DB Regio Bus Baden-Württemberg privacy statement

It is possible to use our website without providing personal data. This privacy statement provides you with information about the data we collect from you, the way we use it and how to revoke your consent to your data's use.

The 5 bus companies making up DB Regio Bus Baden-Württemberg collect and process your data as data controllers.
If you have any questions or suggestions about this website, please contact the bus company concerned:

  • BRN Busverkehr Rhein-Neckar GmbH
  • RVS Regionalbusverkehr Südwest GmbH
  • SBG SüdbadenBus Gesellschaft mbH
  • Regional Bus Stuttgart GmbH RBS
  • Friedrich Müller Omnibusunternehmen GmbH

Gutschstraße 4
D-76137 Karlsruhe, Germany

info@dbregiobus-bw.de

The Group Privacy Officer is Dr Marein Müller.

If you have any questions or suggestions regarding data protection, you can e-mail:

datenschutz.regio@deutschebahn.com

When you visit this website, certain device-specific data is collected and processed automatically. This refers to what are known as server log files that are typically created when you visit a website.

As a rule, the following data is transmitted to us via these files:
- IP address
- Date and time of your request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of your request
- Access status/HTTP status code
- Data volume transmitted
- Website (from which the request came)
- Browser
- Operating system and its interface
- Language and version of browser software

It is not technically possible to use this website unless this data is processed.
The legal basis for this processing is Art. 6 (1) (f) GDPR.

If you contact us, we will process the personal data you have provided in the course of our correspondence with you. The legal basis for this processing is Art. 6 (1) (f) GDPR.

If we obtain your consent to process your personal data, this consent serves as the legal basis required under Art. 6 (1) (a) GDPR.

If we process personal data that is required in order to perform a contract that we have signed with you, then the contract is the legal basis in accordance with Art. 6 (1) (b) GDPR. Art. 6 (1) (b) GDPR also applies to processing that must be done so we may take certain steps prior to entering into a contract, for example, in the event that we receive enquiries relating to our products or services or in the event of job applications.


Depending on the type of fare, it may be necessary to record your name (e.g. for personal tickets) or your address and contact details (e.g. for individual demand-responsive transport offers).

Ticket inspection for electronic tickets (e-tickets)

Mobile or stationary inspection devices are used to read the data stored on the chip card and automatically check the electronic ticket and its validity with respect to where and when it is used. Only the result of the inspection is displayed (ticket valid or invalid with respect to where and when it is used). Furthermore, with regard to personal tickets, depending on the transport association concerned, the full or masked name, possibly the date or year of birth and gender of the ticket holder are displayed on the inspection device. The data read from the chip card by the inspection device is temporarily stored on the device only for the purpose of the inspection and is automatically deleted by the inspection device immediately after the inspection is completed.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for this processing is Art. 6 (1) (c) GDPR.

We are continually improving our offering by saving and analysing user data on a pseudo-anonymised basis. The legal basis for this is Art. 6 (1) (f) GDPR.Additionally, we are interested in maintaining a customer relationship with you and providing you with information and offers that we think you may be interested in. For this reason, we process your data on the basis of Art. 6 (1) (f) of the GDPR (also with the help of service providers) to send you information and offers. We may use your contact details (surname, first name and postal address) for advertising by post and for market research purposes, provided that you have not opted out of this. We may also use the e-mail address that we have obtained from our business relationship with you for commercial purposes.


You can opt out of the use of your data for targeted advertising at any time, taking effect for the future. You can send your objection (for example by e-mail to the above address (advertising opt-out).

When we run competitions, we collect data for managing the process. The precise details, i.e. what data is collected and for what purpose, are available on the web page of the competition in question. The legal basis for this processing is Art. 6 (1) (b) GDPR.

If you register for our newsletter, provision of your e-mail address is mandatory. In this case, we can use it for advertising purposes.
When you register for our newsletter, we store the IP address of the computer system you were using at the time of registration. This is provided by the internet service provider (ISP). We also store the date and time at which you registered. The collection of this data is mandatory to detect (potential) misuse of the e-mail address of a data subject at a later point in time and therefore provides us with a legal safeguard. The legal basis for this processing is Art. 6 (1) (a) GDPR.

You can unsubscribe from the newsletter at any time by e-mail or by clicking the unsubscribe link in your newsletter.

If you register for a customer account, the following information is typically required:

  • Salutation
  • First and last name
  • E-mail address

It is not possible to create a personal account without this information. You can delete your customer account at any time. The legal basis for this processing is Art. 6 (1) (b) GDPR.

We store your data only for as long as is necessary to fulfil the purpose for which the data was collected and/or to comply with legal requirements.

  • You can request information as to what data is stored about you.
  • You can request the correction, deletion or blocking of your personal data, provided this is legally admissible and possible under an existing contract.
  • You have the right to file complaints with a supervisory authority.
  • You have the right to the portability of data that you have made available to us on the basis of consent or a contract (data portability).
  • If you have given us your consent to process your data, you can withdraw this consent at any time, using the same methods that you used to give your consent. Any processing of your personal data that took place from the time at which you granted your consent until the time at which you withdrew it will still be considered lawful.
  • You may opt out of data processing for reasons associated with your particular situation if the data processing is performed on the basis of our legitimate interests.
  • You can opt out of targeted advertising at any time. This takes effect for the future (advertising opt-out).

To exercise your rights, simply send a letter by post or e-mail to the above contact address.

The processing of contracts generally requires the involvement of order processing specialists working under orders, e.g. computer centre operators, printing service providers, delivery service providers or other parties involved in contract processing.

For the provision of sales services (for example, the sale of tickets, ticket refunds, payment processing in connection with sales services), DB Vertrieb GmbH acts under a contract pursuant to Art. 26 GDPR (joint data processing controllers).

The external service providers that we use to process data on our behalf are carefully selected and subject to strict contractual obligations. The service providers work in accordance with our instructions and this is verified by strict contractual regulations, technical and organisational measures and supplementary checks. It is necessary to integrate service providers as part of managing and maintaining IT systems, for example.

Furthermore, transfer of your data only takes place if you have given your express consent or on the basis of a statutory requirement.

It may be necessary to forward data in the following situations, for example:

  • Credit rating check by a service provider for credit rating checks when you register for the direct debit procedure.
  • In the event of irregular payments or defaulting on payments, we may send debt claim data to a debt collection agency.
  • We regularly use a call centre for customer care by telephone.

We use cookies to ensure our website operated effectively. Cookies are small text files containing information that can be stored on your device.

It is generally possible to use this website without cookies that are not for technical purposes. This means that you can prevent the tracking of cookies in your browser (do not track, tracking protection list, etc.) or prohibit the storage of third-party cookies. We also recommend that users regularly check and delete cookies that have been automatically stored if they have not expressly requested the cookies' storage.

The measures listed below, which we take to ensure that our website operates effectively, are taken on the basis of Art. 6 (1) (b) GDPR. They ensure the design meets requirements and help us continually optimise the website.

Session-Cookies 

We use session cookies for certain memory functions. These cookies are automatically deleted when you close your browser.

We continuously collect required statistics on the use of this website so that we can measure the effectiveness of the measures we take to improve its functionality and your user experience We use the Adobe Analytics analysis tools for this purpose. We have contractually obliged our service providers to handle your data in accordance with data protection regulations. 

Use of Tealium

We use the Tealium iQ (Mindspace, Viktualienmarkt 8, 80331 Munich) tag management service for the dynamic adaptability of this website and for managing its dynamic content. The cookies used for this purpose are stored on your end user device for 12 months.

Use of Adobe Analytics

This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland), in order to analyse and periodically improve the use of this website. Adobe Analytics uses cookies with a duration of 24 months. The information processed by means of the cookie is not personal or traceable to an individual. We use this information to measure and analyse use of the website and to create statistics. This enables us to see which sections and content on the website are read and used, and how often, and whether our website design influences the extent of its use. The statistics we gain from this allow us to improve our offering and make it more interesting for users.

We incorporate data from third parties into our website in order to provide you with offerings along the entire length of the mobility chain (partner offerings). This entails you using the relevant third parties' websites/webpages to submit your information. These websites/webpages are integrated with the website and have been modified to ensure that they suit our website's visuals. Third party content always features its own site notice and data privacy information.

When you click a link to an external website, you are forwarded to a page outside of the DB Regio Bus Baden-Württemberg website. This means that DB Regio AG is not responsible for the content, services or products offered on the linked website, nor is it responsible for the data protection or technical security on the linked website.

We update our privacy statement whenever there are changes to functions or legislation. We therefore recommend that you review our privacy notice at regular intervals.

Status: January 2022