Publishing details and privacy statement for the Group's social media channels

Deutsche Bahn AG
Potsdamer Platz 2
10785 Berlin, Germany

collects and processes your data as the controller.

The appointed data privacy officer is Dr. Marein Müller.

E-mail: konzerndatenschutz@deutschebahn.com

Activities on social networks

You can find our own pages on various social media. We would like to use these to provide you with a wide range of multimedia content and exchange ideas with you on topics that are important to you. In tandem with the respective provider of a social network, we also collect and process personal data on our pages on the platforms. This notice informs you about the data we collect from you on our social media pages, how we use it, and for what purposes, and the rights to which you are entitled. The data processing purposes and data categories are described separately below for our presence on each of the respective social media platforms.

We present our company on the Facebook channels "Deutsche Bahn Group" (https://www.facebook.com/deutschebahn/) and "DB Karriere" (https://www.facebook.com/DBKarriere). On DB Karriere (Careers) you will gain insights into the job profiles at Deutsche Bahn, information on vacancies and recruiting events. The DB team will be happy to answer any questions you may have. 

If you visit our page on Facebook, Meta Ireland (Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland) collects, stores and uses your personal data in accordance with Meta Ireland's privacy policy. You can find the privacy policy here: https://facebook.com/privacy/policy

Beyond this, we only process data to a very limited extent.

We use the Facebook Insights statistics service for the purpose of designing and continuously optimizing our pages to meet your needs. This service records your activity on our site and provides us with information about it in anonymized statistics. This provides us with information about the activity of visitors to our site, views of our site, the reach of posts (both organic and paid content), views and average duration of video playbacks, information about which countries and cities our visitors come from, as well as statistics about the gender ratio of our visitors, the age and languages of our target group.

It is not possible for our administration to draw conclusions about individual persons or access individual profiles.

You can find more information about Facebook Insights here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

With regard to the processing of the Insights data, we share the responsibility with Meta Ireland. Details about this are regulated in the agreement on joint responsibility (Page Controller Addendum), which you can find via the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can get in touch with us via private messages on Facebook. We manually delete private messages from the social media channels at the end of each quarter if they were last acknowledged more than six months ago and were exchanged via the DB Karriere page on Facebook.

Personal data is processed on the legal basis of overriding legitimate interest in corporate communication or communication in the context of applicant management in accordance with Article 6 (1) (f) of the GDPR.

In addition, we save usernames and comments that are deleted due to a breach of netiquette. These are only retained for the purpose of providing evidence in the event of legal disputes within the limitation period.

The legal basis for processing in this case is the fulfillment of legal obligations, Article 6 (1) (f) of the GDPR, as well as the overriding legitimate interest in the protection of legal interests pursuant to Article 6 (1) (f) of the GDPR.

On the "deutschebahn" Instagram channel (https://www.instagram.com/deutschebahn/), content is posted as part of corporate communications, for example showing the work of the various business units. The focus is on the environmental dimensions and sustainability, innovation and technology as well as strengthening the employer brand, with a focus on all business areas. Cross-media content is also published.

On the "DB Career" channel (https://www.instagram.com/dbkarriere/), we take you behind the scenes at Deutsche Bahn where you will discover different job profiles at Deutsche Bahn and receive information on vacancies and recruiting events. On Instagram, the DB team also answers users' questions and comments on a professional basis and posts the best pictures and videos from the day-to-day work of Deutsche Bahn employees.

On the "db_frauenbeiderbahn" channel (https://www.instagram.com/db_frauenbeiderbahn/), we present the networking platform for women at Deutsche Bahn on Instagram. On Instagram, we publish content on the topics of networking, careers, sharing experiences and mentoring.

Our presence on the platform also includes our page on the Instagram Threads product, where text content is also displayed as a short messaging service.

If you visit our Instagram or Threads page, personal data will be stored and processed by Meta Ireland (Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4 Ireland) as the provider of Instagram and Threads in accordance with the Meta Privacy Policy (https://privacycenter.instagram.com/policy/) and the supplementary Threads Privacy Policy (https://help.instagram.com/515230437301944).

Beyond this, we only process data to a very limited extent:

We use the Instagram Insights statistics service for the purpose of designing and continuously optimizing our pages to meet your needs. This service records your activity on our pages on Instagram and Threads and provides us with information on this in anonymized statistics. This provides us with insights into the activity of visitors to our pages, the views of our page, the reach of posts (both organic and paid content), views and average duration of video playbacks, information on which countries and cities our visitors come from, as well as statistics on the gender ratios, age and languages of our target groups. It is not possible for our administration to draw conclusions about individual persons or access individual profiles.

Personal data is processed on the basis of the overriding legitimate interest in communication in accordance with Article 6 (1) (f) of the GDPR.

In addition, we save usernames and comments that are deleted due to a breach of netiquette. These are only retained for the purpose of providing evidence in the event of legal disputes within the limitation period.

The legal basis for processing in this case is the fulfillment of legal obligations, Article 6 (1) (f) of the GDPR, as well as the overriding legitimate interest in the protection of legal interests pursuant to Article 6 (1) (f) of the GDPR.

We do not store or process any of your personal data, with the exception of competitions and fan pictures. In the case of competitions, the winners will be publicly identified with their username and asked to contact us by e-mail within 14 days. The winners must send their real names and addresses so that the prizes can be sent. This data is processed by us exclusively for the purpose of running the competition. Competitions are governed by their respective conditions of participation. The e-mails with the addresses will generally be deleted after 30 days as long as they are not required for the notification of winnings. In this case, the legal basis for this processing is the initiation or fulfillment of the contract in accordance with Article 6 (1) (b) of the GDPR.

In the case of fan pictures, after making a non-binding request, we ask users for their consent to repost their pictures on the deutschebahn Instagram channel. We save the declaration of consent as a screenshot and the image as a file with the user's details. The photos and the declaration of consent are stored for as long as the photo is posted on the channel or until consent is withdrawn. For technical reasons, the reposted photo is stored on the server of Instagram Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4 Ireland. Revocation is possible at any time (see below for more details). In the event of revocation, the image and the user's details will be deleted immediately.

In this case, the legal basis for this processing is consent, Article 6 (1) (a) of the GDPR.

On Instagram, you can get in touch with us via private messages. We manually delete private messages from the social media channels at the end of each quarter if they were last sent more than six months ago and were exchanged via the DB Karriere page on Instagram.

Our employees can also use filters to post curated DB content for advertising campaigns on the DB Karriere page.

The "DBPresse" channel (https://x.com/DB_Presse) is used for press and public relations work on topics relating to our Group. On the "DBKarriere" channel (https://x.com/DBKarriere) you will gain insights into Deutsche Bahn's job profiles, information on vacancies and recruiting events. 

If you visit our channel, your personal data is stored and processed by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, as the operator of X, and to the extent described in its privacy policy. You can find the privacy policy here: https://x.com/en/privacy.

We save usernames and comments that are deleted due to a breach of netiquette. These are only retained for the purpose of providing evidence in the event of legal disputes within the limitation period.

The legal basis for processing in this case is the fulfillment of legal obligations, Article 6 (1) (f) of the GDPR, as well as the overriding legitimate interest in the protection of legal interests pursuant to Article 6 (1) (f) of the GDPR.

On X you have the option of contacting us by means of private messages. We manually delete private messages from the social media channels at the end of each quarter if they were last acknowledged more than six months ago and were exchanged via the DB Karriere page on X.

The "DB Presse" channel (LINK) is used for press and public relations work on topics relating to our Group.

If you visit our channel, Bluesky Social PBC, based in Seattle, Washington, USA, as the operator of Bluesky, stores and processes personal data to the extent described in its privacy policy. You can find the privacy policy here: https://bsky.social/about/support/privacy-policy.

Bluesky offers no option for getting in contact with us via private messages.

The YouTube channel "DeutscheBahnKonzern" (https://www.youtube.com/user/DeutscheBahnKonzern) allows moving image contributions to be shown in an environment with an individual corporate design. The videos are tailored to the target group and report on the latest news at DB, explain complex interrelationships and help to illustrate the diversity of the DB Group. 

The "Deutsche Bahn Karriere" (Careers) channel (https://www.youtube.com/user/DBKarriere) presents videos that provide insights into the job profiles and various business areas of Deutsche Bahn as well as offering tips for making applications. 

Personal data is stored and processed by Google LLC ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube, in accordance with Google's privacy policy. You can find the privacy policy here: https://policies.google.com/privacy?hl=en-US

Beyond this, we only process data to a very limited extent:

In the event of a breach of netiquette, we save usernames and those comments that are deleted due to a breach of netiquette. These are only retained for the purpose of providing evidence in the event of legal disputes within the limitation period

The legal basis for processing in this case is the fulfillment of legal obligations, Article 6 (1) (f) of the GDPR, as well as the overriding legitimate interest in the protection of legal interests pursuant to Article 6 (1) (f) of the GDPR.

On the "dbkarriere" channel, you will gain insights into Deutsche Bahn's job profiles, information on vacancies and recruiting events. The DB team also responds professionally to users' questions and comments on Snapchat.

If you visit our channel, Snap Inc, 63 Market Street, Venice, CA, USA, as the operator of Snapchat, processes personal data in accordance with the Snapchat privacy policy. This can be found here: https://values.snap.com/privacy/privacy-policy?lang=en-US.

We ourselves do not process any data. Personal data refers to snaps (photos) sent to our channel by other Snapchat users during the course of an event. By sending snaps to us, users agree that the snaps may be shared on our channel. Snaps sent to our account are automatically deleted after 24 hours and are then no longer available.

The "deutschebahn" TikTok channel (https://www.tiktok.com/@deutschebahn?) enables moving image contributions to be shown in an environment with an individual corporate design. The videos are tailored to the target group and report on the latest news at DB, explain complex interrelationships and help to illustrate the diversity of the DB Group.

Deutsche Bahn AG's HR marketing uses TikTok to advertise for young people in order to get them interested in job offers and apprenticeships. Depending on the campaign, the target group may also include people aged 16 and over. In addition to the age group, other parameters, such as areas of interest, can also be taken into account during playout.

If you click on one of these advertisements on TikTok, you will be directed to specific areas of the Careers portal. We count the number of interested parties who have clicked on the respective advertisement in order to measure the success of the advertising activity. This count is anonymous and does not allow any conclusions to be drawn about you personally.

When you visit our TikTok channel, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, collects, stores and processes your personal data in accordance with its privacy policy. You can find the privacy policy here: https://www.tiktok.com/legal/page/eea/privacy-policy/en.

Deutsche Bahn AG and other DB companies play out advertisements on TikTok. We receive aggregated statistics on advertising playout from TikTok. For the associated targeting of target groups via TikTok's Ad Manager, it can be assumed on the basis of the case law of the European Court of Justice that there is joint responsibility between the respective advertising DB company and TikTok with regard to the data collection and evaluation by TikTok associated with the advertising playout. In this regard, a joint control agreement has been entered into with TikTok in accordance with Article 26 (2) of the GDPR, which governs the details of joint responsibility and which you can find here (see Jurisdiction Specific Terms, dated September 2, 2022, https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms Part B 1, sections 3 and 4). As a TikTok user you can click here to control the extent to which you receive personalized advertising on TikTok.

The legal basis for processing in this case is the overriding legitimate interest in the protection of legal interests in the display of advertising in accordance with Article 6 (1) (f) of the GDPR.

On the "Deutsche Bahn" channel (https://www.linkedin.com/company/deutschebahn/) you will gain insights into Deutsche Bahn projects, information on vacancies and recruiting events. The DB team will be happy to answer any questions you may have. We also use the channel to actively search for candidates. You can find more information on the active search for candidates at https://db.jobs/en-en. 

On the channel called "The DB Women's Network" (https://www.linkedin.com/groups/8675019/) you will find the platform of the DB Women's Network on LinkedIn. On LinkedIn, we publish content on the topics of networking, careers, sharing experiences and mentoring.

When you visit or follow our company page on the LinkedIn platform, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as the operator of LinkedIn, processes personal data in order to provide us with data on page usage and interaction for the purpose of designing our page to meet your needs and continuously optimizing it with the Page Insights statistics service. You can find the privacy policy here: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

In particular, LinkedIn processes data that you have provided to LinkedIn yourself, such as information about your nationality, industry, length of service, etc. from your profile. In addition, LinkedIn processes personal data about how you have interacted with our corporate page.

Deutsche Bahn AG and other DB companies also advertise on LinkedIn. We receive aggregated statistics on advertising playout from LinkedIn. For the associated targeting of target groups via the LinkedIn Campaign Manager (LinkedIn Ads), it can be assumed on the basis of the case law of the European Court of Justice that there is joint responsibility between the respective advertising DB company and LinkedIn with regard to the data collection and analysis by LinkedIn associated with the advertising playout.

We use the Page Insights statistics service for the purpose of designing and continuously optimizing our pages to meet your needs. This service records your activity on our site and makes it available to us in anonymized statistics. This provides us with information about page views, page impressions, the reach of posts (both organic and paid content), post interactions, video playback views, information about which countries and cities our visitors come from and statistics about the gender ratios, ages and languages of our target groups, among other things.

The Page Insights provided to us in this way consist of anonymized, aggregated data. Notwithstanding the existence of joint responsibility, we do not receive any personal data from you in relation to Page Insights and it is not possible for us to link Page Insights to individual members.

LinkedIn protects the processing of personal data when providing Page Insights by implementing appropriate technical and organizational measures. Additional information is available at: https://security.linkedin.com/

You can exercise your rights as a data subject in the context of the General Data Protection Regulation via your account settings or by contacting LinkedIn directly.

In this regard, a joint responsibility agreement has been entered into with LinkedIn in accordance with Article 6 (1) (f) of the GDPR, which regulates the details of joint responsibility and which you can find here: https://legal.linkedin.com/pages-joint-controller-addendum.

For promotional campaigns, our employees can post curated DB content using DB's own PowerPoint templates.

The legal basis for processing in this case is our overriding legitimate interest in marketing communication within the meaning of Article 6 (1) (f) of the GDPR.

On the "Deutsche Bahn" channel (https://www.xing.com/pages/deutschebahn) you will gain insights into Deutsche Bahn projects, information on vacancies and recruiting events. We also use the channel to actively search for candidates. You can find more information on the active search for candidates at https://db.jobs/en-en.

If you visit our Xing channels, Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany, as the operator of Xing, stores and processes personal data to the extent described in its privacy policy. You can find the privacy policy here: https://privacy.xing.com/en/privacy-policy

Beyond this, we only process data to a very limited extent: 
We use the "Xing Statistics" service for the purpose of designing and continuously optimizing our pages to meet your needs. The data from the Xing analyses is evaluated anonymously so that no conclusions can be drawn about individual users. The administrator is not able to access individual user profiles. This service records your activity on our site and makes it available to us in anonymized statistics. This provides us with information such as page views, page impressions, followers, post interactions, which countries and cities our visitors come from, as well as statistics on the gender ratios, ages, languages and industries of our target groups.

It is not possible for the administrator to draw conclusions about individual users or access individual user profiles.

DB employees have the opportunity to volunteer as "rail ambassadors". In this case, they post curated DB content via their private social media account(s) (Instagram, LinkedIn, etc.). They therefore act as a kind of influencer for DB. At the same time, they can continue to post private content via their private social media account(s). This means that such social media accounts can be used for both private and business purposes.

An official DB social media post can be recognized as such by the hashtag #TeamDeutscheBahn and the link to this privacy statement. This section ("Rail ambassadors") of the privacy statement applies exclusively to official posts by DB via private social media accounts of DB employees ("rail ambassadors").

To make our range of services available it is usually necessary to engage data processors who act on our instructions, such as data center operators, providers of printing or shipping services and other external service providers involved.

External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. The service providers operate in accordance with our instructions, and this is ensured through stringent contractual provisions, technical and organizational measures, and additional monitoring.

We would like to point out that when Meta processes data on Facebook, Instagram, X, Snapchat, LinkedIn, Xing, YouTube and TikTok, user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the rights of the data subjects could be made more difficult. For details, please refer to the privacy statements of the respective provider. With regard to US providers that are certified under the EU-US Data Privacy Framework, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.

We will not transfer your data to countries outside the EU or EEA or to an international organization unless appropriate safeguards are in place. These include the EU standard contractual clauses or an adequacy decision from the European Commission.

If we have collected personal data from you, we will only store your data for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. For example, when there is a contractual relationship, we store your data at least until such time as the contract is fully terminated. Thereafter, the data will be stored for the retention period required by law.

You can request information regarding what kind of data is stored about you.

You can request the correction, deletion and restriction of processing (blocking) of your personal data to the extent permitted by law and to the extent that this is possible under existing agreements.

You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is Berliner Beauftragte für Datenschutz und Informationsfreiheit (Commissioner for Data Protection and Information Security), Alt-Moabit 59-61, 10555 Berlin, Germany. E-mail: mailbox@datenschutz-berlin.de.

You have the right to portability of data that you have provided to us based on a declaration of consent or a contract (data portability).

If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.

You can object to data processing on grounds relating to your particular situation if the data is being processed as a result of our legitimate interests.

You may opt out of targeted advertising at any time with effect in the future (opt-out of advertising).

To exercise your rights, mail a letter to:

Deutsche Bahn AG, Potsdamer Platz, 210785 Berlin, Germany

or send an e-mail to konzerndatenschutz@deutschebahn.com.

With regard to data processing on social networks, we recommend that you contact the respective social network directly in the event of requests for information or other questions about user rights, such as a request for deletion, as only the respective social network has full access to your user data. If you wish the data processing described here to cease in future, you can remove the link between your user profile and our site by using the "I no longer like this page" and/or "Unsubscribe from this page" functions.