Data protection notice for myrailportal.dbcargo.com
Data protection notice
The use of our web pages without providing personal data is possible as a general rule. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data. If processing personal data is required and there is no legal basis for such processing (for example, carrying out a contractual agreement), we must ask for your consent.
In this notice, we will inform you about what data we collect on you, how we use it and how you can raise an objection to the use of the data.
Who is responsible for data collection and processing?
DB Cargo AG is responsible for the collection and processing of your data. Ms. Chris Newiger has been appointed data privacy officer.
If you have questions, suggestions and/or criticism of the data protection instructions with respect to myrailportal.dbcargo.com, please contact:
DB Cargo AG
60549 Frankfurt am Main
When does DB Cargo collect and process personal data?
We collect and process your data exclusively for specific purposes. These purposes can result from technical needs, contractual requirements or express wishes of users.
For technical reasons, certain data must be collected and saved when you visit myrailportal.dbcargo.com.
These include the date and the session duration, the detection data of the browser and operating system used, as well as the website from which you visit us.
For contractual reasons, we also need your personal data (e.g. contact details) in order to perform our services and to fulfil the contractual obligations that we have agreed with you.
If you contact us, we will process the personal data you have provided in the course of our correspondence with you.
Login / Customer Account
If you register for a customer account, you give us the following personal data:
Last name, first name, company, telephone number, e-mail address
We use these data without your special consent exclusively for the purpose of performing and handling the contractual relationship with you unless you have consented expressly to the further use of your data. You can also delete your account at any time.
If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with of Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations. If we process personal data that is required to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.
If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.
We are continually improving our offering by saving and analysing user data from online on a pseudo-anonymised basis. The legal basis for this is point (f) of Article 6(1) of the GDPR.
Are data forwarded?
For the purpose of performing a contract, we generally need to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.
The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.
Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.
Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the EU Commission.
How long will my data be saved?
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (for example, in the context of a contractual relationship), or to comply with statutory requirements. Therefore, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data shall then be retained for the duration of the legal retention periods.
What are the rights of users of myrailportal.dbcargo.com?
You can request information as to what personal data is stored.
You can request that we correct, delete or restrict the processing of (block) your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
You have the right to lodge a complaint with a data protection supervisory authority. The factually and locally responsible data protection authority for DB Cargo AG is:
The state representative for data protection and freedom of information for Rhineland Palatinate
Hintere Bleiche 34
PO Box 30 40
You have the right to transfer those data that you have provided us based on an agreement or a contract (data transferability).
If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on our overriding legitimate interest or is necessary for the performance of a task carried out in the public interest.
For the execution of your rights, submit a letter by post to:
DB Cargo AG
60549 Frankfurt am Main
Do we encrypt data?
Generally, data and e-mails transmitted via the internet are not encrypted and thus not protected against unauthorised access. Since we cannot guarantee the confidentiality of your data while the e-mail is being transmitted to us, we recommend that you only send confidential information to us by post.
What happens in the case of links to external websites?
When you click a link to an external website, you are forwarded to a page outside of the DB Cargo AG website.
As a result, DB Cargo AG is not responsible for the content, services or products available via this external website. Similarly, DB Cargo AG is not responsible for your data privacy or technical safety when you are on this external website.
When are cookies used?
Cookies are small text files used to store personal data. Cookies can be sent to this website when it is called, allowing the user to be identified. Cookies help users to use internet sites more easily.
We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory for the technical functions of the website.
We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.
This is a notification of how and in what manner cookies are used on our sites:
It is generally possible to use myrailportal.dbcargo.com without cookies that serve non-technical purposes. This means that you can prevent browser tracking from cookies (do not track, tracking protection list) or prevent third-party cookies from being saved. In addition, we recommend checking the saved cookies regularly if they are not expressly desired.
Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.
We amend the data privacy notice to reflect changes to functionalities or changes to the legal situation. We therefore recommend that you review the data privacy notice at regular intervals. If your consent is required or parts of the data privacy notice are contained within rules of the contractual relationship, changes will be made only with your consent.
Last update of the data privacy notice: June 2018