Privacy Policy

You can generally use our website without providing any personal data. However, if you wish to use specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing (e.g., the performance of a contractual agreement), we will ask for your consent.

With this notice, we inform you about what data we collect from you, how we use it, and how you can object to the use of your data.

Who is responsible for data collection and processing?

DB Cargo Schweiz GmbH collects and processes your data as the data controller.

The management of DB Cargo Switzerland acts as the data protection officer for DB Cargo Switzerland GmbH.

If you have any questions or suggestions regarding data protection, please contact:

DB Cargo Switzerland GmbH

Sägereistrasse 21

8152 Glattbrugg

Email: DB.Cargo.Datenschutz@deutschebahn.com

What data do we collect, and how and why do we process your data?

We collect and process your data exclusively for specific purposes. These may arise from technical necessities, contractual requirements, or explicit user requests.

For technical reasons, certain data must be collected and stored when you visit ch.dbcargo.com, such as your IP address, the date and duration of your visit, the web pages you visited, the identification data of the browser and operating system type used, and the website from which you visited us.

For contractual reasons, we also require personal data from you in order to provide our services and fulfill the contracts concluded with you.

When you contact us, we process the personal data you provide to handle the correspondence.

Legal basis for data processing:

To the extent that we obtain your consent for the processing of personal data, this consent serves as the legal basis in Switzerland pursuant to Article 13 of the Federal Constitution, the Federal Act on Data Protection (FADP), and the corresponding Ordinance to the Federal Act on Data Protection (OADP). In addition, Articles 28–28I of the Civil Code (ZGB) govern how to proceed in cases of violations of personal rights.

For the processing of personal data within the scope of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data (GDPR), Article 6(1)(a) of the GDPR applies as the legal basis.

When processing personal data necessary to fulfill a contract with you, the contract serves as the legal basis pursuant to Article 6(1)(b) of the GDPR. Article 6(1)(b) of the GDPR also applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of inquiries regarding our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Article 6(1)(c) of the GDPR.

In order to continuously improve our services, we store and analyze usage data from our online platform on a pseudonymous basis. The legal basis for this is Article 6(1)(f) of the GDPR.

Is data shared?

To fulfill the contract, it is generally necessary to engage processors who act under our instructions, such as data center operators, printing or shipping service providers, or other parties involved in the performance of the contract.

For information on data processing within the DB Group, please visit: https://www.deutschebahn.com/de/konzern/konzernprofil/datenschutz/datenverarbeitung-1192224

External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. These service providers operate in accordance with our instructions, which is ensured through strict contractual provisions, technical and organizational measures, and supplementary controls.

Furthermore, your data will only be transferred if you have given us your express consent or if required by law.

Data will not be transferred to third countries outside the EU/EEA or to an international organization unless adequate safeguards are in place. These include the EU Standard Contractual Clauses and an adequacy decision by the European Commission.

How long will your data be stored?

As a general rule, data is stored only for as long as it is needed. The duration of storage therefore depends on the specific purpose. This purpose may be based on the contract or on legal requirements regarding the retention of business records or other documents. For this reason, it is not possible to specify a universal retention period here.

Where is sales data processed?

We hereby inform you about data processing in connection with our sales system “CASA” (Customer Services and Sales Application). 

DB Cargo AG works closely with its subsidiaries and regional companies within the Cargo division of DB AG to ensure smooth and effective sales and customer support. In this context, contact data used in business transactions is shared in a corporate master database to provide the best possible service. 

To this end, a joint controller agreement pursuant to Article 26 of the GDPR has been concluded between the contracting parties.

What are your rights?

You may request information about what data we have stored about you.

You may request the correction, deletion, or restriction of processing (blocking) of your personal data, provided this is permitted by law and feasible within the framework of an existing contractual relationship.

You have the right to file a complaint with a data protection supervisory authority.

The data protection supervisory authority with subject-matter and territorial jurisdiction over DB Cargo Schweiz GmbH is:

The Federal Data Protection and Information Commissioner (FDPIC)

Feldeggeweg 1

CH - 3003 Bern

as well as

the Data Protection Officer of the Canton of Zurich

P.O. Box

CH - 8090 Zurich

The state data protection supervisory authority with subject-matter and territorial jurisdiction over DB Cargo AG is:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate

Hintere Bleiche 34

55116 Mainz

or:

P.O. Box 30 40

55020 Mainz

You have the right to data portability regarding the data you have provided to us on the basis of consent or a contract (data portability).

If you have given us your consent to process your data, you may revoke it at any time using the same method by which you provided it. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to revocation.

You may object to the processing of your data for reasons arising from your particular situation if the processing is based on our legitimate interests or is necessary for the performance of a public task.

You may object to the use of your data for advertising purposes at any time with future effect. You may direct your objection to the offices/addresses listed at the beginning (objection to advertising).

Is data encrypted?

Data and emails are typically transmitted over the internet in unencrypted form and are therefore not protected against unauthorized access. Since the confidentiality of information sent to us via email cannot be guaranteed during transmission, we recommend that you send confidential information exclusively by mail.

What happens when you click on links to external sites?

When you click on a link to an external site, you will leave the DB Cargo AG website. DB Cargo AG is therefore not responsible for the content, services, or products offered on the linked website, nor for the privacy practices or technical security of the linked website.

When are cookies used?

Cookies are small text files that can store personal data. Cookies may be transmitted to a website when a page is accessed, thereby enabling the user to be identified. Cookies help simplify the use of websites for users. We distinguish between cookies that are strictly necessary for the technical functioning of the website and those that are not strictly necessary for its technical functioning.

We want to give you the opportunity to make an informed decision for or against the use of cookies that are not strictly necessary for the technical functions of the website. Please note that if you reject cookies used for advertising purposes, you will receive advertising that is less tailored to your interests. However, you will still be able to use the website in its entirety.

Here, we inform you about the type and scope of cookie usage on our site:

The use of ch.dbcargo.com is generally possible without cookies that do not serve technical purposes. You can therefore prevent tracking by cookies in your browser (Do Not Track, Tracking Protection List) or block the storage of third-party cookies. We also recommend regularly checking the stored cookies, unless they are expressly desired.

Please note: If you delete all cookies, any opt-out cookies that have been set will also be deleted, meaning you will need to re-submit any objections you have previously raised.

Cookies that are not strictly necessary for using the site: Web analytics cookies (Mamoto)

Matomo

We use the analytics service Matomo (formerly Piwik) on our website to analyze how our website is used and to make regular improvements. The statistics we collect allow us to improve our website and make it more interesting for you as a user. Small text files (cookies) are used to store data about how you use our website, including your IP address. This data is anonymized and stored on our servers.

The legal basis for the use of Matomo is Article 6(1)(f) of the GDPR.

Your options for opting out: If you do not consent to the analysis of your usage behavior, you can configure your browser at any time to prevent the setting of an analytics cookie. You can also decide here whether a unique web analytics cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data. If you wish to opt out, click on the following link to store the Matomo opt-out cookie in your browser:

Your visit to this website is currently being tracked by Matomo web analytics. Click here to stop your visit from being tracked.

Please note: If you delete all your cookies, the opt-out cookie will also be deleted. This means you will need to re-submit your objection to the analysis of your usage behavior.

Updates to our data protection notice

We update the Privacy Policy Information according to changed functionalities or to changes of legal situation. We recommend you to read the Privacy Policy Information at regular intervals.

In case your confirmation is necessary or parts of Privacy Policy Information includes regulations of the contract with you, we only do changes according to your confirmation.

Dated: October 2023