Legal Information

Publisher: RATP Smart Systems, simplified joint-stock company with share capital of 100,000,000 euros, Bobigny Trade and Companies Register B 519 874 598. Registered office: 8, avenue Montaigne, Immeuble Maille Nord II, 93160 Noisy Le Grand Intra-community VAT: No. FR91 519 87 45 98. Tel.: +33 1 58 78 62 40 (cost of a non-premium local call) Email: [email protected].

Publishing Director: Mr. Rémy REDEUILH, President of RATP Smart Systems

Host: This service is hosted exclusively in datacenters in Europe (Ireland and Germany) operated by Amazon Web Services (AWS): Amazon Web Services LLC P.O. Box 81226 Seattle, WA 98108-1226

"Bonjour" is a digital service (hereinafter the "Service") offered by RATP Smart Systems (hereinafter "RSS"), a single-shareholder simplified joint-stock company with share capital of 45,000,000 euros, registered with the Bobigny Trade and Companies Register under number B 519 874 598, whose registered office is located at 8, avenue Montaigne, Noisy Le Grand (93160), represented by Mr. Rémy REDEUILH in his capacity as President.

This Service is accessible via a mobile application (hereinafter the "Bonjour App").

The terms of access to and use of the Service are defined by these general terms of use (hereinafter the "GTU").

These GTU are supplemented by the Privacy Policy.

Any use of the Service is subject to compliance with the general terms of use. The User acknowledges having read the GTU established by RATP Smart Systems in connection with the use of the Service.

Conditions of access to the Service

The Service is accessible on the internet from a tablet and on mobile from a smartphone.

The Service is accessible free of charge, without any subscription requirement, to any User with internet access. The User is financially responsible for the costs required to use the Service (computer equipment, software, internet access, etc.)

Access to the service is valid for an unlimited period, without prejudice to RATP Smart Systems' right to close it unilaterally at any time and without notice, reason, or compensation.

However, fraudulent use of the Service or use that breaches the GTU may result in the blocking and deletion of access to said Service for the User concerned by RATP Smart Systems, without prior notice and with immediate effect.

Availability of the Service

The Service is accessible 24 hours a day, 7 days a week, except in cases of force majeure or matters beyond RATP Smart Systems' control.

RATP Smart Systems reserves the right to suspend, limit, or interrupt, without notice, partial or full access to the Service, in particular to carry out maintenance operations, updates, or for any other reason.

RATP Smart Systems undertakes to exercise all due care and diligence necessary for access to the Service; however, RATP Smart Systems shall under no circumstances be liable for interruptions and any resulting damage of any kind.

The User acknowledges that RATP Smart Systems may modify or terminate the features of the Service at any time, without notice and without the User having any remedy against RATP Smart Systems.

Conditions of use

The Service is intended solely for personal use of these services and excludes any professional use for profit of its services unless expressly authorized in advance and in writing by RATP Smart Systems.

When using the Service, the User undertakes to comply with all applicable legislation and these general terms of use.

The User undertakes to use the Service for lawful and private purposes. Any misuse or attempt to commit a fraudulent act is prohibited.

User contribution

The Service allows Users to contribute to its enrichment. However, RSS reserves the right to moderate User contributions by providing for subsequent moderation review depending on their compliance with French laws and regulations and the requirements set out by the GTU and, more broadly, for any other legitimate and serious reason.

Any contribution violating the GTU or likely to incur the liability of RSS or that of the host may be deleted by RSS.

Any content posted online by the User, and where applicable, any resulting consequences, are the User's sole responsibility. In addition, as contributions may be viewed by any User of the Platform, the User undertakes not to post content that may harm the interests of third parties. Any action brought by a third party against the Platform shall be borne by the User.

The User undertakes to post information with truthful content, indicating the source and/or the author in the event of borrowing from a pre-existing work.

The User guarantees that they are the sole and exclusive holder of the ownership rights to these contributions. In particular, the User guarantees that no dispute or legal proceedings are underway or about to be brought concerning the contributions calling into question their copyright.

The publication of these contributions does not entail any transfer of ownership rights. However, by publishing a contribution on the Platform, the User agrees to grant RSS the non-exclusive right to represent, reproduce, adapt, modify, disseminate, and distribute their contribution, directly or through an authorized third party, worldwide, on any medium (digital or physical) for the duration of intellectual property protection.

What services are offered by the Bonjour Application?

"Bonjour" offers its users (hereinafter the "User(s)"):

• a service providing access to general and personalized information related to traffic concerning the various mobility solutions available on urban transport networks;
• a service providing access to personalized information on routes, schedules, and locations on urban transport networks within the diversity of mobility options offered, depending on users' preferences where applicable, through a personalized display if the user has chosen this;
• loyalty, promotional, and solicitation operations through the scheduled sending of targeted marketing offers based on users' choices;
• the possibility of booking and paying online for access to various mobility solutions available on urban transport networks;
• synchronization of the User's information across all their digital devices (tablet, mobile, computer);
• customer service available from 7 a.m. to 9 p.m. Monday to Friday and from 9 a.m. to 5 p.m. on Saturdays, Sundays, and public holidays.

Only Users holding an account on the Service (hereinafter the "Account Holder(s)") may benefit from all of our services.

Account Holders may indeed benefit exclusively from:

• our online booking and payment service for our mobility solutions;
• our customer service available from 7 a.m. to 9 p.m. Monday to Friday; from 9 a.m. to 5 p.m. on Saturdays, Sundays, and public holidays;
• synchronization of their information across all their digital devices.

Users who do not have an account may benefit from the other services offered by the Bonjour Application.

How to create an account on the Service?

The User may benefit from all services by creating an account.

To create an account, the User must validate the registration form, stating their gender, last name, first name, date of birth, email address, and choosing a password. All natural persons aged 18 and over have the right to create an account. Only one active account per natural person is possible (same last name, same first name, and same date of birth).

How to unsubscribe from the Service?

The User may delete their account on the Service at any time.

To delete their account, the User must, from the Service home page:

• go to the "My account" page;
• click on "Manage my account"; and
• click on "I delete my Bonjour account".

Unsubscription takes effect immediately.

The User may register again by completing the form as during their first registration.

Intellectual property

RATP Smart Systems declares and guarantees that it holds all intellectual property rights relating to the Service.

Access to and use of the Service does not transfer any ownership rights to the User; RATP Smart Systems remains the exclusive holder of the ownership rights relating to the Bonjour Application.

Accordingly, in compliance with the provisions of Article L122-4 of the Intellectual Property Code, all elements accessible on the Service (text, logo, map, trademark, icon, video, sounds, etc.) and all components may not be represented or reproduced in any manner whatsoever, in whole or in part, on any medium whatsoever, without the express prior authorization of RATP Smart Systems.

RATP Smart Systems grants the User of the Service the right to use the Service for private needs, excluding any lucrative use and excluding any other right. For any professional use, the User must obtain the prior, express, and written authorization of RATP Smart Systems.

Failure to comply with this prohibition constitutes an act of infringement likely to incur the civil and/or criminal liability of the User, RATP Smart Systems reserving the right to bring legal proceedings against any User who has failed to comply with this prohibition.

Hyperlinks

A User may create hyperlinks except to sites distributing information and/or content of an illegal nature and/or, in particular, of a political, religious, or pornographic nature.

RATP Smart Systems may moderate the creation of hyperlinks and reserves the right to refuse their publication online without having to justify itself.

The User is informed that by clicking on these links, they will leave the Bonjour Application. RATP Smart Systems therefore invites the User to read the general terms of use of these links.

As RATP Smart Systems has no control over the content of these sites, it shall under no circumstances be held liable for their content. Likewise, RATP Smart Systems cannot be held liable for damage of any kind resulting from the consultation of these sites.

Finally, RATP Smart Systems, within the limits permitted by law, cannot be held liable if the content of said other sites breaches the legal and regulatory provisions in force.

Accuracy of information

RSS endeavors to publish precise, accurate, and up-to-date information online. Nevertheless, it cannot guarantee total reliability.

The User is invited to report any information that appears inaccurate and, where applicable, to suggest any improvement they deem useful by sending:

By post to the following address: RATP Smart Systems Bonjour App RATP Data Protection Officer Immeuble Maille Nord II 8, Avenue Montaigne 93 160 Noisy-le-Grand

or

By email to the following address: [email protected].

Amendments to the GTU

The User is informed that the GTU may be amended at any time and unilaterally by RSS, in particular to comply with any legal and/or technical developments.

In such a case, RSS undertakes to inform the User of the amendments made to the services and/or the GTU by any written means that RSS deems appropriate, and in particular by email or by means of a special notice on the Platform.

Personal data

When using the Service, personal data concerning Users are collected and processed by RSS, its subcontractors, and its partners through the collection of personal data and cookies.

All information and rights relating to the processing of personal data and cookies carried out by the Platform are accessible in our Personal Data Policy and on our Cookie Management Policy page.

Liability and Warranty

RSS liability and warranties

RSS cannot be held liable for any misinterpretation or improper performance of the Service GTU.

RSS undertakes to use its best efforts to protect the information circulating on the Service. Nevertheless, the User acknowledges that it is impossible to guarantee complete security for transmitted data. Consequently, RSS cannot be held liable for incidents that may result from such transmission.

RSS undertakes to exercise all due care and diligence necessary to provide a quality service, in particular by publishing precise, accurate, and up-to-date information on the application. Nevertheless, RSS cannot guarantee the total reliability of its application. In particular, information may be modified or updated at any time without notice.

RSS shall not be liable for:

• malfunctions, errors, or bugs, nor that these may be corrected, or that the Service will operate without interruption or breakdown;
• inability to access the Service and any type of foreseeable or unforeseeable damage, whether material or immaterial, resulting from the use of or total or partial inability to use the Service;
• malfunctions attributable to the software and services of Partners;
• RSS cannot be held liable for the content of websites and services linked to the Bonjour Application, nor for any damage of any kind resulting therefrom;
• omissions, inaccuracies, and deficiencies that the Platform may contain, whether caused by it or by third parties or partners providing such information.

User liability and warranties

When using the Service, the User undertakes not to breach the legislative and regulatory provisions in force, accepted internet practices, netiquette, and the GTU.

Likewise, the User undertakes to comply with the general terms of use of the Service; failing that, they shall be liable to RSS and/or third parties for any material or immaterial, direct and/or indirect loss of any kind caused by themselves or their agents.

Any failure to comply with the GTU is liable to result in legal proceedings and sanctions against the User. In particular, the User shall be required to indemnify RSS, its subcontractors, its partners, and the host against any request, claim, and/or action of any kind resulting from the breach of said provisions.

Furthermore, it is the User's responsibility to implement all possible means to preserve the confidentiality of the data transmitted to RSS.

Invalidity of a clause

If one of the clauses of the GTU is found to be invalid, RSS and the User agree that it shall be deemed unwritten, without affecting the validity of the other provisions.

Applicable law and competent jurisdiction

In the event of difficulty or dispute between RSS and the User resulting from the interpretation, performance, or non-performance of the GTU, RSS and the User undertake to seek an amicable solution within a reasonable period.

Failing an amicable solution, any dispute relating to the performance, non-performance, or interpretation of the general terms of use shall be submitted to the competent courts within the jurisdiction of the Paris Court of Appeal.

Version in force as of July 1, 2023.

"Bonjour RATP" is a digital service (hereinafter the "Service") offered by RATP Smart Systems (hereinafter "RSS", "Bonjour RATP", "we", "our", "us"), a Simplified Joint-Stock Company with a sole shareholder, with capital of 45,000,000 euros, registered with the Bobigny Trade and Companies Register under number B 519 874 598, whose registered office is located at 8, avenue Montaigne in Noisy Le Grand (93 160), represented by Mr. Rémy REDEUILH, in his capacity as President.

This Service is accessible via the Bonjour RATP mobile application (hereinafter the "Bonjour RATP App").

These general terms and conditions of sale (hereinafter the "GTC") are entered into between:

RATP Smart Systems, a Simplified Joint-Stock Company with a sole shareholder, with capital of 45,000,000 euros, having its registered office at 8, avenue Montaigne in Noisy-le-Grand (93160), registered with the Bobigny Trade and Companies Register under number B 519 879 598, and

Any natural person, private individual or professional (hereinafter the "User") wishing to use one or more services offered by Bonjour RATP.

The GTC are supplemented by:

• the General Terms of Use (hereinafter the "GTU");
• the Personal Data Policy; and
• the Cookie Management Policy.

Any use of Bonjour RATP is subject to compliance with the GTU, and any purchase on Bonjour RATP requires prior acceptance of the GTC. The User (hereinafter the "User(s)") acknowledges having read the GTU implemented by RATP Smart Systems in connection with the use of the Service and accepts these GTC before any purchase on Bonjour RATP.

ARTICLE 1. DEFINITIONS AND SCOPE

The GTC apply to any use of Bonjour RATP, in particular to the marketing of all services offered on Bonjour RATP by RATP Smart Systems in the name and on behalf of its Partners.

It is specified that the services available on Bonjour RATP are offered by RATP Smart Systems in the name and on behalf of its partners (Marcel, TIER Mobility, ...) or directly by its partners (Vélib', Ile de France Mobilités, ...) via their co-branded websites and mobile applications.

RATP Smart Systems invites the User to regularly review the general terms and conditions of sale of Bonjour RATP as well as the specific conditions relating to each service, which may be modified at any time by RATP Smart Systems or by its partners with regard to the specific conditions of their offers. It is specified that the general terms and conditions of sale and the specific conditions can be consulted directly on the websites of RATP Smart Systems' partners.

RATP Smart Systems recommends that the User download and/or print the GTC in order to keep a copy. As the GTC may be modified at any time and without notice by RATP Smart Systems, the User must review and accept the GTC at the time they make their mobility offer reservation and purchase.

ARTICLE 2. ACCEPTANCE

Any reservation of services made by the User on Bonjour RATP or on a partner's website or mobile application via Bonjour RATP requires unreserved acceptance of the GTC of RATP Smart Systems, and of the general and specific terms and conditions of sale of the partner concerned, applicable to each service.

ARTICLE 3. MODIFICATIONS

The User is informed that the GTC may be modified at any time and unilaterally by RATP Smart Systems, in particular in order to comply with any legal and/or technical developments.

In such a case, RATP Smart Systems undertakes to inform the User, within a reasonable period, of the changes made to the services and/or the GTC by any written means that RATP Smart Systems deems appropriate, in particular by email, supplemented where applicable by means of a special notice on Bonjour RATP.

ARTICLE 4. USE OF BONJOUR RATP

4.1 Conditions of use

It is recalled that in order to use Bonjour RATP, the User must be at least 18 years old, be legally capable of entering into a contract, and use the website or application in accordance with the GTC.

The User is financially responsible, for themselves and for third parties when making a reservation for them, including minors if they are their legal representative or are duly authorized by the legal representative of the latter, for any use of Bonjour RATP, unless they demonstrate that the fraudulent use did not result from any fault or negligence on their part.

The User guarantees the truthfulness and accuracy of the information provided by themselves or by a third party using such data on the Bonjour RATP website or application. The User must ensure that the information they provide during their reservation is correct; failing that, they must contact RATP Smart System under the conditions set out in Article 7 in order to enable RATP Smart Systems to ensure that the User benefits from the services ordered.

Fraudulent use of the Bonjour RATP booking service, or use that contravenes the GTC, may result in RATP Smart Systems refusing, at any time, to allow the User to access the services offered on said Bonjour RATP website or application.

4.2 Booking procedure

The order placement procedure with payment in the Bonjour RATP App includes at least the following steps:

1. the User performs a route search.
2. Following their request, Bonjour RATP communicates one or more service offers to them.
3. The User clicks on the service(s) of their choice.
4. A summary including all of their choices and the total price of the service(s) enables the User to check the details of their order.
5. The User must then ensure that all the information displayed matches their details (date, time, origin and destination of their trip, delivery method and address, price, identity, age of travelers, ...); this information can no longer be modified after validation of the order.
6. The User may then, provided that they have previously accepted the applicable GTC, validate their order.
7. The contract is then validly concluded.
8. Where applicable, the User pays for their order online in secure mode.
9. RATP Smart Systems, on behalf of its Partners, sends the User as soon as possible an acknowledgment of receipt confirming their order, containing the essential elements such as identification of the service ordered, the price and the quantity.
10. All the statements appearing in this order confirmation email shall be deemed to constitute the agreement between the User and RATP Smart Systems; if the User has not disputed them at the time of booking, they may thereafter only be disputed insofar as they differ from the order placed by the User.
11. If the User does not receive confirmation of their order, it is their responsibility to contact RATP Smart Systems in accordance with the terms set out in Article 7.

The order placement procedure without payment in the Bonjour RATP App includes at least the following steps:

1. the User performs a route search.
2. Following their request, Bonjour RATP communicates one or more service offers to them.
3. The User clicks on the service(s) of their choice.
4. The User is redirected to the website or mobile application of the RATP Smart Systems partner and continues the order placement procedure on that partner's website or mobile application, the order then being subject to the general terms and conditions of sale of the RATP Smart Systems partner.
5. The User pays for their order online in secure mode, on the website or in the mobile application of the RATP Smart Systems partner.
6. If necessary, it is the User's responsibility to contact the customer service department of the RATP Smart Systems partner directly.

4.3 Order cancellation

The conditions for cancelling and modifying orders and/or for reimbursement are defined in the general terms and conditions of sale and/or in the specific conditions of RATP Smart Systems' partners.

4.4 Evidence

It is expressly agreed that, except in the event of a manifest error by RATP Smart Systems, the data stored in the information system of RATP Smart Systems and/or its partners, in particular in the electronic messaging tools used on Bonjour RATP, shall have evidential value with regard to orders placed and the performance of the parties' obligations. Computer or electronic data stored by RATP Smart Systems constitute evidence and, if produced as evidence by RATP Smart Systems in any litigation or other proceedings, they shall be admissible, valid and enforceable between the parties in the same manner, under the same conditions and with the same evidential value as any document established, received or stored in writing.

4.5 Right of withdrawal

Pursuant to Article L221-28, 12° of the French Consumer Code, all services offered on Bonjour RATP by RATP Smart Systems on behalf of its partners are not subject to the right of withdrawal provided for in Articles L121-21-18 et seq. of the French Consumer Code regarding distance selling.

Accordingly, service reservations booked on Bonjour RATP are exclusively subject to the cancellation and modification conditions set out in these general terms and conditions of sale and/or in the applicable specific conditions of the partners. ARTICLE 5. SERVICE CONDITIONS Bonjour RATP offers an innovative and purely technological experience, with the purchase, booking and payment of transport tickets in electronic format, from internet access or on mobile.

The application offers the User the best route, highlighting all the mobility services of its Partners.

Any booking will be made from the User's customer area. Therefore, the creation of a customer account is essential for any User wishing to order and purchase a service on the Bonjour RATP website or application.

ARTICLE 6. FINANCIAL CONDITIONS OF THE SERVICES

Payment of the price, indicated in euros, for the services that the User purchases from the Partners, takes place from the day of the order and is made directly on the Bonjour RATP application when ordering, by providing their bank card number, except in cases where the User is redirected to the website of an RATP Smart Systems partner, in which case payment is made directly on the website or in the application of said partner.

In such a case, RATP Smart Systems cannot be held responsible for any difficulties arising on the Partner's website. This payment is made by bank card through a secure payment system.

In the event that the payment proves to be irregular, incomplete or nonexistent, for a reason attributable to the User, the sale of these services would be cancelled, and the resulting costs would be borne by the User; civil and/or criminal action may, where applicable, be taken against them.

ARTICLE 7. INFORMATION AND COMPLAINTS

Regarding requests for information, clarification and order tracking, the User may contact customer service: from 7 a.m. to 9 p.m. Monday to Friday; from 9 a.m. to 5 p.m. on Saturdays, Sundays and public holidays

either by email at the following address: [email protected] either in the dedicated section of the Bonjour RATP application.

ARTICLE 8. FORMALITIES The User is informed on Bonjour RATP of the health formalities necessary for the performance of their journey. It is the User's responsibility to review them before placing their order and to comply with them.

ARTICLE 9. WARRANTIES AND LIABILITY

Warranty and Liability of RATP Smart Systems

RATP Smart Systems undertakes to exercise all due care and diligence necessary to provide a quality service, in particular by publishing precise, accurate and up-to-date information on the application. Nevertheless, RATP Smart Systems cannot guarantee the total reliability of its application. In particular, information may be modified or updated at any time without notice.

RATP Smart Systems cannot be held responsible for any misinterpretation of the GTC.

RATP Smart Systems undertakes to use its best efforts to protect the information circulating on Bonjour RATP. Nevertheless, the User acknowledges that it is impossible to guarantee total security for transmitted data. Consequently, RATP Smart Systems cannot be held responsible for incidents that may result from such transmission.

RATP Smart Systems undertakes to exercise all due care and diligence necessary to provide a quality service, in particular by publishing precise, accurate and up-to-date information on the application. Nevertheless, RATP Smart Systems cannot guarantee the total reliability of the Bonjour RATP website and application. In particular, information may be modified or updated at any time without notice.

RATP Smart Systems shall not be held liable for:

• anomalies, errors or bugs, nor that these can be corrected or that the Bonjour RATP Application will operate without interruption or breakdown;
• the inability to access the Platform and any type of foreseeable or unforeseeable damage, material or immaterial, resulting from the use of or total or partial inability to use the Bonjour RATP Application;
• malfunctions attributable to the software of the Partners;
• RATP Smart Systems cannot be held responsible for the content of websites linked to the Bonjour RATP Application, nor for any damage of any kind resulting therefrom;
• omissions, inaccuracies and shortcomings that the Bonjour RATP Application may contain, whether due to its own actions or those of third parties or partners providing such information.

It is specified that RATP Smart Systems will ensure with its partners the proper performance of the services provided for in the contract concluded with the User. However, RATP Smart Systems may under no circumstances be held liable for any non-performance or improper performance of all or part of the services provided for in the contract, attributable either to the User, to the partner, to the unforeseeable and insurmountable act of a third party unrelated to the service, or to a case of force majeure.

Warranties and liabilities of the User

When using Bonjour RATP, the User undertakes not to contravene the legislative and regulatory provisions in force, proper internet practices, netiquette and the GTC.

Similarly, the User undertakes to comply with the GTU of Bonjour RATP; failing this, they shall be liable towards RATP Smart Systems and/or third parties for any material or immaterial, direct and/or indirect damage of any kind caused by themselves or their agents.

Any breach of the GTC may give rise to legal proceedings and sanctions against the User. In particular, the User shall be required to indemnify RATP Smart Systems, its subcontractors, its partners and the hosting provider against any demand, claim and/or action of any kind resulting from the breach of said provisions.

Furthermore, it is the User's responsibility to implement all possible means to preserve the confidentiality of the data transmitted to RATP Smart Systems.

ARTICLE 10. INTELLECTUAL PROPERTY

RATP Smart Systems declares and guarantees that it holds all intellectual property rights relating to the Bonjour RATP application.

Access to and use of Bonjour RATP do not transfer any ownership rights to the User; RATP Smart Systems remains the exclusive holder of the property rights relating to Bonjour RATP.

Thus, all elements accessible on Bonjour RATP (text, logo, map, trademark, icon, video, sounds, …) and components of the application may not, in accordance with Article L122-4 of the French Intellectual Property Code, be represented or reproduced, in whole or in part, on any medium whatsoever, without the express prior authorization of RATP Smart Systems.

Failure to comply with this prohibition constitutes an act of infringement that may give rise to the civil and/or criminal liability of its author. RATP Smart Systems reserves the right to initiate legal proceedings against any person who has not complied with this prohibition.

ARTICLE 11. PROTECTION OF PERSONAL DATA

When using the Bonjour RATP App, personal data concerning Users are collected and processed by RATP Smart Systems, its subcontractors and its partners through the collection of personal data and cookies.

All information and rights relating to the processing of personal data and cookies carried out by the Bonjour RATP Application are available in our Personal Data Policy and on our Cookie Management Policy page.

If necessary and in order to exercise their rights, the User is invited to contact the Data Protection Officer of RATP Smart Systems:

By post at the following address: RATP Smart Systems Data Protection Officer Immeuble Maille Nord II 8, Avenue Montaigne 93 160 Noisy-le-Grand

or

By email at the following address: [email protected].

ARTICLE 12. NULLITY

If one of the clauses of the GTC is found to be null and void, RATP Smart Systems and the User agree that it shall be deemed unwritten, without affecting the validity of the other provisions.

ARTICLE 13. APPLICABLE LAW AND COMPETENT JURISDICTIONS

In the event of any difficulty or dispute between RATP Smart Systems and the User resulting from the interpretation, performance or non-performance of the GTC, RATP Smart Systems and the User undertake to seek an amicable solution within a reasonable period.

Failing an amicable solution, any dispute relating to the performance, non-performance or interpretation of the general terms of use shall be submitted to the competent courts within the jurisdiction of the Paris Court of Appeal.

Version in force as of October 1, 2021.

"Bonjour" is a digital service (hereinafter the "Service") offered by RATP Smart Systems (hereinafter "RSS"), a Simplified Joint-Stock Company with a sole shareholder, with capital of 45,000,000 euros, registered with the Bobigny Trade and Companies Register under number B 519 874 598, whose registered office is located at 8, avenue Montaigne in Noisy Le Grand (93 160), represented by Mr. Rémy REDEUILH, in his capacity as President.

This service is accessible via a mobile application (hereinafter the "Bonjour App").

The conditions of access to and use of the Service are defined by the General Terms of Use (hereinafter the "GTU"), which are supplemented by this Personal Data Policy and by the Cookie Management Policy.

Personal data

When you use our services, we may collect and process your personal data (hereinafter the "Personal Data").

We are very committed to respecting your privacy and protecting your Personal Data.

The purpose of this Personal Data Policy is to inform you about how we use your personal data, in compliance with applicable French and European legislation, in particular Law No. 2018-493 of June 20, 2018 relating to the protection of personal data (hereinafter the "Personal Data Protection Law") and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such Personal Data (hereinafter the "GDPR") (hereinafter together the "Applicable Regulations").

This Policy is supplemented by our cookie management policy available at the following URL: https://www.bonjour-ratp.fr/en/informations-legales-app-mobile/#cookies

Identity of the data controllers

With regard to the collection of Personal Data, the information provided to Users (hereinafter the "User(s)" or "you" or "your") and the effective implementation of your rights, the controller of your Personal Data is RATP Smart Systems (hereinafter "RSS"), publisher of the Bonjour Application. RATP Smart Systems is a Simplified Joint-Stock Company with a sole shareholder, whose registered office is located at Immeuble Maille Nord II, 8 Avenue Montaigne, 93160 Noisy-le-Grand, registered with the Bobigny Trade and Companies Register under number 519 874 598.

As part of the use of mobility services, some of your data may be transmitted to the providers of these mobility services and will be processed under the conditions set out in their data protection policies: faq

Categories of data collected

As part of the services offered via the Bonjour Application, we may collect the following types of Personal Data:

• Data that you enter or that result from your use of the Bonjour Application, such as, for example, when you enter route and map requests;
• Technical browsing and interaction data of Users, such as technical data relating to the terminal used;
• Where applicable, geolocation data, when you have given your consent to activate the geolocation function, or depending on the settings made on your terminal (see the "Geolocation" section below).

Purposes and legal bases of processing

Your Personal Data are collected and/or processed when you use our services for the following purposes:

• Purpose: Carrying out general information operations about urban transport networks across a range of mobility options, by email and/or by sending notifications on the application. Legal Basis: This processing is based on the legitimate interest of RSS and aims to provide online services tailored to your needs
• Purpose: Carrying out personalized information operations related to traffic on urban transport networks across a range of mobility options according to the preferences indicated by the user, by email and/or by sending notifications on the application. Legal Basis: This processing may only be carried out on the basis of your consent
• Purpose: Carrying out personalized information operations on routes, timetables and locations of urban transport networks across a range of mobility options based on the preferences indicated by the user of the application through personalized display. Legal Basis: This processing may only be carried out on the basis of your consent
• Purpose: Operating the user's account on the application, synchronizing all of the user's information across all of their devices (mobile, tablet, etc.). Legal Basis: This processing forms part of the contractual relationship you enter into with RSS to operate the Bonjour Application account.
• Purpose: Carrying out, based on surveys, contests, statistics and profiling of customers as well as customer browsing data, loyalty, promotional and Bonjour solicitation operations through the scheduled sending of a targeted newsletter by email, and/or by sending notifications via the application and the web, conveying information about Bonjour and offers from its partners. Legal Basis: This processing may only be carried out on the basis of your consent
• Purpose: Managing the booking and payment of mobility means on the Bonjour Application. Legal Basis: This processing forms part of the contractual relationship you enter into with RSS to operate the Bonjour Application account.
• Purpose: Managing complaints and after-sales service for Bonjour Application customers. Legal Basis: This processing forms part of the contractual relationship you enter into with "RSS" to operate the Bonjour Application account.
• Purpose: Carrying out commercial prospecting actions (including contests) for the purpose of acquiring new customers. Legal Basis: This processing may only be carried out on the basis of your consent
• Purpose: Conducting satisfaction surveys and customer studies (including surveys), related to improving the services offered. Legal Basis: This processing is based on the legitimate interest of RSS and aims to provide online services tailored to your needs
• Purpose: Transfer of personal data as part of commercial partnerships. Legal Basis: This processing may only be carried out on the basis of your consent
• Purpose: Processing and interpreting traffic data recorded on the information system to improve the operation of the application and resolve incidents. Legal Basis: This processing is based on the legitimate interest of RSS and aims to provide online services tailored to your needs
• Purpose: Managing requests to exercise rights and questions about Personal Data. Legal Basis: This processing is based on the legitimate interest of RSS and aims to provide online services tailored to your needs

Recipients of your Personal Data

The Personal Data collected and/or processed when you use our online services are intended for RSS subcontractors and service providers, and where applicable RSS partners.

RSS partners are:

• RATP Group;
• Régie autonome des transports parisiens (RATP);
• Voi;
• Lime;
• Dott;
• Syndicat mixte Autolib' et Velib' Métropole;
• Smovengo;

Geolocation

Use of the geolocation feature of the Bonjour Application requires the User's prior express consent to be geolocated. To do this, the User must activate, if they so wish, the geolocation function directly in the settings of their mobile terminal and accept that the Bonjour Application may use it. This feature may be deactivated or activated at any time and free of charge.

Geolocation data are only:

• Used in connection with the provision of the service. The Application does not keep a record of them in its databases. Thanks to acceptance of the GPS geolocation function of the mobile terminal and the Bonjour Application, the User may: be guided when searching for routes or maps on urban transport networks across a range of mobility options; receive commercial messages during the session of use of the Bonjour Application. The mobile terminal then calculates its own position.

• Transmitted and used for commercial prospecting purposes or as part of mobility studies. The use and transmission of your geolocation data for these purposes are subject to your specific consent

Disabling geolocation by the Bonjour Application and/or geolocation of the mobile terminal blocks:

• services offered by the Bonjour Application that are related to it, in particular when searching for routes and maps,
• the display of geotargeted messages.

Keyword targeting

Our online services may use keyword targeting, in particular during route and map requests, to display or send contextualized editorial content.

Whether or not the User has accepted being geolocated, they may also see displayed or receive messages adapted to the routes and maps searched for and entered on their mobile terminal.

Email tracking - Pixel

Tracking pixels are a tracking method usually implemented in the form of a tiny image (1 pixel by 1 pixel), embedded in a website or email and invisible to the user.

Loading this image, whose name contains a user identifier, makes it possible to know that the tracked user visited a page or read an email.

Pixels are used for various purposes such as: personalizing communication according to users' interests, measuring audience, improving proper email delivery (also called measuring "deliverability"), etc.

Here are the purposes for which email tracking pixels are used:

Analysis of email open rates for deliverability purposes: we use tracking pixels to find out whether you open emails and the date on which you do so in order to establish distribution statistics and undertake the actions (adapting frequency or stopping sends) necessary for managing mailing lists.

Analysis of email open rates to measure and optimize campaign performance: we use tracking pixels to determine whether you open emails, the time at which you do so and information about the terminal you use in order to personalize message content, adapt the sending frequency or the communication channel used.

Creation of recipient profiles based on the preferences and interests expressed in order to target you in contexts other than emails: we use your preferences (for example, the emails you have opened or the topics that interest you) to offer you suitable content or advertisements on other sites, applications or communication channels. These trackers allow us to know whether you open emails, the time at which you do so and to obtain information about the terminal you use.

Detection and analysis of suspected fraud: we use tracking pixels in order to detect and analyze suspected fraud. These trackers allow us to know whether you open emails, the time at which you do so and to obtain information about the terminal you use.

Data relating to the terminal and connection to the Bonjour Application

Data relating to the User's connection settings and terminal, collected or processed when using the Bonjour Application, in particular the identifier of the terminal used, are intended for the Bonjour Application, its subcontractors and partners, in order to enable the design, implementation, use, delivery, management and improvement of the services offered, in particular to adapt the display of the content of the Bonjour Application and promotional offers to the User's terminal settings, activate content personalization on the Bonjour Application, collect statistics to optimize the features of our services and media, store preferences and settings, and send notifications. You have access to the complete list of trackers used in the Bonjour Application in the Cookie Management Policy.

The Bonjour Application undertakes to transfer data only to third parties located within the European Union or in non-European countries benefiting from an adequacy decision granted by the European Commission or pursuant to a contractual arrangement compliant with the applicable regulations.

What are your rights regarding your Personal Data?

In accordance with the Applicable Regulations, subject to an express request and proof of your identity to RSS, you benefit from a right of access to your Personal Data and, where applicable, a right of rectification, a right to object, a right to erasure as well as a right to portability, under the conditions of the Applicable Regulations.

You also have the right to object to the processing of your Personal Data. If you exercise your right to object, RSS will cease processing the Personal Data, except in the event of legitimate and compelling grounds for the processing, or to ensure the establishment, exercise or defense of its legal rights, in accordance with the Applicable Regulations.

You may also, subject to the conditions of the Applicable Regulations, request a restriction of the processing of your Personal Data.

When the processing of your Personal Data is based on your consent, you may withdraw your consent at any time:

• either by the means we make available to you: concerning commercial newsletters: by clicking on the unsubscribe link. In this case, RSS undertakes no longer to send you commercial newsletters; concerning personalization and cookies: by using the cookie management tool made available to you in the "Privacy" menu in the Bonjour Application and in the Cookie Management Policy.

• or by writing by post or email to the Data Protection Officer of RATP Smart Systems whose contact details are set out below in the

Section "Data Protection Officer - Contact".

You also have the right to recover your Personal Data in a structured, commonly used and machine-readable format in order to transmit them to another data controller, where applicable. You therefore have the option of requesting that RSS transmit to you the data concerning you (identification and order data exclusively) in electronic format (csv file).

You may provide RSS with instructions concerning the fate of your Personal Data after your death.

Where applicable, RSS will inform you of the reasons why the rights you exercise cannot be satisfied in whole or in part.

To exercise the rights mentioned in this article, you may contact RSS by attaching to your request a copy of an identity document using the contact details indicated below in the Section "Data Protection Officer - Contact".

Connection methods

Two connection methods are offered for using the online services of the Bonjour Application:

Connection without Identification: in this mode, your preferences are stored only locally in the Bonjour Application. Only non-identifying data necessary to guarantee the design, implementation, use, delivery, management and improvement of our services are transmitted to RSS. If you choose access without identification, you will not, however, be able to retrieve your preferences and favorites from one medium to another or in the event of a change of mobile terminal. Nor will it be possible to access the booking and payment of the various urban transport modes offered by the Bonjour Application.

Connection with identification: If you decide to connect by authenticating yourself, the data collected relating to use of the service will be associated with your subscriber account in order to personalize your access to the online services of the Bonjour Application, make them more relevant and enable synchronization of all your information across all your devices. You will also be able to access the booking and payment of the various urban transport modes offered by the Bonjour Application.

Retention periods for your Personal Data

RSS, in its capacity as controller within the meaning of the Applicable Regulations, undertakes not to retain your Personal Data beyond the period strictly necessary for the purposes of use for which they were collected, in accordance with the Applicable Regulations.

RSS, in its capacity as controller within the meaning of the Applicable Regulations, undertakes to archive or delete your Personal Data as soon as the purpose and/or defined retention period expires. In all cases, the maximum periods are those described in the table below.

These maximum periods apply, unless you request the erasure or cessation of processing of your Personal Data before the expiry of these periods, if their retention is no longer justified by legal requirements.

• Processing Audience measurement, management of cookies and other trackers Associated retention period See the page all about cookies and the Cookie Management Policy (https://www.bonjour-ratp.fr/en/informations-legales-app-mobile/#cookies)
• Processing Management of generic information intended for travelers related to the network Associated retention period Your data are deleted as soon as consent is withdrawn or 3 years from your last action via the Bonjour Application.
• Processing Management of personalized traveler information related to the network Your data are deleted as soon as your consent is withdrawn or 3 years from your last action via the Bonjour Application.
• Processing Offering a personalized display of traffic information on the application for the User Associated retention period Your data are deleted as soon as your consent is withdrawn or 25 months from your last action via the Bonjour Application.
• Processing Management of customer accounts Associated retention period Your data are deleted 5 years after your account is deleted, in accordance with statutory limitation periods.
• Processing Management of requests to exercise rights and questions about Personal Data Your data are deleted 5 years from the response provided to the request.
• Processing Management of the Bonjour relationship program Associated retention period Your data are deleted as soon as your consent is withdrawn or 3 years from your last action via the Bonjour Application.
• Processing Management of bookings and payments on Bonjour Your data are deleted 5 years after your account is deleted, in accordance with statutory limitation periods.
• Processing Monitoring of the commercial relationship (customer relationship management) Associated retention period Your data are deleted 5 years after your account is deleted, in accordance with statutory limitation periods.
• Processing Commercial prospecting for acquisition purposes Your data are deleted as soon as your consent is withdrawn or 3 years from your last action via the Bonjour Application.
• Processing Satisfaction surveys and customer studies Associated retention period Your data are deleted 3 years from the collection of personal data.
• Processing Management of data feedback to partners Associated retention period Your data are deleted as soon as your consent is withdrawn or 3 years from your last action via the Bonjour Application.
• Processing Logged connection data Associated retention period Your data are deleted 6 months from the collection of the data.

Your data are secure

In accordance with the Applicable Regulations, the Bonjour Application processes Personal Data securely and confidentially.

In particular, the Bonjour Application implements all technical and organizational measures appropriate to guarantee the security and confidentiality of the Personal Data collected and processed, and in particular to prevent them from being distorted, damaged or communicated to unauthorized third parties, by ensuring a level of security appropriate to the risks related to the processing and the nature of the Personal Data to be protected, taking into account the technological level and implementation cost.

However, the Application cannot guarantee the confidentiality or deletion of Personal Data made public by the User in the public parts of the Bonjour Application.

The Application may include links to websites or external sources. You acknowledge that the GTU and this Personal Data Policy apply only to the use of the Bonjour Application, and in no case cover information collected and/or processed on external sites or sources, links to which may appear on the Bonjour Application. Consequently, the Bonjour Application cannot be held responsible for the practices of these external sites or sources regarding the collection and processing of personal data, which are governed, where applicable, by the personal data policies specific to each of these external sites or sources.

Data Protection Officer - Contact

For any request concerning the processing of your Personal Data, whatever the purpose of processing, you may send your request or complaint to the RSS Data Protection Officer by contacting them:

By post at the following address: RATP Smart Systems Data Protection Officer "Bonjour Application" Immeuble Maille Nord II 8, Avenue Montaigne 93 160 Noisy-le-Grand

or

By email at the following address: [email protected].

RSS will endeavor to find a satisfactory solution to ensure compliance with the Applicable Regulations.

In the absence of a response or if the dispute persists, you may lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés) (3 place de Fontenoy - TSA 80715 – 75334 Paris cedex 07; tel.: 01 53 73 22 22) or with the supervisory authority of the European Union Member State in which you usually reside.

Published on September 30, 2022. Updated on July 6, 2026.

This cookie policy describes the different types of cookies that we use on our "Bonjour" application (hereinafter the "Bonjour Application") accessible on your mobile phone and/or tablet (hereinafter the "Terminal(s)") via iOS and Android systems.

We apply a cookie management policy that respects the right to privacy and we undertake to be transparent about the digital technologies we use.

To the extent that the information collected using cookies constitutes personal data, the provisions of this Cookie Management Policy are supplemented by our Personal Data Policy.

What is a cookie?

Cookies are files placed on your mobile phones, tablets and/or computers by our servers when using the Bonjour Application. They make it possible to personalize the services that we offer you.

We use different types of "cookies", the nature of which is specified below:

• Cookies: A cookie is a small file placed on your Terminal when you visit the Bonjour Application. Any User accessing it may receive cookies from us or from third parties linked to external companies.
• Pixels: A pixel is a tiny image found in emails and which requires a call (providing information about the device and the visit) to a server in order to activate the pixel in those emails. Pixels may also allow us, and third parties, to place cookies on your browser.
• Local storage: Local storage allows an application to store information locally on your devices. It may be used to activate features, remember your preferences and speed up the features of the Bonjour Application.
• Other similar technologies: These are other tracking technologies similar to those indicated in this Cookie Policy. The similar technologies in this policy refer to pixels, local storage and other tracking technologies.

Four categories of cookies are used by the Bonjour Application:

• Cookies created and managed by the application and transmitted to third parties;
• Third-party cookies issued by external companies and used by our application;
• Third-party cookies issued by external companies and used by the Bonjour Application;
• Cookies created and managed by the application for technical purposes (debugging, security) and for optimizing navigation on our application.

These cookies make it possible to establish statistics and measure traffic and use of the various elements making up the Bonjour Application (sections and content visited, user journeys, ...). They allow us to improve the appeal and ergonomics of our services. They also allow us to report anomalies generated by the Bonjour Application in order to correct them and improve the service and manage its performance. They only collect pseudonymized data that do not allow you to be identified. They require your prior consent.

By refusing all or part of these cookies, you may not be able to benefit from all the features of the Bonjour Application or the Bonjour Site.

All of these cookies are placed on your Terminal(s) according to the information set out below and, where applicable, according to the choices you have expressed concerning them.

What are the cookies used on the Bonjour Application for?

• Cookies strictly necessary for operation and security: These cookies are essential for browsing our website and the Bonjour Application. Deleting them will not allow access to our digital tools.

• Audience measurement solution cookies: These cookies make it possible to establish statistics and measure traffic and use of the various elements making up the Bonjour Application (sections and content visited, user journeys, ...). They thus allow us to improve the appeal and ergonomics of our services. They also allow us to report anomalies generated by the Bonjour Application in order to correct them and improve the service and performance.

• Cookies used for marketing and advertising targeting purposes: These cookies are used for marketing purposes, in particular to display targeted advertising, conduct market research and assess the effectiveness of an advertising campaign.

How long do we keep your personal data transmitted by cookies?

Your choice, consent or refusal to have cookies placed on your Terminal(s), is kept for 6 months. The request is renewed at the end of this period.

Personal data from the cookies that we use for audience measurement purposes are kept for 25 months.

Personal data from cookies used for marketing and advertising targeting purposes are kept for 25 months. These periods are independent of the privacy policies of the third parties that access the personal data from these cookies and whose links you will find below.

You will find precisely in the list below the names, description, nature, retention period of the cookies used on the Bonjour Application and the operating procedures according to the cookie categories defined above.

Third-party cookies issued by external companies and used by the Bonjour Application (for audience measurement, marketing and advertising targeting purposes):

Firebase CrashLytics: Collects information helping us track, prioritize and correct anomalies and bugs affecting the Bonjour Application. It uses a pseudonymous identifier that does not allow you to be identified Domain: Google Unsubscribe (Click to learn more) Type and retention period: Other Similar Technology, 180 days Operating procedure: This cookie is necessary for optimizing navigation on the Bonjour Application. It is transmitted to third parties and requires the User's prior consent.

Firebase Analytics: Analyzes Users' use of the Bonjour Application in order to improve its content and operation. It uses a pseudonymous identifier that does not allow you to be identified Domain: Google Unsubscribe (Click to learn more) Type and retention period: Other Similar Technology, 60 days Operating procedure: This cookie is necessary for optimizing navigation on the Bonjour Application. It is transmitted to third parties and requires the User's prior consent.

Firebase Performance: Diagnostic tool for service performance issues on various mobile terminals and servers. It uses a pseudonymous identifier that does not allow you to be identified Domain: Google Unsubscribe (Click to learn more) Type and retention period: Other Similar Technology, 90 days Operating procedure: This cookie is necessary for optimizing navigation on the Bonjour Application. It is transmitted to third parties and requires the User's prior consent.

Batch: This tracker allows "push" notifications to be delivered to your smartphone. It makes it possible to obtain data related to your device and your use of the Bonjour Application in order to send you relevant notifications. It uses a pseudonymous identifier. If you disable this tracker, you will no longer receive any notifications. Domain: Batch Type and retention period: Other Similar Technology, Upon uninstallation of the Bonjour Application

Contact details of the controllers of cookie tracking operations:

RSS: joint controller for all cookies issued by third parties or transmitted to third parties on its application. Cookies concerned: _ga, _gid, _gat, ga{container-id} Contact details of the controller of tracking operations: 8 Avenue Montaigne, RCS Bobigny 519 874 598, Immeuble Maille Nord II, 93160 Noisy-le-Grand Privacy policy of the controllers (Click to learn more)

Google Inc Cookies concerned: Google Ads, 1P_JAR, __Secure-3PAPISID, __Secure-APISID, __Secure-SSID,CONSENT, Secure-HSID, __Secure-3PSID, NID, SSID, HSID, APISID, Firebase Crashlytics, Performance, FirebaseAnalytics Contact details of the controller of tracking operations: Google Inc, 600 Amphitheatre Parkway, Mountain View, CA 94043 Privacy policy of the controllers (Click to learn more)

Facebook Inc Cookies concerned: Facebook Contact details of the controller of tracking operations: 1601 S California Avenue Palo Alto, CA 94 304, USA Privacy policy of the controllers (Click to learn more)

Twitter International Company Cookies concerned: i/jot, i/jot/syndication, __widgetsettings, local_storage_support_test Contact details of the controller of tracking operations: One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland Privacy policy of the controllers (Click to learn more)

Batch Cookies concerned: Batch Contact details of the controller of tracking operations: IMEDIAPP, 43, rue Beaubourg, 75003 Paris Privacy policy of the controllers (Click to learn more)

Your choices regarding cookies

With the exception of cookies strictly necessary for the operation of the Bonjour Application and/or our site, cookies placed on your Terminal(s) will only be placed if you have specifically and previously given your consent. Your consent may be withdrawn at any time.

This choice can be made on the Bonjour Application interface by clicking on the "Manage my cookies" tab. By refusing the placement of certain cookies on your Terminal or by deleting cookies stored on your Terminal, you may not be able to benefit from all the features of the Bonjour Application.

Where applicable, we disclaim any liability for the consequences related to the degraded functioning of the Bonjour Application resulting from the impossibility for us to store or consult the cookies necessary for its operation that you may have refused or deleted.

The nature of these cookies is specified in the table above.

Exercising your rights

The data collected or processed when you browse the Bonjour Application are intended for RSS, its subcontractors and its partners, in order to improve the services offered on the Bonjour Application, facilitate your browsing, process your requests, create an account, where applicable, and inform you about "Bonjour" offers and news, subject to your acceptance.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such Personal Data (known as the "GDPR"), Directive 2002/58/EC of July 12, 2002 concerning the processing of personal data, Directive 2009/136/EC of November 25, 2009 relating to the protection of privacy in the electronic communications sector, and amended Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms, a Data Protection Officer will respond to requests for information relating to the processing of personal data and the cookie policy implemented by RSS with this application.

To write to the Data Protection Officer You have the right of access, rectification, objection and, where applicable, the right to portability, restriction or erasure of the data concerning you.

If you wish to exercise these rights, simply contact the Data Protection Officer and attach a copy of an identity document to your request:

By post, at the following address: RATP Smart Systems Data Protection Officer Immeuble Maille Nord II 8, Avenue Montaigne 93 160 Noisy-le-Grand

or

By email, at the following address: [email protected].

RSS will endeavor to find a satisfactory solution to ensure compliance with the Applicable Regulations.

In the absence of a response or if the dispute persists, you may lodge a complaint with the CNIL or with the supervisory authority of the European Union Member State in which you usually reside.

Published on October 1, 2021.

What is an SDK or software development kit?

A software development kit ("SDK") refers to a set of tools used for application development, depending on the operating system used. These SDKs are generally integrated by adding the code they provide into the developed application, code which may then make it possible to interface with the SDK provider's infrastructure in order to implement the functionality. They cover many features, but the most common are audience analytics, ad selection and delivery, or e-commerce features.

What is it used for?

The Bonjour RATP Application (hereinafter the "Application") accesses and collects unique identifiers or data from your device through SDKs.

These SDKs allow RATP Smart Systems (hereinafter "RSS") to:

• ensure the proper functioning of the Application,
• operate certain features;
• if you have consented, use them for advertising, analytics, or experience personalization purposes.

This SDK policy describes the different types of trackers that we use on our Application accessible on your mobile phone and/or tablet (hereinafter the "Terminal(s)") via iOS and Android systems. We apply an SDK management policy that respects the right to privacy and we are committed to being transparent about the digital technologies we use.

Insofar as the information collected using SDKs may constitute personal data, the provisions of this SDK Management Policy are supplemented by our Personal Data Policy. In addition, the Application may use local storage. This allows an application to store information locally on your devices. It may be used to enable features, remember your preferences, and speed up the Application's functionality.

Four categories of SDKs or trackers are used by the Application:

• SDKs used for technical purposes (debugging, security). They may be used for authentication or security purposes.
• Functional SDKs: they enable the use of Application features. They are mandatory to allow certain Application features.
• Advertising SDKs: they may be used to display relevant advertisements to you and to limit their display on the Application. Your consent is requested for the collection of identifiers necessary for these advertising purposes.
• Measurement SDKs: they make it possible to obtain information on users' journeys, to analyze traffic on the Application and for audience measurement purposes. This allows us to improve the Application according to users' requests and needs. Your consent is requested for the collection of identifiers necessary for analytics purposes.

How long do we keep your personal data transmitted by SDKs?

Your choice, consent, or refusal regarding SDKs is retained for 6 months. The request is renewed at the end of this period. Personal data from SDKs is retained in accordance with the provisions of the privacy policy.

You will find below the names, description, and nature of the SDKs used in the Application.

Your choices regarding SDKs

With the exception of SDKs strictly necessary for the operation of the Application, data collected through SDKs will only be collected provided that you have specifically and previously given your consent. Your consent may be withdrawn at any time.

This choice can be made in the Application interface in the menu (available from the "Home" screen) by clicking on the profile icon and then on "Privacy". By refusing certain SDKs, you may not be able to benefit from all the features of the Application.

Where applicable, we disclaim all liability for consequences related to the degraded functioning of the Application resulting from your refusal of certain SDKs.

Exercise your rights

The data collected or processed during your browsing of the Application is intended for RSS, its subcontractors, and its partners, in order to improve the services offered on the Application, facilitate your browsing, process your requests, create an account where applicable, and inform you about "Bonjour RATP" offers and news subject to your acceptance.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such Personal Data (known as the "GDPR"), Directive 2002/58/EC of 12 July 2002 concerning the processing of personal data, Directive 2009/136/EC of 25 November 2009 on the protection of privacy in the electronic communications sector, and amended Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms, a Data Protection Officer will respond to requests for information relating to personal data processing and the SDK management policy implemented by RSS with this application.

To write to the Data Protection Officer, you have the right of access, rectification, objection and, where applicable, the right to portability, restriction, or erasure of data concerning you.

If you wish to exercise these rights, simply contact the Data Protection Officer and attach a copy of an identity document to your request:

• By post, to the following address: RATP Smart Systems Data Protection Officer Immeuble Maille Nord II 8, Avenue Montaigne 93 160 Noisy-le-Grand
• By email, to the following address: [email protected].

RSS will endeavor to find a satisfactory solution to ensure compliance with the Applicable Regulations. In the absence of a response or if the dispute persists, you have the possibility of lodging a complaint with the CNIL or with the supervisory authority of the Member State of the European Union in which you usually reside.

Published on April 07, 2025. Updated on December 19, 2025.

Etalab License ©2024