1. Data Controller
The Fédération des Industries Ferroviaires (FIF), a loi 1901 association located at 60 rue Anatole France, 92300 Levallois-Perret, is responsible for the processing of personal data collected on the site industrie-ferroviaire.fr.
DPO Contact: dpo@fif.asso.fr.
2. Data Collected
- Contact Form: name, email, company, message (retention period: 3 years after last exchange).
- Member Account: name, first name, email, position, company, hashed password (duration: while the account is active + 1 year).
- Audience measurement: Umami Analytics, self-hosted on our own servers, with no cookie and no individual identifier (see cookie policy).
- Server logs: IP address, user-agent, URL consulted (duration: 90 days, purpose: security).
- Login journal: email, IP address, device used, date and time of successful logins and failed attempts (retention: 12 months, purpose: account security).
3. Legal Basis
- Legitimate interest: server logs, anonymized statistics, reasonable B2B prospecting.
- Contractual obligation: management of member account and FIF membership.
- Consent: newsletter, non-essential trackers (consent always obtained before deposit).
4. Recipients
Data is never transferred to third parties for commercial purposes. It may be transmitted to technical subcontractors (host OVH, email sending, encrypted backups), all located within the European Union and bound by a contract compliant with the GDPR.
5. Your Rights
In accordance with Articles 15 to 22 of the GDPR, you have the right to access, rectification, erasure, limitation, objection, and portability of your data.
To exercise these rights, write to dpo@fif.asso.fr enclosing proof of identity. A response will be provided to you within a maximum of 30 days.
In case of disagreement, you may lodge a complaint with the CNIL (cnil.fr).
6. Security
The site is hosted on a dedicated OVH server in France, TLS 1.3 encryption mandatory, passwords stored via bcrypt/argon2id, encrypted AES-256 backups.
7. Cookies
For the detailed list of cookies deposited and the possibility of refusing them, consult the dedicated cookie policy.
8. Updates
This policy may be updated to reflect changes in the legal framework and practices. The date of the last update is shown at the bottom of the page.
Last updated: May 21, 2026.
Only the French version of this policy is authoritative. Other versions are provided for informational purposes only.