Privacy policy
1. Data protection at a glance
General information
The following information offers you a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. For more detailed information about data protection, please refer to our privacy policy, which can be found at the bottom of this text.
Data acquisition on this website
Who is responsible for data acquisition on this website?
Data is processed on this website by the website operator. You can find their contact details in this website’s legal notice.
How do we acquire your data?
On the one hand, your data is collected when you submit it to us. This may be data which you enter into a contact form, for example.
Other data is acquired by our IT systems automatically or subject to your consent when you visit the website. This is in particular technical data such as your internet browser, your operating system or the time of the page view. This data is acquired automatically as soon as you visit this website.
What do we use your data for?
Some data is collected in order to guarantee error-free provision of the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to obtain information free of charge at any time regarding the origins, recipients and purpose of the personal data relating to you and stored by us. You also have the right to demand that this data be rectified or erased. If you have granted your consent to data processing, you may revoke this consent with effect for the future at any time. You also have the right under certain circumstances to demand that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
In this regard and should you have any other queries concerning data protection, you may contact us at any time at the address listed in our legal notice.
Analytics tools and third-party tools
Your surfing behaviour when visiting this website can be statistically evaluated. This occurs primarily with what are called analytics programs.
Detailed information regarding these analytics programs can be found in the following privacy policy.
2. Hosting and content delivery networks (CDNs)
External hosting
This website is hosted by an external service provider (hoster). The personal data acquired on this website is stored on the hoster’s servers. This can first and foremost be IP addresses, contact enquiries, metadata and communication data, contract details, contact information, names, website page views and other data generated via a website.
A hoster is used for the purpose of contract performance vis-à-vis our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interests of the secure, swift and efficient provision of our online service by a professional service provider (Art. 6 (1) (f) GDPR).
Our hoster will only process your data insofar as this is necessary for the fulfilment of its performance duties and subject to our instructions regarding said data.
We use the services of the following hoster:
Hetzner Online GmbH
Industriestrasse 25
91710 Gunzenhausen
Germany
Conclusion of a processing contract
We have concluded a data processing contract with our hoster to ensure that data processing is compliant with the data protection regulations.
3. General and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.
Various examples of personal data are collected when you use this website.
Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It additionally explains how this happens and to what end.
Please bear in mind that online data transmission (e.g. email communication) can entail security vulnerabilities and that data cannot be fully protected against third-party access.
Information re the controller
The data processing controller for this website is:
Deutsche Bahn AG
Potsdamer Platz 2
10785 Berlin
As the controller, it is responsible for collecting and processing your data.
The appointed Data Protection Officer is Ms Chris Newiger.
Email: konzerndatenschutz@deutschebahn.com
Tel.: +49 (0)30/297-36622
The controller is the natural or legal person who, either solely or together with others, makes decisions regarding the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Data retention period
Insofar as no more specific retention period is stipulated in this privacy policy, we shall retain your personal data until the purpose of the data processing has expired. If you assert a legitimate erasure request or revoke your consent to data processing, your data will be erased insofar as we have no other legally permissible grounds for storing your personal data (e.g. retention periods pursuant to tax or commercial law); in the latter case, the data shall be erased upon discontinuance of these grounds.
Revoking your consent to data processing
Many data processing procedures are only permissible with your explicit consent. You may revoke the consent you have granted at any time. Your revocation does not affect the lawfulness of the data processing performed prior to the revocation of consent.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
If data is processed pursuant to Art. 6 (1) (e) or (f) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you; this equally applies to profiling based on these provisions. For the legal basis upon which an instance of data processing is founded, please refer to this privacy policy. If you lodge an objection, we shall cease to process your affected personal data unless we can present compelling legitimate grounds for the data processing which override your interests, rights and freedoms or unless the data processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).
Where your personal data is processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for such direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).
Right to lodge a complaint with the competent supervisory authority
If the GDPR is infringed, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint shall exist without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data which we process automatically on the basis of your consent or for the performance of an agreement surrendered to you or to a third party in a commonly used and machine-readable format. Insofar as you demand that data be transmitted to another controller, this shall be effected only where technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and for the protected transmission of confidential content such as orders or enquiries submitted to us as the page operators. You can recognise an encrypted connection when your browser’s address bar changes from ‘http://’ to ‘https://’ and when a lock icon appears in your address bar.
When SSL or TLS encryption is activated, the data you send us cannot be read by third parties.
Access, erasure and rectification
In accordance with the applicable statutory provisions, you have the right to access the personal data saved relating to you, its source and recipients, and the purpose of the processing of this data at any time free of charge, and, if applicable, the right to have this data rectified or erased. In this regard and should you have any other queries concerning personal data, you may contact us at any time at the address listed in our legal notice.
Right to restriction of processing
You have the right to demand that the processing of your personal data be restricted. In this regard, you may contact us at any time at the address listed in our legal notice. A right to the restriction of processing exists in the following cases:
- If you contest the accuracy of the personal data stored by us, we generally need time to verify its accuracy. You have the right to request that the processing of your personal data be restricted for the duration of this verification process.
- If the processing of your personal data was/is unlawful, you may demand that its processing be restricted rather than it being erased.
- If we no longer need your personal data, but it is required by you for the exercise, defence or establishment of legal claims, you have the right to demand restriction of its processing rather than it being erased.
- If you have objected to data processing pursuant to Art. 21 (1) GDPR, your interests must be weighed up against ours. Until it is determined whose interests take precedence, you shall have the right to demand that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
4. Data acquisition on this website
Cookies
Our web pages use what are known as cookies. Cookies are small text files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you yourself delete them or they are automatically deleted by your internet browser.
In some instances, cookies may be stored on your device by third parties when you visit our website (third-party cookies). These allow us or you to use certain services provided by the third party (e.g. cookies for the processing of payment services).
Cookies have various functions. Many cookies are necessary for technical reasons as certain website functions would not work without them (e.g. shopping basket function or video presentation). Other cookies are used to evaluate user behaviour or display advertising.
Cookies required for the execution of electronic communications (necessary cookies) or in order to provide certain functions desired by you (functional cookies, e.g. for a shopping basket function) or to optimise the website (e.g. cookies to gauge the web audience) are stored on the basis of Art. 6 (1) (f) GDPR insofar as no other legal basis is stipulated. The website operator has a legitimate interest in cookies being stored for the technically flawless and optimised provision of its services. Insofar as consent to cookies being stored has been requested, the cookies in question shall be stored solely on the basis of said consent (Art. 6 (1) (a) GDPR); you may revoke your consent at any time.
You can alter your browser settings such that you are notified whenever cookies are to be set so that you can accept cookies on a case-by-case basis, such that the acceptance of cookies is excluded in certain cases or in general or such that cookies are automatically deleted upon the browser being closed. Deactivating cookies may limit the functionality of this website.
Insofar as cookies are set by third parties or for analytics purposes, we shall notify you of this separately as part of this privacy policy and shall seek your consent, if applicable.
5. Plug-ins and tools
Borlabs Cookies
Cookie Consent Tool
Font Awesome (local hosting)
This website uses Font Awesome for the uniform rendering of fonts. Font Awesome is installed locally. No connection is established with the servers of Fonticons, Inc in the process.
6. YouTube
We include content from YouTube on our site. In the basic setting, this service is inactive, but you can activate it.
By clicking on the link to play the video you will be connected to YouTube and the external content will be displayed. Google, as the operator of YouTube, uses cookies and pixel tags to personalize advertising and search results. Google, as the operator of YouTube, is solely responsible for this data processing. We have no knowledge or influence which data is processed in this context. The company providing the service in the European Economic Area and Switzerland is Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.
Further information on data protection at Google can be found here: https://policies.google.com/privacy
If you activate the checkbox, we will remember your decision and show you future videos without you having to activate the YouTube offer again. We set a cookie for this. We do not transfer data to Google.
The cookie lasts for 6 months.
You can change your decision at any time by deactivating the checkbox in the data protection settings.
7. Updating of the data privacy notice
We amend this data privacy notice in line with changing functionalities or changes in the legal position. We therefore recommend that you familiarise yourself with this data privacy notice at regular intervals. Insofar as your consent is required or parts of the data privacy notice govern the contractual relationship with you, amendments shall only be made with your approval.
Correct as at: November 2020
Source: eRecht24
Data protection settings
An overview of the cookies used can be found here. You can consent to entire categories or you can have further information displayed and then select only certain cookies: