It is fundamentally possible to use our Internet pages without providing personal information. With this notice, we provide you with information about what data we collect from you, how we use it and how you can object to use of the data.
Who is responsible for data collection and processing?
DB Regio AG collects and processes your data as the controller.
If you have any questions or suggestions about this website, please contact:
DB Regio AG
Telephone: +49 (0) 89 20355000
The appointed data protection officer is Ms Chris Newiger.
In the event of questions or suggestions with regard to data protection, please send an e-mail to
What data do we collect and how and why do we process your data?
Certain device-related data is collected and processed automatically when you visit this website. This concerns the server log files that are typically created when you visit a website.
The following data is normally transmitted to us:
- IP address
- Date and time of your enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of your request
- Access status/HTTP status code
- Amount of data transmitted
- Website (that the request stems from)
- Operating system and its interface
- Language and version of the browser software
Use of this website without processing this data is not technically possible.
The legal basis for processing is Art. 6 (1) (f) GDPR.
If you contact us, we will process the personal data you have transmitted in order to deal with your correspondence. The legal basis for processing is Art. 6 (1) (f) GDPR.
If we obtain consent from you for the processing of personal data, this will be used as a legal basis in accordance with Article 6 (1) (a) GDPR.
When processing personal data that is required to fulfil a contract with you, the contract is the legal basis in accordance with Article 6 (1) (b) GDPR. Article 6 (1) (b) GDPR also applies to processing that is necessary for carrying out pre-contractual tasks such as handling enquiries about our products or services, or in the event of applications. If a legal obligation requires our company to process personal data, such as meeting tax-related obligations, such processing is based on Article 6 (1) (c) GDPR.
In order to continually improve our offers, we store and analyse usage data in a pseudonymised form. The legal basis for this is Art. 6 (1) (f) GDPR.
We are keen on maintaining a relationship with you as a customer and providing you with information and offers which we think may match your personal interests. We therefore process your data to send you information and offers. This processing is based on Article 6 (1) (f) GDPR and may involve support from service providers. We may use your contact details (surname, first name, postal address) for advertisements by post and for market research if you do not object to this type of use. The e-mail address that we have received from you as the result of a business relationship with you can also be used for advertising purposes.
You can object to this use of your data for advertising purposes at any time with future effect. For example, you can direct your objection by e-mail to the above-mentioned address (advertising objection).
As part of competitions, data will be collected in order to process them. The precise details of this, i.e. what data is collected and for what purpose, are available on the web page of the relevant competition. The legal basis for this processing is Art. 6 (1) (f) GDPR.
If you subscribe to a newsletter from us, your e-mail address will be collected as mandatory information. In this case, we may use this information for advertising purposes.
When you subscribe to a newsletter, we store the IP address assigned by the Internet service provider (ISP) to your computer system used at the time of subscription, as well as the date and time of subscription. The collection of this data is necessary in order to trace (possible) misuse of the e-mail address of the person concerned at a later point in time, and its purpose is therefore our legal protection. The legal basis for this processing is Art. 6 (1) (a) GDPR.
You can unsubscribe from the newsletter at any point by e-mail or by clicking on the unsubscribe link in your newsletter.
If you register for a customer account, the following mandatory information is typically collected:
- First name and surname
- E-mail address
Not providing these details means that a personal account cannot be created.
You can delete your customer account at any point. The legal basis for this processing is Art. 6 (1) (b) GDPR.
If you travel with a vehicle from DB Regio AG equipped with video surveillance, the
How long will your data be stored?
We only store your data for as long as it is necessary to fulfil the purpose for which it was collected or if this is prescribed by law.
What rights do users have?
- You can request information about what data is stored about you.
- You can request rectification, erasure and restriction of processing (blocking) of your personal data, if this is legally permissible and is possible as part of an existing contractual relationship.
- You have the right to submit a complaint to a supervisory authority.
- You have the right to data portability of the data that you have provided to us on the basis of consent or a contract (data portability)
- If you have given us consent to data processing, you can revoke this in the same manner in which you granted it at any point. By revoking the consent, the legality of the processing that took place based on the consent up until the time of revocation is not affected.
-You can object to data processing for reasons resulting from your particular situation if the data processing occurs based on our legitimate interests.
You can revoke your consent to contact for advertising purposes with effect for the future at any time (advertising revocation).
For the execution of your rights, a letter sent by post or an e-mail to the contact details specified above is sufficient.
Is data passed on?
The sale of tickets is carried out in the name of and behalf of DB Vertrieb GmbH. Your booking details (e.g. name, address, e-mail address and payment details) are passed on to DB Vertrieb GmbH for the purposes of contract processing.
The involvement of order processors subject to instructions is generally required for contract processing, e.g. data centre operators, printing or shipping service providers or other parties involved in fulfilling the contract.
External suppliers that process data on our behalf are carefully selected by us and are subject to strict contractual obligations. These service providers work according to our instructions, something which is guaranteed by means of strict contractual regulations, technical and organisational measures and supplementary checks. The involvement of service providers is required, for example, as part of management and maintenance of IT systems.
Otherwise, your data is only transmitted if you have given us express consent to do so or based on a legal regulation.
Disclosure of data may be necessary in the following configurations, for example:
- To carry out competitions
- To send a newsletter if you have subscribed to it
It is generally possible to use this website without non-technical cookies. This means that you can prevent tracking via cookies in your browser (do not track, tracking protection list) or block the storage of third-party cookies. We also recommend regular checks of stored cookies if they have not been expressly requested.
Please note: In the event of erasure of all cookies, any opt-out cookies that have been set are also erased, meaning that you have to exercise any objections declared again.
In order to continuously improve your user experience, we collect statistics about the use of this website. For this purpose, we use the analysis tools Adobe Analytics, Optimizely, Qualtrics and m-pathy.
The tracking measures listed below and used by us are carried out based on Art. 6 (1) (f) GDPR. By using these tracking measures, we aim to ensure that our website is designed to meet the requirements and is continually being optimised. Similarly, we use tracking measures to compile statistics regarding our website's usage and evaluate these figures in order to optimise our offering for you. These interests are to be viewed as justified within the meaning of the regulation named above.
We have contractually compelled our service providers to handle your data in a manner that is compliant with data protection.
Use of Adobe Analytics
The information produced by the cookie is transmitted to an Adobe server in the USA and stored there. Your IP address will be shortened prior to this, since a procedure for anonymising your IP address is activated on this website. Adobe will use this information in order to evaluate for us your use of the website, to compile reports on website activities and to carry out additional services, on our behalf, relating to use of the website and the Internet. This enables us to assess how often different sections and texts on our web pages are read, and whether or not our website design influences the extent of website usage. Using the statistics obtained, we can improve our website and design it to be more interesting for you as a user.
This information is disclosed to us by Adobe exclusively as cumulated data that represents the general website usage. This data is not personal and cannot be traced back to a person.
You can object to the creation of the pseudonym usage profiles at any time. There are several ways of doing this:
1.) One way to opt out of web analysis by Adobe Analytics is to set an opt-out cookie which tells Adobe not to store or use your data for web analysis purposes. Please note that with this option, the web analysis will only be blocked for as long as the opt-out cookie is stored by the browser. If you want to set the opt-out cookie now, please click here: www.adobe.com/de/privacy/opt-out.html
2.) You can also prevent storage of the cookies used for profile development by setting your browser software accordingly.
Please be aware that if you erase the cookies on your device, the opt-out cookie will also be erased, meaning that you should exercise your objection again.
Use of Google Analytics
This website uses the service "Google Analytics", which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), in order to analyse website use by users. The legal basis for this processing is Art. 6 (1) (f) GDPR.
The service uses "cookies" – text files that are stored on your end device. The information collected by the cookies is generally sent to a Google server in the USA and stored there. IP anonymisation is in effect on this website. The IP address of the users is truncated within the member states of the EU and the European Economic Area. Due to this truncation, it will no longer be possible to connect your IP address to a person. As part of the agreement concerning order data processing which the website operators agreed with Google Inc., Google Inc. evaluates the website usage and website activity using the collected information and provides services associated with the Internet usage.
You have the option of preventing the storage of the cookie on your device by changing the relevant settings in your browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not allow cookies. Furthermore, you can use a browser plugin to prevent the information collected by cookies (including your IP address) being sent to Google Inc. and being used by Google Inc. You can find the relevant plugin at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can find further information about data usage by Google Inc. here: https://support.google.com/analytics/answer/6004245?hl=de
Interest-based online advertising
In our case, the advertisements that you are shown are based on your interest previously shown for products. We collect information about your surfing patterns in order to provide you with interest-based online advertising. Cookies that contain a multi-digit identification number are stored on your computer for this purpose.
If you do not agree to this analysis of your usage behaviour, you can change your browser's settings at any time so that an analysis cookie cannot be set.
Use of Google AdWords
By using the online advertising program "Google AdWords" from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"), advertisements for offers are displayed on this website and sorted thematically based on the keywords used in a Google search. For this, Google sets a cookie in the browser when a user clicks an advertisement in the Google search network or advertising network. The legal basis for this is Art. 6 (1) (f) GDPR.
Your options for objection: www.google.com/ads/preferences
Using conversion methods, Google can (based on the AdWords cookie) measure the number of people that chose the offer advertised after clicking on an AdWords advertisement. Where Google's advertisements refer to offers on this website, Google provides this website with statistics about the number of purchases that users make after clicking on a Google AdWords advertisement.
Your options for objection: You can set your browser so that it blocks cookies originating from googleadservices.com or from third parties in general. You can also delete the Google conversion cookie “Conversion” in your browser’s cookie settings.
Use of Google Doubleclick
This website also uses Google Remarketing based on Doubleclick from Google Inc. for placing interest-based advertising. Identifying the displayed pages and the allocation of advertisements is based on a pseudonymised ID number in the Doubleclick cookie. The information about displayed pages generated by this cookie is forwarded to Google's server for evaluation and storage. The legal basis for this is Art. 6 (1) (f) GDPR.
Your options for objection:
Integration of Google Maps
Our websites make use of Google Maps from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the purposes of displaying timetables and locations. We forward your IP address to Google so that maps can be displayed.
The legal basis for this is Article 6.1b) of the GDPR.
The relevant privacy statement is available at:
Google processes your personal data at different locations, including the USA, and the company is subject to the EU-US Privacy Shield agreement: https://www.privacyshield.gov/EU-US-Framework
You can alter the data protection settings as required at https://policies.google.com/technologies/product-privacy?hl=en.
Our pages contain plugins from social networks that you can use to recommend our pages. With this, we give you the possibility to interact with social networks and other users, meaning that we can improve our offer and make it more interesting for you as a user.
By clicking the plugins, you will be redirected to the relevant social network. The social network is responsible for the flow of data that results at this point. As the provider of www.wir-entdecken-bayern.de, we have no knowledge of the content of the data processed by the social network and the processing operation.
The legal basis for use of the plugin is Article 6 (1) (f) GDPR.
What happens with links to external pages?
If you click on a link to an external page, you will be redirected outside of the pages of DB Regio AG. As a result, it is not responsible for the content, services or products available via this external website. Similarly, it is not responsible for your privacy or the technical security when you are on this external website.
Last updated August 2019