Data protection notice for deutschebahn.com

Article: Data protection notice for deutschebahn.com

Thank you for visiting our website. We want to provide transparency regarding the possible collection and processing of personal data. The security of your data is important to us.

The following privacy statement provides you with an overview of how your data is collected and processed on this website.

Further information on data protection, e.g. on our products or topics such as video surveillance, social media or on how we process personal data within the DB Group, can be found here.

Who is responsible for processing data?

Deutsche Bahn AG

Potsdamer Platz 2
10785 Berlin, Germany

is responsible for the collection and processing of your data.

Dr. Marein Müller is the designated data protection officer.

E-mail: konzerndatenschutz@deutschebahn.com

End of expander content
What data do we collect? How and why do we process your data?

Purposes for which personal data is processed at www.deutschebahn.com

We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or express wishes of the user.

1.       Visit to the website

For technical reasons, when you visit www.deutschebahn.com, it is necessary to collect and store certain data (the date and duration of the visit, the web pages visited, the identification details of the browser and operating system type and the website from which you accessed our website).

2.       Contract

For contractual reasons, we also need personal data (e.g. contact details) to provide our services and to comply with the obligations arising from the contractual agreements that we have concluded with you. This data is required for invoicing, for postal delivery to the designated address and to process any cancellations or refunds. If you provide us with data as part of a contract, we will use your data without your separate consent only to perform the contract that we have concluded with you. Once the contract has been performed in full, your data will be blocked until the retention periods stipulated by tax and commercial law have expired and then deleted, unless you expressly consent to the further use of your data.

3.       Newsletter data

If you subscribe a newsletter on our website, the data provided in the subscription will only be used for sending the newsletter, unless you agree to further use. You can unsubscribe at any time using the unsubscribe option provided in the newsletter.

4.       Contact form

If you send us a request using the contact form, the data you provide in the request form, including contact details, will be stored and processed only in order to process the request and answer any follow-up questions. Subsequently, your data will be deleted or will be blocked until the retention periods stipulated by tax and commercial law have expired and then deleted, unless you expressly consent to the further use of your data.

To book tickets and log in as a registered customer, please use the travel information on the website www.bahn.de of DB Vertrieb GmbH. Please also note the applicable data protection notice for www.bahn.de

Participating in competitions
 When we run competitions, we collect data for managing the process. The precise details, i.e. what data is collected and for what purpose, are available on the web page of the competition in question.


Legal basis for data processing

If we obtain your consent to process personal data, this serves as the legal basis as per Article 6(1)(a) of the General Data Protection Regulation (GDPR).

The processing of personal data that is required to fulfil a contract agreed with you is based on Article 6(1)(b) of the GDPR. Article 6(1)(b) of the GDPR also applies to processing required for performing precontractual measures, e.g. in connection with requests pertaining to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is Article 6(1)(c) of the GDPR.

We store and analyse user data obtained from online sources pseudonymously so that we can continually improve our offering. The legal basis for this is Article 6(1)(f) of the GDPR. For more information, see "When are cookies used?" below.

End of expander content
When are cookies used?

Cookies are small text files for storing personal data. When a page is accessed, cookies can be transferred to it, making it possible to identify the user. Cookies help to make web pages easier for users to use. 

We distinguish between cookies that are essential for the website's technical functions and cookies that are not essential for the website's technical functions.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not essential for the webpage's technical functions. 

Here is some information about the types of cookies and how they are used on our pages:

It is possible to use www.deutschebahn.com without the cookies that do not serve a technical purpose. This means that you can prevent browser tracking by cookies or block third-party cookies from being stored.

We also recommend that you regularly check the cookies stored by your system if you have not explicitly requested them.

Please note: if you delete all cookies, this also deletes any consent opt-out (consent withdrawal) cookies. In other words, you will have to opt out of the analysis process once again.

Matomo (formerly Piwik)

We use the Matomo analytics platform (formerly Piwik) on our website in order to analyse how people use the website and how we can improve it. The statistics we gain from this allow us to improve our offering and make it more interesting for users. Small text files (cookies) store information about how you use our website, including your IP address. This data is anonymised and stored on our servers.

The legal basis for the use of Matomo is Article 6(1)(f) of the GDPR.

Your deactivation options: if you want to opt out of user behaviour analysis, you can configure your browser to refuse analysis cookies. You can also decide whether your browser is allowed to store a unique web analysis cookie to enable the website operator to record and analyse various statistical data. If you decide not to allow this, click the following link to store the Piwik deactivation cookie in your browser.

Please note: if you delete all of your cookies, this also deletes the deactivation cookie. In other words, you will have to opt out of the behaviour analysis process once again.


End of expander content
When will my data be deleted?

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data is then stored for the mandatory retention period.

End of expander content
What are my rights as a user of www.deutschebahn.com?

​​​​​​

  •  You can request information as to what personal data pertaining to you is stored.
  • You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
  • You have the right to submit complaints to a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin commissioner for data protection and freedom of information), Friedrichstr. 219, 10969 Berlin, Germany; e-mail: mailbox@datenschutz-berlin.de
  • You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
  • If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
  • You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you that is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.
  • To exercise your rights, simply post a letter to the following address:
  • Deutsche Bahn AG
    Potsdamer Platz 2
    10785 Berlin, Germany
    or send an e-mail to konzerndatenschutz@deutschebahn.com.
End of expander content
Do you share my data with other parties?

I agree to content from YouTube being displayed to me.

We include content from Youtube on our website. This service is inactive by default, but you can activate it.

By clicking on the link to play the video, you will leave our website and be forwarded to YouTube. Google, as the operator of YouTube, uses cookies and pixel tags to personalize advertising and search results. Google, as the operator of YouTube, is solely responsible for this data processing. We have no knowledge of or influence on which data is processed in this context.
The company providing the service in the European Economic Area and Switzerland is Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon Hoause, Barrow Street, Dublin 4, Ireland. Further information can be found here: https://www.google.com/intl/de/policies/privacy/
If you activate the checkbox, we will remember your decision and show you future videos without you having to activate the YouTube offer again. We set a cookie for this. We do not transfer data to Google as the operator of YouTube.
You can change your decision at any time by deactivating the checkbox here:

End of expander content
What happens with external links?

If you click a link to an external website, you leave deutschebahn.com. Deutsche Bahn AG is not responsible for the content, services or products offered on the linked website, nor is it responsible for the data protection or technical security on the linked website.

End of expander content
Updates for new functions

We update our data protection notice whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. In cases where your consent is required or parts of our data protection notice involve provisions in contractual relationships that we have with you, the changes will only take place with your consent.

End of expander content

Last modified: July 2020