The use of our website is generally possible without providing personal data.
Who is responsible for data collection and processing?
When using the website, DB Fernverkehr AG and DB Regio AG process your data as joint controllers.
If you have any questions or suggestions regarding data protection, please contact one of the responsible parties listed below:
DB Fernverkehr AG
Europa-Allee 78-84
60486 Frankfurt
E-Mail: fv-datenschutz@deutschebahn.com
DB Regio AG
Europa-Allee 70-76
60486 Frankfurt
E-Mail: datenschutz.regio@deutschebahn.com
The appointed Data Protection Officer for the aforementioned controllers is Dr. Marein Müller.
Which data do we collect and how and why do we process your data?
We collect and process your data exclusively for specific purposes. These may arise from technical necessities, contractual requirements, or explicit user wishes.
For technical reasons, certain data must be collected and stored when visiting co2kompass.bahn.de, such as the date and duration of the visit, the webpages used, the identification data of the browser and operating system used, and the website from which you visit us.
Security measures
We have implemented protective measures for the security and availability of our IT systems. These include Web Application Firewall, rate limiting, and DoS protection based on technologies from the service providers Akamai Technologies Inc. and F5 Inc. All requests to our systems are checked to see if they comply with defined technical rules. Deviating requests can be blocked or temporarily stored, including the IP address, for further analysis.
Are data passed on?
No personal data are processed or passed on.
Are cookies used?
We use cookies on our website for functional security, measurement, and analysis purposes. Cookies are data packets generated by a website and stored in your browser. We differentiate between cookies that are necessary for the technical functions of the website (e.g., for caching) and those that are not strictly necessary for the technical function of the website (e.g., for reach measurement). Some of these cookies are automatically deleted or become invalid at the end of the browser session (so-called session cookies).
The use of co2kompass.bahn.de is generally possible without cookies that do not serve technical purposes. You can therefore prevent tracking by cookies in your browser (Do-not-track, Tracking Protection List) or prohibit the storage of third-party cookies. We also recommend regularly checking stored cookies unless they are expressly desired.
Cookies and usage data applicable to bahn.de do not apply to co2kompass.bahn.de.
Only cookies and similar technologies necessary for the functions of the website described below are used.
The measures we use, listed below, serve the needs-based design and better usability of our website. To measure the effectiveness of our measures to improve functionalities and your user experience, we continuously collect necessary metrics about usage.
For this purpose, we use the cookies "AWSALB" and "AWSALBCORS". They have a lifespan of 7 days each and serve session persistence (sticky sessions). These cookies are only set if website usage may be statistically recorded.
The cookie "matomo_ignore" is a technically necessary cookie, has a lifespan of 6 month, and is used to store the setting for statistical recording. This cookie does not contain any personal data.
The cookie, for example, "69faba9b0435d5f88f71dca904612294" (a randomly generated hash), is a technically necessary session cookie used to manage a user's session. The validity of the cookie corresponds to the duration of the session.
The cookie "CO2Kompass_i18n" is a technically necessary cookie and is used to store the user's preferred language and avoid unnecessary redirects on future visits. The validity period of the cookie is 365 days.
The cookie "CO2Kompass_csrf" is a technically necessary session cookie and is used to prevent attacks on the website. It contains a cryptographically secure token that ensures the authenticity of requests and prevents malicious websites from performing unauthorized actions. The validity of the cookie corresponds to the duration of the session.
Use of Matomo (formerly Piwik)
We use the analytics service Matomo (formerly Piwik) on our website to analyze the use of our website and regularly improve it. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. All data are anonymized and stored on our servers.
The legal basis for the use of Matomo is Art. 6 para. 1 sentence 1 lit. f) GDPR.
You can object pursuant to Art. 21 para. 1 GDPR to the statistical evaluation of website usage in the . If you select "Allow only necessary cookies" there, a cookie (matomo_ignore) with the value "true" will be stored in your browser, which prevents your website usage from being statistically recorded. Upon consent ("Accept all"), the cookie receives the value "false".
Please note: If you delete all your cookies, this cookie will also be deleted. This means that you would have to reset your setting for statistical recording again.
What rights do users of co2kompass.bahn.de have?
You can request information about what data is stored about you.
You can request correction, deletion, and restriction of the processing (blocking) of your personal data, as long as this is legally permissible and possible within the framework of an existing contractual relationship.
You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for the listed controllers is: The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden
You have the right to data portability of those data that you have provided to us on the basis of consent or a contract (data portability).
If you have given us consent to process data, you can revoke this at any time in the same way you provided it. The legality of the processing based on the consent until revocation remains unaffected by the revocation.
You can object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests or is necessary for the performance of a public task.
You can object to advertising communication at any time with effect for the future (advertising objection).
There is joint responsibility between DB Fernverkehr and DB Regio pursuant to Art. 26 GDPR. In an agreement, the parties have determined who fulfills which obligations under the GDPR. Regardless of this, you can exercise your rights at any time towards the above-mentioned contractual partners. If you write to us but your concern affects the area of responsibility of the service you are using, we will forward it to them.
To exercise your rights, an email to: fv-datenschutz@deutschebahn.com
With the keyword: CO2kompass
What happens with links to external websites?
If you click on a link to an external site, you leave the page of co2kompass.bahn.de. DB Fernverkehr AG is not responsible for the content, services, or products offered on the linked website, nor for data protection and technical security on the linked website.
How up-to-date are the privacy notices?
We adjust the privacy notices to changed functionalities or changed legal situations. Therefore, we recommend that you take note of the privacy notices at regular intervals.
Status: December 2024