Data protection

Who is responsible?

DB Cargo AG, Rheinstrasse 2, 55116 Mainz is the controller and therefore responsible for collecting and processing your data.

Ms Chris Newiger is the appointed data protection officer.

If you have any questions or ideas on data protection at https://developer.dbcargo.com, please contact:

E-mail: DB.Cargo.Datenschutz@deutschebahn.com

Legal basis for data processing

Where we obtain your consent to the processing of personal data, this serves as the legal basis under Article 6 (1) (a) GDPR.

Where we process personal data required to perform a contract we have concluded with you, the contract is the legal basis under Article 6 (1) (b) GDPR. Article 6 (1) (b) GDPR also applies to any processing required for pre-contractual measures, such as in the case of inquiries about our products or services.

Where our company is subject to a legal obligation requiring the processing of personal data, such as for meeting tax-related obligations, such processing is based on Article 6 (1) (c) GDPR.

To continuously improve our range of products and services, we store and analyse online usage data on a pseudonymised basis. The legal basis for this is Art. 6 (1) (f) GDPR.

Additionally, we are interested in maintaining a customer relationship with you and in providing you with information we think may be of interest to you. For this reason, we process your data on the basis of Article 6 (1) (f) GDPR (including with the help of service providers) to send you information. We use your contact details (last name, first name, e-mail address) to contact you for business purposes, unless you object to such use.

You can object at any time to the future use of your data for such purposes. You can inform us of your objection by sending an e-mail to DB.Cargo.Datenschutz@deutschebahn.com.

Purpose of data processing

We collect and process your data only for the following purposes.

Visiting the portal
When using the contact form
These purposes may result from technical requirements, contractual obligations or express wishes of the user.

For a better understanding, here is an example of how this data is processed:

Re 1. This data is collected and processed for the purpose of making the platform available (establishing a connection), continuously guaranteeing system security and stability, and ensuring that the network infrastructure (capacity) is properly managed from a technical point of view, thus optimising the platform.

Re 2. The operator collects and stores this data to ensure that users can be managed and the processes associated with their roles can be performed, e.g. technical information on updates.

Re 3. When a user contacts the operator by means of a contact form, this also involves the processing of personal data.

We process the following personal data:

1) When a user visits the portal, we temporarily store each access operation in a log file. This can involve the following data being collected without intervention by the user:

the anonymised IP address of the requesting computer
the date and time of access
the name and URL of the file accessed
the volume of data transferred
the message whether access was successful
information on the browser and operating system used
the URL of the website from which the file was accessed
the name of the internet access provider
This data is deleted automatically at the end of the statutory storage period.

4) How do we process your data?

We store the personal data ourselves. Personal data is used only for the above-mentioned purposes and only to the extent required to achieve those purposes. This is ensured by technical and organisational security measures that serve to protect your personal data from unintentional or wrongful destruction, loss, manipulation or disclosure, as well as unauthorised access. The security standards applied correspond to the state of the art.

For technical reasons, certain data has to be collected and saved when http://developer.dbcargo.com is visited, such as the date and duration of the visit, the web pages used, the identification data of the browser and operating system type used, and the website from which you came to visit us.

It is not technically possible to use this website unless this data is processed.

When are cookies used?

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help users to use internet sites more easily.

We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.

We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as accurately tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.

We inform you here about how and to what extent cookies are used on our site:

It is generally possible to use https://developer.dbcargo.com without cookies that do not serve a technical purpose. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block the storage of third-party cookies. In addition, we advise you to check the saved cookies regularly, unless they are expressly desired.

Please note that, if you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

Cookies that are mandatory for use of the website:

Session cookies

We use session cookies for smooth navigation. This is necessary because we provide the website across multiple servers (clusters) for load balancing and increased availability. These cookies are automatically deleted when you close your browser.

Please note that, if you delete all your cookies, you will also delete the deactivation cookie. This means that you will need to opt out of the analysis of your usage behaviour again.

Do we share your data?

The processing of contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.

The external service providers we use to process data are carefully selected and subject to strict contractual obligations. The service providers work in accordance with our instructions and this is verified by technical and organisational actions and supplementary checks.

Furthermore, transfer of your data only takes place if you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been given. These include the EU standard contractual clauses and an adequacy decision by the EU Commission.

How long do we store your data for?

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a registration process, for example) and/or to comply with legal requirements. If you cancel your registration, this data is deleted. Each user can delete their account themselves. Thereafter, the data will be stored for the statutory storage period. You are welcome to delete your own account if you do not consent to this being done by the self-service function. Please use the contact form for this purpose.

Rights of users

You can request information on what personal data is stored.

You can request us to correct, delete or restrict the processing (block) of your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.

You have the right to submit a complaint to a supervisory authority. The supervisory authority responsible for DB Cargo AG is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz.

You have the right to the portability of data you have made available to us on the basis of consent or a contract (data portability).

If you have given us consent to process your data, you can withdraw this consent at any time using the same methods you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent until the time at which you withdrew it will be considered to have been lawful.

You have the right to object, on grounds arising from your particular situation, to the processing of your personal data based on our overriding legitimate interest or where it is necessary for the performance of a task carried out in the public interest.

You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).

To exercise your rights, simply send a letter to the above-named controller or an e-mail to DB.Cargo.Datenschutz@deutschebahn.com

Updating of the data protection notice

We update the data protection notice to reflect changes in functionalities or in legal situations. For this reason, we advise you to refer to our data protection notice at regular intervals. Where your consent is required or where parts of our data protection notice contain provisions of the contract with you, the changes will take place only with your consent.

Last modified on 15 November 2019