In principle, it is possible for you to use our website without providing your personal data. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data. If we do need to process your personal data and there is no legal basis on which to do so (a contractual agreement, for example), we will ask you for your consent.
This notice provides information on what data we collect from you, how we use it, and how you can opt out of having your data used.
Who is responsible for collecting and processing data?
DB Cargo AG is the controller and is therefore responsible for collecting and processing your data.
Ms Dr. Marein Müller is the designated data protection officer.
If you have any questions or suggestions in relation to www.dbcargo.com, please contact:
DB Cargo AG
Which data do we collect and how and why do we collect your data?
We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or requests on the part of users.
For technical reasons, certain data has to be collected and saved when www.dbcargo.com is visited (such as the the ip-adress, date and duration of the visit, the pages used, the identification data of the browser and operating system type used, and the website from which you came to visit us).
For contractual reasons, we also need personal data in order to perform our services and to perform the contracts that we have concluded with you.
If you contact us, we will process the personal data you have provided in the course of our correspondence with you.
Legal basis for data processing:
If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.
If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.
If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.
We store and analyse user data obtained from online sources pseudonymously so that we can continually improve our offering. The legal basis for this is point (f) of Article 6(1) of the GDPR.
When you use the Contact or Feedback form, we need the data to be entered into the required fields to ensure that your message is handled appropriately. If we need the data in order to respond to your message, we will process your information, including the email address.
The legal basis for data processing is your consent as per Article 6 (1) (a) GDPR.
If your message is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO.
For voluntary subscription to the Newsletter or the Timetable Ticker, you must provide the following data:
- Surname, first name (for identifying participants and addressing them in our communication processes)
- Email address (for confirming subscription)
The legal basis for data processing is your consent as per Article 6 (1) (a) GDPR.
You can withdraw your consent at any time, with effect for the future, by clicking on "Unsubscribe" at the bottom of the newsletter.End of expander content
Do we forward data to third parties?
For the purpose of performing a contract, it is generally necessary for us to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.
The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.
Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.
Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.End of expander content
How long do we store your data for?
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. Thereafter, the data will be stored for the statutory storage period.End of expander content
What are your rights?
You can request information as to what personal data is stored.
You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
You have the right to lodge a complaint with a data protection supervisory authority. The regional data protection supervisory authority for DB Cargo AG, with jurisdiction in this subject matter and in this location, is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
Postfach 30 40
You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you which is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.
You can contradict to this promotional use of your personal data at any time with effect for the future. You can address your contradiction to the place/address indicated at the beginning (advertising contradictory)
To exercise your rights, simply contact us at the following address:
DB Cargo AG
Do we encrypt data?
Generally, data and e-mails transmitted via the internet are not encrypted and thus not protected against unauthorised access. Since we cannot guarantee the confidentiality of your data while the e-mail is being transmitted to us, we recommend that you only send confidential information to us by post.End of expander content
What happens in the case of links to external websites?
When you click a link to an external website, you are forwarded to a page outside of the DB Cargo AG website. As a result, DB Cargo AG is not responsible for the content, services or products available via this external website. Similarly, DB Cargo AG is not responsible for your data privacy or technical safety when you are on this external website.End of expander content
When are cookies used?
Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help users to use websites more easily.
We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.
Below is some information on how and in what manner cookies are used on our web pages:
It is generally possible to use www.dbcargo.com without cookies that serve non-technical purposes. This means that you can prevent browser tracking from cookies (do not track, tracking protection list) or prevent third-party cookies from being saved. In addition, we recommend checking saved cookies regularly if they are not expressly desired.
Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.
Technically necessary cookies are set in particular in our online tools:
- CAKEphp (session cookie, deleted at the end of the session).
This cookie serves as an identification feature for the duration of the visit to the website https://railaccess.dbcargo.com.
- csrfToken (session cookie, deleted at the end of the session):
This cookie consists of a random string to safeguard against a specific type of software attack on web forms ("cross-site request forgery" attacks). This cookie is essential for the security of the website https://railaccess.dbcargo.com and https://netzwerk.dbcargo.com) and the visitor."
Use of Matomo
We use the analysis service Matomo (formerly known as Piwik) on our website in order to analyse how our website is used and make improvements on a regular basis. The statistics gathered allow us to improve our offering and design it in a way that is more attractive to you as a user. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.
The legal basis for the use of Matomo is subparagraph 1 in point (f) of Article 6(1) of the GDPR.
Your deactivation options: If you do not consent to the analysis of how you use our website, you can set your browser at any time so that it does not install an analysis cookie. Additionally, you can decide whether to allow your browser to store a cookie that is clearly identified as being for web analysis purposes so that the website operator can collect and analyse various types of statistical data. If you decide not to allow this, click the following link to store the Matomo deactivation cookie in your browser:
Data from your visit to this website is currently being collected by the Matomo web analysis service. Click here to stop data from your visit being collected.
Please note that if you delete cookies altogether, you will also delete the deactivation cookie. This means that you will need to opt out of the analysis of your usage behaviour again.
Since a procedure to anonymize your IP address is activated on this website, your IP address is shortened beforehand. With the help of this information, we can see which sections and texts on our pages are read and used how often and whether the design of our site has an influence on the amount of use. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This information is processed by Adobe exclusively as cumulative data representing general website usage. The data we process using Adobe Analytics is not personally identifiable or traceable to an individual.
The legal basis for the use of Adobe Analytics is Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) sentence 1 lit. a) DSGVO.
You can configure the processing of the information described above at any time under „Manage analytics".End of expander content
hCaptcha by Intuition Machines Inc.
In order to protect your privacy and the availability of the website against automated and abusive access attempts even more reliably, we use the hCaptcha technology of the provider Intuition Machines Inc. (350 Alabama St, San Francisco, CA 94110, USA). Using bot detection and risk assessments, machine learning and verification determine whether a human visitor is using our website. If necessary, an interactive task for validation is displayed when using the website. If you have registered for the provider's barrier-free service, a cookie is evaluated instead of the validation input. The legal basis for the use of the technology is § 25 para. 2 no. 2 TTDSG in conjunction with Art. 6 para. 1 lit. f) DSGVO. The legitimate interest is to protect the data of the data subjects and the infrastructure from automated and abusive access attempts.End of expander content
Updates to our data protection notice
Dated: August 2023