Stage

 Data protection notice link2rail

link2rail.net (Portal functions)

In principle, it is possible for you to use our website without providing your personal data. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data. If we do need to process your personal data and there is no legal basis on which to do so (a contractual agreement, for example), we will ask you for your consent.

This notice provides information on what data we collect from you, how we use it, and how you can opt out of having your data used.


Who is responsible for collecting and processing data?

DB Cargo AG is the controller and is therefore responsible for collecting and processing your data.

Ms Chris Newiger is the designated data protection officer.

If you have any questions or suggestions in relation to data protection on link2rail.dbcargo.com, please contact:

DB Cargo AG
Marketing Communications
Edmund-Rumpler-Str. 3
60549 Frankfurt am Main
Germany

 

E-mail: DB.Cargo.Datenschutz@deutschebahn.com


What data do we collect, and why and how do we process it?

We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or express wishes of the user.

For technical reasons, certain data has to be collected and saved when link2rail.dbcargo.net is visited (such as the date and duration of the visit, the pages used, the identification data of the browser and operating system type used, and the website from which you came to visit us).

For contractual reasons, we also need personal data in order to perform our services and to perform the contracts that we have concluded with you.

If you contact us, we will process the personal data you have provided in the course of our correspondence with you.

If you register for a customer account, the following personal information is required:

  • Salutation
  • First and last name
  • Company
  • E-mail address
  • Tel.:

It is not possible to create a customer account without this information. Any other personal data provided is voluntary.


Legal basis for data processing:

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.

If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.

In order to ensure the continuous improvement of our content, we store and analyse pseudonymized usage data from online activities. The legal basis for this is point (f) of Article 6(1) of the GDPR.


Do we forward data to third parties?

For the purpose of performing a contract, it is generally necessary for us to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.

Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.


How long do we store your data for?

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. Thereafter, the data will be stored for the statutory storage period.


What rights do users of the DB Cargo AG website have?

You can request information as to what personal data is stored.

You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.

You have the right to lodge a complaint with a data protection supervisory authority. The regional data protection supervisory authority for DB Cargo AG, with jurisdiction in this subject matter and in this location, is:


Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz

Hintere Bleiche 34
55116 Mainz, Germany

or:

PO Box 30 40
55020 Mainz


You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).

If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.

You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you which is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.

To exercise your rights, simply contact us at the following address:

DB Cargo AG
Marketing Communications
Edmund-Rumpler-Str. 3
60549 Frankfurt am Main
Germany


Do we encrypt data?

Generally, data and e-mails transmitted via the internet are not encrypted and thus not protected against unauthorised access. Since we cannot guarantee the confidentiality of your data while the e-mail is being transmitted to us, we recommend that you only send confidential information to us by post.


What happens in the case of links to external websites?

When you click a link to an external website, you are forwarded to a page outside of the DB Cargo AG website. As a result, DB Cargo AG is not responsible for the content, services or products available via this external website. Similarly, DB Cargo AG is not responsible for your data privacy or technical safety when you are on this external website.


When are cookies used?

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help users to use websites more easily.

We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.

We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.

Below is some information on how and in what manner cookies are used on our web pages:

It is generally possible to use link2rail.dbcargo.net without cookies that serve non-technical purposes. This means that you can prevent browser tracking from cookies (do not track, tracking protection list) or prevent third-party cookies from being saved. In addition, we recommend checking saved cookies regularly if they are not expressly desired.

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.


Use of Matomo (formerly Piwik)

We use the analysis service Matomo (formerly known as Piwik) on our website in order to analyse how our website is used and make improvements on a regular basis. The statistics gathered allow us to improve our offering and design it in a way that is more attractive to you as a user. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.

The legal basis for the use of Matomo is subparagraph 1 in point (f) of Article 6(1) of the GDPR.

Your deactivation options:

If you do not consent to the analysis of your user behaviour, you can change your browser settings at any time to prevent analysis cookies from being set. Additionally, you can decide whether to allow your browser to store a cookie that is clearly identified as being for web analysis purposes so that the website operator can collect and analyse various types of statistical data. If you decide against this, click on the following link in order to install the Piwik deactivation cookie on your browser: Matomo


Updates to our data protection notice

We update our data protection notice whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. In cases where your consent is required or parts of our data protection notice involve provisions in contractual relationships that we have with you, the changes will only take place with your consent.


As of: November 2019

link2rail-API-Portal

Who is the responsible party?

DB Cargo AG, Rheinstraße 2, 55116 Mainz is the controller and is therefore responsible for collecting and processing your data.
Ms Chris Newiger is the designated Chief Privacy Officer.
If you have any questions or suggestions in relation to data privacy on www.developer.dbcargo.com, please contact:
E-mail: DB.Cargo.Datenschutz@deutschebahn.com


Legal basis for data processing

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.
If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.
If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.
In order to ensure the continuous improvement of our content, we store and analyse pseudonymised usage data from online activities. The legal basis for this is point (f) of Article 6(1) of the GDPR.


Purpose of data processing

We collect and process your data only for the following purposes:

1.    Visiting the portal

These purposes may result from technical requirements, contractual obligations or express wishes of the user.
Here are some examples of such processing to aid your understanding:
This data is collected and processed for the purpose of making the platform available (establishing a connection), continuously guaranteeing system security and stability, and ensuring that the network infrastructure (capacity) is properly managed from a technical point of view, thus optimising the platform.
We process the following personal data:
When a user visits the portal, we temporarily store every access operation in a log file. As part of this process, the following data may be collected without any action from the user:

  • Anonymised IP address from the querying computer
  • Date and time of access
  • Name and URL of the file called
  • Data volume transmitted
  • Message indicating whether the call was successful
  • Information on which browser and operating system were used
  • URL of the webpage from which the call was made
  • Name of the internet access provider (IAP)

This data is deleted automatically once the statutory retention period has elapsed.


When are cookies used?

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help users to use websites more easily.
We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.
We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.
Below is some information on how and in what manner cookies are used on our webpages:
It is generally possible to use www.developer.dbcargo.com without cookies that serve non-technical purposes. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block storage of third-party cookies. In addition, we recommend checking saved cookies regularly if they are not expressly desired.
Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.
Cookies that are mandatory for using the site:
Session cookies
We use session cookies to enable smooth navigation. This is necessary because we provide the website across multiple servers (clusters) to balance load and increase availability. These cookies are automatically deleted when you close your browser.
Please note that if you delete cookies altogether, you will also delete the deactivation cookie. This means that you will need to opt out of the analysis of your usage behaviour again.


Do we forward data to third parties?

Processing contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.
The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.
Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.
Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.


How long do we store your data for?

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a registration procedure, for example) and/or to comply with legal requirements. If you cancel your registration, this data is deleted. Every user can delete their account for themselves. Thereafter, the data will be stored for the statutory storage period. You are welcome to delete your own account if you do not consent to it being done via the self-service function. Please use the contact form for this purpose.


User rights

You can request information as to what personal data pertaining to you is stored.
You can request that we correct, erase or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
You have the right to submit complaints to a supervisory authority. The supervisory authority responsible for DB Cargo AG:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz.
You have the right to the transfer of data that you have provided to us on the basis of consent or a contract (data portability).
If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you which is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.
You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).
To exercise this right, simply send a letter to the above-named controller or an e-mail to DB.Cargo.Datenschutz@deutschebahn.com


Updates to our data protection notice

We update our data protection notice whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. In cases where your consent is required or parts of our data protection notice involve provisions in contractual relationships that we have with you, the changes will only take place with your consent.

Last modified on 29 November 2019