Privacy statement with regard to domiciliary rights

The data processing controller under the General Data Protection Regulation (GDPR, “Datenschutzgrundverordnung”) is

DB InfraGO AG (I.IPD)
Adam-Riese-Strasse 11-13
60327 Frankfurt, Germany

The appointed data protection officer is Dr Marein Müller. If you have any questions or suggestions in relation to data protection, please contact: Datenschutz.DBInfraGO@deutschebahn.com

In connection with the domiciliary rights process, we ensure that your personal data will be treated confidentially and will be collected, processed and used solely for the purpose of issuing documents on domiciliary rights matters or filing a criminal complaint in accordance with Section 123 of the German Criminal Code (“Strafgesetzbuch”).

The legal basis for this processing is Art. 6 (1) (f) GDPR.

You can find a more detailed description of the data processing operations being referred to here below.

These are:

For witnesses to an incident
First and last name
Address

For persons who causes an incident
First and last name
Address
Date of birth
Location, date, facts of the incident

DB InfraGO AG will store your data only for the time period needed to process the incident and will then delete it.

Data is forwarded as and when required to investigating authorities, particularly to federal police agencies.

Incident processing generally requires the involvement of data processors working under orders, e.g. data centre operators or call centres.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, and supplementary checks and controls.

You may request information about the data that has been stored about you.

You can request the correction, deletion or restriction of processing of your personal data, provided this is legally admissible and possible under an existing contract.

If you believe that the processing of your personal data violates data privacy law, you have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Article 77 (1) GDPR. The supervisory authority responsible for DB InfraGO AG is: The Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.

You have the right to the portability of data that you have made available to us on the basis of consent or a contract (data portability).

If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. If you withdraw your consent, any processing of your personal data that took place from the time you provided your consent to the time you withdrew it will still be considered lawful.

To exercise this right, simply send a letter to the data processing controller indicated above or an e-mail to Datenschutz.DBInfraGO@deutschebahn.com.

We update our privacy statement whenever there are changes to functions or legislation. We therefore recommend that you review our privacy statement at regular intervals. If your consent is required or if parts of the privacy statement are contained within rules of a contractual relationship, changes will be made only with your consent.