Version 2.2 - April 2020
In the context of the use of its services and in particular, the services accessible on its website, its mobile site and its mobile applications, Digitalspace, as data controller, may collect and process personal data.
Digitalspace is committed to respecting the privacy rules of its passengers, members of its loyalty program, prospects and visitors of its website, its mobile site and its mobile applications. All the processing of personal data implemented within the framework of accessible services complies with the local regulations applicable to the protection of personal data and in particular the provisions of the General Regulations on Data Protection (EU Regulation 679) or “GDPR”.
Digitalspace is responsible for the processing of your personal data in connection with these programs. Their respective responsibilities for compliance with the rules on the protection of personal data have been determined by agreement.
In order to ensure the correct application of these rules, Digitalspace has appointed a data protection officer. Digitalspace also implements the appropriate internal procedures to raise the awareness of its employees and to ensure compliance with these rules within its organization.
What are Digitalspace’s commitments in the protection of personal data?
Digitalspace undertakes to guarantee a high level of protection of the personal data of its customers, prospects, users of its website, mobile site and mobile applications and any other person whose personal data it processes.
Digitalspace undertakes to comply with the regulations applicable to all personal data processing that it implements. More particularly, Digitalspace commits itself to respect the following principles:
- Your personal data is treated lawfully, fairly and transparently (lawfulness, loyalty, transparency);
- Your personal data are collected for specific, explicit and legitimate purposes, and are not further processed in a manner incompatible with these purposes (purpose limitation);
- Your personal data is stored appropriately, relevant and limited to what is necessary for the purpose for which it is processed (minimization of data);
- Your personal data is accurate, kept up to date and all reasonable steps are taken to ensure that inaccurate data, for the purposes for which they are processed, are erased or rectified without delay (accuracy).
Digitalspace implements the appropriate technical and organizational measures in order to guarantee a level of security adapted to the risk inherent to its processing operations, to meet regulatory requirements and to protect the rights and data of data subjects from the design stage of processing operations.
In addition, Digitalspace imposes the same level of protection of personal data on its subcontractors (service providers, suppliers, etc.).
Lastly, Digitalspace undertakes to comply with any other principle that is required by the regulations applicable to the protection of personal data, and more specifically concerning the rights conferred on the data subjects, the retention periods for personal data and the obligations relating to cross-border transfers of personal data.
What are the data that can be collected by Digitalspace?
1. Means of Collection of Your Data
Within the framework of our relations, you are likely to communicate us your personal data by various means and in particular on our Internet sites, our sites and mobile applications during your Internet browsing, completing the various forms of collection when subscribing to the e-newsletter, when creating a Digitalspace account, when you submit an application, when you post comments on our social networking pages, when you establish any contact with Digitalspace or when you transmit to us any other way your personal data.
2. Purposes of Treatment and Legal Bases
Your data is mainly used for reservation and purchase of a ticket, provision of services or specific services: transport service, prospecting, loyalty, animation, commercial information, satisfaction surveys, organization of contests, new services, and products to improve your customer experience, statistical studies, recruitment, after-sales service, processing your requests and/or claims, but also to ensure safety and fight against fraud.
In addition to the cases where your consent has been collected (in particular to send you personalized offers), the processing of your data for the different purposes mentioned above is necessary in particular:
- to respect a legal obligation;
- for the legitimate interests pursued by Digitalspace (in particular to develop new services and offers, improve the loyalty program, improve customer service, etc.).
In particular, your data is used:
- to enable you to benefit from all the services or services available on the DigitalSpace website, its mobile site and its mobile applications: creation of a user account, e-newsletter, reservation management, assistance and complaint, management of loyalty programs, etc.;
- to allow you to browse our websites;
- to appropriately suit our information, proposals and other kinds of service to your interests;
- to be enriched by sharing certain information with preferred business partners in order to improve our knowledge of your interests and allow us to send you offers and other forms of personalized services (subject to your prior agreement when is required and the respect of your right of opposition, in accordance with the rules applicable to commercial prospection).
How long does your data be preserved?
Digitalspace undertakes to keep your personal data for a period not exceeding that required for the purposes for which they are processed. In addition, Digitalspace keeps your personal data in accordance with the retention periods imposed by the applicable laws in force.
These retention periods are defined according to the processing purposes implemented by Digitalspace and take into account the applicable legal provisions imposing a precise retention period for certain categories of data, any applicable limitation periods as well as the recommendations of the Canada law.
Who is likely to access your personal data?
1. Recipients of Your Data
The data collected on the Digitalspace website, its mobile site and its mobile applications may be communicated to Digitalspace’s authorized personnel, its partners (accredited agents) or its ancillary service providers, for the purpose of performing all or part of the services referred to above. We remind you that in this context, Digitalspace requires its providers to implement strict measures of confidentiality and protection of this data. In accordance with the laws and regulations applicable in Canada and internationally, Digitalspace may be required to provide personal information to authorized Canada or foreign public authorities (customs, immigration, police, etc.). This is the case, for example, for the purpose of preventing and combating terrorism or other serious crimes.
2. Data Transfers Outside the European Union
Some of the recipients mentioned above are likely to be established outside the European Union and to have access to all or some of the personal information collected by Digitalspace (name, first name, passport number, travel details, etc.), for the good performance of the services.
In this context, Digitalspace undertakes to guarantee the protection of your data in accordance with the strictest rules, in particular by signing, on a case-by-case basis, contractual clauses based on the European Commission’s model, or any other compliant mechanism to the GDPR, since your personal data are processed by a provider outside the European Economic Area and whose country is not considered by the European Commission as providing an adequate level of protection.
How to exercise your rights?
In accordance with the applicable regulations on the protection of personal data, you can, at any time, exercise your rights of access, rectification, deletion of data concerning you as well as your rights of limitation and opposition to the processing and the portability of your personal data.
In addition, you have the legal right to set guidelines regarding the fate of your postmortem personal data.
Also, any minor at the time of collection of his personal data may obtain the erasure as soon as possible.
These rights are exercised by mail to the following address:
Address: 100 King Street – Suite 5600
M5X 1C) – ON, Toronto – Canada
Tel: +1 416-644-8310
In this context, we kindly ask you to accompany your request with the necessary elements for your identification (last name, first name, e-mail) as well as any other information necessary to confirm your identity.
For certain specific services, these rights may be exercised directly on line (management of your user account, etc.).
As part of your right, you have the opportunity to exercise your rights, to withdraw your consent, or to address any question or complaint, by contacting Digitalspace at the address mentioned above.
Digitalspace will collaborate when necessary to guarantee the exercise of your rights or provide you with the necessary answers to all your questions or complaints.
When you’re in touch with our customer service, your call is likely to be recorded for service quality improvement, litigation prevention, and malicious calling.
You also have the right to oppose the processing of your personal data for purposes of commercial prospection. When required by law, your data will only be used for prospecting purposes electronically after obtaining your explicit consent.
In addition, if you no longer wish to receive the email newsletter from Digitalspace by e-mail, you can click on the unsubscribe link at the bottom of each communication.
If you do not wish to receive offers from Digitalspace and our partners, you can update your communication preferences in your profile by logging into your Digitalspace account.
The collection of certain personal data is essential to allow access to certain services. You can, of course, exercise your right to oppose the collection and processing of such data, but this may result in the impossibility of benefiting from these services or benefits.
In accordance with Canada and international laws and regulations, the lack of communication or the inaccuracy of certain data may lead to a decision to refuse your right without Digitalspace’s liability being incurred.
Convenience of Digitalspace online services, social media, and mobile devices
Digitalspace strives to continuously improve its electronic services in order to facilitate access to its customers, potential customers and visitors.
To facilitate the creation and your connections to your Digitalspace account you have the possibility to link your Digitalspace account with most social networks. By agreeing to share certain personal data, listed on the link screen and authorization specific to each social network, you can benefit from optimized navigation on the Digitalspace site. You may at any time, if you wish, untie your Digitalspace account from your social account.
In order to constantly improve the quality of the services offered on the site and their adequacy with your expectations, Digitalspace may use “cookies”, text files used to identify your device when you connect to one of our services.
The deposit of cookie or plotter in your terminal (computer, tablet, smartphone, etc.) allows Digitalspace to collect information and personal data. Depending on your choice of the configuration of your terminal, cookies allow:
- to use the main features of the Digitalspace site;
- optimize our website and detect any technical problems;
- memorize your choices and preferences and customize your user interface;
- to compile statistics for purposes of traffic management and use of the various elements making up the Digitalspace website (sections visited, route taken by the user) to improve the ergonomics of the site and the interest in the services offered;
- evaluate the effectiveness of our advertising campaigns by counting and evaluating the number of sales and clicks based on our advertising investments;
- to know the content of the pages you consult, the searches, the information you have chosen to share when you register on other sites, the pages and websites that you have seen;
- share information with other websites to provide you with relevant ads and ads;
- to share information on social networks.
IT Security/securing transactions
Ensuring the security and confidentiality of the personal data you entrust to us is a priority for Digitalspace. We thus implement all the technical and organizational measures that are useful, considering the nature, scope, and context of the personal data that you communicate to us and the risks presented by their processing, to preserve the security of your personal data and, in particular, to prevent any destruction, loss, alteration, disclosure, intrusion or unauthorized access to such data, whether accidentally or unlawfully. You are thus assured of buying your ticket in all confidentiality and security.
Digitalspace strives to fight identity theft on the internet. The security and confidentiality of personal data are based on the best practices of each. This is the reason why we invite you not to communicate your passwords to third parties, to disconnect systematically from your profile and your social account (especially in the case of linked accounts) and to close the window of your browser at the end of your work session, especially if you access the internet from a computer workstation shared with other people. This will prevent other users from accessing your personal information.
We strongly advise you not to broadcast to third parties or to publish on the social networks any document issued by Digitalspace containing your personal data.
To know the best security practices to apply, we invite you, for example, to consult the IT Security Portal. The general conditions relating to certain services or services accessible from Digitalspace’s websites, its mobile site or its mobile applications, may define more specific methods for the collection and use of your personal data.
Besides, Digitalspace has set up a security flaw management procedure to effectively deal with potential personal data breaches, to notify the competent authority without delay of these violations and to warn you when this violation is likely to breach of your personal data.
Personal data concerning minors
Digitalspace does not collect or process personal data relating to children under the age of 13 without the prior consent of parents or holders of parental responsibility for the child.
If personal data concerning children is collected via the website, applications or mobile sites of Digitalspace, parents or holders of the exercise of parental authority have the opportunity to oppose it by contacting us at the address indicated at the bottom of this page.
Moreover, as stated above, the minor child at the time of collection of his personal data may obtain the erasure as soon as possible.
Links to access other sites
On several pages of the Digitalspace website, you are offered the opportunity to click to access other websites of other companies. We advise you to read the policy of these non-Digitalspace sites relating to the processing and protection of personal data, as the conditions on these sites may differ from the conditions of Digitalspace. Digitalspace will not be responsible for the processing of personal data by these other websites.
For any additional questions regarding this policy or the way in which Digitalspace processes your personal data, we invite you to contact our data protection officer at the following address: firstname.lastname@example.org
Digitalspace reserves the right to adapt the personal data protection policy and undertakes to inform you on its website of changes or additions.