Privacy Policy

As a part of Deutsche Bahn AG, DB Training collects and processes your data as the responsible body.
The appointed privacy officer is Ms Chris Newiger.

If you have any questions, suggestions and/or criticism regarding www.db-training.de please contact: 

Deutsche Bahn AG
DB Training
HS.L 5(3)
Solmsstrasse 18
60486 Frankfurt am Main
Germany

If you have any questions or suggestions regarding privacy, please send an e-mail to: datenschutz.db.training@deutschebahn.com

We collect and process your data exclusively for specific purposes. These purposes can result from technical needs, contractual requirements or express wishes of users.

For technical reasons, we must collect and store specific data when you visit www.db-training.de. These data include, for example, the date and duration of your visit, the web pages you used, the identification data of the browser and operating system type in use and the website from which you came to visit us.

To fulfil a contract, we require you to provide us with personal data. These data are required to make bookings, settle payments, make a postal delivery if necessary to the specified address and to perform reversals and reimbursements.

This applies in the following cases:

Bookings of training and consulting services (shopping cart)

Training and consulting services as well as other services (such as accommodation and meals in guest houses) which are necessary in the course of providing services. This also includes all upstream and downstream processes from registration to invitation management, implementation, preparation of attendance lists, confirmation of participation/certificates up to billing and documenting the performance, funding management and complaint management.

For bookings made at www.db-training.de, the following data are collected:

• Form of address
• Title
• First name
• Last name
• Company
• Department
• E-mail address
• Phone number
• Fax
• Street, no.
• Postcode
• Location
• Country
• Any varying invoice data

Prospects list

For enquiries made at www.db-training.de, the following data are collected:

• Company
• Form of address
• First name
• Last name
• Department
• E-mail address
• Phone number
• Individual comments

Contact form

When you use our contact form, the following data are collected:

• Dear...,
• First name
• Last name
• Phone number
• E-mail address
• Business unit
• Subject, topic
• Individual message 

Registration

When you use our intern website DB Lernwelt (registrierung.dblernwelt.de), the following data are collected:

• Personnel number
• Dear...,
• First name
• Last name
• Company 
• Position 
• Management level 
• E-mail address 

We store your enquiry and booking data, and we also use the information you provide there about your areas of interest for internal analysis and market research purposes. In general, we intend to use what we learn from this to continuously improve our offering. Storing and analysing pseudonymised usage data from online activities also helps us work towards this objective. We do not create a link between these activities and your personal data. If you wish, you can withdraw your consent to the pseudonymised use of data generated when you use Deutsche Bahn's online services. 

Google reCAPTCHA

We use Google reCAPTCHA to ensure sufficient data security in certain cases like e.g. dblernwelt.de. This service is provided by Google Inc. reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyses the behavior of the website visitor based on various characteristics. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html. 

Insofar as we obtain your consent for the processing of personal data, this is used as a legal basis in accordance with point (a) of Article 6(1) of the German Federal General Data Protection Regulation (GDPR).

If we process personal data that is required to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.

If the processing is necessary to safeguard the legitimate interests of the person responsible or of a third party, unless the interests or fundamental rights and freedoms of the data subject outweigh the protection of personal data, the processing is based on point (c) of Article 6(1) of the GDPR.

If the processing of the data takes place as a data processor, the contract is the legal basis under Article 28 of the GDPR.

We are continually improving our offering by saving and analysing user data from online on a pseudo-anonymised basis. The legal basis for this is point (f) of Article 6(1) of the GDPR.

Additionally, we are interested in maintaining a customer relationship with you and providing you with information and offers that we think you may be interested in. For this reason, we process your data on the basis of point (f) of Article 6(1) of the GDPR (also with the help of service providers) to send you information and offers. We use your contact details (last name, first name and postal address) for advertising by post and for market research purposes, provided that you have not opted out of this. We may also use the e-mail address that we have obtained from our business relationship with you for commercial purposes.

You can opt out of the use of your data for targeted advertising at any time, taking effect for the future. You can opt out by using the contact form or by sending an e-mail to: servicemanagement@db-training.de (advertising opt-out).

For the purpose of performing a contract, we generally need to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.

Data may be forwarded in the following situations, for example, where it is required for the purpose of contract processing for a booking made on www.db-training.de:

• Cooperation partners/suppliers for the implementation (or support) of training and consulting services
• We regularly use a call centre for customer care by telephone
• In the event of payment irregularities or defaulting on payments, we may send debt claim data to a debt collection agency

We store your data only for as long as it is required to fulfil the purpose for which it was collected (for instance, as part of a contractual relationship) or to comply with legal requirements. Therefore, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data shall then be retained for the duration of the legal retention periods.

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is called, allowing the user to be identified. Cookies help users to use internet sites more easily. 

We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory for the technical functions of the website.

We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for advertising purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.

This is a notification of how and in what manner cookies are used on our sites:Generally speaking, it is possible to use www.db-training.de without cookies that serve no technical purpose. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block storage of third-party cookies. In addition, we recommend checking the saved cookies regularly if they are not expressly desired.

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again. Cookies that are mandatory for using the site: OpenShift, Apache routing to the Content Application Engine (CAE), internet service gateway

Cookies that are not mandatory for the use of the site include:

Matomo (formerly Piwik)

We use the analysis service Matomo (formerly Piwik) on our website to analyse how our website is used and to improve it regularly. The statistics we gain from this allow us to improve our offering and make it more interesting for users. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.

The legal basis for the use of Matomo is point (f) in the first sentence of Article 6(1) of the GDPR.

Your deactivation options: If you do not consent to the analysis of your user behaviour, you can change your browser settings at any time to prevent analysis cookies from being set. 

Here you can check your current browser setting: 

We are interested in giving you a wide variety of information across media formats.

Our website www.dbtraining.de contains integrated YouTube videos. The legal basis for this is point (f) of Article 6(1) of the GDPR.

When you visit the site www.db-training.de, you will find a link that prevents us from submitting any data to Google as the operator of YouTube. Google only requests the information from our web server regarding how often the video was clicked.

When you click the link to play the video, you are leaving our website and are forwarded to YouTube. When you do this, Google, the operator of YouTube, sets cookies and pixel tags to personalise the adverts and search results. The data controller for this data processing is exclusively Google, the operator of YouTube. We do not know nor can we influence which data is processed when this happens. Further information can be found here: https://www.google.de/intl/de/policies/privacy /

Our pages contain social network plug-ins, with which you can recommend our contents. This allows you to interact with social networks and other users so that we can improve our range of services and make it more interesting for you as a user.

When you visit www.db-training.de, you will find the social plug-ins of the relevant functions embedded as an HTML link, since these are not yet activated when the web page is loaded. When you click on the HTML link, the plug-in becomes active and you are redirected to the relevant social network. The social network is responsible for the data flow arising at this moment. As provider of www.db-training.de, we have no knowledge of the content of the data processed by the social network and the processing operation.

The legal basis for using the plug-in is point (f) of Article 6(1) of the GDPR. Overview and origin of the social plug-ins that can be activated by the Shariff solution: 

• Social plug-ins of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The Facebook privacy policy can be found at: https://www.facebook.com/privacy/explanation
• Social plug-ins of the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The Twitter privacy policy can be found at: https://twitter.com/de/privacy
• Social plug-ins of Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany. The privacy policy can be found at: https://privacy.xing.com/de/datenschutzerklaerung

You can request information about what data we have stored about you.

You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.

You have the right to file complaints with a supervisory authority. The regulatory authority responsible for Deutsche Bahn AG is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Germany
E-mail: mailbox@datenschutz-berlin.de

You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).

If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it shall still be considered to have been lawful.

You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).

To exercise your rights, simply contact us at the following address: 

Deutsche Bahn AG
DB Training
HS.L 7(4)
Solmsstrasse 18
60486 Frankfurt am Main
Germany
E-mail: datenschutz.db.training@deutschebahn.com

We amend the data privacy notice to reflect changes to functionalities or changes to the legal situation. For this reason, we recommend that you refer back to our data protection notice at regular intervals. If your consent is required or parts of the data privacy notice are contained within rules of the contractual relationship, changes will be made only with your consent.