Privacy Statement

3.1 Processing of personal data related to the use of our websites

3.2 Processing of personal data related to customer & account data (B2B context)

• Contact information, such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address; payment data, such as data necessary for processing payments and fraud prevention;
• Further information necessarily processed in a project or contractual relationship with Railnova or voluntarily provided by the Business Partner, such as personal data relating to orders placed, requests, and project details;
• Personal data collected from publicly available resources, integrity databases and credit agencies; and
• If legally required for Business Partner compliance screenings (Business Partner Due Diligence): all publicly available information such as trade register excerpts, press coverage, financial information and information about relevant and significant litigation or other legal proceedings against Business Partners.

• Communicating with Business Partners about products, services and projects, e.g. by responding to inquiries or requests or providing you with information about purchased products;
• Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services;
• Administrating and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other customer activities or events;
• Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities;
• Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and our policies or industry standards; and
• Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

• the performance of a contract (Art. 6 Para. 1 lit. b) GDPR),
• the legitimate interest pursued by Railnova (Art. 6 Para. 1 lit. f) GDPR),
• the compliance with our legal obligation (Art. 6 Para. 1 lit. c) GDPR) or
• the explicit granted consent of our contact person (Art. 6 Para. 1 lit. a) GDPR).

• We may pass on personal data to affiliated companies if necessary, to fulfil the above-mentioned purposes.
• We may pass on personal data to court, public authorities or law firms, if we are legally obliged to do so or if this is necessary for the assertion, exercise or defense of legal claims.
• In addition, we are supported by service providers (so-called data processors) e.g. for IT maintenance services. Those service providers process the personal data only on instructions from Railnova and are bound by contract to adhere to all applicable data protection requirements.
• In some cases, the mentioned recipients of personal data might be based in countries outside the European Union (EU) or the European Economic Area (EEA) that may have a lower level of data protection than within the EU. In such cases, we will ensure an adequate level of data protection for personal data by other means. A transmission will only take place if the recipient signed EU standard contractual clauses with Railnova or has implemented Binding Corporate Rules. Further information can be obtained from the contact mentioned in paragraph 1.

3.3 Processing of personal data related to the use of our social media channels

4.1 Platform usage data (Railfleet / Railgenius, etc)

• User activity within the platform (e.g. actions, timestamps, logs)
• Technical and diagnostic data required for operation, support and security

4.2 Asset and IoT-related data

• collected from connected railway assets and devices
• Sensor, diagnostic and performance data