Legal Notice: Please note that only the German version of this privacy statement is legally binding. You can access the legally binding version here.
We hereby inform you of the following: what personal information of yours we collect, how we use it and how you can withdraw consent to your data’s usage.
Overview
Who is responsible for collecting and processing?
DB InfraGO AG collects and processes your data as the responsible party.
The appointed data protection officer is Dr. Marein Müller.
If you have any questions or comments about privacy issues, please contact: Datenschutz.DBInfraGO@deutschebahn.com.
If you have any questions or suggestions, please contact:
DB InfraGO AG
(I.IPD)
Adam-Riese-Str. 11-13
60327 Frankfurt
Germany
E-mail: Kundendialog.WhatsApp@deutschebahn.com
What data do we collect? How and why do we process your data?
We collect and process your data only for the purpose of registering, processing and managing information you provide when reporting dirt and other cleanliness-related problems.
To be able to do this, MessageBird B.V. transmits your mobile phone number to us by using the messenger service WhatsApp. You can find the privacy notice of MessageBird B.V. here: messagebird.com/de/legal/privacy.
To find out how WhatsApp processes and uses your personal data, please see the service’s privacy notice: whatsapp.com/legal.
No additional personal data is necessary for the purposes named above. If you wish to provide us with personal data in a proactive and voluntary manner (for example as part of your message or when contacting us by e-mail), we will treat this information as confidential and delete it once your message or question has been dealt with.
When notifying us of dirt we would also ask you take particular care not to forward information that is clearly unnecessary for processing and handling the incident. Furthermore, do not forward information that might infringe on the rights of a third party (this means by including people in photos). We delete all such information immediately upon identification.
Data processing regulations
If we obtain your consent to process personal information, this serves as a legal basis as per Article 6.1(a) of the General Data Protection Regulation (GDPR).
Processing personal data required for fulfilling a contract with you is based on Article 6.1(b) of the GDPR. Article 6.1(b) of the GDPR also applies to processing required for performing precontractual measures, for example in connection with requests pertaining to our products or service.
If our company is required by law to process personal data, for example for meeting taxation-related requirements, the relevant processing measures are based on Art. 6.1(c) of the GDPR.
Processing arising from our legitimate interests is based on Art. 6.1(f) of the GDPR.
In the event that the vital interests of the person in question or another natural person require the processing of personal information, such processing is based on Art. 6.1(d) of the GDPR.
Is any data forwarded?
Processing notification of pollution requires the involvement of order processing specialists working under orders, for example computer centre operators or other parties involved in contract processing.
We take great care when selecting external service providers who process data on our behalf, and they adhere to our strict contractual obligations. These service providers follow our instructions. This is safeguarded by strict contractual regulations, technical and organisational measures and supplementary checks.
Your data is forwarded only if you provide us with your explicit consent or if mandated by legal provisions.
Your information is not forwarded to a third-party state outside the EU/EEA or to an international organisation unless suitable guarantees have been provided. These include standard EU contract clauses and an EU Commission decision regarding suitability.
We have commissioned DB Systel GmbH to undertake technical operational management in order to provide you with this service for reporting dirt, etc. An orders matrix is used, in particular, for establishing a sequence for incoming reports and preparing them for processing.
How long is your data stored?
We store data only while it is necessary for fulfilling the aim for which it was collected, or if such storage is mandated by law. When dirt is reported, we store your data only until the operation has been completed in full (notification of completion or information about third party’s responsibility). Your data is then deleted.
What rights do users have?
- Users can demand to know what data pertaining to them has been stored.
- They can demand the correction or deletion of their personal data, or demand that its processing be restricted (blocking), provided this is permissible by law and possible within the framework of an existing contractual relationship.
- They have the right to submit complaints to a supervisory authority. The supervisory authority responsible for DB InfraGO AG: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.
- Users have the right to transfer those data that have been provided to us on the basis of consent or a contract (data portability).
- If they have given us consent to process data, they can withdraw it using the same process by which they provided it. The withdrawal of consent does not affect the legality of data processing performed before withdrawal on the basis of the consent provided previously.
- Users may object to data processing on the basis of your particular situation if the data processing is carried out on the basis of our legitimate interests or is necessary for the performance of a public task.
- To exercise the rights, simply post a letter to the relevant office (see section on the party responsible for collecting and processing data) or send an e-mail to: Kundendialog.WhatsApp@deutschebahn.com.
Updating privacy notice
We update our privacy notice in line with changes to functions or legal regulations. We therefore recommend that you review our privacy notice at regular intervals. If your consent is necessary or if elements of the privacy notice contain provisions from a contractual relationship with you, changes will be made only with your consent.
Last modified: 01.01.2024