. .

Data protection

Data protection principles

At DB, we see data protection and privacy as a hallmark of the quality service we wish to deliver to our customers.

The use of our web pages without providing personal data is possible as a general rule. However, if you want to use special services provided by our establishment via our web page, it may be necessary to process personal data. If processing personal data is required and there is no legal basis for such processing (for example, carrying out a contractual agreement, we must ask for your consent.

In this notice, we will inform you about what data we collect on you, how we use it and how you can raise an objection to the use of the data.


Who is responsible for collecting and processing my data?

Deutsche Bahn Stiftung gGmbH, Bellevuestrasse 3, 10785 Berlin collects and processes your data as data controller.

Ms Chris Newiger has been appointed data privacy officer.

If you have any questions or comments on data privacy on www.dbmuseum.de, please contact us:

Deutsche Bahn Stiftung gGmbH

Bellevuestraße 3

10785 Berlin

E-mail: info@deutschebahnstiftung.de


What data do we collect and how and why do we process your data?

We collect and process your data exclusively for specific purposes. This may include technical requirements, contractual requirements or express user requests.

For technical reasons, we must collect and store specific data when you visit www.dbmuseum.de. These data include, for example, the date and duration of your visit, the web pages you used, the identification data of the browser and operating system type in use and the website from which you came to visit us.

To fulfil a contract, you must provide personal data to us. These data are required to book tickets, settle payments, check creditworthiness, make a postal delivery if necessary to the specified address and to perform reversals and reimbursements.

Specifically, this affects the following:


Contact form:

Our goal is to make it easy for you to contact us. If you write us a message using our contact form, we collect the following personal data as mandatory information:

- First name and last name

- E-mail address

In addition, you have the option to provide the following personal information:

- Street, house number

- Postal code

- City

- Country

- Telephone number

The legal basis is Art. 6 (1) (f) of the General Data Protection Regulation (GDPR).


Newsletter:

If you register for our newsletter, provision of your e-mail address is mandatory.

In this case, you are allowing us to use your e-mail address for advertising purposes.

When you register for the newsletter, we save the IP address from the computer system in use provided by your internet service provider (ISP) at the time of registration, and the date and time of registration. The collection of these data is mandatory to detect (potential) misuse of the e-mail address of an affected person at a later point in time and therefore provides us with a legal safeguard.

The legal basis of the newsletter is your consent in accordance with Art. 6 (1) (f) of the GDPR.

You can retract your consent at any time by unsubscribing from the newsletter via info@dbmuseum.de or by clicking the unsubscribe link at the bottom of the newsletter.

If you object to the use of your data for advertising purposes, your data will be anonymised for use in statistical evaluations only.


Fan pages on social networks

We have our own presence on various social media platforms. Our objective is to provide you with a broad, multimedia offering and to interact with you on issues that are important to you. In addition to the respective provider of a given social network platform, we collect and process personal user data on our fan pages. In this notice, we will inform you about what data we collect from you on each social media platform, how we use it and how you can raise an objection to the use of the data. Please see each offering, detailed in the following, for the respective purposes of data processing and data categories. The activities that we operate, detailed in the following, on social media platforms are carried out on the basis of interests considered according to Art. 6 (1) (f) of the GDPR.


Facebook

We present our company on Facebook via the channel of www.facebook.com/dbmuseum.


If you visit our fan page, Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, collects, saves and processes your personal data in accordance with its Data Policy. This Data Policy can be found here: https://en-gb.facebook.com/policy.php


We additionally process your data within a very limited scope:

For the purpose of appropriate design and continuous optimisation of our webpages, we utilise Facebook Insights, a statistics service. This service records your activities on our webpage and provides this data to us in the form of anonymous statistics. This service provides us with insights into, among other things, the activity of the fans who visit us, calls of our pages, the coverage of posts, calls and average duration of video views, information about the countries and cities where our users are from and information about gender ratios of our users. It is not possible for the administrator to derive indications about individual users or to access user profiles.


We use the advertising service Facebook Promotions for the purpose of making other users aware of our channel and to gain new followers. This service allows us to target users who are not subscribed to our channel to see a recommendation of our channel based on the interests of their target group. The groups of people may be defined based on general characteristics such as residence, age, gender, language and interests. It is not possible to select individual users.


In addition, we save the usernames and comments that are deleted due to the breach of netiquette. These are retained only within the statutory period of limitation for the purpose of providing any required evidence in the case of legal disputes.


Otherwise, we do not process your personal data on Facebook.


Instagram

On the channel under www.instagram.com/dbmuseum, we post the prettiest pictures from the museum and from museum visitors about five times per week. The purpose of this is to give users impressions of our company. The main topics are railways and railway history.


If you visit our fan page, personal data is saved and processed by Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, the operator of Instagram, in accordance with the Data Policy of Instagram. You can find this Data Policy here: https://help.instagram.com/519522125107875.


We additionally process your data within a very limited scope:

For the purpose of appropriate design and continuous optimisation of our webpages, we utilise Instagram Insights, a statistics service. This service records your activities on our webpage and provides this data to us in the form of anonymous statistics. This service provides us with insights into, among other things, the interactions of the fans who visit us, calls of our pages, the coverage of posts, information about the activity of our subscribers and information about the countries and cities where our users are from and information about gender ratios of our users. It is not possible for the administrator to derive indications about individual users or to access user profiles.


In addition, we save the usernames and comments that are deleted due to the breach of netiquette. These are retained only within the statutory period of limitation for the purpose of providing any required evidence in the case of legal disputes.


Otherwise, we do not process your personal data on Instagram.


Twitter

Our Twitter channel under www.twitter.com/dbmuseum is used for media and PR related to all topics of our company.


If you visit our channel, personal data is saved and processed by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, as the operator of Twitter, within the scope described in the Privacy Policy. You can find the Privacy Policy here: https://twitter.com/en/privacy.


Outside of this, we save and process very little of your personal data as a rule.


For the purpose of appropriate design and continuous optimisation of our webpages, we utilise Twitter Analytics, a statistics service. This service records your activities on our webpage and provides this data to us in the form of anonymous statistics. This service provides us with insights into, among other things, the activity of the fans who visit us, calls of our pages, the coverage of tweets, information about the countries and cities where our followers are from and information about gender ratios of our followers. It is not possible for the administrator to derive indications about individual users or to access user profiles.


If you send us a direct message, your username is saved.


In addition, we save the usernames and comments that are deleted due to the breach of netiquette. These are retained only within the statutory period of limitation for the purpose of providing any required evidence in the case of legal disputes.


YouTube

Our YouTube channel at www.youtube.com/dbmuseum contributes moving pictures to an environment with an individualised corporate design. The films are intended to be a visualisation of the museum and to serve as advertisements. We also respond on YouTube to questions and comments from the users.


Personal data is saved and processed by Google LLC ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA,, which operates YouTube, in accordance with the Google Privacy Policy.  This Privacy Policy can be accessed here: https://policies.google.com/privacy?hl=en&gl=en.


We additionally process your data within a very limited scope:

Where a user violates netiquette, we save the usernames and comments that are deleted due to the breach of netiquette. These are retained only within the statutory period of limitation for the purpose of providing any required evidence in the case of legal disputes.


Are data forwarded?

For contract processing, it is typically necessary to involve instruction-based data processing companies, for example data centre operators, print or dispatch service providers or other parties involved in contract fulfilment.

The external service providers who we hire to process data are carefully selected and subject to strict contractual obligations. The service providers work in accordance with the instructions we provide and this is verified by technical and organisational actions and supplementary checks.

Furthermore, transmission of your data takes place only if you have given your express approval or on the basis of a statutory requirement.

Transmission to third countries outside the EU/EEA or to an international organisation will not take place unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the EU Commission.


How long do you store my data?

We store your data only for as long as is necessary to fulfil the purpose for which the data was to collected (for example in the context of a contractual relationship), or to comply with statutory requirements. In a contractual relationship, for example, we save your data at least until the contract has been terminated fully. After this, the data are retained until expiry of the statutory retention periods.


What are my rights as a user of www.dbmuseum.de?

- You may request information on what data we store about you.

- You can request the correction, deletion and blocking of your personal data as long as this is permitted by law and possible within the scope of an existing contractual relationship.

- You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstrasse 219, 10969 Berlin, Germany; e-mail: mailbox@datenschutz-berlin.de.

- You have the right to portability of the data which you have provided to us based on a declaration of consent or a contract (data portability).

- If you grant us consent to use your data, you can withdraw it at any time using the same method you used to grant it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on our overriding legitimate interest or is necessary for the performance of a task carried out in the public interest.

You can exercise your rights by sending a letter by post to Deutsche Bahn Stiftung gGmbH, Bellevuestrasse 3, 10785 Berlin or an e-mail to info@deutschebahnstiftung.de.

Update to the data privacy notice

We adjust the data privacy notice to reflect changes to functionalities or changes to the legal situation. We therefore recommend that you review the data privacy notice at regular intervals. If your consent is required or parts of the data privacy notice are contained within rules of the contractual relationship, changes will be made only with your consent.

Version dated: 31 July 2018


When are cookies used?

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is called, allowing the user to be identified. Cookies help users to use internet sites more easily. 

We differentiate between cookie that are mandatory for the technical functions of the website and those that are not mandatory.

We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by this.

This is a notification of how and in what manner cookies are used on our sites:

Generally speaking, it is possible to use www.dbmuseum.de without cookies that serve no technical purpose. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block storage of third-party cookies. In addition, we recommend checking the saved cookies regularly if they are not expressly desired.

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

Cookies that are mandatory for the use of the site include: session cookies which provide communication to the web server.


Cookies that are not mandatory for the use of the site include: analysis cookies from Matomo (formerly Piwik).


Use of Matomo (formerly Piwik)

We use the analysis service Matomo (formerly Piwik) on our website to analyse how are website is used and to improve it regularly. The statistics we gain from this allow us to improve our offering and make it more interesting for users. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.

The legal basis of the use of Matomo is Art. 6 (1) Sentence 1 (f) of the GDPR.

Your deactivation options: If you do not consent to the analysis of your user behaviour, you can change your browser settings at any time to prevent analysis cookies from being set. In addition, you can also decide whether a unique web analysis cookie can be stored in your browser, allowing the operator of the website to record and analyse different statistical data. If you decide against this, click on the following link in order to install the Piwik deactivation cookie on your browser:

">

Please note: If you delete all your cookies, the deactivation cookie will also be deleted. This means that you will have to renew your deactivation of the analysis of user behaviour.


YouTube

We are interested in giving you a wide variety of information across media formats.

Our website www.dbmuseum.de contains integrated YouTube videos. The legal basis for this is Art. 6 (1) (f) of the GDPR.

YouTube videos are integrated in the no-cookie variant of our website. When you visit the site no data is sent to Google, the site operator of YouTube. When you play the video, Google collects your IP address for technical reasons in order to play the video. No cookies or pixel tags are set by Google, the site operator of YouTube.


Social networks

On www.dbmuseum.de, you will find links to our presences on social networks. If you click the link, you will be forwarded to the external site of the social network. This means that Deutsche Bahn Stiftung gGmbH is not responsible for any data processing that takes place there, including any cookies set by the social network.


Fan pages on social networks

On our fan pages on www.facebook.com/dbmuseum, www.instagram.com/dbmuseum, www.twitter.com/dbmuseum, www.youtube.com/dbmuseum, we notify you about upcoming promotions and provide insight into our daily events. Personal data is not processed.