Privacy note contacing OpenStation

Please note that only the German version of this privacy statement is legally binding. You can access the legally binding version here.

It is possible to use our website without providing personal data. However, it may be necessary to process personal data if you want to make use of specific services or other communication channels offered by our company via the website. If it is necessary to process personal data and there is no legal framework upon which to base this processing (for example a contractual agreement), we will ask for your consent.

In doing so, we will inform you of the following: what personal information of yours we collect, how we use it and how you can withdraw your consent to your data’s usage.

DB InfraGO AG collects and processes your data as the responsible party.

The appointed data protection officer is Dr. Marein Müller.

If you have any questions or suggestions regarding data protection, please contact: Datenschutz.DBInfraGO@deutschebahn.com

If you have any questions, comments and/or criticism in connection with OpenStation please contact the following address:

DB InfraGO AG I.ISI Adam-Riese-Straße 11-13 60327 Frankfurt am Main Germany e-mail: feedback@bahnhof.de

We collect and process personal data only for specific purposes. The reasons may arise from technical requirements, contractual obligations or users’ express requests.

For technical reasons, when someone visits bahnhof.de, it is necessary to collect and store certain information, such as the date and duration of the visit, the webpages visited, the identification details of the browser and operating system type, and the website from which you accessed our website.

Contacting us in connection with inquiries and/or feedback regarding DB infrastructure data and services published in the OpenStation dataset, the OpenStation API, or applications based on them

When you send an e-mail to feedback@bahnhof.de, or call +49 30 586020930 we process the data you provide only for the purpose of handling your enquiry.

If we obtain your consent to process personal information, this serves as a legal basis as per Article 6.1(a) of the General Data Protection Regulation (GDPR).

Processing personal data required for fulfilling a contract with you is based on Article 6.1(b) of the GDPR. Article 6.1(b) of the GDPR also applies to processing required for performing precontractual measures, for example in connection with requests pertaining to our products or service.

If our company is required by law to process personal data, for example for meeting taxation-related requirements, the relevant processing measures are based on Art. 6.1(c) of the GDPR.

Processing contracts generally requires the involvement of order processing specialists working under orders, for example computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.

We take great care when selecting external service providers who process data on our behalf, and they adhere to our strict contractual obligations. These service providers follow our instructions. This is safeguarded by strict contractual regulations, technical and organisational measures and supplementary checks.

Your data is forwarded only if you have provided us with your explicit consent or if mandated by legal provisions.

Your information is not forwarded to a third-party state outside the EU/EEA or to an international organisation unless suitable guarantees have been provided. These include standard EU contract clauses and an EU Commission decision regarding suitability.

Further information about data processing at DB concern can be found at: deutschebahn.com/de/konzern/konzernprofil/datenschutz

We store data only while it is necessary for fulfilling the aim for which it was collected, for which it is required, or if such storage is mandated by law. For example, if you submit an enquiry, we store your data for at least the period of time necessary for processing your questions or enquiries in a satisfactory manner. Your data is then deleted.

In the event of statutory data retention periods (for example as per Germany’s tax code or commercial code), the data is retained for the duration of such a period. Using suitable identification details, it is stored in a manner which prevents it being accessed, and it is deleted when the retention period expires.

• Users can demand to know what data pertaining to them has been stored.
• They can demand the correction or deletion of their personal data, or demand that its processing be restricted (blocking), provided this is permissible by law and possible within the framework of an existing contractual relationship.
• They have the right to submit complaints to a supervisory authority. The regulator responsible for DB InfraGO AG is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (the hessians officer for data protection and freedom of information), Postfach 3163 65021 Wiesbaden.
• Users have the right to transfer those data that have been provided to us on the basis of consent or a contract (data portability).
• If they have given us consent to process data, they can withdraw it using the same process by which they provided it. The withdrawal of consent does not affect the legality of data processing performed before withdrawal on the basis of the consent provided previously.
• To exercise the rights, simply post a letter to the relevant office (see section on the party responsible for collecting and processing data) or send an e-mail to: 

We update our privacy notice in line with changes to functions or legal regulations. We therefore recommend that you review our privacy notice at regular intervals. If your consent is necessary or if elements of the privacy notice contain provisions from a contractual relationship with you, changes will be made only with your consent​​​​​.