General privacy policy
Please find below the general privacy statement of www.wir-entdecken-bayern.de
It is possible to use our website without providing personal data. This privacy statement tells you what data we collect from you, how we use it and how you can withdraw consent to the use of your data.
Who is responsible for collecting and processing data?
DB Regio AG is the controller and is therefore responsible for collecting and processing your data.
If you have any questions or suggestions about this website, please contact:
DB Regio AG
Kundendialog Bayern
Sandstrasse 38-40
90443 Nuremberg, Germany
Tel.: +49 (0)89 20355000
kundendialog.bayern@deutschebahn.com
Ms Dr. Marein Müller is the designated data protection officer.
If you have any questions or suggestions regarding data protection, you can e-mail:
datenschutz.regio@deutschebahn.com
What data do we collect, and why and how do we process it?
When you visit this website, certain device-specific data is collected and processed automatically. This refers to what are known as server log files that are typically created when you visit a website.
As a rule, the following data is transmitted to us via these files:
- IP address
- Date and time of your request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of your request
- Access status/HTTP status code
- Data volume transmitted
- Website (from which the request came)
- Browser
- Operating system and its interface
- Language and version of browser software
It is not technically possible to use this website unless this data is processed.
The legal basis for this processing is Art. 6 (1) (f) GDPR.
If you contact us, we will process the personal data you have provided in the course of our correspondence with you. The legal basis for this processing is Art. 6 (1) (f) GDPR.
If we obtain your consent to process your personal data, this consent serves as the legal basis required under Art. 6 (1) (a) GDPR.
If we process personal data that is required in order to perform a contract that we have signed with you, then the contract is the legal basis in accordance with Art. 6 (1) (b) GDPR. Art. 6 (1) (b) GDPR also applies to processing that must be done so we may take certain steps prior to entering into a contract, for example, in the event that we receive enquiries relating to our products or services or in the event of job applications. If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for this processing is Art. 6 (1) (c) GDPR.
We are continually improving our offering by saving and analysing user data on a pseudo-anonymised basis. The legal basis for this is Art. 6 (1) (f) GDPR.
Additionally, we are interested in maintaining a customer relationship with you and providing you with information and offers that we think you may be interested in. For this reason, we process your data on the basis of Art. 6 (1) (f) of the GDPR (also with the help of service providers) to send you information and offers. We may use your contact details (surname, first name and postal address) for advertising by post and for market research purposes, provided that you have not opted out of this. We may also use the e-mail address that we have obtained from our business relationship with you for commercial purposes.
You can opt out of the use of your data for targeted advertising at any time, taking effect for the future. You can e-mail your opt-out, for instance, to kundendialog.bayern@deutschebahn.com (advertising opt-out).
When we run competitions, we collect data for managing the process. The precise details, i.e. what data is collected and for what purpose, are available on the web page of the competition in question. The legal basis for this processing is Art. 6 (1) (b) GDPR.
If you register for our newsletter, provision of your e-mail address is mandatory. In this case, we can use it for advertising purposes.
When you register for our newsletter, we store the IP address of the computer system you were using at the time of registration. This is provided by the internet service provider (ISP). We also store the date and time at which you registered. The collection of this data is mandatory to detect (potential) misuse of the e-mail address of a data subject at a later point in time and therefore provides us with a legal safeguard. The legal basis for this processing is Art. 6 (1) (a) GDPR.
You can unsubscribe from the newsletter at any time by e-mail or by clicking the unsubscribe link in your newsletter.
If you register for a customer account, the following information is typically required:
- Title/form of address
- First name and last name
- E-mail address
It is not possible to create a personal account without this information.
You can delete your customer account at any time. The legal basis for this processing is Art. 6 (1) (b) GDPR.
If you are a passenger on a DB Regio AG vehicle equipped with CCTV, please also refer to the
How long do we store your data?
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected and/or to comply with legal requirements.
What rights do users have?
- You can request information as to what personal data is stored.
- You can request the correction, deletion or restriction of processing (blocking) of your personal data, provided this is legally admissible and possible under an existing contract.
- You have the right to lodge a complaint with a supervisory authority.
- You have the right to portability of the data you have provided to us on the basis of a consent or contract (data portability).
- If you grant us consent to process your data, you can withdraw this at any time using the same method you used to grant it. Any processing of your personal data that took place from the time at which you granted your consent until the time at which you withdrew it will be considered to have been lawful.
- You may opt out of data processing for reasons associated with your particular situation if the data processing is performed on the basis of our legitimate interests.
You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).
To exercise your rights, simply send a letter by post or e-mail to the above contact address.
Do we share your data with third parties?
The processing of contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract performance.
For the provision of sales services (for example, the sale of tickets, ticket refunds, payment processing in connection with sales services), DB Vertrieb GmbH acts under a contract pursuant to Art. 26 GDPR (joint data processing controllers).
The external service providers that we use to process data on our behalf are carefully selected and subject to strict contractual obligations. The service providers work in accordance with our instructions and this is verified by strict contractual regulations, technical and organisational measures and supplementary checks. It is necessary to integrate service providers as part of managing and maintaining IT systems, for example.
Furthermore, transfer of your data only takes place if you have given your express consent or on the basis of a statutory requirement.
It may be necessary to forward data in the following situations, for example:
- Credit rating check by a service provider for credit rating checks when you register for the direct debit procedure.
- In the event of payment irregularities or defaulting on payments, we may send debt claim data to a debt collection agency.
- We regularly use a call centre for customer care by telephone.
How long do we store your data?
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (for example in the context of a contractual relationship), or to comply with statutory requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data will then be retained for the duration of the legal retention periods.
Use of cookies
We use cookies on our website to ensure functionality and for measurement and analysis purposes. Cookies are small text files containing information that can be stored on your device. We differentiate between cookies that are necessary for the technical functions of the website and those that are not necessary for this purpose.
It is generally possible to use wir-entdecken-bayern.de without cookies that serve non-technical purposes. This means that you can prevent the tracking of cookies in your browser (do not track, tracking protection list, etc.) or prohibit the storage of third-party cookies. We also recommend that users regularly check and delete cookies that have been automatically stored if they have not expressly requested the cookies' storage.
The analysis measures that we use are intended to ensure the appropriate design and continuous optimisation of our website. In addition, we use the analysis measures to collect statistical data on the use of our website and to evaluate it for the purpose of optimising our offering. These interests are considered legitimate within the meaning of the above-mentioned provision.
Use of Adobe Analytics
This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland), in order to analyse and periodically improve the use of this website. Adobe Analytics uses cookies with a duration of 24 months. The information generated by the cookie is not personally identifiable or traceable to an individual and is transferred to an Adobe server in the US and stored there. We use this information to measure and analyse use of the website and to create statistics. This enables us to see which sections and content on the website are read and used, and how often, and whether our website design influences the extent of its use. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.
The legal basis for this processing is Art. 6 (1) (f) GDPR.
Integration of Google Maps
This website uses Google Maps from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the purpose of displaying destinations and locations. No personal user data is transmitted to Google in connection with the displaying of statically embedded maps.
The legal basis for this is Art. 6 (1) (b) of the GDPR.
The Privacy Policy that applies to Google Maps can be found at:
https://policies.google.com/privacy .
You can adjust your privacy settings at https://policies.google.com/technologies/product-privacy .
Social plugins
Our pages contain plugins from social networks that allow you to recommend our content to other people. We thus offer you the possibility of interacting with social networks and other users, which helps us to improve our offer and make it more interesting for you as a user.
Clicking on the image activates the plugin and you will be forwarded to the relevant social network. The data flow arising at that moment is the responsibility of the relevant social network. We, as the provider of www.wir-entdecken-bayern.de, have no knowledge of the content of the data processed by the social network or of the processing operation.
The legal basis for use of the plugin is Art. 6 (1) (f) of the GDPR.
For further information on the data collected by DB Regio AG during visits to its social media pages, please refer to the
Social media privacy statement
You can find our social media privacy statement here:
https://www.dbregio.de/db_regio/view/home/info/datenschutz-socialmedia.shtml
What happens in the case of links to external websites?
If you click a link to an external website, you are leaving the pages of DB Regio AG. This means that DB Regio AG is not responsible for the content, services or products offered on the linked website, nor is it responsible for the data protection or technical security on the linked website.
Updates to our privacy statement
We update our privacy statement whenever there are changes to functions or legislation. We therefore recommend that you review our privacy statement at regular intervals.
Last modified September 2021