Privacy declaration

It is possible to use our website without providing personal information. However, if you wish to use our website to avail yourself of specific services provided by our company, it may be necessary to provide personal information which we then process. If we need to process personal information but such processing is not based on legal provisions (i.e. if it is a contractual matter), we will request your consent.

In such an event, we will provide you with information about the data we require from you, how we use it and how you can withhold or withdraw your consent.

Who is responsible for collecting and processing data?
Deutsche Bahn Connect GmbH (DB Connect), Mainzer Landstrasse 169, 60327 Frankfurt am Main, Germany, collects and processes your data as the responsible body. 
The appointed privacy officer is Ms Dr. Marein Müller. 
If you have any questions or suggestions in connection with privacy and deutschebahnconnect.com, please contact the following address:

Deutsche Bahn Connect GmbH
Mainzer Landstraße 169
60327 Frankfurt am Main

Contact form
Phone: +49 (0) 69 42727700

Legal basis for data processing:

If we obtain your consent for the purpose of processing personal information, this will be based on Article 6 (1)(a) of the GDPR.
Processing personal data for the purpose of fulfilling a contract with you is based on Article 6 (1)(b) of the GDPR. Article 6 (1)(b) of the GDPR also applies to processing required for performing precontractual measures, as may arise due to queries regarding our products or services. 
If our company is subject to a legal requirement leading to the processing of personal data, i.e. due to tax-related obligations, processing personal data is based on Article 6 (1)(c) of the GDPR. 
We are constantly striving to improve our offering. To this end, we store and analyse data pertaining to how our website is used. This storage and analysis is pseudonymised. The legal basis for this is Article 6 (1)(f) of the GDPR.
 

What rights do users of deutschebahnconnect.com have?

You can demand information disclosing what data relating to you we have stored.
You can demand that your personal data be corrected, deleted and blocked, as long as this is permitted by law and within the framework of an existing contractual relationship.
You have the right to lodge a complaint with a supervisory authority.

The supervisory authority responsible for Deutsche Bahn Connect GmbH is

Der Hessische Datenschutzbeauftragte
Postfach 31 63
65021 Wiesbaden Germany
E-mail: poststelle@datenschutz.hessen.de

You have the right to transferability of the data that you have provided to us by consent or on the basis of a contract (right to data portability). 

If you have given us your consent for data processing, you can withdraw this consent at any time in the same way as you gave it. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.

To exercise your rights, send a letter by post to
Deutsche Bahn Connect GmbH
Mainzer Landstrasse 169
60327 Frankfurt am Main Germany

If you have any questions about specific products, please use our contact form.

How long is data stored?

We save your data only for as long as it is required for fulfilling the purpose for which it was collected (for example, within a contractual relationship) or as required by law. As part of a contractual relationship, we save your data at least until the contract has been fully fulfilled. The data is then stored for the duration of legal retention periods. 

What data do we collect, and why do we process your data?
We collect and process your data only for specific purposes, which can be due to technical reasons, contractual requirements or explicit user requests. When you visit this website, we automatically store and process certain device-related data, typically what is known as server log files.

We normally receive the following information:

• IP address
• Date and time of your enquiry
• Timezone difference to Greenwich Mean Time (GMT)
• Content of your request
• Access status/HTTP status code
• Volume of transmitted data
• Website (source of request)
• Browser
• Operating system and its user interface
• Language and version of browser software

In terms of technology, it is not possible to use this website without this data being processed.

If you contact us, we process any personal information you provide us in order to fulfil the purposes relating to this correspondence.

We require personal data from you to meet contractual obligations. Depending on the selected product, this data is necessary to perform actions such as booking a vehicle or bicycle, process payments or assess creditworthiness. This data is needed for any postal deliveries to the specified address, and to process any cancellations and refunds. If you want to learn more about how your personal data is processed in connection with each Deutsche Bahn Connect product that you use, please see the privacy conditions of each product section.

Contact form:
If you use our contact form, we will contact you by phone, e-mail or post in line with your preferences and using the contact details you provide us. We may use your personal information for advertising purposes, i.e. to send you product information that matches your interests. 
If you use our contact form, we store the IP address provided by your internet service provider (ISP) at the time the computer system you use was registered, in addition to the data and time of usage. It is necessary for us to store this information to identify the (potential) misuse of someone's e-mail address at a later point in time, something which serves as a legal safeguard for us. If you do not consent to the use of your personal data for advertising purposes, we will anonymise your information and use it for statistical purposes only. 

 

Is data passed on?
Implementation of a contract normally requires the involvement of instruction-dependent data processors such as data centre operators, printing or shipping service providers or other parties involved in fulfilling the contract.

External service providers that process data on our behalf are carefully selected by us and strictly bound by contract. The service providers work as instructed by us, which is ensured through strict contractual provisions, technical and organisational measures and additional checks.

Your data is otherwise transmitted only if you have given us your explicit consent or if this is required by law.

The data is not transferred to third-party states outside the EU/EEA or to an international organisation unless adequate guarantees are in place. These include standard contractual clauses of the EU as well as adequacy decisions of the European Commission.

For example, forwarding your data may be necessary for the following actions connected with contract processing relating to services booked via deutschebahnconnect.com:

Use of cookies

What happens with links to external websites?
When you click an external link, you navigate to a website outside of deutschebahnconnect.com. Deutsche Bahn Connect does not assume responsibility for the content, services or products offered or the privacy and technical security on the linked web pages.

Updates to the privacy policy
We update our privacy information whenever there are changes to functions or to the legal situation. We therefore recommend that you take note of the privacy information at regular intervals. If your approval is required, or if parts of the privacy information include provisions of the contractual relationship with you, the changes are made only with your consent.

As at 09 / 2020