This page explains the data used to answer your messages, protect the website and understand how it is used.
Data controller and contact
The data controller is Pedro Navarro, the personal, non-professional publisher of Train Corse. You can reach him through the Contact form, including for any questions about your data.
Messages sent through the Contact form
The form asks for your surname, email address, subject and message. Your first name is optional. Required fields are used to identify your enquiry and reply to you; without them, the form cannot be sent. Avoid including sensitive data or information that is unnecessary for your enquiry.
This processing is based on the publisher’s legitimate interest in replying to people who contact him and maintaining the website. Messages are not used for commercial prospecting.
The message is emailed to the publisher and an acknowledgement is sent to the sender. No copy of the message is retained in the form submissions database. Correspondence received in the mailbox is kept for no more than 12 months after the enquiry has been handled, then manually deleted by the publisher.
Messages are received by Pedro Navarro in a mailbox he administers himself on his private server. Technical providers needed for hosting and email delivery are involved in providing those services. The website is hosted by LWS. Correspondence is not forwarded to a commercial department of the Corsican Railways.
Abuse prevention and technical logs
Checks detect submissions sent too quickly and bot behaviour. An IP address fingerprint is used to limit submissions within a one-hour window. Rejections and errors may be recorded in technical logs, together with the request’s IP address. These measures are based on the legitimate interest in protecting the website. Session cookies needed for requested functions are not reused to count downloads.
General application logs are limited to 1,000 entries and cleaned up during maintenance tasks; this limit is not a fixed retention period. New statistics-specific monitoring logs are kept for 90 days. Server log and backup retention periods depend on their configuration and must be distinguished from those for statistics.
Two levels of internal statistics
Download counting without identifiers
When a file is served, an internal counter records only the file concerned, the day and the number of downloads. It retains no IP address, browser information or visitor identifier and does not reconstruct any browsing journey. This server-side counting uses no statistical tracker on your device and continues to operate if you decline detailed statistics. It measures download requests served, not unique people or complete receipt of the file.
Daily counters are kept for 25 months, then aggregated by month. Truly anonymous historical totals are retained to track the website’s development, including the annual figures shown on the About page.
Detailed statistics with your consent
If you allow Train Corse’s own storage and content performance measurement purposes in the Google consent manager, the website measures views of tracked pages (timetables, interactive map and search results), interactions, searches and durations. A random statistical identifier is placed in local storage with a maximum validity of six months, without automatic renewal. It is replaced the next time you use the website after it expires; if you do not return, its value may remain in your browser’s storage but must no longer be reused. A session identifier distinguishes sessions after 30 minutes of inactivity.
Data may include pages, clicked targets, referring domain, browser and operating system families, device category and rounded screen dimensions. The IP address and full browser string are not retained in these new events. No visitor geolocation is added. These data remain pseudonymised and are not described as anonymous.
New detailed events are kept for 90 days; searches are kept for 30 days after filtering designed in particular to limit email addresses and long sequences of digits. Automatic cleanup retains monthly totals by event type, without identifiers or search text. Search filtering does not guarantee the absence of all personal data: do not enter confidential information.
Archives from the previous system have been isolated from the new cleanup process to preserve historical records during their review. They remain accessible only to authorised administrators. This transitional retention does not constitute authorised indefinite retention of old personal data.
Google advertising and managing your choices
The public website uses Google AdSense and its “Privacy & messaging” manager. This manager collects choices relating to advertising and the website’s own purposes. Consent for an advertising partner alone is not enough to activate Train Corse’s detailed statistics. Without appropriate consent, or if the manager is unavailable, these statistics remain disabled. Refusing does not prevent access to content or anonymous download counting.
You can refuse, customise or withdraw your consent. Withdrawal stops new detailed events and removes statistical identifiers from the browser you are using; it does not automatically erase events already recorded, which remain subject to the retention periods above and your rights.
Google may process data and use advertising trackers according to your choices and the terms stated in its manager. See Google’s information about partner sites. AdSense, its CMP and Google Analytics are separate services; the detailed tracking described here is Train Corse’s internal tool.
Maps, videos and external services
The main network, timetable, station and hiking maps use MapTiler basemaps obtained through the website’s server. This relay does not transmit the visitor’s IP address to the basemap provider. Mapping libraries are loaded from the unpkg content delivery network, which receives technical data needed for that connection, including the IP address. Train Corse does not use these loads to build an advertising profile.
YouTube, Vimeo and older embedded Google Maps content is offered as links that you can choose to open with the provider. These links load no remote player or preview before you open them. On external websites, their providers’ privacy policies and choices apply.
Social media links open the respective websites. External providers, including Google and content delivery networks, may process data outside the European Union under their own terms and safeguards; this page does not assume that all data remain in France.
Your rights
Subject to the conditions of the General Data Protection Regulation, you can request access to your data, rectification, erasure or restriction of processing. You can object, on grounds relating to your particular situation, to processing based on legitimate interests. Portability applies where its legal conditions are met. You can withdraw consent without affecting the lawfulness of processing carried out beforehand.
Address your request to Pedro Navarro through the Contact form, providing the information needed to locate it. A response should normally be given within one month; an extension may apply under the conditions laid down by law. You can also lodge a complaint with the CNIL.