MYAS24 CUSTOMER AREA PERSONAL DATA PROTECTION & COOKIE POLICY CHARTER

The purpose of the Charter is to inform you of the rights and freedoms that you can exercise in respect of our use of your personal data and describes the measures that we take to protect these data.

The Company and yourself as a Customer jointly determine the purposes and means of processing personal data processed in the framework of using the Customer Area. Consequently, the Parties are categorised as joint data controllers, as defined under article 26 of the GDPR.

You are hereby informed that when you process personal data of Cardholders and/or PASSango Heavy Goods Vehicles (PL) toll badges and when you perform management activities in the Customer Area related to Vehicles and/or Devices for your own requirements, you are acting as joint controller alongside the Company. Consequently, you hereby undertake to comply with your obligations as a data controller with regard to data subjects concerned by the processing operations performed.
 

 

1.    Purpose of processing, legal basis, and period of storage of data collected

Either you or the User designated by you to access the Customer Area may be likely to provide the Company with a certain amount of personal data such as your surname, forename, email address, and telephone number so as to be able to access functions and/or services available in the Customer Area. 
The information collected is necessary to process the Contract(s) signed with the Company, failing which the Contract cannot be performed.
The Company processes personal data you have provided for the following purposes and on the following legal basis:

 

Purpose of processing	Legal basis	Personal data collected	Retention period
Creation of a User profile and access to the Customer Area, Multi-pass management	Contract	Identification data.  (Surname, function, email address, phone), connection datas (login, password)	Term of Contract + 6 months
Subscription to additional services (CARDalert, CARDControl, PASSalert, AS 24 truck Assistance, eBilling…)	Contract	Email address	Term of Contract + 6 months
Access to trip-related services (tolls, parking, road taxes or any duty levied in relation with use of a Vehicle within a toll network, technical, legal and bookings assistance)	Contract	Immatriculation	Term of Contract + 6 months
Device management (AS 24 and AS 24 – EUROTRAFIC Cards and PASSango HGV Toll Badges)	Contract	Surname, forename of registered drivers, vehicle registration	Term of Contract + 6 months
Invoice management (view and download invoices, transactions not yet invoiced…)	Contract	Adresse email	Term of Contract + 6 months
Vehicle geolocation data, route simulator comparison, trip reporting, geolocation-based fuel transactions	Contract	Registration, vehicle GPS coordinates	Term of Contract + 6 months  Geolocation data :  1 year
Customer claims management to motorway concessions in France	Contract	Vehicle registration	Term of Contract + 6 months
Request for registration to receive e-mail alerts	Contract	Identification data (e-mail, name, function)	Duration or the subscription to the requested e-mail alerts. Possibility to unsubscribe at any time.

Your personal data will not be processed subsequently in any manner which does not comply with those purposes described above or within the data collection forms. Data are stored for as long as required for processing, namely for as long as the data subject, namely the Customer or authorised User, requires access to the Customer Area. Once the data subject is no longer bound by a contract to its company, the account and related data are deleted.
The User may freely designate additional persons entitled to access the Customer area by creating user accounts, assigning them specific access rights and deleting access rights.

 

2.    Data Recipients

In order to carry out the processing provided for in this Charter, your personal data may be communicated to one or more of the data controller's departments or to TotalEnergies company’s  companies and relevant service providers or subcontractors (Provider in the context of the supply of products and services).  
The personal data indicated under Article 1 are hosted by SIGMA INFORMATIQUE.

 

3.    Data Transfers

Any transfer of data to a country outside the European Economic Area shall be carried out in accordance with the applicable regulations and in such a way as to protect your data appropriately. 
In order to ensure an adequate protection of personal data originating in the European Economic Area that may be transferred to Total Group entities located outside the European Union, the TotalEnergies company has adopted “Binding Corporate Rules” (BCR) – Company internal rules. 
For data transfers not covered by the BCR, to countries outside of the European Economic Area, other measures to ensure adequate protection are taken. 
If you would like more information about our BCRs please click here. For more information about other measures taken to ensure adequate protection, please write to the contact address specified below.

 

4.    Data security and confidentiality

Each data controller takes the appropriate technical and organisational steps to protect the security and confidentiality of personal data incumbent upon them, including with regard to any subcontractors, in particular to prevent data from being distorted, damaged or disclosed to unauthorized third parties.

 

5.    Cookie management and other tracers

A cookie is a file that stores information pertaining to web browsing by your computer on the Customer Area (e.g. number of visits, number of pages consulted, etc.) and notably makes visits to the Customer Area more fluid.
Cookies are text files that are deposited on your terminal. They allow access to various information about you. Some of them belong to the site editor (First Party), others to third-party operators (Third Party). 

The table below details each cookie used on extranet.as24.com 

We enable cookies and other trackers once you have given your consent, with the exception of technical cookies that are necessary to provide the service you request on the Customer Area.

 

Categories of cookies and trackers	Name of the cookies and tracers	Cookies and tracers’ purposes	Providers	Retention period of cookies and tracers
Statistics	atid, atidvisitor, atuserid, xtan, xtant, xtvrn	Analysis of the traffic on the site	Piano Analytics	Up to 6 months
Statistics	DSID, IDE	Analysis of the traffic on the site	DoubleClick	Up to 6 months
Technical and functionnal	_GRECAPTCHA	Protection of access to the site by robots	Google	Up to 13 months
Technical and functionnal	_cf_bm	Displaying the onboarding tutorial	UserGuiding	Up to 13 months
Technical and functionnal	didomi_token, euconsent-v2	Consent based data processing	Didomi	Up to 13 months
Social networks	LOGIN_INFO, PREF, VISITOR_INFO1	Viewing embedded Youtube videos on a page	YouTube	Up to 6 months
Social networks	YSC	Analysis of traffic on Youtube videos viewed by the user	YouTube	Up to 6 months

How to withdraw your consent? 

When you first log on to the Customer Area, you may or may not give your consent to the use of cookies and/or proceed with a parameter setting. If you subsequently wish to change your choices, you can manage your cookies by going to the “Help & resources” menu, "Manage my cookies" section.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS, etc.). 

6.    Your rights/Contact

Pursuant to current regulations, you have the right to access, correct, delete and object to the use of your personal data. You also have the right to object or to consent the processing of your personal data. You can ask for your personal data to be sent to you and you have the right to give instructions for the use of your personal data after your death, where such a provision is applicable.  You can also request restriction of the data, portability of the data and/or make a claim to the competent supervisory authority. Please send your request to the email address: 
as24.ie.privacy@as24.com (Ireland) / as24.gb.privacy@as24.com (UK) or by post to the following address: AS 24 FUEL CARD LTD - 11-19 station Road, WD17 1AP Watford