Privacy Notice

In principle, it is possible to use our website without providing any personal data. However, if you wish to make use of specific services via our website, the processing of personal data may be necessary.

If the processing of personal data is necessary and there is no legal basis for such processing (e.g. the performance of a contractual agreement), we will ask for your consent. This notice is intended to inform you about what data we collect from you, how we use it and how you can object to the use of your data.

DB Systemtechnik GmbH collects and processes your data as the responsible body. If you have any questions, suggestions and/or concerns regarding data protection at www.trainbrac.de, please contact:

DB Systemtechnik GmbH
Pionierstrasse 10
32423 Minden

For questions and suggestions regarding data protection, you can also send an email to 
db-systemtechnik@deutschebahn.com. 
The appointed Data Protection Officer is Dr Marein Müller. You can contact our Data Protection Officer via the email address konzerndatenschutz@deutschebahn.com.

Your personal data is processed to provide and enable the use of our software and to perform the contractual relationship with you. When you visit this website, certain device-related data is automatically collected and processed. The following data is generally transmitted to us in the process:

• IP address  
• The website from which you are visiting us, known as the ‘referrer’
• Language and version of the browser software  
• Date and duration of the visit

It is technically impossible to use this website without this data being processed. The legal basis for the processing is Article 6(1)(f) of the GDPR. Furthermore, the data is processed to ensure the technical operation and functionality of the software.

If you submit an enquiry to us via the registration or contact form, the data you provide will be processed to deal with your enquiry in accordance with Article 6(1)(b) of the GDPR and, in the event of follow-up enquiries, on the basis of our overriding legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and functional provision of our software.

The following data is collected in this process:

Title, first name, surname, company name, address/street, postcode, town/city, country, email address.

Data processing generally requires the involvement of data processors who are bound by our instructions, such as data centre operators. External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. These service providers operate in accordance with our instructions, which is ensured by strict contractual provisions, technical and organisational measures, and supplementary controls. Furthermore, your data will only be transferred if you have given us your express consent or if required by law.

We only store your data for as long as is necessary to fulfil the purpose for which it was collected, or where required by law. For example, in the context of a contractual relationship, we store your data at least until the contract has been fully terminated. The data is then retained for the duration of the statutory retention periods.

Our website uses only technically necessary cookies. These cookies are required to ensure the basic functions of the website (e.g. page navigation, saving settings or accessing restricted areas). The legal basis for the use of these cookies is Section 25(2)(2) of the TTDSG and Article 6(1)(f) of the GDPR. Our legitimate interest lies in the technically fault-free and secure provision of our website. No processing takes place for the purposes of analysis, tracking or marketing. We wish to give you the opportunity to make an informed decision for or against the use of cookies that are not strictly necessary for the technical functions of the website.

• Right to information
  Subject to the conditions set out in Article 15 of the GDPR, you may request information regarding your personal data processed by us. In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended period of storage, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
• Right to rectification
  Subject to the conditions set out in Article 16 of the GDPR, you may request the immediate rectification of any inaccurate personal data we hold about you or the completion of such data;
• Right to erasure
  Subject to the conditions set out in Article 17 of the GDPR, you may request the erasure of your personal data stored by us (‘right to be forgotten’), unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims;
• Right to restriction of processing
  Subject to the conditions set out in Article 18 of the GDPR, you may request the restriction of the processing of your personal data if either you contest the accuracy of the data or the processing is unlawful, but you object to its erasure and instead request that we cease using the personal data, or if we no longer require the data but you need it to assert, exercise or defend legal claims, or you have objected to the processing in accordance with Article 21(1) of the GDPR;
• Right to data portability
  Subject to the conditions set out in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another responsible person;
• Right to object
  You have the right to object to the processing of your data at any time, subject to the conditions set out in Article 21(1) and (2) of the GDPR;
• Right to withdraw consent
  If you have given us your consent, you have the right to withdraw your consent at any time, in whole or in part, with effect for the future, regardless of the legal basis for the consent; this does not affect the lawfulness of the processing of your personal data carried out on the basis of your consent up until the time of withdrawal.
  To exercise your rights, simply send a letter by post to:
  DB Systemtechnik GmbH
  Pionierstrasse 10
  32423 Minden
  
  or via e-mail to
  db-systemtechnik@deutschebahn.com
   
• Right to lodge a complaint with the supervisory authority
  Under Article 77 of the GDPR, you also have the right to lodge a complaint with the relevant data protection supervisory authority. To do so, you may contact the following data protection supervisory authority:
  State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
  Kavalleriestr. 2-4
  40213 Düsseldorf

We update our privacy policy in line with changes to functionality or legal requirements. We therefore recommend that you review the privacy policy at regular intervals.

As of June 2026