Data privacy notice

The use of our web pages without providing personal data is possible as a general rule. However, if you wish to use specific services from our company via our website, or if you book a journey via our website, it may be necessary to process personal data. If processing personal data is required and there is no legal basis for such processing (for example, carrying out a contractual agreement), we must ask for your consent.

In this notice, we inform you about what data we collect on you, how we use it and how you can opt out to having your data used.

Who is responsible for collecting and processing my data?

DB Station&Service AG, Europlatz 1, 10557 Berlin collects and processes your data in its capacity as a data controller.

The appointed data privacy officer is Dr. Marein Müller. If you have any questions or suggestions regarding data protection on, please contact us: [email protected]

Contact privacy department of DB Station&Service AG: : [email protected]

What data do we collect and how and why do we process your data?

We collect and process your data exclusively for specific purposes. These may be matters related to technical necessity, contractual obligations or requests on the part of users.

When you visit this website, certain device-specific data is collected and processed automatically. This refers to what are known as server log files that are typically created when you visit a website.

As a rule, the following data is transmitted to us via these files:

  • IP address
  • Date and time of your request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of your request
  • Access status/HTTP status code
  • Data quantity transmitted
  • Website (from which the request came)
  • Browser
  • Operating system and its interface
  • Language and version of browser software

It is not technically possible to use of website if this data is not processed. The legal basis is point (f) of Article 6(1) of the GDPR.

If you contact us, we will process the personal data you have provided in the course of our correspondence with you. The legal basis is point (f) of Article 6(1) of the GDPR.


In the channel smartcity.db the most beautiful pictures from Smart City | DB are posted. Through this, we offer users impressions and information from our company. The focus is on the topics Smart City | DB, everyworks, Box- Die Abholstation, Hamburg Box, Places, Urban Analytics, Micro-Depot, City Partnerships, DB Station&Services AG.

If you visit our fan page, personal data will be stored and processed by Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, as provider of Instagram in accordance with Instagram's privacy policy. You can find the privacy policy here:

We process data beyond this only to a very limited extent:

For the purpose of demand-oriented design and continuous optimization of our pages, we use the statistics service Instagram Insights.

This service records your activity on our site and provides it to us in anonymized statistics. This provides us with insights into, among other things, the interactions of our fan page visitors, the views of our page, the reach of posts, information about the activity of our subscribers, as well as information about which countries and cities our visitors come from, and statistics about the gender ratios of our visitors. Conclusions about individual users and access to individual user profiles by the administrator are not possible.

In addition, we store usernames and comments that are deleted due to violation of netiquette. These will only be kept for possible proof in case of legal disputes within the statute of limitations.

Otherwise, we do not process any personal data on Instagram.

Do you share my data with other parties?

For contract processing, it is typically necessary to involve instruction-based data processing companies, for example data centre operators, print or dispatch service providers or other parties involved in contract fulfilment.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers work in accordance with the instructions we provide and this is verified by technical and organisational actions and supplementary checks.

Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.

Transmission to third countries outside the EU/EEA or to an international organisation will not take place unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the EU Commission.

Further information about data processing in the DB Group can be found here:

How long do you store my data?

We store your data only for as long as is necessary to fulfil the purpose for which the data was to collected (for example, in the context of a contractual relationship), or to comply with statutory requirements. In a contractual relationship, for example, we save your data at least until full and final completion of the contract. Thereafter, the data will be stored for the statutory storage period.

What rights do users of have?

  • You can request information about what data relating to you is stored.
  • You can request the correction, deletion and blocking of your personal data as long as this is permitted by law and possible within the scope of an existing contractual relationship.
  • You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for DB Station&Service AG is Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, Germany; e-mail: [email protected].
  • You have the right to portability of the data which you have provided to us based on a declaration of consent or a contract (data portability).
  • If you grant us consent to use your data, you can withdraw it at any time using the same method you used to grant it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, simply send a letter by post to DB Station&Service AG, Europlatz 1, 10557 Berlin, Germany, or by e-mail to [email protected].

Update to the data privacy notice

We adjust the data privacy notice to reflect changes to functionalities or changes to the legal situation. We therefore recommend that you review the data privacy notice at regular intervals. If your consent is required or parts of the data privacy notice are contained within rules of the contractual relationship, changes will be made only with your consent.

Last modified December 2022

Location-based services

Within a testing of a prototype, which we offer at the S-Bahn station Berlin Charlottenburg, you as a user have the possibility to open an OpenStreetMap map via a QR Code. You will get a map with the route to a bus stop or subway station on your smartphone. So that you know where you are on the map, you are given the opportunity to share your location with the OpenStreetMap map.
This convenient feature allows us to offer you special services tailored to your location.

In order to use them, it is necessary that your current location is transmitted. For service delivery purposes it is therefore necessary that the app is allowed to access the location data of your device. Access to the location is only granted after you have granted the app access authorization. The legal basis for location processing is Art. 6 para. 1 lit. b) DSGVO.

You can object to the processing of your location at any time as follows:

With Android you can switch off access to the location in the operating system settings in the submenu item "Apps/Select the browser you use>/App Permissions".

With iOS you can disable access to the location in the operating system settings in the submenu item "Privacy/Location Services/Select the browser you use".

When are cookies used?

Cookies are small text files for storing personal data. When a webpage is accessed, cookies can be transferred to it, making it possible to identify the user. Cookies help to make webpages easier for users to use.

We distinguish between cookies that are essential for the webpage’s technical functions and cookies that are not essential for the webpage’s technical functions.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not essential for the webpage’s technical functions. Please note that if you refuse cookies used for advertising purposes, you will receive advertisements that are less personalised and less ideally suited to your interests. It will remain possible to use the website in full.

We inform you here about the type and scope of the use of cookies on our website:
It is possible to use without cookies that do not serve a technical purpose. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block third-party cookies from being saved.

We also recommend that you regularly check the cookies saved by your system if you have not explicitly requested them.

Please note: If you delete your cookies altogether, the opt-out cookie will also be deleted. This means that you would have to exercise your objection to the analysis of usage behavior again.

Analysis of data by Deutsche Bahn AG

More information on data processing as part of the analysis for which Deutsche Bahn AG is responsible and the relevant setting options can be found at ‘Manage analysis’.