Data Protection

Thank you for visiting our website. We are pleased that you are interested in Deutsche Bahn (AG)* as a potential employer. The protection of personal data of applicants**, employees and all third parties connected with us is of particular importance to us.

When processing personal data, Deutsche Bahn takes account of the relevant statutory provisions on privacy and data security applicable in the respective countries, as well as of our internal privacy regulations.

This Privacy Notice provides information on how Deutsche Bahn deals with personal data collected through Deutsche Bahn’s job board web pages, or that you otherwise provide to Deutsche Bahn, due to your application, and explains the handling of your personal data in the course of the application process.

For better clarity, this privacy notice is divided into three sections: The first section A provides general information relevant for all subsidiaries of Deutsche Bahn which use these web pages for their application processes. Country and subsidiary specifics with regard to privacy are then explained in section B. Section C gives you further insights into technically relevant information.

Part A - General Information

1. Which purpose has the personal data collection?

Deutsche Bahn needs your personal data to handle your application. The data you have provided to us in line with your application will only be used and processed for the purpose of applicant selection. For the handling of your application we will only use the information that you have provided to us directly. This may include details that you have stored in online career networks or other job boards.

In addition, it is our goal to make the application process as easy as possible for you. We take your application into account for further positions within our subsidiaries. In this case, we might contact you and invite you to apply for another position if your profile matches. You then decide if you are interested in applying. The same applies for any speculative application that you might have provided to us.

2. Which personal data do we collect?

We record your personal data which is relevant for, or that you provide to us during, the application process (including, but not limited to last name, first name, address, email, position you applied for, and details on your application). To be able to consider your application thoroughly we might also need information on your previous professional career and other similar information.

In order to consider you for other suitable jobs, we will ask you in some cases for your preferences (e.g. regarding preferred locations or job groups).

If our system contains more than one profile of you with an identical e-mail address, the data is automatically merged.  Old data will be overwritten by the newer data. All provided/uploaded attachments will be preserved.

In the case of an online application you complete the personal data in the online forms and upload the relevant documents. In the case of other application channels, we record the relevant information from your application and store your application documents.

3. Who processes the information from your application?

Due to the organizational structure of Deutsche Bahn and depending on the method of application chosen by you, your application might be processed by different divisions. In all cases, your personal data will exclusively be processed by the unit that is responsible for recruiting and, if necessary, by service providers which are contractually bound and legally obliged to comply with the applicable privacy regulations.

In your online application for a specific job or to attend a recruitment event, you can, as an external applicant, actively agree to the disclosure of your personal data for other suitable jobs in the same or another group company (both nationally and internationally). If you do not agree or if you cancel your agreement, this means that the application will cease to be considered for other jobs. If you have applied by email or post, we will inform you in the acknowledgement of application that we would also like to check your application against other job offers in the same or another group company. In this regard, we will advise you to notify us if you do not agree to this. Prior to any disclosure of your personal data, we will contact you again to obtain your express consent. You may cancel your agreement to disclosure at any time, by email or post, at the address indicated in Clause 1. If you retract your consent to share your application, the consequence is that your application will no longer be taken into account for other positions.

4. Who is informed about your application?

Your personal data is treated strictly confidentially and will be provided only to the competent persons involved in the recruitment process and to subcontractors which might deliver necessary services during the selection process (e.g. online test suppliers). For more details on subcontractors on a country and subsidiary level please refer to section B.

Should you be considered for employment, the subsequent use or disclosure of your information is limited to general accepted employment-related purposes to those with a need to know. This includes information disclosed to internal or third party providers for required pre-employment check, verification and any legal or regulatory requirements.

If you apply online, we ask you to decide to which extent we are allowed to share your personal data:

• In case you select “nationally”, your profile is visible to Personnel responsible for recruitment within the country in which the position is located or which you have selected as country of interest in the speculative application process. If in a particular country/business unit there are modifications to this, due to specific local requirements, then these are described in their respective privacy notices, Part B.
• In case you select “internationally”, your profile is visible to Personnel responsible for recruitment independent in which country they are located. This means that all responsible employees of all DB Group companies that use this platform for their recruitment purposes, including, if applicable, employees of their respective data processors, have access to your application/profile. You find out to which DB Group companies this actually applies if you turn to the overview of the attached local privacy policies (see Section B).

Within DB Group uniform minimum standards apply for dealing with personal data, according to our Global Privacy Policy.

In particular, it is inadmissible to use your application/profile for other purposes besides our recruitment processes, as described in our Privacy Policy. Nevertheless please note that due to the various locally applicable data protection regulations there are different levels of protection by the respective privacy regulation in the different countries.

If you applied using any other application channel besides online application, your personal data will only be shared in the country the job is located in.

You can revise your decision on the visibility of your application at any time, for instance you may decide to withdraw your decision to be visible internationally. If you want to do so, please refer to part B and the respective country and subsidiary specific section for the concrete email address.

5. How can you change your personal data?

In the case of an online application you can access and update your profile and personal information in the job board, including your personal data and added documents, at any time. Furthermore, it is possible to withdraw an application for a position via your profile. If you want us to delete your profile and/or some or all of your applications with immediate effect, please refer to part B for the respective email address to request the deletion. In this case we will also inform any subcontractor (e.g. for online tests) who might have received your personal data and request the instant deletion of your personal data.

6. When is your personal data deleted?

Due to different deletion periods based on the diverse applicable local data protection laws please refer to the relevant paragraph in part B for further details. We will only store your personal data as long as necessary.

7. You have questions about data privacy?

For question and suggestions around the privacy topic please address them to our contact persons in the respective country and subsidiary named in part B.

Part B – Additional Country and Subsidiary Specific Information

Germany - Application Procedure at Deutsche Bahn AG or a Group Company in Germany

If you apply for a job at Deutsche Bahn AG or one of its group companies in Germany (except DB Schenker AG), in addition to the general information in Parts A and C of the Privacy Statement, the following country-specific features are relevant for you.

1. In which responsibility and for which purpose is the data collected?

1.1 Who is responsible for collecting data and processing?

Deutsche Bahn AG, Recruitment Department, Europaplatz 1, 10557 Berlin, is the office responsible for collecting and processing your data.

If your application is for an integrity-sensitive and/or high-risk function, your data will be processed responsibly by the EFF departments for filling positions at the KFK and OFK 1 level or HB (for filling positions at the LFK - OFK 2 level), Potsdamer Platz 2, 10785 Berlin, in each case, in order to verify your suitability.

The designated privacy officer is Ms. Dr. Marein Müller:

konzerndatenschutz@deutschebahn.com

If you have any questions to or suggestions on data protection issues relating to our recruitment, please contact us:

Deutsche Bahn AG
Personalgewinnung
Stichwort Datenschutz
Europaplatz 1
10557 Berlin

datenschutz-personalgewinnung@deutschebahn.com

or

Deutsche Bahn AG

Abteilungen EFF oder HB

Potsdamer Platz 2

10785 Berlin

1.2 What is the purpose of collecting personal data?

Deutsche Bahn requires your personal data to process your application. The data you provide us with your application will only be used and processed for the purpose of selecting applicants. To process your application, we only use the information that you have provided to us directly. This may also include information you have provided in online career networks or other job portals.

In addition, it is our goal to make the application process as easy as possible for you. Therefore, our written communication is handled via email, and we would also be happy to consider your application for other positions at our subsidiaries. In this case, we would contact you and invite you to apply for another position if your profile fits. You then decide whether you would like to apply.

If you are applying for a position that involves a managerial, integrity-sensitive, and/or high-risk role, the personal data that is relevant to your application or that you have provided to us with your application will be used to verify your personal suitability for that position.

2. On which legal basis and how do we collect your personal data for the purposes of a job application?

(Supplement to Part A item 1)

We collect your personal data for the purpose of handling your application on the legal basis of Art. 6 clause 1 (1) b), Art. 88 General Data Protection Regulation (GDPR), para. 26 clause 1 (1) Bundesdatenschutzgesetz (BDSG). In the case of an online application for a specific job, an initiative application or to attend a recruitment event (cf. on this Clause 8.2 Event Portal), you enter your data into the appropriate online form yourself. For security reasons, we will send you a notice of confirmation after you have completed online registration. In the case of an email application, we enter all relevant data into our recruitment system and upload your documents including your email. Your email will subsequently be deleted from our mailbox. Where an application is made on paper, we scan your application documents and upload them into our recruitment system. Your original documents will be returned to you by post once the information has been entered.

Legal Basis for the data processing when using the Job Profiler (cf. on this Clause 9.4 Job Profiler) is Art. 6 clause 1 (1) f) General Data Protection Regulation (GDPR). Our legitimate interest is finding a suitable vocational training at Deutsche Bahn for you.

Pursuant to Art. 6 (1) (f) GDPR, the legal basis for the proactive search for candidates (cf. Clause 7. Talent Sourcing) is provided by our overriding legitimate interest in making contact with people who may be interested in our job offers.

The legal basis for the verification of personal suitability is Section 26 (1) sentence 1 BDSG, Article 6 (1) f) GDPR and an internal Group Speaker Committee agreement. Our legitimate interest lies in the obligation to integrate employees in defined, highlighted focus functions in the area of senior executives and the need to minimize risk for the DB Group.

3. What data do we collect for the purposes of your application?

(Supplement to Part A item 2)

In relation to your application, we undertake only to use data which comes directly from you personally.

This may also include data which you make available online for the purposes of the describing your professional career (e.g. in social networks). We will not undertake any additional research relating to you personally, e.g. by way of an internet search engine. Please feel free to notify us of further information relating to your professional career which is available online.

If there is more than one profile of you with identical email address in our system, the data will be merged automatically. Old data will be overwritten by the newer ones. All provided/uploaded attachments will be kept.

Where you make an online application, instead of entering your personal data manually or uploading a CV document, you can also transfer your profile from a social network (LinkedIn, XING, Seek, Viadeo).

The reason for entering your age or date of birth is that a statutory minimum age applies to some of our professions and jobs. Non-EU nationals require a work permit for Germany. We will therefore ask about your nationality during the application process.

4. Who processes the information contained in your application?

(Supplement to Part A item 3)
Where your application may be subject to examination by DB Zeitarbeit GmbH, the HR service provider for the Deutsche Bahn Group, we will in any case obtain your express consent prior to any disclosure of your data.
For the purposes of initial selection, we carry out a binding online test relating to the Induction Programme Vocational Training and Cooperative Education.
In carrying out the online test procedure we work with our contractually bound partner, Aon Assessment GmbH, Großer Burstah 18-32, 20457 Hamburg. The information necessary for carrying out the online test procedure (applicant ID, job applied for), will be passed to Aon Assessment GmbH exclusively for this purpose.

For some jobs, a company medical and/or psychological aptitude examination is required. Following the examinations, our appointed service providers will inform us of the applicant's suitability/fitness for the job in question. We do not receive information about your personal examination results.
When selecting someone for a specific job, and throughout the recruitment process, your application documents will be shared with those responsible for recruitment in the relevant group company.
If your application is considered for examination by a DB Cargo company, we will process your data by means of an automated comparison with the sanctions lists of the relevant EU regulations.

If you apply for a profession in Cross Border Recruiting and accept consideration for other positions, then, as in the alternative screening process described, your data will be shared with other Deutsche Bahn companies that are based in Germany. During the process, your personal data may be shared with the following institutions for legal and qualification reasons: Chambers of commerce and industry, chambers of crafts, immigration offices, recognition counseling centers and the „Social and Cultural Integration“ project. You can object to the processing of your data at any time. The above-mentioned institutions will be informed of the revocation and requested to delete your data immediately, provided that this does not conflict with the institutions' own retention obligations.

If you apply for a position that has the goal of writing a doctoral thesis, then your data will be shared with the responsible supervisor at the college or university (professor or representative). This concerns the curriculum vitae and transcripts or the relevant transcript of grades. Also a participation in the interview will take place.

5. Stay in touch / Alumni network

If you actively agree (see B4) to the disclosure of your personal data for other relevant positions in the relevant or other Group companies (national or international), we may invite you to remain in contact with us for a longer period of time with regard to your professional orientation.

In this case we offer you, for example, following your application for a specific position or after your internship at DB, regular updates about suitable vacancies or relevant DB topics.

If you give us your consent, we will ask for your entry preferences (e.g., preferred region, area of application and type of entry) and your time availability. Furthermore, you actively decide whether we may only contact you for specific job proposals or whether you would also like to receive information about DB events/trade fairs in your professional context.

6. Who is informed about your application? (Supplement to Part A item 4)

If you select "national", your data will be shared within the DB Group in Germany (excluding DB Schenker Deutschland and the DB Cargo units: DB Cargo BTT GmbH, Mitteldeutsche Eisenbahn GmbH, RBH Logistics GmbH, TFG Transfracht Internationale Gesellschaft für kombinierten Güterverkehr mbH, DB Intermodal Services GmbH, Transa Speditions GmbH and DB Cargo Logistics GmbH) are shared. If you apply to one of the DB Cargo units mentioned here, your data will generally not be shared beyond the respective unit.

In case that the above-mentioned DB Cargo units transfer the recruitment process to DB Group in Germany on a job-by-job basis, the recruiters of DB Group in Germany will also have access to your data for the purpose of carrying out the process.

In addition, if you apply for a position that involves a managerial, integrity-sensitive and/or business critical function and in order to check your personal suitability for this position, your personal data will be transmitted to the units in the DB Group responsible for checking your personal eligibility. If a transfer to a third country becomes necessary as part of this assessment, the EU standard data protection clauses will be applied as appropriate safeguards.

7. Talent Sourcing

In order to attract staff, we actively search social networks, fora and other freely available internet resources for interesting candidate profiles. In the course of this proactive search for candidates, we only process data which has obviously been made public by the candidates themselves (name, profile, contact details where applicable).

We generally contact candidates via the messaging function of the relevant network. We offer candidates the opportunity to talk with us and find out more about Deutsche Bahn and about the job vacancies that would be relevant for them. Candidates may decide for themselves whether they would like to apply for one of the positions via the portal access or via a link provided by us. Alternatively, you can also stay in contact with us regarding professional orientation independent of a concrete application via this access path (see B5). For this possibility of further contact, we will ask you for your prior consent.
If you do not respond to our invitation to apply for a vacancy or to remain in contact with us, your personal information will be deleted by us after four months at the latest.

8. When will your personal data be deleted?

(Supplement to Part A item 6)

In the context of an online application for a specific job or to attend a recruitment event, as well as depositing your data for the purpose of long-term contact, you can delete your data and the attachments (e.g. your CV) at any time yourself. In addition, you can ask us to delete your data. If you require the immediate deletion of your applicant profile, please contact the address indicated in Clause 1.
Our standard deletion period for an application is four months after the end of the application process (the applicant has either been hired or rejected).
Our standard deletion period for an recruiting event is one month after the end of the event process (the participant has either been taken part, the event was cancelled, the registration was withdrawn or rejected).

If you have deleted or requested deletion of your data relating to an application for vocational training or a cooperative education programme, we will notify our partner for the obligatory online test, Aon Assessment GmbH, without delay, indicating that your data that is held must also be deleted. The standard deletion period at Aon Assessment GmbH is four months as from the last time the applicant accessed the online test.

If you have attended our assessment center for our cooperative education programmes or our graduate trainee programme, we will store your result for a maximum period of 12 months.
Your candidate profile (online user account) will be deleted automatically from our career portal four months after your last application has been deleted if you have not also logged in to the career portal since that deletion. If you have logged in without submitting an application, the deletion period of four month is as from your last log-in. In both cases, you will receive an e-mail 14 days before your candidate profile (online user account) is deleted, notifying you of the upcoming deletion. In this e-mail, you will also be informed that you can keep the account active and prevent deletion if you log in to your candidate profile (online user account).
If your data is deposited for the purpose of long-term contact (B5), we will contact you by email every 12 months to re-examine your consent. If you do not actively agree to further contact, your applicant / interest profile will be completely deleted 4 months after sending this email (online user account).
Where no consent to further processing is obtained from candidates under the Talent Sourcing process, their details will be deleted no later than six months after the start of the sourcing process.

9. Functions of the DB Career Portal

The functions of the DB Career Portal are described below.

9.1 Contacting us for the purposes of recruitment to Deutsche Bahn

On the career portal, we offer you the possibility of contacting us directly.

To do this, you can use the "Contact" menu item at the bottom of the website to call up an appropriate contact form. By filling out the individual form fields, your request will be sent directly by email to the Deutsche Bahn Career Team. The fields marked "*" are mandatory fields, which we need in order to answer your inquiry. The personal data that you make available to us in the context of this inquiry will only be used to answer your inquiry and/or to contact you and for the associated technical administration. This data will not be used for any other purpose nor will data be shared with third parties. This also applies to inquiries that reach us via the e-mail addresses of the career team or the recruiting service. Your inquiry will be deleted after it has been processed, or at your request, but in any case after no more than 6 months.

9.2. Event Portal

On our career site, you have the option of searching in the Event Portal for recruitment events which may be of interest to you and you can apply to attend. Attending a recruitment event can result in a concrete job opportunity. If you already have access to the job board, you can use this to log into the Event Portal. If not, you can carry out a new registration in the Event Portal. In your online application to attend a recruitment event, you can, as an external applicant, actively agree to the disclosure of your personal data for other suitable jobs or events in the same or another group company (both nationally and internationally). If you do not agree or if you cancel your agreement, this means that your application will cease to be considered for other jobs and events.

9.3 Share a job with someone

On our job board and in the Event Portal, you have the option of sharing jobs or events with friends or acquaintances. If you want to share a job or an event, enter your name, email address and the email address of the recipient. Next, enter the subject and a message to the recipient. An email, containing your message and a link to the job advert, will then be generated automatically and sent to the recipient. The data entered in this regard will not be stored by us.

9.4 Job Profiler

With the help of the Job Profiler, we offer users a short test to find out which vocational training would suit them best. For this purpose, the personal data first name or pseudonym and the answers to the questions are collected by the user himself. In the test, different situations are described and the user has to decide whether he/she agrees or disagrees with the respective statement. On the basis of the user's input from the test, an individual list of suitable vocational trainings is generated. Personal user data, including the results, are at no time stored on the servers of Deutsche Bahn or an order data processor and made available to third parties. The user can enter a name at the beginning to address the user personally. It is not necessary to enter the correct name. The input has no influence on the results of the tests.

9.5 Chatbot (currently only available in German)

Support variant:

We offer you the opportunity to get in touch with us even more directly on the career portal. On many pages of the portal, you will find a small circle with a chat icon at the bottom right of the screen. Around the clock, you can interact with our chatbot by clicking on the icon. During office hours, the chat can be handed over to colleagues in the careers team if the chatbot does not have a suitable answer to your questions. If you have specific questions about your application, please contact us via contact form. If you ask a question about your application in the chat, we also refer you to the contact form. We expressly ask you not to enter any personal information in the chat in this variant.

Application variant:

For the majority of our jobs, you can also apply using the chatbot. To do so, click on the "Apply now" button in the job advertisement and select "Apply via chatbot". The chatbot will then automatically open in application mode. All data entered in the chatbot is stored directly in our recruiting system.

9.6 Job watch list with e-mail function

The career portal offers the possibility of placing jobs on a watch list. To do this, click on the star symbol in a job advertisement.

The job will then be saved in the local storage of the browser. By deleting the browser chess, the marked positions will be deleted.

If the user decides to send the watch list by e-mail, this is made possible with the help of a form. By entering an e-mail address, the watch list is sent to the specified recipient. The e-mail address is only used for sending via the mail server of Deutsche Bahn AG and is then deleted.

10. Social Media

10.1 What data do we collect, how and why do we process your data?

You can find our Deutsche Bahn profiles on various social media platforms. Through this we would like to provide you with a wide range of multimedia services and exchange information with you on topics that are important to you. In addition to each provider of a social network, we also collect and process personal user data on our social media channels. With this notice, we also inform you which data we collect from you on our appearances in social media, how we use it and how you can object to the data use.  The respective data processing purposes and data categories can be found in the respective channels listed below. Also, in more detail you’ll find there the activities in social media which we operate. They are carried out based on a balancing of interests in accordance with Art. 6 Para. 1 lit. f) GDPR.

10.1.1 Facebook      

We present our company through the DBKarriere channel (https://www.facebook.com/DBKarriere/). On this channel you will find insights into job profiles of Deutsche Bahn, information on vacancies and recruiting events. The DB team is available to answer any questions you may have.

Facebook offers various opportunities for interaction and multimedia presentation. If you visit our fan page, Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, will collect, store and process your personal data in accordance with its privacy policy. The privacy policy can be found here: https://www.facebook.com/privacy/policy/

Beyond this, data processing by us is only carried out to a very limited extent:      

We use the statistics service Facebook Insights for the purpose of designing our pages to match your needs and for continuous optimization. This service records your activity on our site and makes it available to us in anonymized statistics. This provides us with information about, among other things, the activity of our fan page visitors, the number of visits on our page, the range of posts (both organic and paid content), views and average duration of video playback, information about the countries and cities from which our visitors come, as well as statistics about the gender ratio, age and languages of our target groups. It is not possible for the administrator to draw conclusions about individual users or access individual user profiles.

You will find more information about Facebook Insights here:
https://www.facebook.com/legal/terms/information_about_page_insights_data

Facebook and Deutsche Bahn share the responsibility for processing the data at Insights. Details are set out in an agreement (Joint Controller Addendum) which can be found here: https://www.facebook.com/legal/terms/page_controller_addendum
Facebook Ireland provides important aspects and further information of Page Insights to affected parties in an additional document.

Facebook enables the possibility for you to contact us via private messages. All 1:1 dialogues whose last feedback is older than 6 months are manually deleted at the end of each quarter (cut-off dates 31.03., 30.06., 30.09., 31.12.) from the social media channels of DB Personalmarketing.

10.1.2 Instagram

On the channel DB Karriere (https://www.instagram.com/dbkarriere/) we take you behind the scenes of Deutsche Bahn: you can discover different job profiles of Deutsche Bahn and receive information about open positions as well as recruiting events. The DB team answers users' questions and comments professionally and posts the best pictures and videos from the daily work of Deutsche Bahn employees on Instagram as well.  

If you visit us on Instagram your personal data is stored and processed by Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, as provider of Instagram, in accordance with Instagram's privacy policy. The privacy policy can be found here: https://privacycenter.instagram.com/policy

Beyond this, data processing by us is only carried out to a very limited extent:      

We use the statistics service Instagram Insights for the purpose of designing our pages to match your needs and for continuous optimization. This service records your activity on our page and makes it available to us in anonymized statistics. This provides us with information about, among other things, the activity of our fan page visitors, the number of visits on our page, the range of posts (both organic and paid content), views and average duration of video playback, information about the countries and cities from which our visitors come, as well as statistics about the gender ratio, age and languages of our target groups.  It is not possible for the administrator to draw conclusions about individual users or access individual user profiles.            

Instagram enables the possibility for you to contact us via private messages. All 1:1 dialogues whose last feedback is older than 6 months are manually deleted at the end of each quarter (cut-off dates 31.03., 30.06., 30.09., 31.12.) from the social media channels of DB Personalmarketing.

For promotional campaigns, our employees can also post curated DB content

using so-called filters.

10.1.3 X (formerly known as Twitter)            

We present our company on the DBKarriere channel (https://twitter.com/DBKarriere). On this channel you will find insights into job profiles of Deutsche Bahn, information on vacancies and recruiting events. The DB team is available to answer any questions you may have.

If you visit our channel on X, Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, as operator of X, stores and processes personal data to an extent which is described in the data protection policy. The privacy policy can be found here: https://twitter.com/en/privacy

We use the statistics service X Analytics for the purpose of designing our pages to match your needs and for continuous optimization. This service records your activity on our page and converts it into anonymized statistics that are made available to us. This provides us with information about, among other things, the interactions of our subscribers, the number of times our page is visited, the range of articles, information about the our subscriber’s activities and information about the countries and cities from which our visitors come, as well as statistics about our visitor’s gender ratio, age structures, providers and (cumulative) interests. Conclusions about individual users as well as access to individual user profiles by the administrator are not possible. However, we do evaluate the top follower and top mention monthly.

X allows the possibility for you to contact us via private messages. All 1:1 dialogues whose last feedback is older than 6 months are manually deleted at the end of each quarter (cut-off dates 31.03., 30.06., 30.09., 31.12.) from the social media channels of DB Personalmarketing.

10.1.4 YouTube

We present our company on the DBKarriere channel (https://www.youtube.com/user/DBKarriere). In doing this, we show videos that provide insights into the job profiles and various business areas of Deutsche Bahn as well as application tips. The DB team is available to answer any question you may have. The DB team answers users' comments on YouTube professionally as well.

Personal data is stored and processed by Google LLC ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA, as the operator of YouTube in accordance with Google's privacy policy. The privacy policy can be found here: https://policies.google.com/privacy?hl=en&gl=en

Apart from this, we do not process any other personal data.

10.1.5 Snapchat

We present our company on the dbkarriere channel. On this channel you will find insights into job profiles of Deutsche Bahn, information on vacancies and recruiting events. The DB team is available to answer any question you may have. The DB team answers users' comments professionally as well.

If you visit our channel, Snap Inc, 63 Market Street, Venice, CA, USA, as operator of Snapchat, processes personal data in accordance with the Snapchat data protection guidelines. The data protection guidelines can be found here: https://values.snap.com/en-US/privacy/privacy-policy.

Deutsche Bahn does not process your personal data. Personal data are snaps (photos) sent to our channel by other Snapchat users during an event. By sending snaps to us, users agree that their snaps may be shared on our channel. Snaps that have been sent to our account delete themselves after 24 hours automatically. They are then no longer available for us after this time period.

10.1.6 LinkedIn

We present our company on the Deutsche Bahn channel (https://twitter.com/DBKarriere). On this channel you will find insights into job profiles of Deutsche Bahn, information on vacancies and recruiting events. The DB team is available to answer any questions you may have. We also use the channel for active candidate searches, as described in more detail in Part B No.6 of this Privacy Policy.

If you visit our channel on LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as operator of LinkedIn, will store and process personal data to the extent described in the privacy policy. The privacy policy can be found here: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Beyond this, data processing by us is only carried out to a very limited extent:      

We use the statistics service LinkedIn Insights for the purpose of designing our pages to match your needs and for continuous optimization. This service records your activity on our page and makes it available to us in anonymized statistics. This provides us with information about, among other things, the activity of our fan page visitors, the number of visits on our page, the range of posts (both organic and paid content), views and average duration of video playback, information about the countries and cities from which our visitors come, as well as statistics about the gender ratio, age and languages of our target groups. It is not possible to draw conclusions about individual users or access individual user profiles by the administrator.

10.1.7 Xing

We present our company on the Deutsche Bahn channel (https://www.xing.com/pages/deutschebahn). On this channel you will find insights into job profiles of Deutsche Bahn, information on vacancies and recruiting events. The DB team is available to answer any questions you may have. We also use the channel for active candidate searches, as described in more detail in Part B No.6 of this data protection declaration.

If you visit our channel at Xing, Xing Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany, as operator of Xing, stores and processes personal data to the extent described in the privacy policy. The privacy policy can be found here: https://privacy.xing.com/en/privacy-policy

Beyond this, data processing by us is only carried out to a very limited extent:

We use the statistics service Xing Statistics for the purpose of designing our pages to match your needs and for continuous optimization. The data from the Xing analyses are evaluated anonymously so that no conclusions can be drawn about individual users. Access to individual user profiles by the administrator is not possible. This service records your activity on our site and makes it available to us in anonymized statistics. This provides us with information on, among other things, page accesses, page views, followers, contribution interactions, the countries and cities from which our visitors come, as well as statistics on gender relations, age and languages and sectors of our target groups. Conclusions about individual users as well as access to individual user profiles by the administrator are not possible.

10.1.8 TikTok

Deutsche Bahn AG's HR marketing publishes advertisements on TikTok for a target group between the ages of 16 and 24 in order to get them interested in job offers and apprenticeships. In addition to the age group, other parameters, such as areas of interest, can also be taken into account.

Depending on the campaign, some of the adverts are published via specially created accounts that can be interacted with. However, for direct communication, especially regarding the initiation of an application, please refer to other Deutsche Bahn communication channels (e.g., email). The imprint and the data protection information of Deutsche Bahn AG are linked in the profile of the account.

If you click on one of these adverts on TikTok, you will be directed to specific areas of the career portal. We count the number of interested parties who have clicked on the respective advert in order to measure the success of the advertising effort. This count is anonymous and does not allow any conclusions to be drawn about you personally.

We also receive aggregated statistics on advertising playout from TikTok. Based on the judicial decisions of the European Court of Justice, it can be assumed that Deutsche Bahn AG and TikTok are jointly responsible for the target group-specific control of our advertising via TikTok's Ad Manager with regard to the data collection and evaluation by TikTok associated with the advertising playout. In this regard, a joint control agreement has been entered into with TikTok in this regard in accordance with Art. 26 para. 2 GDPR, which regulates the details of joint responsibility and which you can find here: Jurisdiction Specific Terms dated January 1st, 2023, Part B 1, Numbers 3 and 4.

As a TikTok user, you can control the extent to which you wish to receive personalised advertising on TikTok here.

On TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, collects, stores and processes your personal data in accordance with its privacy policy. You can find the privacy policy here.

10.1.9 Web augmented reality (AR) application

We use the service provider VRketing GmbH, Münchner Str. 36, 01187 Dresden, Germany, to display so-called AR experiences for our users using the technology of the company 8th Wall Inc. with registered office in Palo Alto, California, USA. This requires access to the camera of your end user device. Your end user device will obtain your consent beforehand, unless you have generally allowed access to the camera. The video images from the camera will not leave your end user device. If you deny access, you will not be able to use the AR service.

Please inform yourself about the processing of your personal data by 8th Wall Inc. at https://www.8thwall.com/privacy.

10.2 Do we pass on data? 

For the provision of our services, it is usually necessary to involve instruction-dependent processors, such as computer center operators or other parties involved.

External service providers who process data on our behalf are carefully selected by us and strictly bounded by contract. The service providers work according to our instructions, which is ensured by strict contractual regulations, technical and organizational measures and supplementary controls.

Accordingly, your data will only be transferred if you have given us your explicit consent or if it is required by law.

Social Networks

We would like to point out that Facebook, Instagram, X, Snapchat, LinkedIn and Xing might process data of users outside of the European Union. This can result in risks for the users because the enforcement of the users' rights could be more difficult. For details please refer to the privacy policy of data processing at Facebook, Instagram, X, Snapchat, LinkedIn and Xing.

We will not transfer data to third countries outside the EU/EEA or to an international organization unless there are adequate guarantees. These include the EU standard contractual clauses as well as an adequacy finding by the EU Commission.

11. Technical information on the career portal (https://db.jobs/de-de)

(Supplement to Part C)

11.1 Supplemental information on the use of cookies

(Supplement to Part C Item 2)

Session cookies cannot be deactivated as they are necessary for the use of this website.

The “JSESSIONID cookie” is used as an identifier for applications using stateless protocols in order to identify multiple requests from one client and assigned them to a session. This cookie contains a long, alphanumeric ID which is stored on the server. If the two IDs match, the client is permitted to send queries to the server. The session and the cookie are deleted as soon as the page is closed.

11.2 Supplemental information on the use of YouTube

(Supplement to Part C Item 4)

We are interested in giving you a wide variety of information across media formats. Our website includes embedded YouTube videos. The legal basis for this processing is Article 6 Subsection 1 littoral f of the General Data Protection Regulation (GDPR). We merely enable a connection to YouTube. YouTube is a service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

The privacy-enhanced mode is activated for all YouTube videos on our website. The privacy-enhanced mode is provided by YouTube and ensures that YouTube does not save any cookies containing personal data on your computer. When the website is called up and in the embedding of the videos the IP address is transmitted. This will not be assigned to any other data if before you call up the page you have not logged in to YouTube or another Google service or if you are not permanently logged in.

When you click to play the embedded video, the privacy-enhanced mode means that YouTube saves on your computer only cookies that do not contain any personally identifiable data. These cookies can be disabled in the browser settings and extensions. YouTube sets a session cookie that is deleted when you close your browser.

For more information on the integrated YouTube videos, see YouTube's informational page under: https://support.google.com/youtube/answer/171780?hl=en

11.3 Integration of Google Maps

We integrate content from Google Maps on our site. In the default setting, this service is inactive for us, but can be activated by you.

By clicking on the link to display the map ("Activate map"), you will be connected to Google Maps. In doing so, you transmit personal data (at least your IP address) to Google. Then the external content will be displayed to you. Google is solely responsible for the associated data processing. What other data is processed in this process is beyond our knowledge and influence. The company that provides the service in the European Union, the European Economic Area and Switzerland is Google Ireland Limited, a company registered and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

Further information on data protection at Google can be found here: https://policies.google.com/privacy.

11.4 Integration of Spotify

Widgets from Spotify are integrated on our website to offer you thematically relevant DB podcasts.

If you activate such a widget by clicking on it, your browser establishes a direct connection to Spotify and the content is transmitted by Spotify directly to your browser.

In doing so, you transfer personal data (at least your IP address) to Spotify. Spotify is exclusively responsible for the associated data processing. What other data is processed in this process is beyond our knowledge and influence. The company that provides the service in the European Union, the European Economic Area and Switzerland is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.

More information about Spotify's privacy policy can be found here: https://www.spotify.com/us/legal/privacy-policy/.

11.5 What happens with links to external websites?

When you click a link to an external website, you are forwarded to a page outside DB's career portal. Deutsche Bahn AG does not assume responsibility for the content, services or products offered by or the data protection and technical security on the linked website.

12. Rights of the Data Subject

You have the right to request information on the personal data stored about you, at any time. You also have the right to request the correction of inaccurate personal data concerning you, including the completion of incomplete data, if necessary in the form of a supplementary statement. In addition, you have the right, where appropriate, to request the deletion of stored personal data about you. If statutory provisions, e.g. storage obligations, do not allow deletion, processing of your data will instead be restricted (i.e. blocked), so that the data is only accessible for the purpose of complying with the mandatory statutory provisions. You may also have the right to request that the processing of your data be restricted (blocking). With regard to personal data that you have made available to us and which is processed by us using automated procedures based on consent or contractual agreement, you have the right to request that this data be transferred to you or, where applicable, to a third party designated by you. You may object to data processing for reasons arising from your particular situation if data processing is based on our overriding legitimate interests or is necessary for the performance of a public duty. Insofar as data processing is based on your consent, you have the right to withdraw consent at any time. You also have a right to complain to the regulatory body. The regulatory body responsible for Deutsche Bahn AG is: Berlin Data Protection and Freedom of Information Commissioner, Alt-Moabit 59-61, 10555 Berlin, email: mailbox@datenschutz-berlin.de.

To exercise your rights as a data subject, simply send a letter by post or email to the Recruitment Department at the address indicated in Clause 1. “Who is responsible for data collection and processing?”.

Please also contact this address if you wish to withdraw your agreement to the alternative consideration of your application for other suitable jobs within the group or for the purposes of ensuring the international visibility of your profile/application.

Please do not use the above contact details for sending us your job application. If you have any problems with the online application, please contact us by way of the contact form which is available under menu item "Contact".

With regard to data processing on social networks, we recommend that you contact the respective social network directly in the event of information requests or other questions regarding user rights, such as a deletion request, as only Facebook, Instagram, Twitter, YouTube, Snapchat, LinkedIn and Xing have full access to your user data. If you no longer wish to have the data processing described here in the future, you can disconnect your user profile from our site by using the "I no longer like this page" and/or "Do not subscribe to this page" functions.

Regarding the processing of personal data via the Insights service offered by Facebook, Facebook has taken primary responsibility. This concerns the processing of Insights data and the implementation of the rights of the data subject. Therefore, please contact Facebook directly regarding all obligations under the GDPR with regard to the processing of Insights data. We will forward any inquiries we receive in this regard to Facebook.

Part C – Technical Information

For technical reasons, certain data must be collected and saved when you visit this website. The following data is collected without any action on your part and saved until it is automatically deleted after 10 days:

• IP address from the querying computer,
• Date and time of access,
• Name and URL of the file accessed,
• Website from which the access took place (referrer URL),
• the browser used and in some cases the operating system of your computer.

1. How is your personal data transferred?

The internet server of our provider meets the current security standards. Our aim is to protect your personal data from loss, misuse, unauthorised access, publication, change and deletion. Your personal data is transferred to the servers using the security standard, the TLS method. 

2. What is a cookie?

Cookies are small text files which might store personal data. Cookies can be sent to this website when it is called, allowing the user to be identified. Cookies help users to use internet sites more easily.  

We differentiate between cookies that are necessary for the technical functions of the website and those that are not necessary. We would like to provide you the option to make an informed decision for or against the use of cookies that are not necessary for technical functions of this website. The use of this website in its entirety will not be affected by this.

2.1 How are cookies used?

This is an information of how and in what manner cookies are used on our sites. 

The use of the career portal and application system is generally possible without the use of cookies that do not serve a technical purpose. This means that you can prevent browser tracking from cookies (do-no-track, tracking protection list) or disallow saving of third-party cookies. In addition, we recommend checking the saved cookies regularly if they are not expressly desired. 

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

Cookies that are mandatory for using the site:

Session cookies cannot be deactivated as they are necessary for the usage of this website. 

The “PHPSESSID cookie” and the "ScustomPortal-[...] cookie" are used by the platform on stateless protocols as identification criteria to recognize several associated requests of a client and to assign them to one session. In these cookies there is a long alphanumerical ID included which is also stored on the server. In case both IDs match, the client is allowed to send a request to the server. The session and the cookie are destroyed as soon as the page is closed.

3. Use of Adobe Analytics

This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland) ("Adobe"), in order to analyze and periodically improve the use of this website. The statistics we collect enable us to improve our services and make them more interesting for you as a user. Adobe Analytics uses cookies with a duration of 24 months that are stored on your computer to enable us to analyze your use of the website. 

The information generated by the cookie is transferred to an Adobe server in the USA and stored there. Since a technique for anonymizing your IP address is activated on this website, your IP address will be shortened beforehand. Adobe will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to us relating to website activity and internet usage. In this way we can see how often which sections and texts on our pages are read and used, and whether the design of our page has an influence on the extent of use. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. Entries made in form fields during the application process are not evaluated with Adobe Analytics. 

Adobe provides us with this information only as aggregate data that represents general website usage. The information we receive from Adobe is not personalized nor is it possible to link it to one specific individual.

The legal basis for the use of Adobe Analytics is Art. 6 Para. 1 S. 1 lit. f) GDPR.

You can object to the creation of the user profiles described above at any time. There are several ways of doing so:

1. One possibility to object to web analysis by Adobe Analytics is to set an opt-out cookie that instructs Adobe not to store or use your data for web analysis purposes. Please note that with this solution, the web analysis will only not take place as long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click here: https://www.adobe.com/privacy/opt-out.html.
2. You can also prevent the storage of the cookies used for profile creation by setting your browser software accordingly.

Adobe Test and Target
(currently only used on the German career portal)

We use the software Test & Target from the company Adobe. This allows us to perform on two different versions of this website. For this purpose, the software also offers a modified version (e.g. with different content, structure and design) compared to the original version of this website. By comparing the usage of both variants, we can then determine which display our website visitors prefer. For more information about Adobe Test & Target features, visit: https://business.adobe.com/products/target/adobe-target.html.

Under no circumstances does Adobe Test & Target store and process personal data, such as a complete IP address, through this website. Only information that does not allow any conclusions to be drawn about individual persons is processed. The usage behavior is shown cumulatively by quantitative methods. Adobe uses "session cookies" and "permanent cookies". The former are only temporarily stored for the duration of your use of this website. The "permanent cookies" are used to record information about visitors who repeatedly access this website.

Here you can find the privacy statement for Adobe Test & Target: https://marketing.adobe.com/resources/help/en_US/target/ov/c_privacy.html

You can disable Adobe Test & Target on this website by opting out: https://dbsystelentities.d3.sc.omtrdc.net/optout.html.

4. Use of YouTube

We want to give you a wide variety of information across media formats. Our website includes embedded YouTube videos. We merely enable a connection to YouTube. YouTube is a service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. 

The privacy-enhanced mode is activated for all YouTube videos on our website. The privacy-enhanced mode is provided by YouTube and ensures that YouTube does not save any cookies containing personal data on your computer. When the website is called up and in the embedding of the videos the IP address is transmitted. This will not be assigned to any other data if before you call up the page you have not logged in to YouTube or another Google service or if you are not permanently logged in.

When you click to play the embedded video, the privacy-enhanced mode means that YouTube saves on your computer only cookies that do not contain any personally identifiable data. These cookies can be disabled in the browser settings and extensions. YouTube sets a session cookie that is deleted when you close your browser. 

For more information on the integrated YouTube videos, see YouTube's informational page under: https://support.google.com/youtube/answer/171780?hl=en

Additional Information

*  To Deutsche Bahn belong all subsidiary companies of Deutsche Bahn AG.

** For reasons of better legibility, the simultaneous use of male and female language forms is dispensed with. However, all descriptions apply to all gender types.