Main navigation

Data Protection Notice for Social Media

This notice informs you about what data we collect from you, how we use it, and how you can object to the use of your data.

Responsibilities

DB Regio AG collects and processes your data as the controller.

If you have any questions or suggestions regarding this website, please contact:

DB Regio AG
Marketing-Bestellerkommunikation
Europa-Allee 70-76
60486 Frankfurt am Main

The appointed Data Protection Officer is Dr. Marein Müller.

For questions and suggestions regarding data protection, you can send an email to: dbregio@deutschebahn.com

Data Collection

You can find us on various social media platforms with our own presence. The activities on social media operated by us and detailed below are carried out on the basis of Art. 6 (1) lit. f) GDPR. Through these activities, we aim to provide you with a broad, multimedia offering and to exchange ideas with you on topics that are important to you.

Please refer to the respective offerings detailed below for the respective data processing purposes and data categories.

Facebook

Facebook offers comprehensive possibilities for interaction and multimedia presentation. On the Facebook pages of DB Regio AG, you will find tips and information about traveling by train. If you visit our fan page, Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, collects, stores, and processes your personal data in accordance with its privacy policy. You can find the privacy policy here: https://de-de.facebook.com/policy.php

Furthermore, data processing by us only takes place to a very limited extent: To process comments and questions, the social management tool "SocialHub" may be used. The data imported there (comments, user names) will be completely deleted after 12 months.

In addition, we store user names and comments that are deleted due to violations of netiquette. These are only retained within the limitation period for the purpose of any necessary proof in the event of legal disputes.

In the context of contests/prize draws, data is collected for their processing. The details regarding this, e.g., which data is collected for what purpose, can be found in the data protection notice and terms of participation of the respective contest.

For the purpose of demand-oriented design and continuous optimization of our pages, we use the statistical service "Facebook Insights". The data from Facebook Insights is evaluated anonymously, so that no conclusions can be drawn about individual users. The administrator cannot access individual user profiles.

Data collected by Facebook Insights includes:

  • Page activities

  • Page views

  • Post reach (differentiating organic/paid content)

  • Recommendations

  • Post engagements

  • Video: views and average video playback

  • Location (country, city)

  • Target audience (gender ratio, age, language)

Conclusions about individual users and access to individual user profiles by the administrator are not possible. Further information on Facebook Insights can be found here: www.facebook.com/legal/terms/information_about_page_insights_data

With regard to the processing of Insights data, joint responsibility exists between Facebook and us. Details on this are regulated in the Joint Controller Addendum, which you can find here: www.facebook.com/legal/terms/page_controller_addendum. Facebook Ireland provides the essence of the Page Insights Addendum to the data subjects.

Instagram

On the Instagram channels of DB Regio AG, we take you behind the scenes of Deutsche Bahn, share tips and tricks about your train journey, provide travel inspiration, and give an overview of current offers. You can also leave comments and ask questions.

If you visit us on Instagram, personal data will be stored and processed by Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, as the provider of Instagram, in accordance with Instagram's privacy policy. You can find the privacy policy here: https://help.instagram.com/519522125107875

Furthermore, data processing by us only takes place to a very limited extent: To process comments and questions, the social management tool "SocialHub" may be used. The data imported there (comments, user names) will be completely deleted after 12 months.

In the context of contests/prize draws, data is collected for their processing. The details regarding this, e.g., which data is collected for what purpose, can be found in the data protection notice and terms of participation of the respective contest.

In addition, we store user names and comments that are deleted due to violations of netiquette. These are only retained for the purpose of any necessary proof in the event of legal disputes.

For the purpose of demand-oriented design and continuous optimization of our pages, we use the statistical service "Instagram Insights". The data from Instagram Insights is evaluated anonymously, so that no conclusions can be drawn about individual users. The administrator cannot access individual user profiles.

Data collected by Instagram Insights includes:

  • Page activities

  • Page views

  • Post reach (differentiating organic/paid content)

  • Recommendations

  • Post engagements

  • Video: views

  • Location (country, city)

  • Target audience (gender ratio, age, language)

  • Post engagements

  • "Likes", comments

YouTube

The YouTube channels of DB Regio AG present videos about offers in regional transport or helpful tips for travel planning.

Personal data is stored and processed by Google LLC ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube, in accordance with Google's privacy policy. You can find the privacy policy here: https://policies.google.com/privacy?hl=en

Furthermore, data processing by us only takes place to a very limited extent: To process comments and questions, the social management tool "Dimelo Digital" may be used. The data imported there (comments, user names) will be completely deleted after 48 months.

In the context of contests/prize draws, data is collected for their processing. The details regarding this, e.g., which data is collected for what purpose, can be found in the data protection notice and terms of participation of the respective contest.

Only in the event of a violation of netiquette do we store user names and those comments that are deleted due to violations of netiquette. These are only retained for the purpose of any necessary proof in the event of legal disputes.

BlueSky

On the "s-bahn-muenchen.de" channel, you will find tips and information about traveling by train.

If you visit our channel, Bluesky Social, PBC, based in Seattle, Washington, USA, as the operator of Bluesky, stores and processes personal data to the extent described in its privacy policy. You can find the privacy policy here: https://bsky.social/about/support/privacy-policy. On Bluesky, there is no possibility to contact us via private messages.

Details on data transfer

For contract processing, the involvement of processors bound by instructions is generally required, such as data center operators, printing or shipping service providers, or other parties involved in contract fulfillment.

External service providers who process data on our behalf are carefully selected by us and strictly bound by contract. The service providers work according to our instructions, which is ensured by strict contractual regulations, through technical and organizational measures, and through supplementary controls.

Furthermore, your data will only be transmitted if you have given us your express consent or based on a statutory regulation. We would like to point out that when data is processed by the aforementioned social networks, users' data may be processed outside the European Union. This may result in risks for users because, for example, the enforcement of users' rights could be made more difficult. For details, please refer to the privacy policy of the respective social network.

We do not transfer data to third countries outside the EU/EEA or to an international organization unless appropriate safeguards are in place. These include the EU Standard Contractual Clauses and an adequacy decision by the EU Commission.

Duration of storage

If we have collected personal data from you, we store it only as long as is necessary to fulfill the purpose for which it was collected (e.g., in the context of a contractual relationship) or insofar as this is required by law. For example, within the framework of a contractual relationship, we store your data at least until the complete termination of the contract. Subsequently, the data is kept for the duration of the statutory retention periods.

User rights

  • You can request information about what data is stored about you.

  • You can request the correction, deletion, and restriction of processing (blocking) of your personal data, as long as this is legally permissible and possible within the framework of an existing contractual relationship.

  • You have the right to lodge a complaint with a supervisory authority.

  • You have the right to the portability of the data that you have provided to us on the basis of consent or a contract (data portability).

  • If you have given us consent for data processing, you can revoke this at any time in the same way you granted it. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

  • You can object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests.

  • You can object to advertising contact at any time with effect for the future (objection to advertising).

To exercise your rights, a letter by post is sufficient to:

DB Regio AG
Marketing-Bestellerkommunikation
Europa-Allee 70-76
60486 Frankfurt
or via email to: dbregio@deutschebahn.com

With regard to data processing on social networks, we recommend that you contact the respective social network directly for information requests or other questions regarding user rights, such as a deletion request, as only the respective social network has full access to your user data. If you no longer wish the data processing described here in the future, you can disconnect your user profile from our respective page by using the "Unlike this page" and/or "Unfollow this page" functions.

With regard to the processing of personal data via the "Insights" service offered by Facebook, Facebook has assumed primary responsibility. This concerns the processing of Insights data and the implementation of data subjects' rights. Therefore, please contact Facebook directly regarding all obligations under the GDPR with regard to the processing of Insights data. We will forward any inquiries regarding this matter that we receive to Facebook.

Status of the data protection notice

We adapt the data protection notice to changed functionalities or changed legal situations. Therefore, we recommend taking note of the data protection notice at regular intervals. If your consent is required or if components of the data protection notice contain regulations of the contractual relationship with you, the changes will only be made with your consent.

Status: October 2025