In principle, it is possible for you to use our website without providing your personal data. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data. If we do need to process your personal data and there is no legal basis on which to do so (a contractual agreement, for example), we will ask you for your consent.
This notice provides information on what data we collect from you, how we use it, and how you can opt out of having your data used.
DB Cargo AG is the controller and is therefore responsible for collecting and processing your data.
Ms Chris Newiger is the designated data protection officer.
If you have any questions or suggestions in relation to www.dbcargo.com, please contact:
DB Cargo AG
60549 Frankfurt am Main
We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or requests on the part of users.
For technical reasons, certain data has to be collected and saved when www.dbcargo.com is visited (such as the date and duration of the visit, the pages used, the identification data of the browser and operating system type used, and the website from which you came to visit us).
For contractual reasons, we also need personal data in order to perform our services and to perform the contracts that we have concluded with you.
If you contact us, we will process the personal data you have provided in the course of our correspondence with you.
Legal basis for data processing:
If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.
If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.
If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.
We store and analyse user data obtained from online sources pseudonymously so that we can continually improve our offering. The legal basis for this is point (f) of Article 6(1) of the GDPR.
For the purpose of performing a contract, it is generally necessary for us to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.
The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.
Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.
Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. Thereafter, the data will be stored for the statutory storage period.
You can request information as to what personal data is stored.
You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
You have the right to lodge a complaint with a data protection supervisory authority. The regional data protection supervisory authority for DB Cargo AG, with jurisdiction in this subject matter and in this location, is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
Postfach 30 40
You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you which is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.
To exercise your rights, simply contact us at the following address:
DB Cargo AG
60549 Frankfurt am Main
Generally, data and e-mails transmitted via the internet are not encrypted and thus not protected against unauthorised access. Since we cannot guarantee the confidentiality of your data while the e-mail is being transmitted to us, we recommend that you only send confidential information to us by post.
When you click a link to an external website, you are forwarded to a page outside of the DB Cargo AG website. As a result, DB Cargo AG is not responsible for the content, services or products available via this external website. Similarly, DB Cargo AG is not responsible for your data privacy or technical safety when you are on this external website.
Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help users to use websites more easily.
We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.
We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.
Below is some information on how and in what manner cookies are used on our web pages:
It is generally possible to use www.dbcargo.com without cookies that serve non-technical purposes. This means that you can prevent browser tracking from cookies (do not track, tracking protection list) or prevent third-party cookies from being saved. In addition, we recommend checking saved cookies regularly if they are not expressly desired.
Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.
Technically necessary cookies are set in particular in our online tools:
- CAKEphp (session cookie, deleted at the end of the session).
This cookie serves as an identification feature for the duration of the visit to the website https://railaccess.dbcargo.com.
- csrfToken (session cookie, deleted at the end of the session):
This cookie consists of a random string to safeguard against a specific type of software attack on web forms ("cross-site request forgery" attacks). This cookie is essential for the security of the website (https://railaccess.dbcargo.com and https://netzwerk.dbcargo.com) and the visitor."
Cookies that are not mandatory for the use of the site: Web analytics cookies (Matomo)
We use the analysis service Matomo (formerly known as Piwik) on our website in order to analyse how our website is used and make improvements on a regular basis. The statistics gathered allow us to improve our offering and design it in a way that is more attractive to you as a user. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.
The legal basis for the use of Matomo is subparagraph 1 in point (f) of Article 6(1) of the GDPR.
Your deactivation options: If you do not consent to the analysis of how you use our website, you can set your browser at any time so that it does not install an analysis cookie. Additionally, you can decide whether to allow your browser to store a cookie that is clearly identified as being for web analysis purposes so that the website operator can collect and analyse various types of statistical data. If you decide not to allow this, click the following link to store the Matomo deactivation cookie in your browser:
Data from your visit to this website is currently being collected by the Matomo web analysis service. Click here to stop data from your visit being collected.
Please note that if you delete cookies altogether, you will also delete the deactivation cookie. This means that you will need to opt out of the analysis of your usage behaviour again.
Updates to our data protection notice
We update our data protection notice whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. In cases where your consent is required or parts of our data protection notice involve provisions in contractual relationships that we have with you, the changes will only take place with your consent.
Dated: May 2018