Privacy Policy

Article: Privacy Policy

We welcome you to our web pages and would like to explain to you whether and when your personal data is collected and processed.The following data protection notice gives you an overview of how we collect and process your data.

We welcome you to our web pages and would like to explain to you whether and when your personal data is collected and processed.

The following data protection notice gives you an overview of how we collect and process your data.

Who is responsible for data processing?


The DB Regio AG collects and processes your data as the responsible body.


The appointed privacy officer is Ms. Chris Newiger. If you have any questions or comments about data privacy on ideenzug.deutschebahn.com, please contact us at the following address:

DB Regio AG
Marketing-Bestellerkommunikation
Stephensonstraße 1
60326 Frankfurt am Main

E-Mail: datenschutz.regio@deutschebahn.com

What data do we collect, and why do we process your data?

Purposes for which personal data is processed at ideenzug.deutschebahn.com

We collect and process your data only for specific purposes, which can be due to technical reasons, contractual requirements or explicit user requests

When you visit www1.deutschebahn.com/regiotec, certain data must be collected and saved for technical reasons (the date and the duration of your visit, the web pages used, identification data of the browser and operating system type used and the website from which you visit us).

Legal basis for data processing

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the General Data Protection Regulation (GDPR), as the legal basis to perform such processing operations.

When personal data is processed that is required to fulfill a contract agreed with you, the legal basis, in accordance with point (b) of Article 6 (1) of the GDPR, is the contract. Point (b) of Article 6 (1) of the GDPR also applies to processing operations that are required to carry out precontractual measures, for example, in the case inquiries about our products or services.

If our company must process personal data to comply with legal obligations, for example, to fulfill tax obligations, the data is processed on the basis of point (c) of Article 6 (1) of the GDPR.

Is data passed on?

Implementation of a contract normally requires the involvement of instruction-dependent data processors such as data center operators, printing or shipping service providers or other parties involved in fulfilling the contract.

External service providers that process data on our behalf are carefully selected by us and strictly bound by contract. The service providers work as instructed by us, which is ensured through strict contractual provisions, technical and organizational measures and additional checks.

Your data is otherwise transmitted only if you have given us your explicit consent or if this is required by law.

The data is not transferred to third-party states outside the EU/EEA or to an international organization unless adequate guarantees are in place. These include standard contractual clauses of the EU as well as adequacy decisions of the European Commission.

When will your data be deleted?

We save your data only for as long as it is required for fulfilling the purpose for which it was collected (for example, within a contractual relationship) or as required by law. As part of a contractual relationship, we save your data at least until the contract has been fully fulfilled. The data is then stored for the duration of legal retention periods.

What is a cookie?

Cookies are small text files in which personal data can be saved. When a page is accessed, cookies can be sent to this page to enable the user to be identified. Cookies make it easier for users to use web pages. 

We distinguish between cookies that are strictly required and cookies that are not necessarily required in order for the website to function from a technical perspective.

We want to give you the option of making an informed decision to accept or refuse the use of cookies that are not necessarily required for the website's technical functions. Please note that the advertising you receive will be less tailored to your interests if you refuse cookies that are used for advertising purposes. However, use of the website is still possible to the full extent.

We would like to inform you here about how and to what extent which cookies are used on our web pages:

The use of www1.deutschebahn.com/regiotec is generally possible without cookies that do not serve a technical purpose. This means that you can configure your browser to prevent traceability via cookies, that is, refuse the saving of third-party cookies.

We also recommend that you regularly check which cookies are stored, provided that you have not expressly requested these.

Important note: If all cookies are deleted, any opt-out cookies set are also deleted, which means any objections declared need to be exercised again.

Matomo (formerly Piwik)

We use the Matomo analytics platform (formerly Piwik) on our website in order to analyze the use of our website and regularly improve it. We can apply the statistics obtained to improve our products and design them to be more interesting to you, as a user. By means of small text files (cookies), information about how you use our website is saved, including your IP address. This data is anonymized and saved on our servers.

The legal basis for the use of Matamo is point (f) of Article 6 (1) of the GDPR.

Your deactivation options: If you oppose to the analysis of your user behavior, you can configure your browser at any time to refuse the setting of analysis cookies. You can also decide here whether your browser is allowed to store a unique web analysis cookie to enable the website operator to record and analyze various statistical data. If you want to oppose, click the following link to store the Piwik deactivation cookie in your browser.

Please note: If you delete all of your cookies, the deactivation cookie is also deleted. This means that you would have to refuse analysis of your user behavior again.

What rights do users of ideenzug.deutschebahn.com have?
  • You can demand information regarding which data relating to you is stored.
  • You can demand that your personal data be corrected, deleted and blocked, as long as this is permitted by law and within the framework of an existing contractual relationship.
  • You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstrasse 219, 10969 Berlin, Germany; e-mail: mailbox@datenschutz-berlin.de
  • You have the right to transferability of the data that you have provided to us by consent or on the basis of a contract (right to data portability).
  • If you have given us your consent for data processing, you can withdraw this consent at any time in the same way as you gave it. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
  • You have the right to object, on grounds relating to your particular situation, to the processing of personal data if the data is processed based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.
  • If we process your data for the purpose of direct advertising, you may object to this promotional approach at any time with future effect.

To exercise your rights, send a letter by post to:

DB Regio AG
Marketing-Bestellerkommunikation
Stephensonstraße 1
60326 Frankfurt am Main

Alternatively, you can send an e-mail to: datenschutz.regio@deutschebahn.com.

Updating with new functionalities

If functionalities or legal situations change, we shall adjust the data protection notice. For this reason, we recommend that you read the data protection notice at regular intervals. If your consent is required or if parts of the data protection notice contain provisions of the contractual relationship with you, these changes shall be made only with your approval.

Last modified: May 2018

Chris Newiger

Konzerndatenschutzbeauftragte

Deutsche Bahn AG
Konzerndatenschutz

Potsdamer Platz 2
10785 Berlin