Privacy Policy

Version 07.07.2025

DSB places great importance on ensuring that you feel secure as a custom-er with us. This privacy policy provides information about our collection and use of personal data, as well as a description of your rights. Any processing of your data is carried out in accordance with the applicable legislation at any given time.

Who is the data controller?

The data controller for the processing of your personal data is:

• DSB
• Telegade 2 2630
• Taastrup CVR-no.: 25050053

Contact details:

• Phone: 70 13 14 15
• Mail: kundehenv@dsb.dk

DSB's data protection officer can be contacted at:

• Mail: DPO@dsb.dk

You can read more about the types of information we collect, what we use it for, and how we process it below.

 

What information does DSB collect?

When you purchase a ticket, create a customer account inDSB Plus, sign up for Travel Time Guarantee, or other services, you will always receive specific information about what data we collect about you, the legal basis for pro-cessing, what we use your data for, how long we store the data, and whether it is shared with others. If necessary, you will be asked to provide your consent for the processing of your personal data.

DSB has prepared separate privacy policies for various processing activities, which you can read more about below.

 

Inspection fees

If you receive an inspection fee, DSB collects a data about you for the pur-pose of processing the inspection fee case. You can read more about this processing in the Privacy Policy for processing of personal data when issuing an inspection fee.

 

CCTV and Body cameras

To enhance safety and security in, among other things, trains and at sta-tions, DSB conducts CCTV monitoring. You can read more about this pro-cessing in the Privacy Policy for CCTV and Privacy Policy for body cameras.

 

Recording of phone calls

When you call DSB's Customer Center, the phone call may be recorded if you give your consent to it. These recordings are used to train and coach employees in DSB's Customer Center. DSB is the data controller for the processing of your personal data. DSB's legal basis for processing the recordings is Article 6(1)(a) of the General Data Protection Regulation (consent). You can withdraw your consent to the processing at any time. Recordings are stored for 30 days and then deleted.

 

Cookies

DSB collects personal data about your use of our website or apps in the form of cookies. Personal data collected through technically necessary cookies is processed based on Article 6(1)(e) of the GDPR (public authority tasks). Other cookies related to marketing, statistics, etc., require your consent, under Article 6(1)(a) of the GDPR. You can withdraw your consent at any time. You can read more in DSB's cookie policy.

This privacy policy supplements the above information and includes, among other things, e.g. your rights regarding access and deletion, information about complaint options, etc. (see the section "Your Rights").

 

Social Media

DSB processes personal data about visitors collected via DSB’s profiles or pages on social media. DSB and the respective social media provider are joint data controllers for the processing of personal data collected during your visit to DSB’s profile or page on the respective social media platform. You can read more in DSB’s Privacy Policy for Social Media.

 

Your use of DSB’s products and services

In cases of specific suspicion of misuse of DSB's products or services, your personal data may be used in investigations of any irregularities. The pur-pose is to prevent and detect irregularities. The legal basis for processing is Article 6(1)(e) of the GDPR.

 

Who does DSB disclose your data to?

You will always receive specific information about any disclosure of your personal data with others, such as collaborative partners.

Additionally, DSB may forward your inquiry to another transport company, such as Movia, Metro or GoCollective, if the inquiry was mistakenly sent to DSB.

 

How does DSB store personal data?

DSB uses suppliers that we have assessed as best suited to assist us, and some of them process personal data in countries outside the EU/EEA.

Certain suppliers are located in countries approved by the EU Commission as so-called secure third countries, meaning countries that protect your data at approximately the same level as within the EU/EEA. You can read more about which countries are consideres secure third countries on the Danish Data Protection Agency's website.

Some suppliers may be located in countries outside the EU/EEA that have not been assessed by the EU Commission as secure third countries. When we transfer data to recipients in such countries, the legal basis is typically the EU Commission’s standard contractual clauses. The standard contract is available in various languages via the EU Commission's website.

Transfers to the USA can be based on the EU-U.S. Data Privacy Framework, provided the recipient of the data is certified under this scheme.

 

Who has access to your personal data?

Only trusted employees with a work-related need in DSB and DSB’s suppli-ers have access to the collected personal data.

 

What are your rights?

You have the right to access

You can request information about whether we process personal data about you. If we process personal data about you, you have the right to get in-formation about:

• What data we process
• The purpose(s) of the processing
• Who we disclose the data to
• How long we store your data or the criteria used to determine the period

 

You have the right to withdraw your consent

If our basis for processing your data is consent, you have the right to with-draw it. You will be specifically informed about how to withdraw your con-sent, e.g., by deleting your profile on dsb.dk, via a link in an email, etc.

You have the right to rectification

You have the right to ask us to correct data about you if it is incorrect. If you have created a profile, you can also correct the data yourself.

You have the right to erasure

You can request that we delete data about you. However, your data will not be deleted if the law requires us to retain it for a specific period or if contin-ued processing of your data is necessary to establish, exercise or defend a legal claim.

You have the right to object

In certain cases, you have the right to object to our otherwise lawful pro-cessing of your personal data.

You have the right to restriction of processing

You can ask DSB to restrict the processing of your personal data. This means that we may only store your personal data while your objection is being investigated. You cannot exercise this right if we have a payment claim against you, such as a inspection fee or unpaid ticket, Travelcard, etc.

You have the right to data portability

You can request to have the personal data you have provided to us handed over, for example, with the purpose of transferring it to another transport company.

 

How do I complain about DSB’s processing of my data?

If you wish to complain about the processing of your personal data, you can contact us. Email and phone number can be found at the top of this page. If you disagree with our response to your complaint, you can complain to the Danish Data Protection Agency. Read more at www.datatilsynet.dk

 

Inquiries to DSB

If you have further questions about what data we have registered about you and how it is processed, or if you wish to exercise your rights as mentioned above, you can contact us. Email and phone number can be found at the top of this page.

 

Changes

We reserve the right to update this privacy policy at any time. In the event of significant changes, we will inform about the changes at dsb.dk/persondata.