Back

Privacy statement

We are delighted that you have visited our website and would like to transparently explain whether and when your personal data is collected and processed. collected and processed.

Privacy policy

It is generally possible to use our website without providing personal data. However, if you wish to make use of special services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing (e.g. the performance of a contractual agreement), we will ask you for your consent.

This notice informs you which data we collect from you, how we use it and how you can object to the use of your data. We are aware of how important it is to you that we handle your personal data carefully when you use our services.

Who is responsible for data collection and processing?

Deutsche Bahn AG (Potsdamer Platz 2, 10785 Berlin) collects and processes your data as data controller.
The appointed data protection officer is Dr. Marein Müller.
Email: konzerndatenschutz@deutschebahn.com

What data do we collect and how and why do we process your data?

We collect and process your data exclusively for specific purposes. These may result from technical necessities, contractual requirements or offers on our website.

Visiting the website

We process your IP address when you visit our website, but do not store it.

For technical reasons, additional data is collected and stored when you visit this website. Without an IP address, this is not personal data.

  • The URL accessed
  • Date and time of access
  • Amount of data transferred

When and which cookies are set?

Cookies are small text files in which personal data can be stored. The cookies can be transmitted to a website when it is accessed and thus enable the user to be identified. Cookies help to simplify the use of websites for users. We differentiate between cookies that are absolutely necessary for the technical functions of the website and cookies that are not absolutely necessary for the technical function of the website.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not absolutely necessary for the technical functions of the website.

It is possible to use the website without providing personal data. Only technically necessary cookies are set. No cookies are set for the purpose of user analysis.

Legal basis for data processing

Insofar as we obtain your consent for the processing of personal data, this serves as the legal basis in accordance with Article 6(1)(a) GDPR.

In the processing of personal data required for the performance of a contract with you, the contract is the legal basis in accordance with Article 6(1)(b) GDPR. Article 6(1)(b) GDPR also applies to processing operations that are necessary for the performance of pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR.

How long will your data be stored?

We only store your data for as long as it is necessary to fulfill the purpose for which it was collected (e.g. as part of a contractual relationship) or if this is required by law. For example, we store your data in the context of a contractual relationship at least until the contract is fully terminated. The data will then be stored for the duration of the statutory retention periods.

What rights do users of karte.bahn.de have?

  • You can request information about what data is stored about you.
  • You can request the rectification, erasure and restriction of processing of personal data as long as this is legally permissible and possible within the framework of an existing contractual relationship.
  • You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, e-mail: mailbox@datenschutz-berlin.de.
  • You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
  • If you have given us your consent to process your data, you can withdraw it at any time using the same method you used to give it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • You may object to data processing on grounds relating to your particular situation if the data processing is based on our legitimate interests or is necessary for the performance of a public task.

To exercise your rights, simply send a letter by post to Deutsche Bahn AG, Potsdamer Platz 2, 10785 Berlin or by e-mail to konzernportal@deutschebahn.com.

Update of the privacy statement

We adapt the privacy statement to changed functionalities or changed legal situations. We therefore recommend that you take note of the privacy statement at regular intervals. If your consent is required or components of the privacy statement contain provisions of the contractual relationship with you, the changes will only be made with your consent.

Status: 12.05.2025