Privacy

Deutsche Bahn AG 

Potsdamer Platz 2 
10785 Berlin, Germany 

is the controller responsible for the collection and processing of your data. 

The appointed data protection officer is Dr Marein Müller. 

E-mail: konzerndatenschutz@deutschebahn.com

We collect and process your data only for specific purposes. These purposes may relate to technical requirements, contractual obligations or offers on our website. 

Visiting the website 

We process your IP address when you visit our website; however, we do not store it. 

For technical reasons, additional data is collected and stored when you visit this website. This does not include your IP address and therefore does not constitute personal data. 

• URL accessed 
• Date and time of access 
• Volume of data transmitted 

Analysis of the data by Deutsche Bahn AG 

For more information on data processing and analysis by Deutsche Bahn AG and your options in relation to this, please go to "Manage consent"/"Analyse verwalten". 

Cookies are small text files used to store personal data. Cookies can be sent to a web page when a user visits it, allowing that user to be identified. Cookies help make websites easier for users to navigate. We differentiate between cookies which are necessary for a website's technical functionality and those which are not necessary for this purpose.

We want to enable you to make an informed decision for or against using cookies which are not necessary for the website's technical functionality.

For more information on data processing and analysis by Deutsche Bahn AG and your options in relation to this, please go to "Manage consent"/"Analyse verwalten" below.

If we have obtained your consent to process personal data, the legal basis is Article 6 (1) (a) GDPR.

The processing of personal data that is required to fulfil a contract agreed with you is based on Article 6 (1) (b) GDPR. Article 6 (1) (b) GDPR also applies to processing required for performing precontractual measures, e.g. in connection with requests pertaining to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is Article (6) (1) (c) GDPR.

In order to process data, it is generally necessary for us to involve data centre operators, printing or shipping service providers, or other parties, who are bound by our instructions.

The external service providers that we use to process data on our behalf are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, and supplementary checks and controls.

Data is not transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses or an adequacy decision by the European Commission.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data will then be retained for the duration of the mandatory retention period.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data will then be retained for the duration of the mandatory retention period.

• You may request information about the data which has been stored about you. 
• You may request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions. 
• You have the right to file a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany, e-mail: mailbox@datenschutz-berlin.de. 
• You have the right to the portability of the data which you have provided to us on the basis of consent or a contract (data portability). 
• If you have given us consent to process your data, you can revoke this consent at any time, using the same method you used to give your consent. If you revoke your consent, any processing of your personal data which took place from the time you granted your consent to the time you revoked it will still be considered lawful. 
• You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest. 
• To exercise your rights, simply send a letter by post to Deutsche Bahn AG, Potsdamer Platz 2, 10785 Berlin, Germany, or by e-mail to konzernportal@deutschebahn.com.