Privacy Policy

Deutsche Bahn AG
Potsdamer Platz 2
10785 Berlin

collects and processes your data as the one responsible.

Dr. Marein Müller has been appointed Data Protection Officer.

Email: konzerndatenschutz@deutschebahn.com

The purposes for which personal data is processed in the online Integrated Interim Report

We collect and process your data only for specific purposes that are, these may arise from technical requirements, contractual requirements, or explicit user requests.

1. Visiting our website

For technical reasons, we must collect and store certain data when you visit our website (the date and duration of the visit, the webpages called up, the identification data for your browser and operating system, and the website which led you to ours).

2. Contracts

For contractual reasons, we also need additional personal data from you (for example, your contact information) in order to provide you with services and fulfil the contractual relationships we have with you. This data is used to carry out the delivery to the specified address and, if necessary, the processing of cancellations or to make reimbursements. If you provide us with data as part of a contract, we use your data without your express consent only to be able to carry out the contract concluded with you. When the contract has been executed, your data will be blocked and erased after expiry of tax and commercial law retention periods unless you have expressly consented to continued use of your data.

3. Newsletter data / order form

If you subscribe to a newsletter/ reports we offered on our website, we will use the registration data you provided only to send you the newsletter / reports unless you approve a more extensive use. You may cancel your subscription at any time using the unsubscribe option provided in the newsletter.

4. Contact form

If you send us a request via our contact form, we will store and process the information you provide in the contact form, including your contact information, only to process your request and to answer any follow-up questions. After that time, your data will be deleted or blocked until the expiry of tax and commercial law retention periods and then deleted, unless you have expressly consented to continued use of your data.

Cookies are small text files in which personal data can be stored. When a website is called up, cookies can be sent to it to allow the user to be classified. Cookies help simplify website usage for users.

We distinguish between cookies that are mandatory for technical website functions and those that are not.

We want to allow you to make an informed decision for or against the use of cookies that are not mandatory for our website’s technical functions. Please be aware that, if you block marketing cookies, you will receive marketing information that is less tailored to your interests. You will, however continue to be able to make full use of our website.

We will now inform you regarding the nature and extent to which cookies are used on our website:

The use of online Integrated Reports is generally possible without employing cookies that do not serve technical purposes. Thus, you can set your browser to prevent being tracked by cookies and/or to prevent the saving e of third-party cookies.

We use the following cookies:

• Typo3 session cookies -> session ID storage
• GA cookies -> tracking data storage
• Cookie hint cookie -> stores whether the cookie hint was agreed to
• PHP session cookie -> session ID storage
• In addition, we use a notice tool to store notices in your browser.

We also recommend that you regularly monitor the cookies saved on your system and delete any you do not expressly want.

Please note: If you delete all cookies, you will also delete any opt-out cookies, which means that you will have to exercise your opt-out options again.

We store your data for the time it takes to fulfil the purpose for which they were collected (for example, as part of a contractual relationship) or during any statutory retention period. We thus store data related to a contractual relationship at least until the contract has been fulfilled. Afterwards, we retain the data for the legally required period.

• You can request information on what data about you has been stored.
• You can request that your personal data be corrected or deleted, or that their processing be restricted (blocked), provided it is permitted by law and your existing contractual relationship.
• You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is: Berliner Beauftragte für Datenschutz und Informationsfreiheit [Berlin Commissioner for Data Privacy and Freedom of Information], Friedrichstr. 219, 10969 Berlin, email: mailbox@datenschutz-berlin.de
• You have the right to the portability of the data you have provided in the course of granting consent or entering into a contract (data portability).
• You have the right to withdraw your consent to the processing of your data at any time in the same way that you granted consent. Your withdrawal of consent shall not affect the legality of processing based on consent before its withdrawal.
• You may object to the processing of your data for reasons related to your particular situation if the data processing is based on our legitimate interests or is required to fulfil a public service.
• You can object to promotional communications at any time with future effect (right to object to promotional communications).

To exercise your rights, you need only send a letter to:

Deutsche Bahn AG
Potsdamer Platz 2
10785 Berlin

or an email to konzerndatenschutz@deutschebahn.com.

In order to perform contracts, we generally need to use processors who act upon our instructions, such as operators of data centres, printing or shipping service providers, or other entities involved in contract performance.

We select the external service providers who process data for us carefully and subject them to strict contractual requirements. These service providers act upon our instructions, and this is ensured via strict contractual arrangements, technical and organisational measures, and supplementary monitoring.

In addition, we only transfer your data if you have expressly granted us consent to do so or if it is required by law.

We do not transfer your data to countries outside the EU/EEA or to international organisations unless appropriate safeguards are in place. These include standard EU contractual provisions and an adequacy decision by the European Commission.

We update our data privacy information to reflect changing functionalities or legal frameworks. We therefore recommend that you regularly review this data privacy information. Modifications are made only with your approval if your consent is required or the data privacy information in question includes provisions of the contract we have with you.