Privacy statement regarding CCTV surveillance

Video surveillance purposes include:

a) in vehicles:
- Guaranteeing compliance with rules and regulations
- Detecting and preventing criminal offences
- Protecting life, health and freedom of employees and customers
- Securing evidence where an incident occurs
- Prosecuting criminal offences
- Driver-only operation of trains
- Protecting property

The legal basis for this processing is point (f) of Article 6(1) of the GDPR in conjunction with § 4 German Data Protection Act (Bundesdatenschutzgesetz, "BDSG").

Legitimate interests include solving and preventing criminal offences as well as protecting the life, health and freedom of employees and customers as well as securing evidence where an incident occurs.

When deploying video surveillance of vehicles and large, publicly accessible facilities for public rail, boat and bus transport, the protection of the life, wellbeing and freedom of persons at these facilities is considered as being of particularly important interest.

b) on premises:
- Guaranteeing compliance with rules and regulations
- Detecting and preventing criminal offences
- Protecting life, health and freedom of employees and customers
- Securing evidence where an incident occurs
- Prosecuting criminal offences
- Protecting property- Proper execution of operations, monitoring functionality and technical system control, troubleshooting

The legal basis for this processing is Art. 6 (1) (f) GDPR.

Data is forwarded as and when required to investigating authorities, particularly to state and federal police agencies. In special individual cases, data is forwarded to the German Federal Railway Authority (Eisenbahnbundesamt, "EBA").

Vehicles: The storage duration varies between 72 and 120 hours depending on operational procedures and specifications under transportation law. The data is automatically deleted once this period expires.

Premises: The storage period is 72 hours. The data is automatically deleted once this period expires.

• You can request information as to what data is stored about you.
• You can request the correction, deletion or blocking of your personal data, provided this is legally admissible and possible under an existing contract.
• You have the right to lodge a complaint with any data protection regulatory agency.
• You have the right to opt out, on grounds relating to your particular situation, of the processing of personal data concerning you that is based on our legitimate interest or is necessary for the performance of a task carried out in the public interest.

To exercise your rights, simply write to the above-mentioned office.