%202.beb47103e49ab8151db4e25a8e177138.png)
Hinweise
Who is responsible for data collection and processing?
What data do we collect, and how and why do we process your data?
When you visit this website, certain device-related data is automatically collected and processed. This data consists of so-called server log files, which are typically generated when you visit a website.
The following data is generally transmitted to us in this process:
IP address
Date and time of your request
Time zone difference from Greenwich Mean Time (GMT)
Content of your request
Access status/HTTP status code
Amount of data transferred
Website (from which the request originates)
Browser
Operating system and its user interface
Language and version of the browser software
It is technically impossible to use this website without processing this data.
The legal basis for the processing is Article 6(1)(f) of the GDPR.
When you contact us, we process the personal data you provide to handle the correspondence. The legal basis for the processing is Article 6(1)(f) of the GDPR.
To the extent that we obtain your consent for the processing of personal data, this serves as the legal basis pursuant to Article 6(1)(a) of the GDPR.
When processing personal data necessary to fulfill a contract with you, the contract serves as the legal basis pursuant to Article 6(1)(b) of the GDPR. Article 6(1)(b) of the GDPR also applies to processing operations necessary for the implementation of pre-contractual measures.
Depending on the fare type, it may be necessary to collect your name (e.g., for personalized tickets) or your address and contact information (e.g., for certain on-demand bus services).
Ticket Inspection for Electronic Tickets (eTicket)
Mobile or stationary inspection devices read the data stored on the chip card and automatically verify the electronic ticket as well as its temporal and geographical validity. Only the verification result is displayed (ticket valid or invalid with respect to the temporal and geographical scope of validity). In addition, for personalized tickets, depending on the transit authority, the full or masked name, the date of birth or year of birth (if applicable), and the gender of the ticket holder are displayed on the inspection device. The data read from the chip card by the inspection device is temporarily stored on the device solely for the purpose of inspection and is automatically deleted from the device immediately after the inspection is completed.
If our company is subject to a legal obligation that requires the processing of personal data—such as to fulfill tax obligations—the processing is based on Article 6(1)(c) of the GDPR.
To continuously improve our services, we store and analyze usage data on a pseudonymous basis. The legal basis for this is Article 6(1)(f) of the GDPR.
We are also interested in maintaining our customer relationship with you and providing you with information and offers that we believe align with your interests. Therefore, based on Article 6(1)(f) of the GDPR (including with the assistance of service providers), we process your data to send you information and offers. We may use your contact information (last name, first name, mailing address) for direct mail advertising and market research, provided you do not object to such use. Likewise, the email address we have received from you as part of a business relationship may also be used for promotional purposes.
You may object to this promotional use of your data at any time with future effect. You can submit your objection, for example, by email to the address listed above (objection to advertising).
In the context of sweepstakes, data is collected for the purpose of administering them. Details regarding this—such as what data is collected and for what purpose—can be found on the page for the respective sweepstakes. The legal basis for this processing is Article 6(1)(b) of the GDPR.
If you subscribe to one of our newsletters, your email address is collected as required information. In this case, we may use it for promotional purposes.
When you subscribe to the newsletter, we store the IP address assigned by your Internet service provider (ISP) to the computer system you are using at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace any (potential) misuse of a data subject’s email address at a later date and therefore serves to protect us legally. The legal basis for this processing is Article 6(1)(a) of the GDPR.
You can unsubscribe from the newsletter at any time by email or by clicking the unsubscribe link in your newsletter.
When you register for a DB customer account, the following mandatory information is typically collected:
Title
First and last name
Email address
A personal account cannot be created without providing this information.
You can delete your DB customer account at any time. The legal basis for this processing is Article 6(1)(b) of the GDPR.
How long will your data be stored?
We store your data only as long as necessary to fulfill the purpose for which it was collected, or as required by law.
What rights do users have?
You may request information about what data we have stored about you.
You may request the correction, deletion, or restriction of processing (blocking) of your personal data, provided this is permitted by law and possible within the framework of an existing contractual relationship.
You have the right to file a complaint with a supervisory authority.
You have the right to data portability for the data you have provided to us based on consent or a contract (data portability).
If you have given us consent to process your data, you may revoke this consent at any time using the same method by which you granted it. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to revocation.
You may object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests.
You may object to receiving promotional communications at any time with future effect (objection to marketing).
To exercise your rights, simply send a letter by mail or an email to the contact information provided above.
What data is shared?
Contract fulfillment generally requires the involvement of processors acting under our instructions, such as data center operators, printing or shipping service providers, or other parties involved in fulfilling the contract.
For the provision of sales services (e.g., ticket sales, fare refunds, payment processing in connection with sales services), DB Vertrieb GmbH acts under a contract pursuant to Article 26 of the GDPR (joint controllers).
External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. The service providers operate in accordance with our instructions, which is ensured through strict contractual provisions, technical and organizational measures, and supplementary controls. The involvement of service providers is necessary, for example, in the context of the administration and maintenance of IT systems.
Furthermore, your data will only be transferred if you have given us your express consent or if required by law.
The disclosure of data may be necessary, for example, in the following situations:
A credit check is conducted by a credit reporting agency when you sign up for direct debit.
In the event of payment irregularities or non-payment, debt information may be shared with a collection agency.
We regularly use a call center to provide customer service over the phone.
Are cookies used?
We use cookies on our website to ensure proper functionality. Cookies are small text files that can store data on your device.
In general, it is possible to use this website without cookies that serve non-technical purposes. You can therefore prevent tracking by cookies in your browser (Do Not Track, Tracking Protection List) or block the storage of third-party cookies. We also recommend that you regularly check the stored cookies, unless you expressly wish to keep them.
The measures listed below, which we use to ensure proper functionality, are implemented in accordance with Article 6(1)(b) of the GDPR and serve to tailor our website to your needs and to continuously optimize it.
Session Cookies
We use session cookies for certain features. These are automatically deleted when you close your browser.
To measure the effectiveness of our efforts to improve functionality and your user experience, we continuously collect necessary statistics on the use of this website. For this purpose, we use the analytics tools Adobe Analytics. We have contractually obligated our service providers to handle your data in compliance with data protection regulations.
Tealium
To enable dynamic customization of this website and to manage dynamic content, we use the tag management service Tealium iQ (Tealium Inc., 9605 Scranton Rd., Ste. 600, San Diego, CA 92121, USA). This also includes processing the cookie settings you have selected. The cookies used for this purpose have a duration of 12 months. The legal basis for the use of this technology is Section 25(2)(2) of the German Telemedia Act (TDDDG). The legal basis for recording your consent is Article 6(1)(b) of the General Data Protection Regulation (GDPR).
Adobe Analytics
To manage our website and optimize its performance, we use the web analytics service provided by Adobe Systems Software Ireland Limited (Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland). The cookies used have a duration of 24 months. The information processed via these cookies is not personally identifiable and cannot be traced back to any specific individual. We use this information to measure and evaluate website usage and to compile statistics. This allows us to see which sections and texts on our pages are read and used how often, and whether the design of our website influences the extent of its use. The statistics we gather enable us to improve our offerings for you. The legal basis for the use of this technology is Section 25(2)(2) of the German Telemedia Act (TDDDG) in conjunction with Article 6(1)(b) of the General Data Protection Regulation (GDPR).
Is third-party content included?
We incorporate third-party content to provide you with offers across the entire mobility chain (partner offers). When doing so, you enter your data directly on the respective third-party websites. These are integrated into our website and have been customized to ensure a consistent visual appearance. Third-party content always includes its own legal notice and privacy policy.
External
When you click on a link to an external site, you will leave the db-buscharter.de website. DB Regio Bus Ost GmbH is therefore not responsible for the content, services, or products offered on the linked website, nor for data protection or technical security on the linked website.
Video Surveillance
Activities on Social Networks
Effective
We update the Privacy Policy to reflect changes in functionality or legal requirements. We therefore recommend that you review the Privacy Policy periodically.
Effective: July 2026