Privacy notice DB Info app

DB InfraGO AG collects and processes your data as the data controller.

If you have any questions or suggestions regarding data protection, please contact: Datenschutz.DBInfraGO@deutschebahn.com

If you have any questions, suggestions and/or criticism regarding db.info, please contact:

DB InfraGO AG Adam-Riese-Straße 11–13 60327 Frankfurt am Main Germany

Email: feedback@bahnhof.de

We collect and process your data exclusively for the purposes of this app. These may arise from technical requirements, contractual requirements or explicit user requests.

In order to provide the requested content and functions of the “db.info” app correctly and as required, certain data must be processed for technical reasons when using the app, such as your IP address, advertising ID, app version and associated app-relevant operating system settings. We do not require any further data from you. The legal basis for processing this data is Art. 6(1)(b) GDPR.

For this app to function, it must be able to store and transfer data. To do this, it requires permission to modify or delete the contents of storage and to retrieve data from the internet.

To ensure the stable availability and functionality of db.info, we use the Sentry.io service provided by Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, to record crashes and respond to them (e.g. software errors and page loading processes).

To protect the privacy of our users, the IP address of the affected devices is anonymised by us in advance in this context, meaning that no personal data is transmitted to Sentry.

The legal basis for this data processing is our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest is to reliably ensure the functionality of the website and the associated provision of important information about our railway stations (e.g. accessibility) to our customers.

Our app requires access to certain hardware and system functions of your mobile device for individual functions. The respective permissions are only requested when the relevant function is used. You can grant or revoke these permissions at any time in your device settings. Your data will only be processed after you have granted the app the relevant access permission.

In this app, we offer convenience features that provide you with specific services, such as the “show stations near you” function. When you use this function, your current location is requested voluntarily in order to identify and display relevant nearby stations. To provide this service, the app therefore needs permission to access your device's location data. Location access only takes place after you have granted the app the relevant permission. The accuracy of the location depends on the access permissions granted by the user (precise or approximate location).

The legal basis for processing location data is your consent, given when you grant the relevant permission, pursuant to Art. 6(1)(a) GDPR. You can disable access to location data in your device settings and thereby withdraw your consent at any time.

This app allows you to receive information about important events and news relating to our service, even when you do not have our app open. For this purpose, we only use push notifications if you have expressly consented on your device and granted the permission requested by the operating system.

The legal basis for the use of push services is Art. 6(1)(a) GDPR. You can disable the sending of push notifications in the app settings or your device settings and thereby withdraw your consent at any time.

For surveys, we use the online service Lamapoll provided by Lamano GmbH & Co. KG, Frankfurter Allee 69, 10247 Berlin, Germany. Lamapoll's technical infrastructure, both hardware and software, is used to plan, conduct and evaluate our own online surveys for db.info.

db.info uses the Lamapoll service exclusively to collect information about the use of db.info for product development purposes. The results of the surveys help us improve the user experience of db.info by obtaining feedback from users and incorporating the results into our product development. Participation in the surveys is always voluntary and anonymous.

When participating in a survey, the participant's IP address, details of the devices and browsers used, information about the time and duration of the survey, and the information provided by the participant in the survey form are transmitted to Lamapoll. Data that could potentially be used to identify the sender of the questionnaire (e.g. IP addresses) is separated from the survey results at an early stage by Lamano GmbH & Co. KG and deleted once the purpose for which it was collected no longer applies.

Data processing takes place exclusively in Germany, on ISO 27001-certified data servers. As part of an existing data processing agreement pursuant to Art. 28 GDPR, Lamano GmbH is contractually obliged by DB InfraGO AG to comply strictly with data protection requirements. The data is not passed on to third parties.

If you send an email directly to feedback@bahnhof.de, provide feedback about a railway station by telephone on +49 30 586020930, or submit an enquiry, we process the data you provide exclusively for the purpose of handling your enquiry.

If you contact us as part of special campaigns or offers at selected railway stations via the communication channels advertised there, we use any data you provide (such as your email address or telephone number) exclusively for the purpose of carrying out the respective campaign.

Data processing generally requires the involvement of processors acting on our instructions, such as data centre operators.

External service providers that process data on our behalf are carefully selected by us and contractually obliged to comply with strict requirements. The service providers act on our instructions, which is ensured through strict contractual provisions, technical and organisational measures and additional controls.

Your data will otherwise only be transferred if you have expressly given us your consent or where required by law.

We only store your data for as long as it is required to fulfil the purpose for which it was collected or where this is required by law. For example, in the context of an enquiry submitted by you, we store your data for at least as long as necessary to process your questions or concerns satisfactorily. The data is then deleted.

If a statutory retention period applies (for example under the German Fiscal Code or the German Commercial Code), the data will be stored in a blocked state with appropriate identification for the duration of the retention period and deleted once the retention period has expired.

Under the conditions of Art. 15 GDPR, you have the right to request access to the personal data we process about you. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data where it was not collected from you, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof;

Under the conditions of Art. 16 GDPR, you have the right to request the immediate rectification of inaccurate personal data or completion of incomplete personal data stored by us;

Under the conditions of Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us (“right to be forgotten”), unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

Under the conditions of Art. 18 GDPR, you have the right to request restriction of the processing of your personal data if you dispute the accuracy of the data or if the processing is unlawful but you oppose its erasure and instead request that we restrict the use of the personal data, or if we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or if you have objected to processing pursuant to Art. 21(1) GDPR;

Under the conditions of Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another data controller;

You also have the right to object to the processing of your data at any time under the conditions of Art. 21(1) and Art. 21(2) GDPR.

If you have given us your consent, you have the right to withdraw your consent at any time, irrespective of the legal basis on which the consent was given, with effect for the future – in whole or in part. The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.

To exercise your rights, it is sufficient to send a letter by post to:

DB InfraGO AG
Adam-Riese-Straße 11–13
60327 Frankfurt am Main
Germany

or by email to: Datenschutz.DBInfraGO@deutschebahn.com

Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority.

If you click on a link to an external website, you leave the db.info pages. DB InfraGO AG is therefore not responsible for the content, services or products offered on the linked website, nor for the data protection or technical security of that website.

We adapt this privacy notice to reflect changes in functionality or changes in the applicable legal framework. We therefore recommend that you review this privacy notice at regular intervals.