It is possible to use our website without providing personal data. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data. If we do need to process your personal data and there is no legal basis on which to do so (a contractual agreement, for example), we will ask you for your consent.
This notice tells you which data we collect from you, how we use it and how you can withdraw consent to the use of your data.
Last modified: June, 10th 2020
Who is responsible for collecting and processing data?
DB Station&Service AG is responsible for the collection and processing of your data.
If you have any questions, suggestions and/or criticisms in relation to this website, please contact:
DB Station&Service AG, Smart City | DB, Europlatz 1, 10577 Berlin
E-mail: (e-mail: email@example.com text: firstname.lastname@example.org)
If you have any questions or suggestions in relation to data protection, please contact:
(e-mail: email@example.com text: firstname.lastname@example.org)
What data do we collect, and why and how do we process it?
We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or express wishes of the user.
For technical reasons, we must collect and store specific data when you visit this website. This data includes, for example, the date and duration of your visit, the web pages you used, the identification data of the browser and operating system type in use and the website from which you came to visit us.
When you send an e-mail to (e-mail: email@example.com text: firstname.lastname@example.org), we process the data you provide only for the purpose of handling your enquiry.
Booking of temporary office space
If you as a customer book and use temporary rental space with us, certain personal data must be collected and processed by us or our contracted service providers in order to fulfil the contract.
Legal basis for data processing
If we obtain your consent to process personal information, this serves as a legal basis as per Article 6.1(a) of the General Data Protection Regulation (GDPR).
If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.
If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.
Do we forward data to third parties?
Processing contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.
The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.
Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.
Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.
Further information about data processing in the DB Group can be found here:
How long do we store your data for?
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected and/or to comply with legal requirements. For example, if you submit an enquiry, we store your data for at least the period of time necessary for processing your questions or enquiries in a satisfactory manner. Your data is then deleted.
In the event of statutory data retention periods (e.g. as per Germany's tax code or commercial code), the data is retained for the duration of such a period. Using suitable identification details, it is stored in a manner which prevents it being accessed, and it is deleted when the retention period expires.
Rights of data subjects
• You can request information as to what personal data is stored.
• You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
• You have the right to submit complaints to a supervisory authority. The supervisory authority responsible for [please insert: name, legal form] is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, e-mail: (e-mail: email@example.com text: firstname.lastname@example.org)
• You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
• If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
• To exercise your rights, it is sufficient to send a letter by post to the responsible agency (see first section for responsible agency) or by e-mail to: (e-mail: email@example.com text: firstname.lastname@example.org)
Updates to our data protection notice
We update our data protection notice whenever functions or legal situations change. For this reason, we recommend that you refer back to our data protection notice at regular intervals. If your consent is required or parts of the data privacy notice are contained within rules of a contractual relationship, changes will be made only with your consent.
Use of DB WAS (Matomo and formerly Piwik)
We use the analysis service DB WAS (Matomo and formerly Piwik) on our website to analyse and regularly improve the use of our website. The statistics we gain from this allow us to improve our services and make them more interesting for you as the user. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.
The legal basis for the use of DB WAS is Art. 6 (1) Sentence 1 (f) of the GDPR.