Responsible body
The entity responsible for processing your personal data within the meaning of data protection law is
eurobahn GmbH & Co. KG
Immermannstraße 65b, 40210 Düsseldorf
Tel.: 00800 387 622 46* (00800-eurobahn)
*Calls from the mobile phone network may incur charges in / from abroad (costs depend on your mobile phone provider). In some countries, connection fees are charged for freecall numbers.
Internet: www.eurobahn.de
Düsseldorf Local Court HRA 23290
Personally liable partner: eurobahn Verwaltungsgesellschaft mbH
Registered office: Düsseldorf
Düsseldorf Local Court HRB 74254
Chairwoman Managing Director: Anne Mathieu
Technical Managing Director: Karsten Schulz
VAT ID No.: DE814708606
Privacy policy
Status: 01.04.2023Data processing when visiting the website
When you visit our website, we collect data about every access to the server on which this service is located on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the website visited previously, IP address and the requesting provider).
Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum period of seven days and then deleted. Data whose further storage is required for evidentiary purposes will remain stored until the respective incident has been finally clarified.
Website analysis and online marketing
eurobahn uses various analysis services and online marketing tools that process personal data to varying degrees and for different purposes. We also integrate third-party services into our website. If your consent is required for individual processing operations, you can give us this consent each time you visit the website via the Consent Bar displayed. We use the Usercentrics Consent Management Platform to manage your consents and objections.
Special features on the eurobahnland.de website
We use various technologies on the eurobahnland.de website to optimise the user experience. These technologies are only used if you consent to their use. The legal basis for this is Art. 6 para. 1 lit. a) GDPR.
Google Analytics:
The eurobahnland.de website uses Google Analytics, an analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymisation is active on this website. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:
tools.google.com/dlpage/gaoptout
Use of Google AdSense:
The eurobahnland.de website uses Google AdSense, an online advertising service provided by Google Inc ("Google"). Google AdSense uses so-called "cookies", text files which are stored on the user's computer and which enable the use of the website to be analysed. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyse information such as visitor traffic on the pages of this website. The information generated by cookies and web beacons about the use of this website (including the user's IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.
Use of Facebook Pixel:
We use the "conversion pixel" or visitor action pixel of Meta Platforms Ins. (Facebook), 1 Hacker Way, Menlo Park, CA 94025, USA. By calling up this pixel from your browser, Facebook can subsequently recognise whether a Facebook ad was successful, e.g. whether it led to an online purchase. We only receive statistical data from Facebook for this purpose without reference to a specific person. This allows us to record the effectiveness of Facebook adverts for statistical and market research purposes. In particular, if you are logged in to Facebook, we refer you to their data protection information https://www.facebook.com/privacy/explanation/.
If you wish to revoke your consent to the Conversion Pixel within Facebook, you can do so at https://www.facebook.com/settings/cookie.
Data security during transmission
The personal data processed when you visit the website, including the data in website forms, is transmitted to the eurobahn servers via the Internet. The transmission is protected. eurobahn uses the SSL/TLS transport protocol for this purpose. Email notifications sent from our servers are sent using STARTTLS encryption. Your data is thus protected against unauthorised access during transport in accordance with the current state of the art.
Your rights
You can obtain information about the personal data stored about you. In addition, you have a right to erasure and rectification of your data, to restriction of processing or to data portability of data provided under the legally defined conditions (Art. 17-21 GDPR).
Right of cancellation: If the data processing is based on your consent, you can revoke this consent at any time with effect for the future.
If data processing is based on a legitimate interest of eurobahn, you can object to this processing for reasons arising from your particular situation. eurobahn will then only continue to process your personal data if there are demonstrably compelling reasons worthy of protection that outweigh your interests, rights and freedoms or if the processing serves the assertion, exercise or defence of legal claims.
To exercise your rights, please contact our external data protection officer directly. You can reach him at dsb(at)eurobahn.de or by post at eurobahn GmbH & Co KG, Immermannstr. 65b, 40210 Düsseldorf with the addition "the Data Protection Officer". Submit your request in text form (in writing, by email) using the contact details provided.
You also have the right to lodge a complaint with the data protection supervisory authority. The competent supervisory authority for eurobahn is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, telephone: 0211/38424-0, fax: 0211/38424-10, e-mail: poststelle(at)ldi.nrw.de, homepage: http://www.ldi.nrw.de.
Processing of personal data outside the website
In addition to data processing when you visit our website, eurobahn processes your personal data in the following cases:Video surveillance on the train
Our trains are video-monitored. The image data is processed on the basis of Art. 6 (1) (f) GDPR in the legitimate interest of eurobahn in the prevention, investigation and prosecution of criminal offences to protect the rights, personal safety and property of our customers, our company and its employees as well as the public, and also to enforce claims for damages and claims by eurobahn in the event of violations of the conditions of carriage.
All cameras are visibly installed; there is no covert video surveillance. There is no live monitoring by train drivers. The monitored areas are stored on video servers on the train and are only read out by authorised personnel in the event of specific suspicion.
The image data is automatically deleted after 72 hours, unless there is a concrete suspicion or incident. In this case, a backup copy of the respective recording sequence is made for evidentiary purposes and used to prosecute the suspected case and, if necessary, transmitted to law enforcement authorities. If video recordings are stored as evidence at eurobahn, they will be deleted as soon as the intended purpose has been achieved.
Ticket, payment, increased fare
E-ticket check
If you are travelling with an e-ticket, this ticket is read electronically by our customer advisors to check the geographical and temporal validity of the electronic ticket. During the check, the status, reason for invalid ticket, ticket type, ticket type, zone/honeycomb validity, name of the ticket holder and any carriage regulations are read out. This data is not stored unless the ticket is invalid.
Sale of tickets with credit card payment
If you wish to pay for your ticket by credit card, your personal data will be processed by the payment service provider B+S Card Service / PAYONE as the data controller under data protection law. Your credit card number, amount, time and place of purchase, time and place of the route purchased as well as your personal master data and address data are processed. eurobahn has no knowledge of this data.
Billing of increased transport charges
If it is established during a ticket inspection that you cannot present a valid ticket or that the ticket has not been validated or has not been validated immediately, an increased transport charge (EBE) must be paid in accordance with the conditions of carriage. In accordance with Art. 6 Para. 1 lit. f) GDPR, we collect your contact and communication data, as well as your master data and information on the train used and the period of use. This information is transmitted to a data protection-compliant debt collection company. Your data will be deleted 10 years after completion of the procedure.
Data protection information Mobility Guarantee NRW
In order to be reimbursed for costs incurred due to delays of our eurobahn trains for the use of alternative means of transport, you can use our online reimbursement form in addition to the postal reimbursement application. If you submit an application for reimbursement online via our website as part of the NRW Mobility Guarantee, we collect and process personal data about the applicant such as name, address and contact details as well as bank details for the account to which any reimbursement amounts are to be transferred.
In addition, we also collect and process information about your ticket, including electronic receipts (e.g. in the form of photographs of the ticket uploaded by you) and information about the case for which you wish to claim the NRW Mobility Guarantee. The contact details you provide will be used for any queries and for communication in connection with your application. The provision of this data is necessary for the processing of your application; the processing by eurobahn is based on Art. 6 para. 1 lit. a) GDPR.
Your data will be forwarded internally to the employees responsible for processing refund applications. Your data will not be forwarded to third parties unless one of the conditions described under "Data transfer to third parties" applies.
As a rule, your personal data will be deleted 24 months after processing has been completed; payment-related data will be stored for a further 10 years for tax law reasons.
Lost property
If you have forgotten or lost something on one of our trains, you can report it online under "Lost property". We have commissioned the lost property service of Deutsche Bahn AG to manage eurobahn lost property. If you click on the button "To the Deutsche Bahn lost property service", you will leave the eurobahn website.
eurobahn is not responsible for the content, services and products offered on the Deutsche Bahn website, nor for data protection and technical security. DB InfraGO AG, based in Frankfurt am Main, is responsible for processing your personal data (information on data protection: https://db.novafind.eu/home/db/db/app/dataprotection).
Customer dialogue
Service hotline
If you contact us by telephone via the service hotline, we will only collect the data required to process your enquiry on the basis of Art. 6 para. 1 lit. b) GDPR. The scope of the data collection depends on your respective request, but as a minimum we collect your surname, first name, telephone number and the respective facts. Your data will be forwarded to the eurobahn employee responsible for processing your request. Your data will not be forwarded to third parties unless one of the conditions for forwarding to third parties described above applies. As a rule, your personal data will be deleted 24 months after processing has been completed.
Contact form
If you use a form offered by us online and provide us with personal data or contact us by e-mail, we will process your data exclusively for the purpose stated in the respective form or for processing your request (Art. 6 para. 1 lit. b) GDPR. Your data will not be passed on to third parties. Your data will only be used for advertising purposes with your express consent (Art. 6 para. 1 lit. a) GDPR).
Career portal
When you use our career portal, we collect information that is necessary for the assessment and processing of your application. You can find specific information on the scope of processing when using our application portal here.
Data transfer to third parties
Personal data will be passed on to third parties by eurobahn under the following conditions:
To service providers integrated on the basis of Art. 28 GDPR in compliance with data protection regulations, which eurobahn may commission for the provision of services.
If this becomes necessary due to court orders or other orders from government or law enforcement authorities in order to fulfil legal requirements (Art. 6 para. 1 lit. c) GDPR);
In connection with a corporate event, such as a merger, transfer, reorganisation or sale of all or part of eurobahn's business (including that of a unit or subsidiary), in connection with which eurobahn is obliged to disclose information to a potential buyer and its professional advisors (Art. 6 para. 1 lit. f) GDPR),
In the event of assaults on our staff or vandalism, we collect information on the identity and address of the passenger and the relevant facts. This data is processed to enforce recourse claims by our employees or eurobahn on the basis of Art. 6 para. 1 lit. f) GDPR and, if necessary, transmitted to third parties. The data will be deleted 10 years after the conclusion of the respective proceedings.
To enforce or defend against our contractual claims or to investigate potentially unlawful activities (Art. 6 para. 1 lit. f) GDPR).
Transfer to recipients outside the European Economic Area:
Some service providers are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, eurobahn only transfers data to countries for which the EU Commission has decided that they have an adequate level of data protection. Alternatively, eurobahn takes measures prescribed by data protection law to ensure that all recipients achieve an adequate level of data protection. To this end, eurobahn concludes so-called standard contractual clauses (2010/87/EC and/or 2004/915/EC).
Facebook page of eurobahn
Facebook Ireland Ltd ("Facebook"), 4 Grand Canal Square, Grand Canal Habour, Dublin 2, Ireland and eurobahn are jointly responsible under data protection law for the operation of our Facebook page (so-called fan page), whereby Facebook bears primary responsibility for fulfilling the information obligations and ensuring the technical and organisational measures in accordance with the existing agreement.
The full agreement on joint responsibility between Facebook and eurobahn can be viewed at https://www.facebook.com/legal/terms/page_controller_addendum.
Processing of personal data by eurobahn:
eurobahn is the data controller under data protection law for the data collected in the context of promotional campaigns, applications or when leaving comments or other contributions on our pages. If you as a visitor to our fan pages leave comments, likes and other contributions on this page, this data will be permanently published on our Facebook page. eurobahn uses the data in accordance with Art. 6 para. 1 lit. f) GDPR exclusively to contact you via Facebook if necessary in our interest and to respond to your requests, suggestions or criticisms. If you apply for a job advert published on our fan page, we will use your data to carry out the application process in accordance with Art. 6 Para. 1 lit. b) GDPR in conjunction with Section 26 BDSG. If you give us your consent to use your personal data for a specific purpose via our Facebook fan page, you can revoke this consent at any time at: dsb(at)eurobahn.de
You do not need to be a Facebook member to view the content of our Facebook fan page. However, we would like to point out that every time you visit our Facebook page, personal data is collected and processed by Facebook itself. eurobahn has no influence on this data collection and processing; Facebook is responsible for this under data protection law.
Processing of personal data by Facebook:
As soon as you visit our Facebook page, your browser establishes a connection with Facebook and transmits information. Facebook uses this data and data about your interaction with our Facebook web pages at least to create personalised advertising, to create user profiles and for market research. Information about what information is collected by Facebook can be found in Facebook's privacy policy, which can be viewed at https://www.facebook.com/privacy/explanation.
Facebook uses cookies to store and further process this information, which are stored on the user's various end devices. If you are logged in to Facebook when you visit our Facebook page, Facebook can link your visit to this page with your personal Facebook user account and also store and analyse your activities across devices.
You can object to the processing of your personal data by Facebook (so-called opt-out) here: www.facebook.com/settings and here www.youronlinechoices.com.
The transfer to third countries, such as the USA, and further processing of users' personal data by Facebook as well as the associated potential risks for users cannot be excluded by eurobahn as the operator of the pages.
Joint processing of personal data for statistical purposes (Insights):
eurobahn can access statistical data of various categories via the so-called "Insights" on our Facebook pages. In our own interest in accordance with Art. 6 (1f) GDPR, we use Insights to obtain statistical information about the use of our site. This information enables us to record the reach and effectiveness of campaigns, postings and other activities by means of processed statistics and, on this basis, to continuously optimise our Facebook pages in line with requirements. You can also find detailed information about Facebook Insights at https://www.facebook.com/business/a/page/page-insights.
YouTube channel of eurobahn
eurobahn operates a channel on the YouTube platform. This belongs to the US company Google. When you visit YouTube, Google LLC ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube, stores and processes personal data in accordance with Google's privacy policy, which you can find here. The categories of personal data depend on your user behaviour in the specific individual case and can range from metadata (e.g. IP address) to user data (name of your account) to image files (thumbnail photo of your account)
eurobahn itself only processes your data to a limited extent during your visit. This may be the case if you contact us with messages or comments. We may also delete such comments or store them for evidence purposes.
The legal basis for data processing by eurobahn is Art. 6 para. 1 lit. f) GDPR: Legitimate interest. This lies in the operation and content management of the channel and, if necessary, the preservation of evidence and the pursuit of legal claims.
Your data will be deleted as soon as the purpose of the processing has been achieved.