Data Protection Principles

It is possible for you to use our website without providing your personal data. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data.
If it becomes necessary to process personal data and there is no legal basis for this processing (e.g. a contractual agreement), we will ask for your consent. This privacy statement tells you what data we collect from you, how we use it and how you can withdraw consent to the use of your data.

If it becomes necessary to process personal data and there is no legal basis for this processing (e.g. a contractual agreement), we will ask for your consent. This privacy statement tells you what data we collect from you, how we use it and how you can withdraw consent to the use of your data.

1. Who is responsible for collecting and processing data?

DB Systemtechnik GmbH processes your data as the controller. Dr. Marein Müller is the designated privacy officer.

• If you have any questions, comments and/or criticism regarding www.trainbrac.de, please contact the following address:
  DB Systemtechnik GmbH
  Pionierstrasse 10
  32423 Minden

or send your message to the following email address:

• Please direct any questions and suggestions regarding data privacy to this e-mail address:
  db-systemtechnik@deutschebahn.com

Version dated: November 2022

2. Type, scope, purposes and legal basis of data processing

All data is collected and processed for specific purposes. These purposes may relate to technical requirements, contractual obligations or specific user requests.

For technical reasons, specific data has to be collected and stored when you visit www.trainbrac.de (date and duration of your visit, the web pages you used, the identification data of the browser and operating system used and the website via which you visited us).  If this data can be used to determine the number of visitors and use of our website, this is done completely anonymously.

In specific cases, we additionally require personal data from you in order to provide services.

Specifically, the following data is collected and used:

• Registration:
  
  Form of address, first name, surname, company name, postcode, street, building no., town, e-mail address:
  Registration is required for sending the access authorisation for downloading the software.
• Contact form:
  Form of address, first name, surname, company name, postcode, street, building no., town, e-mail address:
  These services ensure that your query is dealt with quickly and enable us to contact you - where this is necessary in order to deal with your query.

Legal basis for data processing:

If we obtain your consent to perform processing operations on your personal data, this consent serves as the legal basis required under Article 6 (1) (a) GDPR.

If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services. If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.

We store and analyse user data obtained from online sources pseudonymously so that we can continually improve our offering. The legal basis for this is Article 6 (1) (f) GDPR.

Version dated: November 2022

3. Is data shared with other parties?

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.

Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the EU Commission.

Version dated: November 2022

4. When are cookies used?

Cookies are small text files for storing personal data. When a page is accessed, cookies can be transferred to it, making it possible to identify the user. Cookies help to make web pages easier for users to use.

We distinguish between cookies that are essential for the website's technical functions and cookies that are not essential for the website's technical functions.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not essential for the webpage's technical functions.

For more information on the data processing by Deutsche Bahn AG related to website analytics, click “Manage analytics” in the footer of this page.

Version dated: November 2022

5. Web analysis service

The www.trainbrac.de website is not currently subject to statistical analysis (Version dated: November 2022).

6. Embedded Content/You Tub

Offer of embedded Content

The www.trainbrac.de website does not currently use embedded content (Version dated: November 2022).

7. How long do we store your data?

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements.

Version dated: November 2022

8. What rights do you have as user of www.trainbrac.de?

1. You can request information as to what data is stored about you.
2. You can demand the rectification or erasure of your personal data, or demand that processing of your personal data be restricted (blocked), provided this is permissible by law and possible within the framework of an existing contractual relationship.
3. You have the right to lodge a complaint with a supervisory authority. The supervisory authority (Art. 77 GDPR) responsible for DB Systemtechnik GmbH is:
   Landesbeauftragte:r für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4 in 40213 Düsseldorf
   www.ldi.nrw.de
4. You have the right to the portability of data that you have made available to us on the basis of consent or a contract (data portability).
5. If you have given us consent to process your data, you can withdraw this consent at any time, using the same method you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent until the time at which you withdrew it will be considered to have been lawful.

Version dated: November 2022

9. New Functionalities

We update our privacy statement in line with changes to website functionalities. We therefore recommend that you read the privacy statement when accessing a new version of www.trainbrac.de.

Version dated: November 2022

10. How we handle links to external websites?

If you click on a link to an external website, you leave the www.trainbrac.de website. 

DB Systemtechnik GmbH is not therefore responsible for the content, services or products available via this linked website nor is it responsible for data privacy or technical safety on the linked website.

Version dated: November 2022