It is possible to use our web pages without providing personal data. However, if you wish to use certain services from our company via our website, or if you book a journey via our website, it may be necessary to process personal data. If it is necessary to process personal data, and if there is no legal basis for this processing (e.g. performance of a contractual agreement), we ask you to give your consent.

This information informs you about what data we collect from you, how we use it and how you can opt out of the use of this data.

Who is responsible for data collection and processing?
Deutsche Bahn AG collects and processes your data as the controller. Dr. Marein Müller is the appointed privacy officer.

If you have any questions or suggestions regarding data privacy on, please contact:

Deutsche Bahn AG
Sustainability & Environment
Potsdamer Straße 8
10785 Berlin


If you have any questions or suggestions regarding data protection, please contact us at the following e-mail address:

What data do we collect, and how and why do we process your data? 
We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or requests on the part of users.

For technical reasons, certain data has to be collected and stored when users visit, such as the date and duration of your visit, the web pages you used, the identification data of the browser and type of operation system used and the website from which you came to visit us.

Purposes for which personal data is collected:

1. Traffic data management
To fulfill a contract, we require personal data from you. This applies in particular to the information provided by Traffic Data Management at: or To initiate an order with Traffic Data Management, we record your contact, delivery and billing details. No order will be created unless you provide this information. All other information is optional. We store your order details so that we can handle queries and billing.

2. Newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about the Green Transformation of Deutsche Bahn. To receive the newsletter, you only need to provide your e-mail address.

We use the double opt-in procedure for sending the newsletter. This means that we will not send you an e-mail newsletter until you have explicitly confirmed that you consent to receive the newsletter. For this purpose, we will send you an e-mail asking you to click a link to confirm that you wish to receive our newsletter in future. The legal basis for the data processing carried out by us for this purpose is Art. 6 (1) a) GDPR.

When you register for the newsletter, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration so we can trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used exclusively to provide information about our services via the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by e-mailing us ( If you unsubscribe, your e-mail address will be deleted from our newsletter distribution list immediately.

Our e-mail newsletter is distributed via the service provider

CleverReach GmbH & Co. KG ("CleverReach")
Mühlenstr. 43
26180 Rastede

The data you provide when registering for the newsletter is shared with CleverReach for the purpose of sending the newsletter.

A contract governing the commissioned processing of personal data is in place with CleverReach. All external service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. CleverReach works solely in accordance with our instructions, and this is ensured through strict contractual provisions, technical and organizational measures and supplementary monitoring.

The data you provide for the purpose of receiving the newsletter will be stored on CleverReach's servers in Germany and/or Ireland.

CleverReach uses this information on our behalf to send the newsletters and generate statistics relating to the newsletters. For analysis purposes, the e-mails sent contain web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of conversion tracking, it can also be analyzed whether a predefined action takes place after the user clicks on the link in the newsletter. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). The data is collected solely in pseudonymized form and is not linked to your other personal data, meaning that it cannot be traced back to you directly. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the recipients' interests.

If you wish to object to data analysis for statistical evaluation, you must unsubscribe from the newsletter.

You can read more about CleverReach's data analysis here:

You can view CleverReach's privacy policy here:

Legal basis for data processing
If we request and receive your consent to process your personal data, this consent constitutes the legal basis for these data processing operations, in accordance with Article 6 (1) a) GDPR.

Where the processing of personal data is necessary for the performance of a contract with you, the contract provides the legal basis under Article 6 (1) b) GDPR. Article 6 (1) b) GDPR also applies to processing operations that are necessary for carrying out precontractual measures, such as in the case of inquiries about our products and services.

Where our company is under a legal obligation that requires us to process personal data, such as for example to comply with tax obligations, this processing is based on Art. 6 (1) c) GDPR.

We store and analyze user data from online activities on a pseudonym basis so that we can continually improve our offering. The legal basis for this is Art. 6 (1) f) GDPR. For more information, see "When are cookies used?"

Do we share your data with other parties?
To implement contracts, it is usually necessary to use data processors who act on our instructions, such as data center operators, providers of printing or shipping services and other external service providers involved in fulfilling the contract.

External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. The service providers follow our instructions, and this is ensured through strict contractual provisions, technical and organizational measures and additional monitoring.

Furthermore, we will only pass on your data if you have provided your express consent or if we are required to do so by a statutory provision. Your data will not be transferred to third countries outside the EU or EEA or to an international organization unless appropriate safeguards are in place. These include the EU standard contractual clauses or an adequacy decision from the European Commission.  

The service providers follow the instructions of Deutsche Bahn AG, and this is ensured through strict contractual provisions, technical and organizational measures and additional monitoring. These external service providers therefore do not count as third parties under data protection law.

How long will my data be stored?
We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) or to comply with legal requirements. For example, when there is a contractual relationship, we store your data at least until such time as the contract is fully terminated. Thereafter, the data is stored for the duration of the statutory retention periods.

What are my rights as a user of

  • You can request information as to what personal data is stored about you.
  • You can request the correction, erasure and restriction of processing (blocking) of your personal data, provided these actions are permitted by law and in compliance with existing contractual conditions.
  • You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Bahn AG is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, Germany, e-mail:
  • You have the right to portability of data that you have provided to us based on a declaration of consent or a contract (data portability).
  • If you have consented to data processing, you can withdraw this consent at any time using the same method you used to grant it. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.

To exercise your rights, simply contact us at the following address:

Deutsche Bahn AG
Potsdamer Straße 8
10785 Berlin

Alternatively, send an e-mail to

What happens with links to external websites?
By clicking a link to an external website, you leave Deutsche Bahn AG is not responsible for the content, services or products offered by or the data protection and technical security on the linked website.

When are cookies used?
We use cookies on our website for functional security, measurement and analysis purposes. Cookies are small text files in which data can be stored on your end device.

We differentiate between cookies that are required for the technical functions of the website and cookies that are not absolutely necessary for the technical function of the website, such as range measurement. Some of these cookies are automatically deleted or become invalid at the end of the browser session (so-called session cookies).

The use of is generally possible without cookies that do not serve technically necessary purposes. You can therefore prevent tracking by cookies in your browser (do-not-track, tracking protection list) or prohibit the storage of third-party cookies. We also recommend that you check the stored cookies regularly, unless you have expressly requested this.

We also recommend that you check the stored cookies regularly, unless you have expressly requested this.

We are interested in giving you a wide variety of information across media formats. We therefore incorporate YouTube videos in our website (YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA). The legal basis for this is Art. 6 (1) f) GDPR.

Videos are incorporated in no-cookie mode. When you visit the website, YouTube sets a technical session cookie that enables the technical display of the video on our site. Cookies and pixel tags for personalizing advertising and search results are not set by YouTube until you start playing a video. When you play a video, the following data is transmitted to Google as the operator of YouTube:

  • IP address
  • Specific address of the page you accessed on our website
  • Transmitted browser ID
  • Date and time the page was called up
  • System date and time of access, existing cookies through which your browser can be uniquely identified.

Google is exclusively responsible for this data processing as the operator of YouTube. We have no knowledge of, or control over, which data is processed. You can find further information in the link below. Please also note that Google may receive further data via cookies that have already been stored on your browser. We have no control over the extent to which Google may use this data. You can find a link to YouTube's privacy policy at the bottom of this page.

Viewer for 3D content
Certain information on our website can also be displayed as a 3D visualization if you expressly request this and your mobile device is AR-capable (AR: augmented reality). To enable this, we incorporate the standard web component Model Viewer on this website.

This is incorporated as a local library and is therefore part of this website (no external component accessed externally). The component itself does not collect or process any personal data or set cookies or similar files.

If your device is AR-capable, an app pre-installed in your device's operating system (Android, iOS) will be launched to display the content. We have no influence on or responsibility for the data processing of this app. We will notify you when you leave the protected area of this website so that you can make an informed decision before proceeding.

In this context, please also read the data protection statements of the responsible parties, to which you will find links at the bottom of the page.

Analysis of the data by Deutsche Bahn AG
Further information on data processing in the context of the analysis for which Deutsche Bahn AG is responsible and the relevant settings options can be found under "Analyse verwalten" at the bottom of this website.

Updates to our privacy statement
We update our privacy statement whenever there are changes to functions or to the legal situation. We therefore recommend that you review the privacy statement regularly. If your approval is required, or if parts of the privacy statement include provisions regarding the contractual relationship with you, the changes are made only with your consent.

Last modified: February 2024