Deutsche Bahn
DB Systel_Digital_bewegen_gemeinsam
DB Systel_Die_Digitalisierung_der_Bahn_erfolgreich_gestalten
DB Systel_Digitalisierung_ist_mehr_als_Technik

Data protection principles

For us, guaranteeing data protection and privacy is a mark of quality for our customers.

The use of our web pages without providing personal data is possible as a general rule. To display our website for you, all we need is your IP address and other technical data. However, if you want to use special services of our company through our website, processing of personal data may be required. If processing personal data is required and there is no legal basis for such processing (for example, carrying out a contractual agreement), we must ask for your consent.

In this notice, we will inform you about what data we collect on you, how we use it and how you can raise an objection to the use of the data.


Who is responsible for collecting and processing my data?

DB Systel GmbH, Jurgen-Ponto-Platz 1, 60329 Frankfurt am Main collects and processes your data as the data controller.

The appointed data protection officer is Mr. Gerald Freitag.

If you have any questions or suggestions about privacy at www.dbsystel.de, please contact:

DB Systel GmbH

Jürgen-Ponto-Platz 1

60329 Frankfurt am Main, Germany


E-mail: db.systel.datenschutz@deutschebahn.com

What data do we collect and how and why do we process your data?

We collect and process your data exclusively for specific purposes. These purposes can result from technical needs, contractual requirements or express wishes of users.

For technical reasons, however, we must collect and store specific data when you visit www.dbsystel.de. This data includes, for example, the date and duration of your visit, the web pages you used, the identification data of the browser and operating system type in use and the website from which you came to visit us.

Newsletter

If you subscribe to one of our newsletters, the following mandatory information is required:

·         salutation

·         E-mail address

·         First name

·         Family name

·         Company

In this case, you are allowing us to use your e-mail address for advertising purposes.

When you register for a newsletter, we save the IP address from the computer system in use provided by your internet service provider (ISP) at the time of registration, and the date and time of registration. The collection of this data is mandatory to detect (potential) misuse of the e-mail address of a data subject at a later point in time and therefore provides us with a legal safeguard.

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of your newsletter.

If you object to the use of your data for advertising purposes, your data will be anonymised for use in statistical evaluations only.

When are cookies used?

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is called, allowing the user to be identified. Cookies help users to use websites more easily. 

We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.

We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.

This is a notification of how and in what manner cookies are used on our sites:

It is generally possible to use www.dbsystel.de without cookies that are not for technical purposes. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block storage of third-party cookies. In addition, we recommend checking the saved cookies regularly if they are not expressly desired.

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

Cookies that are absolutely necessary for the use of the site:

Session cookies

We use session cookies to enable smooth navigation. This is necessary because we provide the web site across multiple servers (clusters) to balance load and increase availability. These cookies are automatically deleted when you close your browser.

Cookies that are not necessarily required for the use of the site web page:
Analysis cookies are required for the use of Matomo (formerly Piwik). These can be deactivated together with Matomo.


Use of Matomo (formerly Piwik)

We use the analysis service Matomo (formerly Piwik) on our website to analyse how our website is used and to improve it regularly. The statistics we gain from this allow us to improve our offering and make it more interesting for users. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.

The legal basis of the use of Matomo is Art. 6 (1) Sentence 1 (f) of the GDPR.

Your deactivation options: If you do not consent to the analysis of your user behaviour, you can change your browser settings at any time to prevent analysis cookies from being set.

Your visit to this website is currently being recorded by Matomo Web Analysis. Click here to stop your visit being recorded.

Please note: If you delete all your cookies, the deactivation cookie will also be deleted. This means that you will have to renew your deactivation of the analysis of user behaviour.


We are interested in giving you a wide variety of information across media formats.

The website www.dbsystel.de includes videos from YouTube. The legal basis for this is Art. 6 (1) (f) of the GDPR.

When you visit the site www.dbsystel.de, you will find a link that prevents us from submitting any data to Google as the operator of YouTube. Google only requests the information from our web server regarding how often the video was clicked.

When you click the link to play the video, you are leaving our website and are forwarded to YouTube. When you do this, Google, the operator of YouTube, sets cookies and pixel tags to personalise the adverts and search results. The data controller for this data processing is exclusively Google, the operator of YouTube. We do not know nor can we influence which data is processed when this happens. Further information can be found here:

https://www.google.de/intl/de/policies/privacy /


We have included Twitter widgets on our website www.dbsystel.de to display tweets from our Twitter account. For this purpose, a connection to Twitter is established. Log data is transmitted to Twitter and a cookie is set on your computer. According to the company's own statements, Twitter starts to delete, de-identify or aggregate this data after a maximum of ten days; this is usually instantaneous, but in some cases may take up to a week. For more information, see the Twitter privacy policy:

https://twitter.com/privacy?lang=en

Legal basis of data processing:

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with of Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.

When personal data is processed that is required to fulfil a contract agreed with you, the legal basis is the contract in accordance with Article 6 (1) (b) of the GDPR. Article 6 (1) (b) of the GDPR also applies to processing activities that are required in order to perform contract activities prior to the contract, for example in cases where requests are made about our products and/or services.

If our company is subject to a legal obligation which requires the processing of personal data, for example fulfilment of tax requirements, this is considered processing in accordance with Art. 6 (1) (c) of the GDPR.

We are continually improving our offering by saving and analysing user data from online on a pseudo-anonymised basis. The legal basis for this is Art. 6 (1) (f) of the GDPR.

We are also interested in maintaining the customer relationship with you and sending you information and offers that we believe match your wishes and interests. For this reason, we process your data on the basis of Article 6 (1) (f) of the GDPR (also with the help of service providers) to send you information and offers. We use your contact data (last name, first name, postal address) to send advertising by post and for market research if you do not opt out of this kind of use of your data. Likewise, we can also use the e-mail address that you provide to us in the context of our business relationship with you to send targeted advertising.

You can opt out of the use of your data for targeted advertising at any time, taking effect for the future. You can send your objection to:

DB Systel GmbH

Jürgen-Ponto-Platz 1

60329 Frankfurt am Main, Germany

Alternatively, you can send us an e-mail at db.systel@deutschebahn.com

(advertising opt-out).

Do you share my data with other parties?

For contract processing, it is typically necessary to involve instruction-based data processing companies, for example data centre operators, print or dispatch service providers or other parties involved in contract fulfilment.

The external service providers who we hire to process data are carefully selected and subject to strict contractual obligations. The service providers work in accordance with the instructions we provide and this is verified by technical and organisational actions and supplementary checks.

Furthermore, transmission of your data takes place only if you have given your express approval or on the basis of a statutory requirement.

Transmission to third countries outside the EU/EEA or to an international organisation will not take place unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the EU Commission.

How long do you store my data?

We store your data only for as long as is necessary to fulfil the purpose for which the data was to collected (for example, in the context of a contractual relationship), or to comply with statutory requirements. In a contractual relationship, for example, we save your data at least until full and final completion of the contract. Thereafter, the data will be stored for the statutory storage period.

What rights do users of www.dbsystel.de have?
  • You can request information as to what personal data is stored.
  • You can request the correction, deletion and blocking of your personal data as long as this is permitted by law and possible within the scope of an existing contractual relationship.
  • You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for DB Systel GmbH is: Der Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Poststelle@datenschutz.hessen.de
  • You have the right to portability of the data which you have provided to us based on a declaration of consent or a contract (data portability).
  • If you grant us consent to use your data, you can withdraw it at any time using the same method you used to grant it. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
  • You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on our overriding legitimate interest or is necessary for the performance of a task carried out in the public interest.
  • You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).

To exercise this right, simply send a letter to the above-named controller or an e-mail to db.systel.datenschutz@deutschebahn.com:

Update to the data privacy notice

We adjust the data privacy notice to reflect changes to functionalities or changes to the legal situation. We therefore recommend that you review the data privacy notice at regular intervals. If your consent is required or parts of the data privacy notice are contained within rules of the contractual relationship, changes will be made only with your consent.

Last updated 25 May 2018