Privacy statement for deutschebahn.com

Deutsche Bahn AG

Potsdamer Platz 2

10785 Berlin, Germany

collects and processes your data as the controller.

Dr. Marein Müller is the appointed data protection officer.

E-mail: konzerndatenschutz@deutschebahn.com

Purposes for which personal data is processed at www.deutschebahn.com

We collect and process your data only for specified purposes. These purposes may result from technical requirements, contractual obligations or requests on the part of users.

1.       Visit to the website

For technical reasons, when you visit www.deutschebahn.com, it is necessary to collect and store certain data (the date and duration of the visit, the web pages visited, the identification details of the browser and operating system type and the website from which you accessed our website).

2.       Contract

For contractual reasons, we also need personal data (e.g. contact details) to provide our services and to comply with the obligations arising from the contractual agreements that we have concluded with you. This data is required for invoicing, for postal delivery to the designated address and to process any cancellations or refunds. If you provide us with data as part of a contract, we will use your data without your separate consent only to perform the contract that we have concluded with you. Once the contract has been performed in full, your data will be blocked until the retention periods stipulated by tax and commercial law have expired and then deleted, unless you expressly consent to the further use of your data.

3.       Newsletter data

If you subscribe to a newsletter on our website, the data you provide when you subscribe to the newsletter will be used only to send the newsletter, unless you agree to further use. You can unsubscribe at any time using the unsubscribe option provided in the newsletter.

4.       Contact form

If you send us a request using the contact form, the data you provide in the request form, including the contact details you enter, will be stored and processed only in order to process the request and answer any follow-up questions. Subsequently, your data will be deleted or will be blocked until the retention periods stipulated by tax and commercial law have expired and then deleted, unless you expressly consent to the further use of your data.

5.       Virtual chat assistants

Virtual chat assistants, also known as chatbots, are used at www.deutschebahn.com/de/geschaefte/immobilien and www1.deutschebahn.com/dbimmobilien. These assistants help you when you search for information on the websites mentioned. They know the website content and provide keyword-based answers to customer questions, recommend links for the relevant website or recommend contact via another channel.

The chatbots are being improved all the time and help you navigate the online and mobile area. The chatbots are not used to resolve contract-specific customer inquiries at this time. Customer inquiries are still processed in person in the live chat, by telephone or by e-mail. Personal information is neither required for use nor desired.

Customer inquiries are stored in the chatbot no more than 34 days for self-learning purposes so that chatbot functions can be optimized. No personal data is analyzed. Usage data such as the duration of the chat, message timestamps, number of dialogs and approximate location of users is stored only for statistical purposes. We process your data exclusively to process your request and for internal purposes, e.g. to manage and improve our business and service processes (Article 6 (1) b) of the General Data Protection Regulation).

6.       Participation in contests:

 Data collected as part of contests is collected in order to run the contest. The precise details, such as what data is collected and for what purpose, are available on the web page of the relevant contest.

To book tickets and log in as a registered customer, you can use the Trip Planner on the www.bahn.de website of DB Vertrieb GmbH.  Please also observe the relevant privacy statement for www.bahn.de.

7.       Registration for our press mailing list:

You can request to be added to the national press distribution list on our website.

We process the personal data we collect through the request for media relations at Deutsche Bahn AG. We process the following required data:

• Fields of business
• Medium
• First name and last name
• Location
• E-mail address

The following information is optional when you request to be added to the press distribution list:

• Role
• Address
• Phone number
• Cell phone number

The legal basis for processing data is our legitimate interest in media and public relations within the meaning of Article 6 (1) f) of the GDPR. If you have given us your express consent to be added to the press distribution list, the legal basis for processing is Article 6 (1) a) of the GDPR.

We store your personal data for as long as you wish to receive press releases through the press distribution list. If you would like to be removed from the press distribution list and stop receiving press releases, please contact Deutsche Bahn AG, Corporate Press Information Office (GNK), Potsdamer Platz 2, 10785 Berlin, Germany, presse@deutschebahn.com.

Legal basis for data processing

If we obtain your consent to process personal data, this serves as the legal basis as per Article 6 (1) a) of the GDPR.

Where the processing of personal data is necessary for the performance of a contract with you, the contract provides the legal basis under Article 6 (1) b) of the GDPR. Article 6 (1) b) of the GDPR also applies to processing required for performing precontractual measures, e.g. in connection with requests pertaining to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is Article 6 (1) c) of the GDPR.

We store and analyze user data obtained from online sources pseudonymously so that we can continually improve our offering The legal basis for this is Article 6 (1) f) of the GDPR. For more information, see "When are cookies used?" below.

Cookies are small text files used to store personal data. When a page is accessed, cookies can be transferred to it, making it possible to identify the user. Cookies help to make web pages easier for users to use. We distinguish between cookies that are essential for the website's technical functions and cookies that are not essential for the website's technical functions.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not essential for the website's technical functions.

For more information on data processing by Deutsche Bahn AG related to website analytics and on settings, click “Manage analytics” in the footer of this page.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and to comply with legal requirements. For example, when there is a contractual relationship, we store your data at least until such time as the contract is fully terminated. The data is then stored for the mandatory retention period.

• You can request information regarding what kind of data is stored about you.
• You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and are in compliance with existing contractual conditions.
• If you believe that the dissemination of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority, in particular pursuant to Article 77 (1) GDPR.
• The supervisory authority responsible for Deutsche Bahn AG is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.
• You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
• If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
• You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you that is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.
• To exercise your rights, please write to us at the following address:

Deutsche Bahn AG

Potsdamer Platz 2

10785 Berlin, Germany

or send an e-mail to konzerndatenschutz@deutschebahn.com.

The provision of this website usually requires the involvement of data processors, such as data center operators, who work according to certain instructions.

External service providers that process data on our behalf are carefully selected by us and are subject to strict contractual obligations. The service providers follow our instructions, and this is ensured through strict contractual provisions, technical and organizational measures and additional monitoring.

Furthermore, we will share your data only if you have given your express consent or if we are required to do so by a law.

Your data will not be transferred to third countries outside the EU or EEA or to an international organization unless appropriate safeguards are in place. These include the EU standard contractual clauses or an adequacy decision from the European Commission.

YouTube

We include content from YouTube on our website. This service is inactive by default, but you can activate it.

By clicking on the link to play the video, you will leave our website and be redirected to YouTube. Google, as the operator of YouTube, uses cookies and pixel tags to personalize advertising and search results. Google, as the operator of YouTube, is solely responsible for this data processing. We have no knowledge of or influence on which data is processed in this context. The company providing the service in the European Economic Area and Switzerland is Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

Additional information about privacy at Google is available here: https://policies.google.com/privacy.

If you click the checkbox, we will remember your decision and show you future videos without you having to activate YouTube again. We use a cookie for this purpose. We do not transfer data to Google as the operator of YouTube.

If you click a link to an external website, you leave deutschebahn.com. Deutsche Bahn AG is not responsible for the content, services or products offered on the linked website, nor is it responsible for the data protection or technical security on the linked website.

We update our privacy statement whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. In cases where your consent is required or parts of our privacy statement involve provisions in contractual relationships that we have with you, the changes will only take place with your consent.