Data protection notice

DB Fahrzeuginstandhaltung GmbH is responsible for the collection and processing of your data.
The appointed data privacy officer is Ms Dr. Marein Müller. If you have any questions, suggestions and/or criticism relating to www.db-fzi.com, please contact:

DB Fahrzeuginstandhaltung GmbH
Weilburger Str. 22 
60326 Frankfurt, Germany

If you have any questions or suggestions regarding privacy, please send an e-mail to datenschutz.fzi@deutschebahn.com.

All data is collected and processed for specific purposes. These purposes may result from technical requirements, contractual obligations or express wishes of the user.

For technical reasons, when someone visits www.db-fzi.com, it is necessary to collect and store certain information, such as the date and duration of the visit, the webpages visited, the identification details of the browser and operating system type, and the website from which you accessed our website.

For the initiation or fulfilment of a contract, we also need personal data in order to perform our services and to be able to fulfil the contractual relationships that we have agreed with you.

When you contact us via the contact form or by e-mail, the transmitted data is exclusively used and saved to process your request and possible follow-up inquiries.

Subscribe to our newsletter: Online registration

If you register for our newsletter, we record your e-mail address.

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of your newsletter.

Information management 

DB Fahrzeuginstandhaltung GmbH collects and processes your personal data with Deutsche Bahn AG and its various Group companies as joint controllers within the framework of whistleblowing management. This serves to receive and process information on violations in connection with DB's business activities, in particular those under the Whistleblower Protection Act (HinSchG) and complaints under the Supply Chain Due Diligence Act (LkSG) in a secure and confidential manner. Further information on the portal, the contact persons and reporting offices as well as the data protection information can be found here.

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with point (a) of Article 6(1) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.

If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with point (b) of Article 6(1) of the GDPR. Point (b) of Article 6(1) of the GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into; for example, in the event of enquiries relating to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is point (c) of Article 6(1) of the GDPR.

We store and analyse user data obtained from online sources pseudonymously so that we can continually improve our offering. The legal basis for this is Article 6(1)(f) of the GDPR.

For the purpose of performing a contract, it is generally necessary for us to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.

Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include standard EU contract clauses and an EU Commission decision regarding suitability.

Data may be forwarded in the following situations, for example, where it is required for the purpose of contract processing a contract:

• For carrying out creditworthiness checks

In the event of irregular payments or defaulting on payments, we may send debt claim data to a debt collection agency.

Further information on data processing at Deutsche Bahn AG can be found here: https://www.deutschebahn.com/de/konzern/konzernprofil/datenschutz/datenverarbeitung-1192224

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected (as part of a contractual relationship, for example) and/or to comply with legal requirements. Thus, in the context of a contractual relationship, we will store your data at least until full and final completion of the contract. The data is then stored for the mandatory retention period.

• You can request information as to what personal data pertaining to you is stored.
• They can demand the correction or deletion of their personal data, or demand that its processing be restricted (blocking), provided this is permissible by law and possible within the framework of an existing contractual relationship.
• If you mean that the processing of your personal data infringes data protection law, you have the right to complain to a data protection supervisory authority, in particular pursuant to Article 77 (1) of the GDPR. The supervisory authority responsible for DB Fahrzeuginstandhaltung GmbH is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden

• You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
• If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
• You may object to data processing for reasons associated with your particular situation if the data processing is performed on the basis of our legitimate interests.

To exercise your rights, simply post a letter to the following address: 

DB Fahrzeuginstandhaltung GmbH
Weilburger Str. 22 
60326 Frankfurt, Germany

Alternatively, you can send us an e-mail to datenschutz.fzi@deutschebahn.com.

Generally, data and e-mails transmitted via the internet are not encrypted and thus not protected against unauthorised access. Since we cannot guarantee the confidentiality of your data while the e-mail is being transmitted to us, we recommend that you only send confidential information to us by post.

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help to make web pages easier for users to use. 

We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not essential for the webpage's technical functions.

Here is some information about the types of cookies and how they are used on our pages:

It is generally possible to use www.db-fzi.com without cookies that serve non-technical purposes. This means that you can prevent browser tracking by cookies (do-not-track, tracking protection list) or block third-party cookies from being saved.  We also recommend that you regularly check the cookies saved by your system if you have not explicitly requested them.

Please note: if you delete all cookies, this also deletes any consent opt-out (consent withdrawal) cookies. In other words, you will have to opt out of the analysis process once again.

For more information on data processing within the scope of the analysis of Deutsche Bahn AG and the relevant settings, please refer to “Consentmanagement".

By clicking on an external link on our pages you are moving outside the DB pages. Deutsche Bahn AG does not assume responsibility for the content, services or products offered by or the data protection and technical security on the linked websites.

We update our data protection notice whenever functions or legal situations change. We therefore recommend that you review the data privacy notice at regular intervals. If your consent is necessary or if elements of the privacy notice contain provisions of the contractual relationship with you, changes will be made only with your consent.

Last updated: 26 June 2020