Privacy notice DB Info website

DB InfraGO AG collects and processes your data as the data controller.

If you have any questions or suggestions regarding data protection, please contact: Datenschutz.DBInfraGO@deutschebahn.com

If you have any questions, suggestions and/or criticism regarding DB Info, please contact:

DB InfraGO AG
Adam-Riese-Straße 11–13
60327 Frankfurt am Main Germany

Email: feedback@bahnhof.de

We collect and process your data exclusively for specific purposes. These may arise from technical necessities, contractual requirements or explicit user requests. For technical reasons, certain data must be collected and stored when you visit db.info, such as the date and duration of your visit, the web pages you have visited, the identification details of the browser and operating system you are using, and the website from which you accessed our site.

If you send an email directly to feedback@bahnhof.de, or provide feedback on the station by telephone on 030 586020930, or make an enquiry, we will process the data you provide solely for the purpose of dealing with your enquiry.

Furthermore, should you contact us via the channels provided at selected stations as part of specific campaigns or offers, we will use any data you may have provided (such as your email address or telephone number) solely for the purpose of carrying out the relevant campaign.

db.info offers anonymous digital surveys to gather information about the use of db.info for the purposes of product development.

To this end, online surveys are designed regarding (planned) further developments of the website (e.g. new features, topics, etc.), and a link to the survey is embedded on db.info to encourage participation.

Participation in the surveys is always voluntary and anonymous. You will never be asked for personal data in the surveys. The results of the surveys help us to improve the user experience of db.info for users by incorporating the feedback received into our product development.

When you take part in a survey, the following data is processed: the participant’s IP address, details of the devices and browsers used, information on the time and duration of the survey, and the details provided in the survey form. Any data that could potentially be used to identify the respondent (e.g. IP addresses) is separated from the survey results and deleted once it is no longer required for the intended purpose. Service providers engaged to process data on our behalf are carefully selected by us and are subject to strict contractual obligations. These service providers operate in accordance with our instructions, which is ensured through strict contractual provisions, technical and organisational measures, and supplementary controls.

In order to ensure the stable availability and functionality of db.info, we use the Sentry.io service provided by Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, to record and respond to crashes (e.g. software errors, page loading processes).

To protect our users’ privacy, we anonymise the IP addresses of the relevant devices in advance, ensuring that no personal data is passed on to Sentry.

The legal basis for this data processing is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in reliably ensuring the functionality of the website and the associated provision of important information about our stations (e.g. accessibility) to our customers.

When you use the ‘Show stations near you’ function, we voluntarily request your current location via a browser/operating system location query. In order to retrieve and display relevant stations in your vicinity, we round the location coordinates collected to three decimal places. The location accuracy is no less than a 100-metre radius. We only access your location once you have granted permission. We will ask you again each time you visit the website whether we may determine your location.

You can also enable or disable location data at any time in your browser or operating system settings.

Where we obtain your consent for the processing of personal data, this serves as the legal basis in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).

Where the processing of personal data is necessary for the performance of a contract with you, the contract serves as the legal basis under Article 6(1)(b) of the GDPR. Article 6(1)(b) of the GDPR also applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of enquiries regarding our products or services.

Where our company is subject to a legal obligation requiring the processing of personal data, such as to fulfil tax obligations, the processing is based on Article 6(1)(c) of the GDPR.

The fulfilment of contracts generally requires the involvement of data processors who act in accordance with our instructions, such as data centre operators, printing or postal service providers, or other parties involved in the performance of the contract.

External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. These service providers operate in accordance with our instructions, which is ensured by strict contractual provisions, technical and organisational measures, and supplementary controls.

Furthermore, your data will only be transferred if you have given us your express consent or if required by law.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless adequate safeguards are in place. These include the EU Standard Contractual Clauses and an adequacy decision by the European Commission.

Further information on data processing within the DB Group can be found here: deutschebahn.com/de/konzern/konzernprofil/datenschutz

We only store your data for as long as is necessary to fulfil the purpose for which it was collected, or where required by law. For example, when you make an enquiry, we will store your data for at least as long as is necessary to deal satisfactorily with your questions or concerns. The data will then be deleted.

Should there be a statutory retention period (for example, under the German Fiscal Code or the German Commercial Code), the data will be stored in a locked-down format with appropriate labelling for the duration of the retention period and deleted once the period has expired.

• You may request information about what data is stored about you.
• You may request the rectification, erasure and restriction of processing (blocking) of your personal data, provided this is permitted by law and possible within the framework of an existing contractual relationship.
• If you believe that the processing of your personal data infringes data protection law, you have the right, under Article 77(1) of the GDPR, to lodge a complaint with the competent data protection supervisory authority. The supervisory authority responsible for DB InfraGO AG is: The Hessian Commissioner for Data Protection and Freedom of Information, PO Box 3163, 65021 Wiesbaden.
• You have the right to data portability in respect of the data you have provided to us on the basis of consent or a contract (data portability).
• If you have given us your consent to process your data, you may withdraw this consent at any time using the same method by which you gave it. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of that consent prior to its withdrawal.
• To exercise your rights, simply send a letter by post to the data controllers (see the ‘Data Controllers’ section) or by email to: feedback@bahnhof.de.

Cookies are small text files in which personal data may be stored. Cookies may be transmitted to a website when a page is accessed, thereby enabling users to be identified. Cookies help to make websites easier for users to navigate.

We distinguish between cookies that are strictly necessary for the technical functioning of the website and those that are not strictly necessary for the technical functioning of the website.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not strictly necessary for the technical functioning of the website. Please note that if you reject cookies used for advertising purposes, you may receive advertising that is less tailored to your interests. However, you will still be able to use the website in its entirety.

Data analysis by Deutsche Bahn AG

Further details on data processing in the context of the analysis carried out by Deutsche Bahn AG, as well as the relevant settings options, can be found under ‘Manage analysis’.

When you click on a link to an external website, you will leave the db.info website. DB InfraGO AG is therefore not responsible for the content, services or products offered on the linked website, nor for data protection or technical security on that website.

We update the Privacy Notice to reflect changes in functionality or legal requirements. We therefore recommend that you review the Privacy Notice at regular intervals. Where your consent is required, or where parts of the Privacy Notice contain provisions relating to a contractual relationship with you, any changes will only be made with your consent.