In accordance with Art. 13 German Data Protection Regulation (DSGVO), we are hereby briefing you on the legal basis of our data processing. Unless another lawful basis is specified in the data protection statement, the following shall apply: The lawful bases for obtaining consent are Art. 6, Sec. 1, Letter a and Art. 7, DSGVO, while the lawful basis for processing data to deliver our services and to perform contractually agreed measures as well as to answer queries is Art. 6, Sec. 1, Letter b, DSGVO, the lawful basis for meeting our legal obligations is Art. 6, Sec. 1, Letter c, DSGVO, and the lawful basis for data processing to protect our legitimate interests is Art. 6, Sec. 1, Letter f, DSGVO. In the event that the vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6, Sec. 1, Letter d, DSGVO, serves as legal basis.
The following information will give you an overview of what happens to your personal data when you visit our website adlershof-johannisthal.de. We will explain your rights in regard to these data to you and will also explain how, when and for what purpose we collect them and how we handle them.
The term “personal data” applies to any data that make it possible to personally identify you. When you use this website, your personal data will be collected to the extent necessary but kept to a minimum as much as possible (specifically: IP addresses). We treat these data confidentially in accordance with the statutory data protection regulations and this data protection statement.
We would like to point out that data transmissions on the Internet (e.g. communication by e-mail) may be subject to security gaps. A complete protection of data against third-party access is not possible.
Responsible Entity
The company
Deutsche Bahn AG
Potsdamer Platz 2
D- 10785 Berlin
is the entity responsible for collecting and processing your data. The person appointed as data protection officer is Dr. Marein Elena Müller.
Email: konzerndatenschutz@deutschebahn.com
What are Your Rights Concerning Your Data?
Right to Information
You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent handed over to yourself or to a third party in a common machine-readable format. If you request the direct transfer of the data to another responsible party, we will comply with your request to the extent technically feasible.
Right to Correction, Blocking and Deletion
You also have the right to request the correction, blocking or deletion of your data. To exercise this right, please contact the responsible entity. Deletions will not include the data that we are obliged to keep for administrative, legal or security-related reasons.
Right of Revocation
Many data processing procedures presuppose your express consent. However, you may revoke a previously given consent at any time. To do so, it suffices to send a formless notification to the responsible entity. The legitimacy of having processed your data up to the time you revoke your consent to it will not be affected by the revocation.
Right of Appeal to the Competent Supervisory Authority
In the event of breaches of data protection law, you have a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the German state in which our company is based. For a list of data protection officers and their contact details, use the following link. https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Details on the Collection and Handling of Data
Automatically Recorded Data
Information that your browser automatically transmits is collected and stored by our web server in so-called server log files. This information includes:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- anonymised IP address
To the extent the data basis permits it, these details will be used to generate statistics concerning user behaviour. The data are not combined with other data sources. The basis for processing the data is Art. 6, Sec. 1, Letter f, DSGVO, which permits data processing in performance of a contract or the implementation of pre-contractual measures.
Encrypted Transmission of Actively Provided Data
This website will transmit no data actively provided by you at any time. Accordingly, no SSL or TLS encryption is necessary.
Cookies
Cookies are small text files that can be used to store personal data. Cookies may be transmitted when a given website is loaded and thus makes it possible to identify the user. Cookies help to simplify the use of internet pages for the user.
Use of Third-Party Services
This website uses third-party services that provide certain code resources to display the web pages. The purpose of these so-called Content Delivery Networks (CDNs) is to obtain design frameworks, code libraries and fonts. Their deployment facilitates a uniform and visually engaging presentation. This always presupposes that the providers of the services are aware of a user’s IP address because without the IP address they will not be able to send the services to that user’s browser. We strive to use only services whose respective providers use the IP address exclusively for delivery purposes. However, we cannot influence whether these third-party providers store IP addresses, e.g. for statistical purposes. If we become aware of such practices, we will inform our users about them or, to the extent technically possible, anonymise the IP address.
The website uses the following CDNs:
- Bootstrap via maxcdn.bootstrapcdn.com
- JQuery via ajax.googleapis.com
Safety Measures
In accordance with Art. 32, DSGVO, we take adequate technical and organisational measures to ensure a level of protection proportionate to the risk, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of processing as well as any difference in probability of occurrence and severity of the risk to the rights and freedoms of natural persons.
The purpose of measures in this context is essentially to safeguard the confidentiality, integrity and availability of your data by controlling physical access to the data as well as the options to retrieve, modify or transmit them, and by protecting their availability and their separation. Moreover, we set up procedures which ensure that data subject may exercise their rights while also ensuring the deletion of data and the response to an endangerment of data. We actually take the protection of personal data into account as early as the development or selection of hardware, software and procedures in accordance with the principle of data protection by design and through privacy-friendly settings (Art. 25, DSGVO).
Objection to the Commercial Use of our Contact Details
The use of contact details like the postal addresses, telephone or fax numbers and email addresses published by us within the framework of the Legal Notice or comparable disclosures by third parties for the purpose of sending us information not expressly requested by us is prohibited unless we expressly consented to it in writing ahead of time or unless a business relationship is already in place. We expressly reserve the right to take legal action against senders of so-called “spam mails” if this objection is breached. The provider and all individuals identified on this website hereby object to the commercial use and dissemination of their data.