Colas Rail attaches the utmost importance to the protection of your personal data and undertakes to comply with the provisions of the General Data Protection Regulation [1].  
The purpose of the following information is to provide details of what personal data are collected and how they are processed on the Colas Rail website.

Data controller

The data controller is the entity responsible for determining the means and purposes for which personal data are processed at Colas Rail.
The data controller for the data processing operations carried out on this site is:
Colas Rail 
2/3 Place des Vosges, 92400 Courbevoie.
Recorded in the Trade and Companies Register under number 632 049 128

Personal data

Personal data means any information relating to an identified or identifiable individual.
The following personal data are processed on the Colas Rail website:
•    information contained in contact emails or sent via contact forms (surname, first name, email address);
•    information contained in any attachments sent.

Purpose of processing

The data processing carried out on the Colas Rail website is based on Colas Rail's legitimate interest in responding to your requests for information.
The data are only used by the departments concerned by your request.
This processing does not involve the transfer of personal data to third parties.

Retention of your data

Data processed for the purposes of establishing relations with Colas Rail are retained for as long as required for formulating a response or resolving the request. Once the data have been processed, they will be destroyed or archived in order to meet regulatory obligations.

Your rights

In accordance with current personal data protection legislation, you have the right to access, rectify or delete your personal data.
You are also entitled to ask for your data to be provided in a readable format, to object to the processing of your personal data or to ask for the processing to be restricted on the grounds set out in the regulations.
See the French Data Protection Authority (CNIL) website for more information on your rights: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.

Contact 

If you have any questions about personal data protection or if you wish to assert your rights, please contact us at: dataprivacy@colas.com.
If, after contacting us, you feel that your data protection rights have been infringed, you can submit a complaint to the CNIL at https://www.cnil.fr/fr/plaintes.
 

Data privacy policy for third parties

Colas Rail has a personal data protection policy relating to personal information that the Group is required to process as part of contractual or pre-contractual business relationships with Colas.

This policy is presented in questions-and-answers format and is intended for external individuals who are neither employees nor applicants for a position within the Group.

It provides a detailed report of the personal data concerning you that the Group retains, and what use(s) are made of the said.

Download the Data privacy policy for third parties 

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.