Data Protection Notice for Video Surveillance

Responsible within the meaning of the General Data Protection Regulation (GDPR) is

DB Regio AG
Securitymanagement
Europa-Allee 70-76
60486 Frankfurt am Main
dbregio@deutschebahn.com

The appointed Data Protection Officer is Dr. Marein Müller.
datenschutz.regio@deutschebahn.com

The purposes of video surveillance are:

a) In the vehicle:

• Exercising domiciliary rights (Hausrecht)

• Clarification and prevention of criminal offenses

• Protection of life, health, and freedom of employees and customers

• Preservation of evidence in the event of an incident

• Prosecution of criminal offenses

• Self-dispatch by the train driver

• Protection of property and possessions

The legal basis for processing is Art. 6 (1) lit. f) GDPR in conjunction with § 4 of the German Federal Data Protection Act (BDSG).

Legitimate interests are the clarification and prevention of criminal offenses, as well as the protection of life, health, and freedom of employees and customers, and the preservation of evidence in the event of an incident.

In the case of video surveillance of vehicles and publicly accessible, large-scale facilities of public rail, ship, and bus transport, the protection of life, health, or freedom of persons present there is considered a particularly important interest.

b) In the facility/object:

• Exercising domiciliary rights

• Clarification and prevention of criminal offenses

• Protection of life, health, and freedom of employees and customers

• Preservation of evidence in the event of an incident

• Prosecution of criminal offenses

• Protection of property and possessions

• Proper implementation of operational procedures, monitoring of functionality and technical system control, troubleshooting

The legal basis for processing is Art. 6 (1) lit. f) GDPR.

Data is passed on to investigative authorities on an incident-related basis, in particular to the state and federal police. In special individual cases, data is passed on to the Federal Railway Authority (Eisenbahn-Bundesamt).

Vehicles: The storage duration varies between 72 and 120 hours depending on operational procedures and transport contract specifications. After this period, the data is deleted automatically.

Facilities/Objects: The storage duration is 72 hours. After this period, the data is deleted automatically.

• You can request information about what data is stored about you.

• You can request the correction, deletion, and restriction of processing (blocking) of your personal data, as long as this is legally permissible and possible within the framework of an existing contractual relationship.

• You have the right to lodge a complaint with any supervisory authority for data protection.

• You can object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests or is necessary for the performance of a public task.

To exercise your rights, a letter to the above-mentioned contact point is sufficient.