Privacy

DB broadband GmbH is responsible for collecting and processing your data. DB broadband GmbH is legally represented by the Managing Directors Dr. Christian Humpert an Ferdinand Kopf.

Ms Dr. Marein Müller has been appointed is the designated data privacy protection officer.

If you have any questions or suggestions regarding data privacy on www.deutschebahn.com/dbbroadband, please contact:

DB broadband GmbH
Adam-Riese-Str. 11-13
60327 Frankfurt am Main, Germany

E-mail: Datenschutz.DBInfraGO@deutschebahn.com

We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or express wishes of the user.

For technical reasons, we must collect and store specific data when you visit www.deutschebahn.com/dbbroadband. This data includes, for example, the date and duration of your visit, the web pages you visited, the identification data of the browser and operating system type used, and the website from which you accessed our web page.

Legal basis for data processing

If we obtain your consent to process your personal data, this consent serves as the legal basis required under Article 6 (1) (a) GDPR.

If we process personal data that is required in order to perform a contract that we have signed with you, then the contract is the legal basis in accordance with Article 6 (1) (b) GDPR. Article 6 (1) (b) GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is Article 6 (1) (c) GDPR.

In order to continuously improve our content, we store and analyse pseudonymised usage data from online activities. The legal basis for this is Article 6 (1) (f) GDPR.

Making the web page available generally requires the involvement of data processors working on our instructions, e.g. data centre operators.

The external service providers that we use to process data on our behalf are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, and supplementary checks and controls.

Moreover, we share your data with third parties only when you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected and/or to comply with legal requirements. For example, if we have a contractual relationship with you, we store your data at least until the contract period has come to an end. The data will then be retained for the duration of the mandatory retention period.

You can request information as to what data is stored about you.

You can request us to correct, delete or restrict the processing of your personal data, provided this is legally admissible and possible under an existing contract.

You have the right to file complaints with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 31 63, 65021 Wiesbaden

You have the right to the portability of the data which you have provided to us on the basis of consent or a contract (data portability).

If you have given us consent to process your data, you can withdraw this consent at any time, using the same method that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.

You have the right to object, on grounds arising from your particular situation, to the processing of your personal data based on our overriding legitimate interest or where it is necessary for the performance of a task carried out in the public interest.

If we process your data to undertake direct marketing, you may withdraw your consent to being contacted for future marketing purposes.

To exercise your rights, simply post a letter to the following address:

DB broadband GmbH
Adam-Riese-Str. 11-13
60327 Frankfurt am Main, Germany

Alternatively, you can e-mail us at: Datenschutz.DBInfraGO@deutschebahn.com

We update our privacy notice whenever there are changes to functions or legislation. We therefore recommend that you review our privacy notice at regular intervals. In cases where your consent is required or where parts of our privacy notice involve provisions of the contract we have with you, the changes will only take place with your consent.