Privacy statement for deutschebahn.com

Deutsche Bahn AG
Potsdamer Platz 2
10785 Berlin, Germany

collects and processes your data as the controller.

The appointed data protection officer is Dr. Marein Müller.

E-mail: konzerndatenschutz@deutschebahn.com

We collect and process your data only for specific purposes. These may arise from technical necessities, contractual requirements or offers on our website.

Visiting the website

We process your IP address when you visit our website, but do not store it.

For technical reasons, additional data is collected and stored when you visit this website. Without an IP address, this does not involve any personal data. 

• Accessed URL
• Access date and the access time
• Quantity of data transmitted

Virtual chat assistants

A virtual chat assistant (also known as a chatbot) is used on www.deutschebahn.com/de/geschaefte/immobilien. This assistant helps you when you are searching for information on the above-mentioned website. The chatbot knows the content of the website and provides keyword-based answers to customer questions, recommends a link or customer contact with another channel. 

The chatbots are being improved all the time and help you navigate the online and mobile area. The chatbots are not currently used for resolving contract-specific customer inquiries. Customer inquiries are still processed in person in the live chat, by telephone or by e-mail. Personal information is neither required for use nor desired.

Customer inquiries are stored in the chatbot no more than 34 days for self-learning purposes so that chatbot functions can be optimized. No personal data is analyzed. Usage data such as the duration of the chat, message timestamps, number of dialogs and approximate location of users is stored only for statistical purposes. We process your data exclusively to process your request and for internal purposes, e.g. to manage and improve our business and service processes, based on a legitimate interest in accordance with Article 6 (1) f) of the General Data Protection Regulation.

Participation in competitions

Data is collected in order to run competitions. The precise details, i.e. what data is collected and for what purpose, are available on the web page of the relevant competition.

Registration for our press mailing list

You can request to be added to the national press mailing list on our website.

We process the personal data we collect through the request for media relations at Deutsche Bahn AG. We process the following required data:

• Business units
• Medium
• First name and last name
• Location
• E-mail address

The following information is optional when you request to be added to the press distribution list:

• Role
• Address
• Phone number
• Cell phone number

The legal basis for the processing is our legitimate interest in press, media and public relations. If you have given us your express consent to be added to the press distribution list, this consent is the legal basis for processing.

We store your personal data for as long as you wish to receive press releases through the press distribution list. If you would like to be removed from the press distribution list and stop receiving press releases, please contact Deutsche Bahn AG, Corporate Press Information Office (GNK), Potsdamer Platz 2, 10785 Berlin, Germany, presse@deutschebahn.com.

Permits for reports on DB topics

You can apply for filming permits for reporting on rail topics using the form on our website.

We process your personal data for the purpose of issuing the filming permit. We process the following required data:

• Medium
• Contact at editorial office
• Address
• Cell phone number
• E-mail address
• Contact during production
• Production topic
• Date and duration of the filming permit
• Preferred location

The following information is optional for an application:

• Desired type of recording

The legal basis for the processing is our legitimate interest in press, media and public relations.

The personal data will be deleted at the end of the calendar year after next. If you wish to view your personal data stored by us or request its deletion, please contact Deutsche Bahn AG, Group Press Office (GNK), Potsdamer Platz 2, 10785 Berlin, presse@deutschebahn.com.

Permits for productions with no rail-related content

You can apply for filming permits for productions with no rail-related content using the form on our website.

We process your personal data for the purpose of issuing the filming permit. We process the following required data:

• Name of production company / applicant
• Address
• Title, first and last name, e-mail address, telephone number, contact
• Production details and times

 The following information is optional for an application:

• Billing address (if different)
• Contact on site (if different and known)
• Different telephone number (if on-site contact is specified)
• Information on the publication
• Appendices

The legal basis for the processing is your consent as defined in Art. 6 (1) a) of the GDPR.

The personal data of the application will be deleted at the end of a two-year retention period.

Newsletters

If you subscribe to one of our newsletters, we will send you regular information on the topics covered in the newsletter.

The following mandatory information is collected for registration for the newsletter:

• E-mail address

In this case, you are allowing us to use your e-mail address for advertising purposes. We use the double opt-in procedure for sending the newsletter. This means that we will not send you a newsletter until you have explicitly confirmed that you wish to receive it. For this purpose, we will send you a confirmation e-mail after you have registered, asking you to confirm your willingness to receive the newsletter.

When you register for the newsletter, we save the IP address from the computer system in use provided by your internet service provider (ISP) at the time of registration and confirmation, as well as the date and time of registration and confirmation.

The collection of this data is necessary to verify your registration for the newsletter and to detect (potential) misuse of the e-mail address of a data subject at a later point in time, and therefore provides us with a legal safeguard. We use the e-mail service provider CleverReach GmbH to send the newsletter.

In order to tailor our newsletters to the target audience, they are statistically analyzed and contain so-called web beacons or tracking pixels. These are one-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked on. With the help of conversion tracking, it is also possible to analyze whether a predefined action takes place after the user clicks on the link in the newsletter. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form. No link is made to other personal data.

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of the newsletter. If you object to the use of your data for advertising purposes, your data will be anonymized for use in statistical evaluations only.

Podcasts

We offer embedded podcasts for download on our website. We use the RTL+ Musik service to play podcasts.

RTL interactive GmbH, Picassoplatz 1, 50679 Cologne is responsible for this. The ART19 plug-in used for playback only becomes active when you explicitly allow the display of third-party platform content. Only then will your IP address and any usage data be transferred to the third-party provider. Further information can be found in the data protection information of RTL+ Musik at https://plus.rtl.de/podcast/datenschutz-embed.

YouTube

We integrate content from YouTube on our website. This service is inactive by default, but you can activate it.

By clicking on the link to play the video, you will leave our website and be redirected to YouTube. At this point, Google, as the operator of YouTube, will set cookies and pixel tags to personalize advertising and search results. Google is exclusively responsible for this data processing as the operator of YouTube. We have no knowledge of, or control over, which data is processed. The company providing the service in the European Economic Area and Switzerland is Google Ireland Limited, a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

Additional information about privacy at Google is available here: https://policies.google.com/privacy

Data analytics by Deutsche Bahn AG

For more information on data processing by Deutsche Bahn AG related to website analytics and on settings, click “Manage analytics”.

Cookies are small text files in which personal data can be stored. When a page is accessed, cookies can be transferred to it, making it possible to identify the user. Cookies help to make web pages easier for users to use. We distinguish between cookies that are essential for the website's technical functions and cookies that are not essential for the website's technical functions.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not essential for the website's technical functions.

For more information on data processing by Deutsche Bahn AG related to website analytics and on settings, click “Manage analytics” in the footer of this page.

If we obtain your consent to process personal data, this serves as the legal basis as per Article 6 (1) a) of the GDPR.

Where the processing of personal data is necessary for the performance of a contract with you, the contract provides the legal basis under Article 6 (1) b) of the GDPR. Article 6 (1) b) of the GDPR also applies to processing required for performing precontractual measures, e.g. in connection with requests pertaining to our products or services.

If our company is under a legal obligation that makes it necessary to process personal data (for example, to fulfil tax obligations), this processing is performed on the basis of Article 6 (1) (c) GDPR.

Data processing generally requires the use of contract processors reporting directly to us, such as data center operators, printing and shipping service providers, and other parties involved in the processing.

External service providers who process data on our behalf are carefully selected and are subject to strict contractual requirements. The service providers operate in accordance with our instructions, and this is ensured through stringent contractual provisions, technical and organizational measures, and additional monitoring.

Your data will not be transferred to third countries outside the EU or EEA or to an international organization unless appropriate safeguards are in place. These include the EU standard contractual clauses or an adequacy decision from the European Commission.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) or to comply with legal requirements. For example, when there is a contractual relationship, we store your data at least until such time as the contract is fully terminated. Afterwards, the data is stored for the statutory periods of retention.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) or to comply with legal requirements. For example, when there is a contractual relationship, we store your data at least until such time as the contract is fully terminated. Afterwards, the data is stored for the statutory periods of retention.

• You may request information regarding the data that is being stored about you.
• You can request the correction, deletion and restriction of processing (blocking) of your personal data to the extent permitted by law and to the extent that this is possible under existing agreements.
• You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is the Berlin Commissioner for Data Security and Freedom of Information (Berliner Beauftragter für Datenschutz und Informationsfreiheit), Friedrichstr. 219, 10969 Berlin, e-mail: mailbox@datenschutz-berlin.de
• You have the right to portability of data that you have provided to us based on a declaration of consent or a contract (data portability).
• If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
• You have the right to object, on grounds relating to your particular situation, to the processing of personal data if the data is processed based on our legitimate interests or is necessary for the performance of a task carried out in the public interest.
• To exercise your rights, you simply need to send a letter to Deutsche Bahn AG, GNM 11, Potsdamer Platz 2, 10785 Berlin, Germany, or an e-mail to marketingportal@deutschebahn.com.