Privacy Policy

Breizhgo Penn Ar Bed Shipping Company does everything in its power to protect your personal data in accordance with applicable European and French regulations.

This privacy policy (‘Privacy Policy’) is intended to inform you of the purposes and conditions under which we process the personal data we may collect through our various channels, such as our sales departments, our websites https://pennarbed.breizhgo.bzh, our social media platforms, or any events we may organise.

Our Cookie Policy, available at https://pennarbed.breizhgo.bzh/cookie-policy-eu/, supplements this Privacy Policy to inform you of the purposes and conditions of use of cookies or browsing data that may be used on our websites and mobile applications.

We invite you to take the time to read this Privacy Policy so that you have all the necessary information to understand how your personal data is used and to freely and fully exercise the rights guaranteed to you by applicable laws and by this Privacy Policy.

General provisions

Data controller

The data controller for your personal data is Compagnie Maritime Breizhgo Penn Ar Bed, except where we act on the instructions and on behalf of our clients. In such cases, we will inform you either when your personal data is collected or in this Privacy Policy

Terms and Conditions of Use
Applicable law and competent administrative authority

The Privacy Policy is governed by the General Data Protection Regulation No. 2016/679 (‘GDPR’) and by the French Data Protection Act No. 78-17 of 6 January 1978, as amended (‘Data Protection Act’), under the regulatory supervision of the French data protection authority, the CNIL (Commission Nationale de l’Informatique et des Libertés – www.cnil.fr).

Links to third-party websites

Our website may contain or use links to websites, mobile apps, products or services operated by third parties (including advertising sites, our partners’ sites or social media platforms). Please note that this Privacy Policy does not apply to these third parties, over whom we have no control and for whom we cannot be held liable

Protection of minors

For the purposes of providing the products and services of Compagnie Maritime Breizhgo Penn Ar Bed digitally, we may collect personal data from minors under the age of 16, under the supervision and with the consent of their legal representatives (parents or guardians). Users of our digital services who inform us that they are under the age of 16 have a discretionary right to have their data erased (subject to our legal retention obligations described in Article 3 ‘Use of collected data and retention periods’ below), which they may exercise directly or through their legal representative, at any time and without giving a reason, by contacting us at [email protected].

The personal data we collect

This Privacy Policy applies to personal data that we may collect from you or about you (see below) from the following sources:

  • By completing our subscription or data collection forms, whether on paper or electronically, or during operations or events organised by Compagnie Maritime Breizhgo Penn Ar Bed in which you take part;
  • Visiting one of our physical stores and/or purchasing one of our services;
  • Enquiries or correspondence via email, post and/or telephone with our customer service team;
  • Receipt and processing of your application via the ‘Contact Us/Apply’ tab, as well as by email, and the creation of a CV database;
  • Receiving information from suppliers and prospective clients as part of the management of pre-contractual and contractual relationships;
  • Validation of tickets, controlling access to our services, or dealing with offences and collecting fines;
  • Use of our services, including our ticketing systems
  • Browsing our websites https://pennarbed.breizhgo.bzh/
  • Receiving and sending emails, text messages and other electronic messages between Breizhgo Penn Ar Bed Shipping Company and you;
  • Telephone or voice calls between you and Compagnie Maritime Breizhgo Penn Ar Bed or one of its service providers;
  • Requests to exercise your rights under the GDPR should be sent by post and/or email to [email protected].

Use of collected data and retention periods

We collect and use your personal data for the main purposes described below. We retain your personal data only for as long as is necessary to fulfil these purposes, except where the law permits or requires us to retain it for a longer period.

The table below summarises the various maximum retention periods that apply:

ObjectivesTypes of data collectedRetention periods
Managing your user accounts on our websites and/or appsLogin details Credentials2 years from the last business transaction
Managing sales prospecting and sending updates to customers and prospectsIdentification details
Information about your personal life
2 years from the end of the contractual relationship for the customer, and from the last contact initiated by the prospect
Management of marketing communications relating to promotions and partner offers within the network.Identification details  Until consent is withdrawn.
Newsletter ManagementIdentification detailsUntil consent is withdrawn.
SMS alert managementIdentification details Details relating to transmission linesUntil consent is withdrawn.
Management, issuance and use of travel tickets (customer relationship management, distribution of media and travel tickets, management of sales channels and management of ticket validation)Identification details Validation details  Data relating to customer relations is retained for the duration of the contractual relationship and for a further two years after its conclusion, in the case of both customers and prospective customers.    
Conducting satisfaction surveysPersonal details
Travel habits
Anonymisation of responses once the survey has been completed
Response to your enquiries / questionsIdentification details and information regarding the request
Requests received Responses provided
The time required to process your application, up to a maximum of one year
Management and record-keeping of purchases and services, warranties, and debt collectionPersonal details Order and subscription details Payment details SEPA Direct Debit mandate5 years from the date of the last transaction, except for data relating to payment methods, which is processed by Compagnie Maritime Breizhgo Penn Ar Bed’s payment service providers solely for the duration of the limitation period for payment transactions and for a maximum of 24 months. SEPA Direct Debit mandate: 37 months from the date of the last direct debit taken from the customer’s bank account
Claims managementPersonal details Order and subscription details Responses provided5 years from the date the claim is closed
Monitoring of issued fines and the corresponding penaltiesIdentification data Location data Data relating to offencesUntil the fine has been paid  
The detection of habitual offencesIdentification data Location data Data relating to offences  up to 12 months
Issuing adjustment notices, handling reminders and complaints following the detection of an infringementIdentification data Location data Data relating to offences1 year in the active database, followed by 2 years in the archive
Cookie management: audience measurementCookiesTo find out how long your data relating to cookie management is retained, please refer to our cookie policy.
Managing your recruitment and building a CV databasePersonal details
Information about your professional background
The application review process takes some time, followed by a maximum of two years from the date we send our response, during which we may contact you again regarding other opportunities if you are not selected.  
Conducting statistical analyses of network usageAnonymised statisticsAnonymous
The management of competitions Identification details, including identity documents Requests received / Responses provided2 years from the last business transaction
Handling of requests to exercise rights and provision of information under the GDPRInformation required for the current procedure5 years from receipt of the complete application. The identity document is retained only for the duration of the verification process.
Incident reporting managementIdentification details
Details of the incident
1 year from the date of the report

Legal basis for the processing of personal data

In accordance with the applicable regulations, we process your data where we have a legal basis for doing so. This may include the performance of a contract (a), your consent (b), a legitimate interest (c), or a legal obligation (d).

The purposes of processing based on the legal basis of contractual (or pre-contractual) performance 
  • The management, issuance and use of travel tickets;
  • Registration and administration of the services provided by the Breizhgo Penn Ar Bed Shipping Company;
  • Management and record-keeping of purchases and services, warranties, debt collection, invoicing, and SEPA mandate management;
  • Managing your recruitment;
  • Claims management
Processing purposes based on your consent
  • Managing sales prospecting and sending updates to customers and prospects;
  • Conducting satisfaction surveys;
  • The management of cookies and trackers on our websites and apps, excluding technical cookies and trackers necessary for their operation.
  • SMS alert management
  • Newsletter Management
  • Managing your user accounts on our websites and/or apps;
Processing purposes based on the legal basis of legitimate interests
  • Handling your enquiries and questions;
  • The management of lost property;
  • The management of pre-litigation and litigation matters, and the gathering of evidence: data required for the ongoing proceedings;
  • Carrying out statistical analyses of network usage;
  • The creation of a CV database;
  • The organisation of competitions and the awarding of prizes;
  • Incident reporting management
Data collected on the basis of a legal obligation
  • The management of fraud and the recovery of fines, as well as the detection of habitual offences;
  • Handling your requests to exercise your rights (access, rectification, objection, etc.) under the GDPR 

Data transmission

Your personal data may be disclosed to:

Internally

To the authorised departments of Compagnie Maritime Breizhgo Penn Ar Bed which need to be informed for the purposes set out above, including customer services, human resources, security and fraud prevention, sworn officers, authorised personnel from the security department, staff members, the legal department, etc.

Within the Keolis Group

We may share your personal data with certain entities within the Keolis Group (Keolis SA and Keolis Solution) in order to ensure the continuity of our services and our website;

If you apply via the Keolis Group’s recruitment portal, your account and application details will be processed by Keolis SA, acting as a separate data controller, which will forward your application to Compagnie Maritime Breizhgo Penn Ar Bed for processing, acting as a separate data controller.

To service providers and subcontractors

We may share your personal data with trusted third parties located within the European Union (hereinafter “EU”) to help us operate our services, and in particular to ensure the smooth running of Compagnie Maritime Breizhgo Penn Ar Bed’s websites and mobile applications

To the organising authority and transport operators in the region/department

At the end of the public service contract, your customer data will be transferred to the organising authority and/or the new transport operator to ensure the continuity of the public service.

With your consent, your customer data may be passed on to the organising authority so that they can contact you regarding surveys and/or send you information about the region.

To business partners

We share certain pseudonymised data—which does not contain any direct identifiers—for the purposes described in Article 3, ‘Use of your personal data’, above, in relation to cookies and trackers collected in conjunction with partners who collect and process these cookies and trackers. These partners are either separate or joint controllers in respect of the processing carried out.

To third parties for legal reasons

Where we are required to comply with laws and regulations, legal requests or orders, or where permitted by law (i.e. to protect and defend rights, in situations posing a threat to life, health or safety, etc.). All your data is processed and hosted primarily within the EU

Data security

Breizhgo Penn Ar Bed Shipping Company safeguards your personal data by implementing appropriate physical, organisational and technical measures to prevent any unauthorised access, use, disclosure, alteration or destruction, in accordance with current regulations.

These measures include, in particular:

  • Storage on secure servers within the European Union;
  • Restricted access to your data on a “need-to-know” basis;
  • The implementation of internal organisational measures to protect your data

Although Compagnie Maritime Breizhgo Penn Ar Bed takes every possible measure to protect your personal data, we cannot guarantee the security of information transmitted via our websites or any of our mobile apps if a security breach affects your device or browser.

Your rights regarding your personal data

Under the GDPR and the French Data Protection Act, you have various rights, including:

Accessing, amending, updating and deleting your personal data

You may request access to your personal data held and processed by Compagnie Maritime Breizhgo Penn Ar Bed, view it, obtain a paper or electronic copy, and request that it be corrected, updated or deleted.

Opposition

You may, at any time, request that certain data no longer be processed.

Portability

You may request that your personal data be provided to you in an open, machine-readable format, whether for your own use or to transfer it to another data controller.

Restriction of processing

In certain cases, you may request that the processing of your data be restricted.

You can also decide what should happen to your personal data after your death.

Complaint to a supervisory authority

Without prejudice to any other legal remedies, you have the right to lodge a complaint with the supervisory authority in the European Union country where you live, work or where you believe your rights have been infringed.

You may exercise all of these rights by sending a written request, accompanied by proof of identity (where necessary to verify your identity), to the contacts listed in Article 9 ‘Contact Us’.

We will endeavour to respond to your requests as promptly as possible and in accordance with the relevant regulations. However, in certain cases, we may not be able to comply with your request in order to meet our legal or contractual obligations.

Changes to the Privacy Policy

Breizhgo Penn Ar Bed Shipping Company may need to make changes to its Privacy Policy.

We encourage you to check this page regularly to keep up to date with any changes and stay informed about the measures we are taking to protect your personal data.

Contact us

To exercise your rights or if you have any questions regarding the Privacy Policy and the processing of your personal data, please contact us:

at [email protected]

or Click here to access the dedicated form, or via the contact form

or at

Breizhgo Penn ar Bed
Port de Commerce – 1er Eperon
CS 92854
29229 BREST CEDEX 2

The Privacy Policy was updated on 23 June 2025