Privacy Policy

In principle, it is possible for you to use our website without providing your personal data. If you wish to use certain special services that we offer via our website, however, it may be necessary for us to process your personal data. If we do need to process your personal data and there is no legal basis on which to do so (a contractual agreement, for example), we will ask you for your consent.

This notice provides information on what data we collect from you, how we use it, and how you can opt out of having your data used.

Who is the responsible office for the data collection and processing?

DB Cargo Bulgaria EOOD is the controller and is therefore responsible for collecting and processing your data. Mrs Daniela Savova is the designated data protection officer.
If you have any questions or suggestions, please contact:

DB Cargo Bulgaria EOOD
2, Teofan Raynov Str
4300 Karlovo
Bulgaria
E-Mail: hr.bg@deutschebahn.com

Which data do we collect and how and why do we collect your data?

We collect and process your data only for specific purposes. These purposes may result from technical requirements, contractual obligations or requests submitted by users.

For technical reasons, certain data has to be collected and saved when www.bg.dbcargo.com is visited (such as the date and duration of the visit, the pages used, the identification data of the browser and operating system type used, and the website from which you came to visit us).

For contractual reasons, we also need personal data in order to perform our services and to perform the contracts that we have concluded with you.

If you contact us, we will process the personal data you have provided in the course of our correspondence with you.

Legal basis for data processing:

If we ask for and receive your consent to perform processing operations on your personal data, your consent is considered, in accordance with Article 6(1)(a) of the EU General Data Protection Regulation (GDPR), to give us the legal basis to perform such processing operations.

If we process personal data that is required in order to perform a contract that we have concluded with you, then the contract is the legal basis in accordance with Article 6(1)(b) GDPR. Article 6(1)(b) GDPR also applies to processing operations that are required in order for us to take steps before a contract is entered into, e.g. in the event of enquiries relating to our products or services.

If our company is subject to a legal obligation that requires us to process personal data – such as a tax obligation – then the legal basis for processing is Article 6(1)(c) GDPR.

We store and analyse user data obtained from online sources pseudonymously so that we can continually improve our activity. The legal basis for this is Article 6(1)(f) GDPR.

Do we forward data to third parties?

For the purpose of performing a contract, it is generally necessary for us to involve processors, from parties such as computer centre operators, printing or shipping service providers, or other parties involved in performing the contract, who are bound by instructions from us.

The external service providers that we hire to process data are carefully selected and subject to strict contractual obligations. The service providers follow our instructions, and this is guaranteed by strict contractual regulations, technical and organisational measures, as well as supplementary checks and controls.

Furthermore, transmission of your data only takes place where you have given your express consent or on the basis of a statutory requirement.

Data will not be transferred to third countries outside the EU/EEA or to an international organisation unless appropriate guarantees have been provided. These include the EU standard contractual clauses and an adequacy decision from the European Commission.

How long will your data be saved?

The data is only stored as long as it is needed. The duration of the storage depends therefore on the respective purpose. The purpose can result from the contract or also from legal regulations for the storage of business documents or other documents. Therefore, no generally valid storage period can be indicated here.

Where are sales data processed?

We hereby inform you about the data processing regarding our sales system "CASA" (customer services and sales application). 

DB Cargo AG works closely with its subsidiaries and national companies in the Cargo business unit of DB AG to ensure smooth and effective sales and customer support. Contact details for business transactions are shared in a company master database in order to provide the best possible service. 

For this purpose, a joint responsibility agreement in accordance with Art. 26 GDPR has been concluded between the contracting parties. 

What data do we collect and how/why do we process your data?

We collect and process your data exclusively for specific purposes. These may result from technical necessities, contractual requirements or express user requests.
For technical reasons, certain data must be collected and stored when using our app (e.g. IP address).

When are cookies used?

Cookies are small text files used to store personal data. Cookies can be sent to this website when it is visited, allowing the user to be identified. Cookies help users to use websites more easily.

We differentiate between cookies that are mandatory for the technical functions of the website and those that are not mandatory.

We want to give you the option of making an informed decision for or against using cookies that are not essential for the technical functions of the website. Please note that rejecting cookies designed for commercial purposes means that any advertising you receive will not be as closely tailored to your interests as would otherwise be the case. The use of this website in its entirety will not be affected by your option against using cookies.

Below is some information on how and in what manner cookies are used on our web pages:

It is generally possible to use www.bg.dbcargo.com without cookies that serve non-technical purposes. This means that you can prevent browser tracking from cookies (do not track, tracking protection list) or prevent third-party cookies from being saved. In addition, we recommend checking saved cookies regularly if they are not expressly desired.

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

Cookies that are not mandatory for the use of the site: Web analytics cookies (Matomo)

Use of Matomo (formerly Piwik)

We use the analysis service Matomo (formerly known as Piwik) on our website in order to analyse how our website is used and make improvements on a regular basis. The statistics gathered allow us to improve our offering and design it in a way that is more attractive to you as a user. With the help of small text files (cookies), we collect data on how you use our website, which includes your IP address. This data is anonymised and stored on our servers.

The legal basis for the use of Matomo is Article 6(1)(f) GDPR.

Your deactivation options: If you do not consent to the analysis of how you use our website, you can set your browser at any time so that it does not install an analysis cookie. Additionally, you can decide whether to allow your browser to store a cookie that is clearly identified as being for web analysis purposes so that the website operator can collect and analyse various types of statistical data. If you decide not to allow this, click the following link to store the Matomo deactivation cookie in your browser:

Data from your visit to this website is currently being collected by the Matomo web analysis service.
Click here to stop data from your visit being collected.

Please note that if you delete cookies altogether, you will also delete the deactivation cookie. This means that you will need to opt out of the analysis of your usage behaviour again.

What are your rights?

• You can request information about what data is stored about you.
• You can ask for rectification, erasure and blocking of the maintenance of your personal data, if legal bases exists and is possible within the contractual relationship.
• You have the right to lodge a complaint at a data protection supervisory authority.
• Responsible for DB Cargo Bulgaria EOOD is the factual and local data protection supervisory authority:
  
  CPDP
  2 Prof. Tsvetan Lazarov Blvd.
  Sofia 1592
  Е-mail:kzld@cpdp.bg
  Web-site: www.cpdp.bg

• You have the right of portability of all data, which you provided to us on basis of confirmation or contract confirmed (data portability).
• If you give us your consent for your data to be processed, you can revoke this in the same way. The revocation of confirmation will not touch the legality of confirmed maintenance until the revocation.
• If data collection is based on our legitimate interests or is necessary for the performance of a public task, you have the right to revoke the data collection based on reasons according to your special situation.
• You can contradict to this promotional use of your personal data at any time with effect for the future. You can address your contradiction to the responsible person in our company mentioned at the beginning of the notification (advertising contradictory).

Update of privacy notice

We update the privacy notice according to changed functionalities of our website or to changes of legal situation. We recommend you to read the Privacy Policy Information at regular intervals.

In case your confirmation is necessary, or parts of Privacy Policy Information includes regulations that impact our contract with you, we will only do changes pending your confirmation.

Last update: September 2021