Privacy Policy

DSB places great emphasis on you feeling safe being a customer with us. This privacy policy contains information about our collection and use of personal data as well as a description of your rights. Any processing of your data is in accordance with the law applicable at any given time.

Who is the data controller?

The data controller for the processing of your personal data is:

• DSB
• Telegade 2 2630
• Taastrup CVR-no.: 25050053

Contact details:

• Phone: 70 13 14 15
• Mail: kundehenv@dsb.dk

DSB's data protection officer can be contacted at:

• Mail: DPO@dsb.dk

 

What information does DSB collect?

When you buy a ticket, create a customer account in DSB Plus, sign up for Travel Time Guarantee or other, you will always receive specific information about what data we collect about you, the legal basis for the processing, what we use your data for, how long we store the data, and whether it is passed on to others. If necessary, you will be asked to give your consent to the processing of your personal data.

DSB has prepared separate privacy policies for a number of processing activities, you can read more below.

 

Inspection fees

If you receive an inspection fee, DSB collects data about you for processing the inspection fee case. You can read more about this processing in the Privacy Policy for processing personal data when issuing an inspection fee.

 

CCTV and Body cameras

In order to increase safety and security in, among other things, trains and at stations, DSB conducts CCTV monitoring. You can read more about this processing in the Privacy Policy for CCTV and Privacy Policy for body cameras.

 

Recording of phone calls

When you call DSB's Customer Center, the phone call may be recorded if you give your consent to it. These recordings are used to train and coach employees in DSB's Customer Center. DSB is the data controller for the processing of your personal data. DSB's legal basis for processing the recordings is Article 6(1)(a) of the General Data Protection Regulation (consent). You can withdraw your consent to the processing at any time here. The recordings are stored for 30 days, after which they are deleted.

 

Cookies

DSB collects personal data about your use of our website in the form of cookies. These are used to optimize the website. Other cookies regarding marketing, statistics, etc. are not standard but optin with consent, which you can withdraw at any time. You can read more about this in DSB's cookie policy.

This Privacy Policy supplements the above information and contains, among other things, your rights regarding, for example, the right to access and deletion, information about complaint options, etc. (see the section "Your rights").

 

Your use of DSB’s products and services

In the event of specific suspicion of misuse of DSB's products or services, your personal data may be used in connection with investigations of any irregularities. The purpose is to prevent and detect irregularities. The legal basis for the processing is Article 6(1)(e), of the General Data Protection Regulation.

 

Who does DSB disclose your data to?

You will always receive specific information about any disclosure of your personal data to others, such as collaborative partners. Additionally, DSB may forward your inquiry to another transport company, such as Movia, Metro, or GoCollective, if the inquiry was mistakenly sent to DSB.

 

How does DSB store personal data?

DSB uses the suppliers that we have assessed to be the best at assisting us, and some of them process personal data in countries outside of the EU/EEA.

Certain suppliers are located in countries that have been approved by the EU Commission as socalled safe third countries, i.e., countries that protect your data at approximately the same level as within the EU/EEA. You can read more about which countries are considered safe third countries on the Danish Data Protection Agency's website.

Some suppliers may be located in non-EU/EEA countries not assessed by the EU Commission as safe third countries. When we transfer data to recipients in such countries, the legal basis is typically the EU Commission's standard contractual clauses "Standard Contractual Clauses". The standard agreement is available in various languages via the EU Commission's website.

Transfers to USA may be based on the EU-U.S. Data Privacy Framework if the recipient of data is certified according to this scheme.

 

Who has access to your personal data?

Only trusted employees with a workrelated need at DSB and at DSB’s suppliers have access to the collected personal data.

 

What are your rights?

You have the right to access

You can request to be informed if we process personal data about you. If we process personal data about you, you have the right to get information about:

• What data we process
• The purpose(s) of the processing
• Who we disclose the data to
• How long we store your data or the criteria used to determine the period

 

You have the right to withdraw your consent

If our basis for processing your data is a consent, you have the right to revoke it.

You will be specifically informed about how your consent can be revoked. This can happen, for example, by closing your profile on dsb.dk, via link in email, etc.

You have the right to rectification

You have the right to ask us to correct information about you if they are not correct. If you have created a profile, you can also correct the information yourself.

You have the right to erasure

You can ask us to delete information about you. Your information will not be deleted if legislation prescribes that we must store the information for a certain period, or if continued processing of your information is necessary in order for a legal claim to be established, enforced or defended.

You have the right to restriction of processing

You can ask DSB to limit the processing of your personal data. This means that we may only store your personal data while your objection is further investigated. You cannot use this right if we have a payment claim against you, e.g., an inspection fee or missing payment for ticket, Rejsekort or similar.

You have the right to data portability

You can request to have the personal data you have provided to us handed over, for example, with the purpose of transferring it to another transport company.

 

How do I complain about DSB’s processing of my data?

If you want to complain about the processing of your personal data, you can contact us. Email and phone number can be found at the top of this page. If you disagree with our response to your complaint, you can complain to the Danish Data Protection Agency (Datatilsynet). Read more at www.datatilsynet.dk

 

Inquiries to DSB

If you have further questions about which information, we have registered about you and how they are processed, or you want to exercise your rights as mentioned above, you can contact us. Email and phone number can be found at the top of this page.

 

Changes

We reserve the right to update this privacy policy at any time. In the event of significant changes, we will inform about the changes at dsb.dk/persondata.