You can generally use our websites without providing personal data. However, if you wish to use special services of our company via our website or book a trip through our website, it may become necessary to process personal data. If the processing of personal data is required and there is no legal basis for such processing (e.g. the performance of a contractual agreement), we will ask for your consent. With this notice we inform you about which data we collect from you, how we use it and how you can object to its use.

Deutsche Bahn AG (Potsdamer Platz 2, 10785 Berlin) collects and processes your data as the controller. The appointed Data Protection Officer is Dr. Marein Müller. Email: konzerndatenschutz@deutschebahn.com

We collect and process your data solely for specific purposes. These can arise from technical requirements, contractual needs, or explicit user requests.

For technical reasons, when you visit karte.bahn.de certain data must be collected and stored, such as the date and duration of your visit, the pages used, information that identifies your browser and operating system type, as well as the website from which you visit us.

If we obtain your consent for processing personal data, Article 6 (1) (a) of the GDPR serves as the legal basis.

When processing personal data necessary for the performance of a contract with you, the contract pursuant to Article 6 (1) (b) GDPR serves as the legal basis. Article 6 (1) (b) GDPR also applies to processing operations that are necessary to carry out pre‑contractual measures, such as inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Article 6 (1) (c) GDPR.

We store your data only for as long as is necessary to fulfill the purpose for which it was collected or as required by law.

• You can request information about which data is stored about you.
• You can request the correction, deletion, and restriction of the processing (blocking) of your personal data, as long as this is legally permissible and within the scope of an existing contractual relationship.
• You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is: Berlin Commissioner for Data Protection and Freedom of Information, Alt‑Moabit 59‑61, 10555 Berlin.
• You have the right to portability of the data you have provided to us on the basis of consent or a contract (data portability).
• If you have given us consent to process your data, you can revoke this consent at any time in the same way you provided it. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal.
• You can object to the processing of your data for reasons arising from your particular situation if the processing is based on our legitimate interests or is necessary for the performance of a public task.

To exercise your rights, a written request by post to Deutsche Bahn AG, Potsdamer Platz 2, 10785 Berlin or by email to konzerndatenschutz@deutschebahn.com is sufficient.

We collect and process your data solely for specific purposes. These may result from technical necessities, contractual requirements, or explicit user requests.

For technical reasons, when you visit karte.bahn.de, certain data must be collected and stored (the date and duration of the visit, the pages visited, information that identifies your browser and operating system type, as well as the website from which you are visiting us).

Use of the site is possible without providing personal data. Only technically necessary cookies are set. No cookies are used for user analysis.

We adapt the Privacy Notice to changes in functionality or legal requirements. We therefore recommend consulting the Privacy Notice at regular intervals. If your consent is required or parts of the Privacy Notice include provisions of your contractual relationship, changes will be made only with your consent.

Status: 12 May 2023