Data protection principles

DB Systel GmbH, Jurgen-Ponto-Platz 1, 60329 Frankfurt am Main collects and processes your data as the data controller.

The appointed data protection officer is Mr. Gerald Freitag.

If you have any questions or suggestions about privacy at www.dbsystel.de, please contact:

DB Systel GmbH

Jürgen-Ponto-Platz 1

60329 Frankfurt am Main, Germany

E-mail: db.systel.datenschutz@deutschebahn.com

We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or express wishes of the user.

For technical reasons, however, we must collect and store specific data when you visit www.semmi.deutschebahn.com. This data includes, for example, the date and duration of your visit, the web pages you used, the identification data of the browser and operating system type in use and the website from which you came to visit us.

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the GDPR, to give us the legal basis to perform such processing operations.

If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.

In order to ensure the continuous improvement of our content, we store and analyse pseudonymised usage data from online activities. The legal basis for this is point (f) of Article 6(1) of the GDPR.

We are also interested in maintaining the customer relationship with you and sending you information and offers that we believe match your wishes and interests. For this reason, we process your data on the basis of point (f) of Article 6(1) of the GDPR (also with the help of service providers) to send you information and offers. We use your contact data (last name, first name, postal address) to send advertising by post and for market research if you do not opt out of this kind of use of your data. We may also use the e-mail address that we have obtained from our business relationship with you for commercial purposes.

You can opt out of the use of your data for targeted advertising at any time, taking effect for the future. You can send your objection to:

DB Systel GmbH

Jürgen-Ponto-Platz 1

60329 Frankfurt, Germany

Alternatively, you can send us an e-mail at db.systel@deutschebahn.com

(advertising opt-out).

Processing contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by contractual regulations, technical and organisational measures, as well as supplementary checks and controls.

Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (for example in the context of a contractual relationship), or to comply with statutory requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data will then be retained for the duration of the legal retention periods.

It is generally possible to use www.semmi.deutschebahn.com without cookies that are not for technical purposes. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block storage of third-party cookies. In addition, we advise you to check the saved cookies regularly, unless they are expressly desired.

Please note that, if you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

We use session cookies to enable smooth navigation. This is necessary because we provide the website across multiple servers (clusters) for load balancing and increased availability. These cookies are automatically deleted when you close your browser.

Use of Matomo (formerly Piwik)

We use the analysis service Matomo (formerly Piwik) on our website to analyse how our website is used and to improve it regularly. The statistics we gain from this allow us to improve our services and make them more interesting for you as the user. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.

Please note that, if you delete all your cookies, you will also delete the deactivation cookie. This means that you will need to opt out of the analysis of your usage behaviour again.

Youtube

Our website www.semmi.deutschebahn.com contains integrated YouTube videos. The legal basis for this is point (f) of Article 6(1) of the GDPR.

When you visit www.semmi.deutschebahn.com, you will find a link that ensures that we submit no data to Google, the operator of YouTube. Google only requests the information from our web server regarding how often the video was clicked.

When you click the link to play the video, you are leaving our website and are forwarded to YouTube. When you do this, Google, the operator of YouTube, sets cookies and pixel tags to personalise the adverts and search results. Google is solely responsible for this data processing as the operator of YouTube. We do not know nor can we influence which data is processed when this happens. Further information can be found here:

https://www.google.de/intl/de/policies/privacy (German only)

• You can request information as to what personal data pertaining to you is stored.
• You can request us to correct, delete or restrict the processing (block) of your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
• You have the right to file complaints with a supervisory authority. The supervisory authority responsible for DB Systel GmbH is: Der Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Poststelle@datenschutz.hessen.de
• You have the right to the portability of data you have made available to us on the basis of consent or a contract (data portability).
• If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
• You have the right to object, on grounds arising from your particular situation, to the processing of your personal data based on our overriding legitimate interest or where it is necessary for the performance of a task carried out in the public interest.
• You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).

• To exercise this right, simply send a letter to the above-named controller or an e-mail to db.systel.datenschutz@deutschebahn.com.

We update our data protection notice whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. In cases where your consent is required or parts of our data protection notice involve provisions in contractual relationships that we have with you, the changes will only take place with your consent.