08-11T15:38:32","slug":"vos-donnees-personnelles","status":"publish","type":"page","link":"https:\/\/www.cnr.tm.fr\/en\/vos-donnees-personnelles\/","title":{"rendered":"Personal data"},"content":{"rendered":"\n \n\n\n\n
\n
\n
\n
  1. Home<\/span><\/a><\/li>
  2. <\/span><\/li><\/ol><\/div>\n

    Personal data<\/h1>\n <\/div>\n\n
    \n
    <\/div>\n
    \n \"\"\n <\/div>\n
    <\/div>\n <\/div>\n \n <\/div>\n <\/div>\n\n\n\n\n \n \n\n
    \n
    \n
    \n

    At CNR\u00a0, your privacy is our priority<\/strong><\/p>\n

    CNR is committed to processing your personal data with the utmost care, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libert\u00e9s).<\/p>\n

    Our guiding principle :<\/strong><\/p>\n

    We only collect the personal data we genuinely need.
    \nWe only use it for the purposes you have agreed to<\/em><\/p>\n

    1. Data contoller<\/h3>\n

    Who are we?<\/strong><\/p>\n

    Your single point of contact for any questions relating to your personal data.<\/em><\/p>\n\n\n\n\n\n\n\n\n\n\n\n
    Company<\/strong><\/td>\nCompagnie Nationale du Rh\u00f4ne (CNR)<\/td>\n<\/tr>\n
    Legal status<\/strong><\/td>\nSoci\u00e9t\u00e9 anonyme d’int\u00e9r\u00eat g\u00e9n\u00e9ral<\/td>\n<\/tr>\n
    Share capital<\/strong><\/td>\n5 488 164 EUR<\/td>\n<\/tr>\n
    Lyon Trade and Companies Register (RCS)<\/strong><\/td>\n957 520 901<\/td>\n<\/tr>\n
    Registered office<\/strong><\/td>\n2 rue Andr\u00e9 Bonin, 69004 Lyon, France<\/td>\n<\/tr>\n
    Telephone<\/strong><\/td>\n04 72 00 69 69<\/td>\n<\/tr>\n
    VAT number<\/strong><\/td>\nFR 59 957 520 901<\/td>\n<\/tr>\n
    Publishing Director<\/strong><\/td>\nNathalie HASSEL<\/td>\n<\/tr>\n
    Contact<\/strong><\/td>\nhttps:\/\/www.cnr.tm.fr\/contact\/<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    2. Data collected<\/h3>\n

    What we collect, nothing more.<\/em><\/strong><\/p>\n

    No hidden data collection. No intrusive profiling. Here’s exactly what we need.<\/em><\/p>\n\n\n\n\n\n
    \n

    > Contact details<\/strong><\/p>\n

    Your name, email address and telephone number\u2014only if you complete a contact form.<\/td>\n

    		\n

    > Your contributions<\/strong><\/p>\n

    Messages, questions, digital artworks, guestbook entries.<\/td>\n<\/tr>\n

    \n

    > Browing data<\/strong><\/p>\n

    Pages visited, time spent on the Site and clicks\u2014to help us improve your browsing experience.<\/td>\n

    		\n

    > Preferences<\/strong><\/p>\n

    Your choice to subscribe (or not) to our newsletter. You can change your preferences at any time.<\/td>\n<\/tr>\n

    \n

    > Technical data<\/strong><\/p>\n

    Browser, operating system and IP address\u2014to ensure the Site’s compatibility and security.<\/td>\n

    		\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    Fields marked with an asterisk (*) in our forms are mandatory. All other fields are optional.<\/p>\n

    3. Purposes and legal bases<\/h3>\n

    We collect your data. Here\u2019s why.<\/em><\/strong><\/p>\n

    Every use of your personal data is based on a specific legal basis under the GDPR. Full transparency. <\/em><\/p>\n\n\n\n\n\n\n\n\n
    Purpose<\/strong><\/td>\nLegal basis (GDPR)<\/strong><\/td>\n<\/tr>\n
    Responding to your enquiries and providing information about our activities and services.<\/td>\n\n

    Legitimate interest (Article 6(1)(f) GDPR<\/strong>). You have the right to object to this processing (Article 21 GDPR).<\/em><\/p>\n<\/td>\n<\/tr>\n

    Publishing your contributions (surveys, guestbook entries, digital artworks).<\/td>\nConsent<\/strong><\/td>\n<\/tr>\n
    Sending you our personalised newsletter (only at your request).<\/td>\nConsent<\/strong><\/td>\n<\/tr>\n
    Measuring website traffic and improving the performance of the Site.<\/td>\nConsent (cookies)<\/strong><\/td>\n<\/tr>\n
    Retaining data for evidential purposes and to protect our rights in the event of a dispute.<\/td>\n\n

    Legitimate interest <\/strong><\/p>\n

    (Article 6(1)(f) GDPR). The balancing test has been documented in our Record of Processing Activities (Article 30 GDPR). Data is retained for a maximum of five years, which is proportionate to the limitation period under Article 2224 of the French Civil Code.<\/em><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    4. Recepients<\/h3>\n

    Who we share your data with. And no one else.<\/em><\/strong><\/p>\n

    Your personal data is never sold. It is shared only with parties directly involved in providing our services.<\/em><\/p>\n\n\n\n\n
    \n

    > CNR departements<\/strong><\/p>\n

    Authorised teams, including Sales, Finance, Marketing and IT.<\/td>\n

    		\n

    > Groupe CNR<\/strong><\/p>\n

    Our subsidiaries and shareholders, strictly where necessary for the Group’s activities.<\/td>\n<\/tr>\n

    \n

    > Technology service providers<\/strong><\/p>\n

    Hosting, maintenance and email service providers\u2014all contractually bound to provide the same level of data protection in accordance with Article 28 of the GDPR.<\/td>\n

    		\n

    > Public authorities<\/strong><\/p>\n

    Only where required by law or pursuant to a judicial or administrative order<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    Transfers outside the European Union :<\/strong><\/p>\n

    Some of our technical service providers process your personal data outside the European Economic Area (EEA), particularly in connection with hosting services, website analytics and electronic communications (such as cloud services and email platforms).<\/p>\n

    These transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission (Implementing Decision (EU) 2021\/914), ensuring a level of protection equivalent to that required within the European Union.<\/p>\n

    The list of the service providers concerned and the safeguards applied is available upon request from our Data Protection Officer (DPO): donnees.personnelles@cnr.tm.fr<\/strong><\/a><\/p>\n

    5. Data retention<\/h3>\n

    We don\u2019t keep your data <\/strong>a\u00a0second longer than necessary.<\/em><\/p>\n

    Every category of personal data has a defined retention period. Once this period expires, the data is deleted or anonymised.<\/em><\/p>\n