System for measuring footfall at stations

The company SNCF Gares & Connexions, with head office at 16 Avenue d’Ivry Paris 13, has implemented a system for measuring footfall at some stations (list accessible below) by analysing WiFi routes from users’ mobile devices in different spaces of the station.

The legal basis for the data processing is SNCF Gares & Connexions’ legitimate interest (see GDPR article 6.1.f) to manage the security of users at stations and the technical performance of its infrastructure and services.

The purpose of the data processing is for managing user flows and improving services and equipment provided to users of the stations.

MAC addresses of mobile devices switched on with WiFi mode activated near WiFi terminals will be collected. This technical data (raw detection logs) is immediately pseudonymised (with irreversible encryption) within tenths of seconds of their detection and permanently anonymised every 24 hours.

Therefore, after a 24-hour interval it is impossible to correlate the route of a single mobile device or even the routes over different 24-hour periods.

These technical operations for detection, immediate irreversible encryption and anonymisation within a short delay, as well as the information measures described hereinafter and the rights guaranteed to individuals by current regulations, have been designed by the SNCF Gares & Connexions project team from the start of this system (‘Privacy by Design’ methodology).
The discussions that ensued with the French Information Commissioner’s Office (CNIL) over many months contributed to  the CNIL’s publication of precise and educational information about pseudonymisation and anonymisation (https://www.cnil.fr/fr/lanonymisation-de-donnees-personnelles), as well as processing of WiFi device detections in public spaces (https://www.cnil.fr/fr/dispositifs-de-mesure-daudience-et-de-frequentation-dans-des-espaces-accessibles-au-public-la-cnil).

SNCF Gares & Connexions has thus ensured from the beginning of the project to work closely with recommendations and technical and regulatory standards and will continue to carefully follow this methodology.

Our subcontractors process this technical data (their irreversible and immediate pseudonymisation, then permanent anonymisation every 24 hours) on behalf of and according to the instructions of SNCF Gares & Connexions, for the purposes mentioned previously. This will only be done by authorised staff from:

• The internal entity of the SNCF Group responsible for deploying WiFi infrastructure at stations
• Companies responsible for installing WiFi terminals, also temporarily and partly responsible for collecting raw detection logs,
• The company responsible for collecting raw detection logs,
• The company responsible for applying the irreversible encryption process on the raw detection logs for the purpose of producing anonymised statistical tables every 24 hours.

The right to oppose:

You may exercise your right to object to the irreversibly pseudonymised then anonymised detection of the WiFi MAC address of your device by sending an email which includes the WiFi MAC address of your device to [email protected].

We will then register this WiFi MAC address on an exclusion list that will prevent processing of this MAC address and also delete all data already collected that has not yet been destroyed or anonymised, if applicable.

To find out the MAC address of your mobile device’s WiFi card you can take the following steps: 

For an iPhone:

• Go to ‘Settings’ 
• In the ‘General’ tab, tap ‘About’ or ‘Information’
• On the next screen you can find the MAC address in the ‘WiFi address’ field

For an Android:

• Go to ‘Settings’.
• In the ‘General’ tab, tap ‘About tablet / phone’.
• Tap ‘Status’ and your MAC address will be shown.

Exercising other rights:

In accordance with current statutory or regulatory provisions, you have the right to access, rectify and delete data concerning your mobile device as well as the right to limit its processing.

These requests relating to your rights, or any other question pertaining to data protection, can be made:

• by email: [email protected]
• by registered post with acknowledgement of receipt: SNCF Gares & Connexions – Délégué à la Protection des Données - 16 avenue d’Ivry, 75013 Paris.

If you believe, after having contacted us, that your Data Protection and Privacy rights have not been respected or that the access control system is not in compliance with data protection rules, you can submit a complaint to the CNIL.

Aéroport Charles de Gaulle 2 TGV

Agde

Aix-les-Bains le Revard

Agen

Ambérieu-en-Bugey

Aix-en-Provence TGV

Angers Saint-Laud

Annecy

Antibes

Amiens

Angoulême

Annemasse

Argenteuil

Le Creusot - Montceau-les-Mines - Montchanin TGV

Arras

Auray

Arpajon

Asnières-sur-Seine

Avenue du Président Kennedy Maison de Radio France

Avignon TGV

Avenue Henri Martin

Belfort

Belleville sur Sâone

Bayonne

Béziers

Bibliothèque François Mitterrand

Belfort - Montbéliard TGV

Bois-Colombes

Bondy

Bordeaux Saint-Jean

Bourgoin-Jallieu

Bretigny - Norges

Bellegarde

Besançon Franche-Comté TGV

Brunoy

Caen

Cergy le Haut

Cergy Préfecture

Besançon Viotte

Cergy Saint-Christophe

Chalon-sur-Saône

Chambéry - Challes-les-Eaux

Chamonix-Mont-Blanc

Biarritz

Champ de Mars Tour Eiffel

Changis - Saint-Jean

Châteauroux

Blois - Chambord

Chelles - Gournay

Choisy-le-Roi

Bourg-en-Bresse

Bourges

Bourg-Saint-Maurice

Clermont-Ferrand

Brest

Clichy - Levallois

Colmar

Colombes

Brive-la-Gaillarde

Combs-la-Ville - Quincy

Calais - Fréthun

Conflans-Sainte-Honorine

Corbeil-Essonnes

Crécy-la-Chapelle

Créteil Pompadour

Dijon

Drancy

Dugny - La Courneuve

Échirolles

Cannes

Carcassonne

Émerainville - Pontault-Combault

Enghien-les-Bains

Épinay-sur-Seine

Champagne-Ardenne TGV

Charleville-Mézières

Épinay-sur-Seine Tram 11 Express

Châtellerault

Cherbourg

Compiègne

Dax

Douai

Ermont - Eaubonne

Dunkerque

La Baule-Escoublac

Évreux Normandie

La Rochelle

La Roche-sur-Yon

Étampes

Évry - Courcouronnes

Firminy

Franconville - Le Plessis-Bouchard

Laval

Futuroscope

Gagny

Givors

Grenoble

Le Havre

Le Mans

Grenoble Universités - Gières

Les Arcs - Draguignan

Les Aubrais

Grigny Centre

Groslay

Libourne

Lille Flandres

Guingamp

Haussmann Saint-Lazare

Hendaye

Limoges Bénédictins

Lisieux

Houilles - Carrières-sur-Seine

Issy Val de Seine

Ivry-sur-Seine

La Barre Ormesson

La Courneuve - Aubervilliers

La Défense

La Garenne-Colombes

Lorient Bretagne Sud

La Plaine Stade de France - Saint-Denis - Aubervilliers

La Tour-du-Pin

Lorraine TGV

Lourdes

La Verpillière

Lyon Part Dieu

Lyon Perrache

La Verrière

L'Arbresle

Lyon Saint-Exupéry TGV

Mâcon Loché TGV

Le Bourget Tram Train

Le Bras de Fer

Marne-la-Vallée Chessy

Le Péage-de-Roussillon

Marseille Saint-Charles

Le Raincy - Villemomble - Montfermeil

Metz Ville

Montauban Ville Bourbon

Montpellier Saint-Roch

Morlaix

Le Val d'Or

Lens

Les Moutiers-en-Retz

Mulhouse

Lieusaint - Moissy

Lille Europe

Louveciennes

Lyon Gorge de Loup

Lyon Saint-Paul

Lyon Vaise

Nancy

Magenta

Maisons-Laffitte

Massy - Palaiseau

Nantes

Massy TGV

Meaux

Melun

Meudon

Narbonne

Nice

Nîmes

Niort

Meuse TGV

Orléans

Meximieux - Pérouges

Moirans

Montélimar

Paris Austerlitz

Paris Bercy Bourgogne - Pays d'Auvergne

Montigny - Beauchamp

Montluel

Montmélian

Montpellier Sud de France

Moulins sur Allier

Musée d'Orsay

Paris Est

Nanterre Université

Nevers

Nogent - Le Perreux

Paris Gare de Lyon Hall 1 & 2

Noisy-le-Sec

Ozoir-la-Ferrière

Parc des Expositions

Persan - Beaumont

Paris Gare du Nord

Poissy

Pont de l'Alma

Paris Montparnasse Hall 1 & 2

Pontcharra sur Bréda

Paris Saint-Lazare

Pontoise

Pau

Provins

Puteaux

Rambouillet

Rennes

Rive-de-Gier

Perpignan

Rives

Roanne

Romans - Bourg-de-Péage

Poitiers

Rosny Bois Perrier

Rosny-sous-Bois

Quimper

Reims

Rouen Rive Droite

Rumilly

Saint-Chamond

Saint-Clair - Les Roches

Saint-Cloud

Saint-Brieuc

Saint-Étienne Châteaucreux

Saint-Cyr

Saint-Malo

Saint-Nazaire

Saint-Denis

Sainte-Geneviève-des-Bois

Saint-Gervais-les-Bains Le Fayet

Saint-Marcellin

Saint-Michel Notre-Dame

Saint-Pierre-des-Corps

Saint-Michel-sur-Orge

Saint-Ouen

Saint-Raphaël Valescure

Sète

Strasbourg

Saint-Quentin en Yvelines - Montigny-le-Bretonneux

Sarcelles - Saint-Brice

Sartrouville

TGV Haute Picardie

Savigny-sur-Orge

Thionville

Sevran - Livry

Tain-l'Hermitage - Tournon

Tarare

Tarbes

Thonon-les-Bains

Toulon

Toulouse Matabiau

Tours

Tourcoing

Trouville - Deauville

Troyes

Trappes

Val d'Argenteuil

Valence TGV Rhône-Alpes Sud

Val de Fontenay

Valence

Vendôme

Versailles Chantiers

Versailles Château Rive Gauche

Versailles Rive Droite

Vert Galant

Vienne

Valenciennes

Vierzon

Vigneux-sur-Seine

Villars-les-Dombes

Vannes

Villefranche-sur-Saône

Vichy

Villeneuve-Saint-Georges

Villiers-le-Bel - Gonesse - Arnouville

Villiers-sur-Marne - Le Plessis-Trévise

Vitry-sur-Seine