Privacy Policy

Privacy Policy www.Rail-Pass.com

Introduction

The protection of your privacy is an essential priority and we use your data to provide you with the products that you purchase on our sites. If this were not the case. it would be a pity that you could not travel internationally

In this regard. here are the eight principles that www.Rail-Pass.com and all of its employees implement:

We never collect or use data without a precise and legitimate purpose.

Only collect data in one of the following contexts:

• Data necessary for the performance of contracts and for services that are requested.
• Express and specific consent from you.
• Duly-justified legitimate interest of the company.
• Collect and use only data that is strictly necessary for processing.
• Keep data only for a limited duration that is coherent with the services provided.
• Constantly ensure the quality and security of data.
• Only make transfers of data when this is necessary and in accordance with legal and security rules.
• Constantly provide you with clear and transparent information.
• Ensure respect for your rights and the conditions for exercising them.

The present Privacy policy applies to all sites. mobile applications and services of www.Rail-Pass.com.

The main data controller on the www.Rail-Pass.com sites is the company www.Rail-Pass.com. located In the United Kingdom at: Hillside, 3, Hampton Fields, Oswestry, Shropshire, SY11 1TL. United Kingdom.

located In France at: 10 rues d la Paix, Paris, Ile d France, 75002, France.

What is your data used for?

www.Rail-Pass.com only collects and uses data concerning you for purposes that are precise and limited to what is necessary for you. namely:

Processing your orders:

• Enabling carriers and travel partners to provide you with services ordered.
• Ensuring payment for the products that you have purchased.
• Providing assistance to users of www.Rail-Pass.com sites by email. or chat. when they request assistance for an order. for connecting to the sites or accessing their customer accounts.
• Monitoring and providing after sales service for products ordered (information. cancellations. reimbursements. exchange. complaints).

Helping making orders:

If you do not complete an order made on the www.Rail-Pass.com site. www.Rail-Pass.com may send you an email offering its help.

Managing your customer account:

At www.Rail-Pass.com. the customer account is not mandatory. However. it is very useful because it is an account that is entirely dedicated to you and makes it easy for you to:

• Easily give orders (automatic entry of your data:
• Identification and travel preferences).
• Access your order data.

Communicate with you:

For www.Rail-Pass.com maintaining contact with you is essential, but we only do it in a carefully controlled manner and we only send you electronic communications. via email. SMS or mobile notification for the following reasons:

• Monitoring orders: sending confirmations of orders and any other messages related to the service that you have ordered.
• The management of your customer account: confirmation of creation or closure. modification of passwords.

Making commercial offers: only in one of the following two cases:

• If you are registered for the "Newsletter" service from www.Rail-Pass.com
• If you have ordered products on the www.Rail-Pass.com site or the www.Rail-Pass.com mobile application.

In all cases. you may unsubscribe from our commercial newsletter service by clicking on the "unsubscribe" link at the bottom of the newsletters.

• Rewarding of your loyalty: www.Rail-Pass.com may occasionally present offers to reward your loyalty.
• Offering you personalised products and services: at www.Rail-Pass.com. we are intent on constantly offering you products that are most likely to be suitable for you. 

At www.Rail-Pass.com. we offer you personalised content:

• In the commercial communications that we send to you.
• When you browse the www.Rail-Pass.com sites.
• Through certain services using geolocation (only on the www.Rail-Pass.com mobile application).
• Via targeted and personalised advertising banners on other sites.

Fighting fraud: 

The security and proper functioning of our sites is a major issue. The data is analysed automatically by our subcontractor to determine a level of fraud risk associated with each order.

The analysis criteria include the browsing behaviour. the data related to the terminal used and the bank details.

According to the results of this risk analysis. and after a check by our anti-fraud teams. www.Rail-Pass.com may do one of the following:

• Validate your order.
• Request additional substantiating documentation.
• Refuse the order.
• Cancel the order and reimburse the funds.
• In case of any confirmed problem with an order. or in the case of an outstanding debt. your data will be written to an alert file belonging to www.Rail-Pass.com. which may. for Future orders. make additional checks.

You can at any time make a complaint or request information by contacting www.Rail-Pass.com customer service.

Offer you games/contests: in this context. www.Rail-Pass.com and/or its partners will use the data that you have agreed to communicate strictly for the purposes of implementing the game and communication. As part of games and contests. after you have registered and given your advance authorisation. you may be offered commercial offerings from time to time by third-party partners of www.Rail-Pass.com.

What is our data management policy?

What data do we collect?

At www.Rail-Pass.com. we scrupulously follow the principle of "minimisation". meaning that we collect only the data that is strictly necessary to the purposes defined above. namely:

Identification data (name. email address. IP address): This data is essential for any orders. registration for a customer account or forthe security of the sites and transactions of www.Rail-Pass.com.

Banking data: This data is essential for any orders or reimbursements.

• Data related to your searches and your order (product purchased. destination. date. price. etc.): This data is essential to provide the ordered service and after-sales service.
• Data related to your habits and centres of interest (favourite destinations. choice of additional services. etc.): This data is useful for making personalised offers.
• Contact data (telephone no. email address. postal address): This data is useful to contact you if required (problem related to your order or a purchased product travel information) or to send you your train tickets. either to your home or electronically.
• Technical data: during browsing. www.Rail-Pass.com collects information such as the version of your browser. operating system used or the model of terminal used. This data is Necessary for optimal display and functioning of www.Rail-Pass.com sites and applications.
• Browsing data (searches. number of visits. date of last visit. etc.): This data is useful for making commercial offers.

How do we collect the data?

At www.Rail-Pass.com. the sources of data are:

You

• When you complete forms on the www.Rail-Pass.com sites and application.
• When you browse www.Rail-Pass.com sites and application (pages consulted. duration of consultation of pages).
• For each of them. you are informed of the data that is necessary and that which is optional. by asterisks on the entry forms.

The technical information:

Your IP address. the telecoms operator and the macroscopic location of the IP address.
The information provided by the browser on the operating system and the browser used.

• Cookies: see the chapter on cookies

How long is the data retained?

The data is only kept for periods that are strictly necessary:

• To the implementation of orders.
• To legal and regulatory constraints. notably in matters of dispute management.
• To the provision of personalised services.

The general data retention policy used by www.Rail-Pass.com is as follows:

• Identification data: five years from the last visit to the site or connection to the service.
• Order data: five years from the date of the order.
• Bank details: maximum thirteen months in order to manage the after-sales service (reimbursements).
• Prospect data: one year after the date of the last activity on www.Rail-Pass.com sites or the last opening of a newsletter.
• Connection logs: one year from each connection.
• Cookies: thirteen months maximum from them being saved on your computer or terminal.

What resources are used to ensure the security of the data?

www.Rail-Pass.com is particularly vigilant concerning the security of your data and devotes significant human and technical resources to protect it. A strict security policy is in place to define the processes. working methods and rules for technical protection to be used. The security measures used include. but are not limited to:

• Automated systems for protection against cyber-attacks are active.
• Computer code on the www.Rail-Pass.com sites is subjected to security reviews.
• Automated tools periodically carry out security tests on the www.Rail-Pass.com sites.
• The security of www.Rail-Pass.com sites is audited by companies that are experts in the subject.
• Personal data of customers is subject to strict access control.
• Experts in cyber security can intervene at any time to handle security incidents.

Is my data transferred to third parties?

General framework

The policy of www.Rail-Pass.com is very clear on this subject: www.Rail-Pass.com does not transfer any data to third-party companies for any reason other than one of the following:

Supply of services ordered: in order to be able to provide you with the transport or ancillary services offered. the data is transmitted to the companies concerned. namely:

• Carriers: rail carriers and their subsidiaries for associated service.
• Partners: tourism product sold by partners. directly or under white label.

Subcontracting: www.Rail-Pass.com uses contractors to operate its sites and provide you with the services and products proposed. and notably:

• Its IT subcontractors.
• For the customer relationship: call centres. communication tools.
• For payment: suppliers of partners offering products on the www.Rail-Pass.com site.
• For marketing services: marketing follow-up. dispatch of newsletters.
• For the fight against fraud: specialist service provider.

For all of these transfers of data. www.Rail-Pass.com takes strict care to:

• Only work with trusted companies.
• Secure its relationships with these companies.
• Transfers in foreign countries

www.Rail-Pass.com transfers data in foreign countries for the following cases:

• Order processing: www.Rail-Pass.com data centers are located in United Kingdom, United States and Australia.
• Customer relationships: your data may be transferred to one of several call centers. that are located in France. India. USA and Australia.
• Fraud prevention: subcontractor of www.Rail-Pass.com. uses the data in the United States. in Australia. and in Eire.

What are my rights?

You have the following rights concerning your data and the right to make sure that www.Rail-Pass.com is compliant with its commitments.

• Right of access: You may contact us to find out what data www.Rail-Pass.com has concerning you.
• Right to correction and deletion: You may correct data concerning you and request that it be deleted.
• Right of objection: You may object to www.Rail-Pass.com performing various processes.
• Right to portability: You may request that www.Rail-Pass.com sends you the data concerning you (identification and order data exclusively) in an electronic format (CSV file).
• It is nevertheless reiterated that the exercise of these rights is not absolute and may be limited for reasons of legitimate interest (customer dispute) or for legal reasons.

How can I exercise my rights?

Right of access. correction. deletion and portability

If you have a customer account. you can undertake these operations directly. by connecting to your customer account.

If not. you may send your requests to www.Rail-Pass.com customer service using the following electronic form or by letter to the following address: www.Rail-Pass.com. Customer service. at Hillside, 3, Hampton Fields, Oswestry, Shropshire, SY11 1TL.

Right of objection

You may exercise your right of objection as follows:

For commercial newsletters: by clicking the "unsubscribe" link mentioned in the newsletters that are sent to you: www.Rail-Pass.com then undertakes not to send you any more commercial newsletters.

• For all other requests: by sending your requests to www.Rail-Pass.com customer service using our electronic form or by letter to the following address: Service Clients www.Rail-Pass.com. Customer service. at 2 place de la Défense. CNIT 1. BP 440. 92053 Paris La Défense. France.
• For all of these requests. and for security reasons. you will be asked to identify yourself and communicate a copy of your identity document to www.Rail-Pass.com customer service.

How does it work for social networks?

The www.Rail-Pass.com sites use plug-ins for social networks. notably Facebook. Twitter and Instagram. If you interact with these plug-ins (clicking the "Like" or "Share" buttons). the information related to your browsing and to the operations carried out on the www.Rail-Pass.com sites will be sent to the company operating the social network in question.

Also. if you do not want a social network to which you belong to link information collected when browsing on the www.Rail-Pass.com sites. you must disconnect from the social network in question before visiting the www.Rail-Pass.com sites.

In all cases. the use of these plug-ins or the data collected when browsing with the social network activated is exclusively governed by the general conditions of the social networks concerned. We therefore invite you to read the personal data protection policies of these social networks to learn precisely what information is collected and how it is used.

What is the policy of www.Rail-Pass.com concerning cookies?

What is a cookie?

Cookies are files that are placed in the browser on your computer or terminal when you browse the www.Rail-Pass.com site. These files are subsequently automatically sent by the browser to the servers of www.Rail-Pass.com during your browsing. in order:

• To enable browsing on the www.Rail-Pass.com sites (management of shopping baskets. customer account connection sessions. proof of authentication for the "remember me" function. servers used. etc.) or to adapt to your terminal (language used. display resolution. operating system of the site).
• To monitor customer browsing on the www.Rail-Pass.com sites and to measure audiences to optimise and improve the sites.
• To personalise the click path and the offers.
• To manage advertising on the www.Rail-Pass.com sites and other sites.

Who are the cookies placed by?

• These files are placed: Either by www.Rail-Pass.com.
• Or by third parties: When you browse the www.Rail-Pass.com sites. cookies are issued by third-party companies (companies providing user help. advertising service providers.
• communications agency.
• Audience measurement companies. etc.).

Subject to choices that you have made previously with their services. or at any time under the conditions described below.

These cookies are mainly intended to provide you with advertising content likely to correspond to your centres of interest according to the data collected during your browsing on the www.Rail-Pass.com site.

These cookies may also enable:

• Counting the number of displays of advertising content disseminated via the advertising spaces on the www.Rail-Pass.com sites. 
• Identifying advertisements displayed and the number of users who clicked on each advertisement. in order to calculate amounts due and prepare statistics.
• Recognise your computer or terminal during your browsing on any other site in order to adapt the advertisements that are disseminated there.
• The issue and the use of these third-party cookies are subject to the confidentiality and data-protection policies of these third-party companies. 

However. we inform you. when we actually know. of the purpose of these cookies.

Also. if your computer or terminal is used by several persons. or if it has several browsers. it is not possible for www.Rail-Pass.com to be sure that the services and advertisements correspond to your use of www.Rail-Pass.com sites and not that of another user. This choice of sharing and configuration is your free choice and responsibility.

Detailed description of the cookies of www.Rail-Pass.com

Cookies for technical uses:

• Browsing sessions (connection to customer account. technical browsing session. servers used).
• Simplification of the visit. with adaptation of display criteria to your computer or terminal (language used. display resolution. operating system. browser used. accessibility parameter).
• Detection of a previous visit.
• Registration of customer preferences.
• Automatic re-connection to the customer account (when activated).
• These cookies are necessary to the correct functioning of www.Rail-Pass.com and to your browsing.

Cookies used for monitoring:

• Audience measurement: statistical data on traffic and the use of the www.Rail-Pass.com sites (sections and content targeted. click path) in order to measure and study the Functioning and efficiency of www.Rail-Pass.com sites. and thus improve the benefit and ergonomics of the services of www.Rail-Pass.com.
• Comparative tests of several versions of the site.
• These cookies enable the continuous improvement of the sites and services of www.Rail-Pass.com (benefits. ergonomics. etc).

Cookies for personalisation purposes:

• Personalisation. in real-time. of browsing on www.Rail-Pass.com sites and proposal of relevant and personalised offers.
• Improvement of the ergonomics.
• Identification of browsing problems in order to offer the assistance of a call-centre agent.
• These cookies enable you to be offered products and services that are personalised and in accordance with your requirements and centres of interest.

Cookies for advertising use:

• Counting and personalisation of content and advertisements proposed when you visit the www.Rail-Pass.com sites.
• Connections to social network services. sharing information on social networks.
• These cookies enable the most relevant offers to be provided to you.

How are they put in place?

When browsing the www.Rail-Pass.com sites:

• You are informed of the existence of cookies via the navigation banner that appears when you first visit or in case you delete the cookies placed by www.Rail-Pass.com.
• You consent to the placing and use of cookies by every browsing act.

How do I express my choices concerning cookies?

You can configure your browsing with your browser:

You can authorise or refuse the saving of cookies on your computer or terminal with the appropriate parameters of your browsing software.

These parameters are specific to each browser and are accessible via your browser's help menu:

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™