Privacy Policy - À la bonne station

1. Introduction

At À la bonne station, we take the protection of your personal data very seriously. This privacy policy explains what data we collect, how we use it, and what your rights are regarding this data.

2. Data controller

Name: À la bonne station

Email: contact@alabonnestation.fr

Address: France

3. Data collected

We collect the following information when you use our service:

3.1 Registration data

Email address: To create your account and send you notifications
Username: To identify you on the platform
Password: Stored encrypted (hashed)
Profile picture: If you choose to add one (optional)

3.2 Progress data

Visited stations: The list of stations you have marked as visited
Visit dates: Date and time of your visits
Unlocked badges: Your achievements in the app

3.3 Technical data

IP address: For security and abuse prevention
Browser type: To optimise the display
Last login date: To manage your session

3.4 Moderation data

Warnings received: History of warnings with their reasons
Deleted messages: In case of moderation
Account status: Active, pending, banned or deleted
Moderation logs: Actions carried out by moderators (kept for 12 months)

4. Use of the data

We use your personal data to:

Create and manage your user account
Track your progress in the Paris metro
Award and display your badges
Send you verification and notification emails
Improve our services and the user experience
Ensure the security of the platform
Comply with our legal obligations
Moderate content and maintain a healthy environment
Apply our warning system in case of rule violations

5. Legal basis for processing

We process your personal data on the following legal bases:

Consent: You accept our terms when you register
Performance of the contract: To provide the services you request
Legitimate interest: To improve our services and ensure security
Legal obligation: To comply with applicable law

6. Data retention

We keep your personal data:

Account data: As long as your account is active
Progress data: As long as your account exists
Login logs: 12 months maximum
After account deletion: 30 days (to allow recovery), then permanent deletion

7. Data sharing

We never sell your personal data to third parties.

Your data is only shared with:

Host: OVH (France) - To store the app's data
Emailing service: OVH Zimbra - To send transactional emails
In case of legal obligation: If required by the competent authorities

8. Data security

We implement appropriate security measures to protect your data:

HTTPS encryption: All communications are encrypted
Hashed passwords: Your passwords are never stored in plain text
Restricted access: Only authorised administrators have access to the data
Regular backups: To prevent any data loss
Firewall and monitoring: Protection against intrusions

9. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

✓ Right of access

You can request a copy of all the data we hold about you.

✓ Right to rectification

You can edit your personal information directly from your profile.

✓ Right to erasure

You can delete your account and all your data at any time.

✓ Right to portability

You can request your data in a structured, readable format.

✓ Right to object

You can object to the processing of your data for marketing purposes.

✓ Right to restriction

You can request the restriction of the processing of your data.

To exercise these rights, contact us at: contact@alabonnestation.fr

10. Cookies

Our site uses only cookies essential to the functioning of the app:

Session cookie: To keep you logged in
"Remember Me" cookie: If you check "Remember me" (7 days)
CSRF cookie: For form security

We use no advertising or third-party tracking cookies.

11. Minors

Our service is available to people aged 13 and over. If you are under 18, we encourage you to use the service with your parents' consent.

12. Changes to the policy

We reserve the right to change this privacy policy at any time. In the event of a substantial change, we will inform you by email or via a notification on the site.

13. Contact and complaints

For any question about this privacy policy or the use of your data:

📧 Email: contact@alabonnestation.fr

If you believe your rights are not being respected, you can also lodge a complaint with the CNIL (the French data protection authority):

🏛️ CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

🌐 www.cnil.fr