Last modified: 11 November 2019
It is possible to use our website without providing personal data. However, it may be necessary to process personal data if you want to make use of specific services or other communication channels offered by our company via the website. If it is necessary to process personal data and there is no legal framework upon which to base this processing (e.g. a contractual agreement), we will ask for your consent.
In doing so, we will inform you of the following: what personal information of yours we collect, how we use it and how you can withdraw your consent to your data's usage.
Who is responsible for collecting and processing data?
DB Station&Service AG is the party responsible for collecting and processing your data.
If you have any questions, comments and/or criticism in connection with www.bahnhof.de, please contact the following address:
DB Station&Service AG
If you have any questions or comments about privacy issues, please contact email@example.com
What data do we collect? How and why do we process your data?
We collect and process personal data only for specific purposes. The reasons may arise from technical requirements, contractual obligations or users' express requests.
For technical reasons, when someone visits www.bahnhof.de, it is necessary to collect and store certain information, such as the date and duration of the visit, the webpages visited, the identification details of the browser and operating system type, and the website from which you accessed our website.
When you send an e-mail to firstname.lastname@example.org, we process the data you provide only for the purpose of handling your enquiry.
In case of using further communication channels offered by us in the context of campaigns at certain railway stations, the data provided by you (such as e-mail address or phone number) will only be used for the purpose of performing the respective action.
Data processing regulations
If we obtain your consent to process personal information, this serves as a legal basis as per Article 6.1(a) of the General Data Protection Regulation (GDPR).
Processing personal data required for fulfilling a contract with you is based on Article 6.1(b) of the GDPR. Article 6.1(b) of the GDPR also applies to processing required for performing precontractual measures, e.g. in connection with requests pertaining to our products or service.
If our company is required by law to process personal data, e.g. for meeting taxation-related requirements, the relevant processing measures are based on Art. 6.1(c) of the GDPR.
Is any data forwarded?
Processing contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.
We take great care when selecting external service providers who process data on our behalf, and they adhere to our strict contractual obligations. These service providers follow our instructions. This is safeguarded by strict contractual regulations, technical and organisational measures and supplementary checks.
Your data is forwarded only if you have provided us with your explicit consent or if mandated by legal provisions.
Your information is not forwarded to a third-party state outside the EU/EEA or to an international organisation unless suitable guarantees have been provided. These include standard EU contract clauses and an EU Commission decision regarding suitability.
How long is your data stored?
We store data only while it is necessary for fulfilling the aim for which it was collected, for which it is required, or if such storage is mandated by law. For example, if you submit an enquiry, we store your data for at least the period of time necessary for processing your questions or enquiries in a satisfactory manner. Your data is then deleted.
In the event of statutory data retention periods (e.g. as per Germany's tax code or commercial code), the data is retained for the duration of such a period. Using suitable identification details, it is stored in a manner which prevents it being accessed, and it is deleted when the retention period expires.
What rights do users of www.bahnhof.de have?
- Users can demand to know what data pertaining to them has been stored.
- They can demand the correction or deletion of their personal data, or demand that its processing be restricted (blocking), provided this is permissible by law and possible within the framework of an existing contractual relationship.
- They have the right to submit complaints to a supervisory authority. The regulator responsible for DB Station&Service AG is Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin's officer for data protection and freedom of information), Friedrichstr. 219, 10969 Berlin, Germany, e-mail: email@example.com.
- You have the right to the transfer of data that you provide us on the basis of your consent or a contract (data portability).
- If you have given us your consent to data processing, you can withdraw it using the same process by which you provided it. The withdrawal of consent does not affect the legality of data processing performed before withdrawal on the basis of the consent provided previously.
- To exercise your rights, simply post a letter to the relevant office (see section on the party responsible for collecting and processing data) or send an e-mail to firstname.lastname@example.org
When are cookies used?
Cookies are small text files for storing personal data. When a webpage is accessed, cookies can be transferred to it, making it possible to identify the user. Cookies help to make webpages easier for users to use.
We distinguish between cookies that are essential for the webpage's technical functions and cookies that are not essential for the webpage's technical functions.
Here is some information about the types of cookies and how they are used on our pages:
It is possible to use www.bahnhof.de without cookies that do not serve a technical purpose. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block third-party cookies from being saved.
Instructions for popular browsers from the relevant providers:
We also recommend that you regularly check the cookies saved by your system if you have not explicitly requested them.
Matomo (formerly Piwik)
We use the Matomo analytics platform (formerly Piwik) on our website in order to analyse how people use the website and how we can improve it. The statistics we gain from this allow us to improve our offering and make it more interesting for users. Information about how you use our website is saved, including your IP address, using small text files (cookies). This data is anonymised and stored on our servers.
The legal basis for the use of Matamo is Art. 6.1(f) of the GDPR.
Your deactivation options: if you want to opt out of user behaviour analysis, you can configure your browser to refuse analysis cookies. You can also decide whether your browser is allowed to store a unique web analysis cookie to enable the website operator to record and analyse various statistical data. If you want to opt out, deselect the following option to store the Matomo deactivation cookie in your browser:
|Deactivate tracking by Matomo (formerly Piwik)|
Please note: if you delete all of your cookies, this also deletes the deactivation cookie. In other words, you will have to opt out of the behaviour analysis process once again.
We are interested in presenting you with a broad multimedia information offering. For this reason, we integrate videos from YouTube (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA). The legal basis for this is Art. 6 (1) (f) of the GDPR.
Addition takes place in advanced data protection mode (using the no-cookie solution), meaning that YouTube cookies and pixel tags for personalising advertisements and search results are not set until the video is played.
When the YouTube video is played, the following data is sent to Google, the operator of YouTube:
- IP address
- Specific address of our webpage accessed
- Browser ID transferred
- System date and time of access
- Existing cookies with which your browser can be uniquely identified
Google is solely responsible for this data processing as the operator of YouTube. Which data is processed is unknown to us and beyond our control. Further information is available here.
Please note: Google can also receive other data about the cookies you have stored. The extent to which and whether Google processes this data is beyond our control.
YouTube's data privacy notice is available here.
If you click a link to an external website, you leave the website www.bahnhof.de. This means that DB Station&Service AG is not responsible for the content, services or products offered on the linked website, nor is it responsible for data protection or technical security on the linked website.
Updating privacy notice
We update our privacy notice in line with changes to functions or legal regulations. We therefore recommend that you review our privacy notice at regular intervals. If your consent is necessary or if elements of the privacy notice contain provisions from a contractual relationship with you, changes will be made only with your consent.
Last modified: 11 November 2019