Data protection S-Bahn München

DB Regio AG collects and processes your data as the controller.

If you have any questions or suggestions regarding this website, please contact:
DB Regio AG
Europa-Allee 70-76
60486 Frankfurt am Main
kundendialog.nrw@deutschebahn.com

The appointed Data Protection Officer is Dr. Marein Müller.
For questions and suggestions regarding data protection, you can send an email to datenschutz.regio@deutschebahn.com

When visiting this website, certain device-related data is automatically collected and processed. These are so-called server log files that typically accumulate when visiting a website.

The following data is usually transmitted to us:

• IP address

• Date and time of your request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of your request

• Access status/HTTP status code

• Amount of data transferred

• Website (from which the request comes)

• Browser

• Operating system and its interface

• Language and version of the browser software

Using this website without processing this data is technically impossible. The legal basis for processing is Art. 6 (1) lit. f GDPR.

When you contact us, we process the personal data you provide to handle the correspondence. The legal basis for processing is Art. 6 (1) lit. f GDPR.

Insofar as we obtain your consent for processing operations of personal data, this serves as the legal basis according to Article 6 (1) lit. a GDPR. When processing personal data required for the performance of a contract with you, the contract is the legal basis according to Article 6 (1) lit. b GDPR.

Ticket inspection for electronic tickets (eTicket)
Data stored on the chip card is read via mobile or stationary inspection devices, and the electronic ticket as well as its temporal and spatial validity are automatically checked. Only the inspection result is displayed (ticket valid or invalid with regard to the temporal and spatial area of validity). Additionally, for personal tickets, depending on the transport association, the full or masked name, and if applicable the date of birth or year of birth and the gender of the ticket holder are displayed on the inspection device. The data read from the chip card by the inspection device is only temporarily stored on the device for the purpose of the inspection and is automatically deleted from the inspection device immediately after the inspection is completed.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) lit. c GDPR.

In order to constantly improve our offer, we store and analyze usage data on a pseudonymous basis. The legal basis for this is Art. 6 (1) lit. f GDPR. We are also interested in maintaining the customer relationship with you and sending you information and offers that we believe fit your interests. Therefore, we process your data on the basis of Article 6 (1) lit. f GDPR (also with the help of service providers) in order to send you information and offers. We may use your contact details (surname, first name, postal address) for advertising by post and for market research, provided you do not object to such use. Likewise, the email address that we have received from you from a business relationship may also be used for advertising purposes.

You can object to this advertising use of your data at any time with effect for the future. You can send your objection, for example, by email to the above-mentioned address (advertising objection).

In the context of contests/prize draws, data is collected for their processing. The details regarding this, e.g., which data is collected for what purpose, can be found on the page of the respective contest. The legal basis for this processing is Art. 6 (1) lit. b GDPR.

If you subscribe to a newsletter from us, your email address will be collected as a mandatory field. In this case, it may be used by us for advertising purposes. When registering for the newsletter, we store the IP address assigned by the Internet Service Provider (ISP) of the computer system used by you at the time of registration as well as the date and time of registration. The collection of this data is necessary to be able to trace the (possible) misuse of the email address of a data subject at a later point in time and therefore serves our legal protection. The legal basis for this processing is Art. 6 (1) lit. a GDPR.

You can unsubscribe from the newsletter at any time by email or by clicking the unsubscribe link in your newsletter.

If you register for a DB customer account, the following mandatory information is typically collected:

• Salutation

• First and last name

• Email address

Without providing this data, no personal account can be created. You can delete your DB customer account at any time. The legal basis for this processing is Art. 6 (1) lit. b GDPR.

Should you travel in a DB Regio AG vehicle equipped with video surveillance, the Data Protection Notice Video Surveillance applies additionally.

For data collection by DB Regio AG in connection with body cams, the Data Protection Notice Body Cam applies additionally.

You can find out which data DB Regio AG collects when visiting its own pages on social media in the Data Protection Notice Social Media.

Integration of Open Maps

On our websites, we use the Open Maps map service to display timetables and visualize locations.

The legal basis for this is Art. 6 (1) lit. f) GDPR.

No personal data is transferred in this process.

You can request information about what data is stored about you.

You can request the correction, deletion, and restriction of processing (blocking) of your personal data, as long as this is legally permissible and possible within the framework of an existing contractual relationship.

You have the right to lodge a complaint with a supervisory authority. You have the right to the portability of the data that you have provided to us on the basis of consent or a contract (data portability).

If you have given us consent for data processing, you can revoke this at any time in the same way you granted it. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests. You can object to advertising contact at any time with effect for the future (objection to advertising).

To exercise your rights, a letter by post or an email to the above-mentioned contact details is sufficient.

For contract processing, the involvement of processors bound by instructions is generally required, such as data center operators, printing or shipping service providers, or other parties involved in contract fulfillment.

For the provision of sales services (e.g., sale of tickets, fare reimbursement, payment processing in connection with sales services), DB Vertrieb GmbH acts within the framework of a contract pursuant to Art. 26 GDPR (Joint Controllers).

External service providers who process data on our behalf are carefully selected by us and strictly bound by contract. The service providers work according to our instructions, which is ensured by strict contractual regulations, through technical and organizational measures, and through supplementary controls. The involvement of service providers is required, for example, in the context of the administration and maintenance of IT systems.

Furthermore, your data will only be transmitted if you have given us your express consent or based on a statutory regulation.

Transfer of data may be necessary, for example, in the following constellations: Credit check upon registration for the direct debit procedure by a credit check service provider. In the event of payment irregularities / default of payment, receivables data may be passed on to a collection agency. We regularly use a call center for telephone customer support.

We integrate third-party content to offer you services along the entire mobility chain (partner offers). In this case, you enter your data directly on the corresponding third-party sites. These are integrated into the pages of DB Regio AG and have been adapted to present a visually uniform image. Third-party content is always provided with its own imprint and its own data protection notices.

When you click a link to an external site, you move outside the pages of DB Regio AG. Therefore, DB Regio AG is not responsible for the content, services, or products offered on the linked website, nor for data protection and technical security on the linked website.

We adapt the data protection notice to changed functionalities or changed legal situations. Therefore, we recommend taking note of the data protection notice at regular intervals.

Status: August 2024