Privacy notice

Controller

The controller for personal data on zuglive.de is:

Email: [email protected]

Summary

• You can use Zuglive without an account or sign-in.
• We use no third-party analytics or advertising services.
• Favorites, recent searches and settings stay in your browser.
• Every page view involves Cloudflare (delivery) and Google (consent service). CARTO is involved as soon as you scroll or touch the screen on the home page or the map page, or click the map preview.

Visiting the website and server logs

Each time you open a page, your browser sends technical data to our servers. The logs record the IP address, date and time, the requested address including any parameters (such as search terms or coordinates), the previous page (referrer), browser and operating system (user agent), status code and amount of data transferred.

We process these data to deliver the website, keep it secure and fix faults. The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). The logs are rotated by size and overwritten automatically. We only look at them to investigate a fault or misuse.

Delivery through Cloudflare

The website and our error service are delivered through the network of Cloudflare, Inc. (USA). Cloudflare receives the requests, forwards them to our servers and processes the connection data, in particular your IP address. This serves secure and fast delivery (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA rely on the European Commission's adequacy decision (Art. 45 GDPR). See Cloudflare's privacy policy.

Error diagnostics

Every page loads a script from our own error service at errors.tomdapp.uk. If a technical error occurs in your browser, the script sends technical information for diagnosis, including information about the page visited, the error, the browser and operating system, and the language setting. Error messages and technical details may contain personal information. We use the reports to investigate and fix technical faults.

The service stores error reports and groups recurring errors for analysis. Grouping does not automatically make this information anonymous. The service deletes individual error reports, with all their technical details, after 21 days. It checks this each time a new report arrives, and keeps at most the 50 most recent reports per error. The summary of each error (error type, page, first and last occurrence, count) and the notification by which the service reports a new error to us (error type, page, error message, time) are kept with no automatic deletion period. The legal basis is our legitimate interest in detecting and fixing errors (Art. 6(1)(f) GDPR). For questions about an error report or the deletion of personal information, write to [email protected].

Search and nearby stations

Our server answers your searches for trains, stations and connections. The search terms appear as part of the address in the server logs; we do not store them in a database. Only your browser remembers your recent searches.

For “Find nearby stations”, your browser asks whether the website may use your location. If you allow it, the browser sends the coordinates to our server, which works out the nearest stations. We do not store the coordinates in a database; as part of the request they may appear in the server logs. Your browser reuses the position for up to one hour. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your browser's site settings.

Map

On the home page and the map page, the map first appears as a preview image. As soon as you scroll on one of these pages, touch the screen or click the preview, your browser loads the interactive map and with it map data from CARTO, even if the map is not yet in view. If you open the map from a train page, your browser loads the map data straight away. CARTO then receives your IP address, browser details and the requested map areas. The legal basis is our legitimate interest in a map that is ready when you reach it (Art. 6(1)(f) GDPR). CARTO may process data outside the EU; see CARTO's privacy policy. Our server fetches the railway layer from OpenRailwayMap, which receives no data about you.

Google consent service

Every page loads Funding Choices, Google's consent management service. For users in the EEA the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the service loads, Google receives your IP address, browser details and the address of our website.

The service is in place so that consent can be managed as soon as we use services that require it. No such services, such as Google Analytics or advertising, are active at present. When we checked on 7 October 2026, the service showed no dialog and set no cookies. The legal basis is our legitimate interest in having consent management ready (Art. 6(1)(f) GDPR). Google may transfer data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. See Google's privacy policy.

Visits from AI services

If you reach us through a link in an AI service such as ChatGPT, Perplexity, Gemini or Claude, we store the name of the service, the page you opened, your browser's user agent and the time, but not your IP address. This shows us through which services people find Zuglive. The legal basis is our legitimate interest in this analysis (Art. 6(1)(f) GDPR). No automatic deletion period is set up yet; we delete the entries once we no longer need them for this analysis.

Notifications

For Germany we do not send any notifications yet. Train pages therefore do not offer them, and your browser is not asked for permission. If you allowed notifications in your browser earlier, the push service of your browser vendor (for example Google, Mozilla or Apple) created a push address. Our server may have stored this address with its keys, the language, and the train and date you asked about. The legal basis is your consent (Art. 6(1)(a) GDPR). You withdraw it by revoking the permission in your browser; on request we delete the stored details.

Booking links

Booking links lead to Omio, an independent provider. Omio only receives data from your browser when you open such a link, and processes it under its own privacy policy. The German booking links carry no affiliate tracking.

Cookies and browser storage

The notice on cookies and browser storage lists the cookies and browser storage entries we use. None of them serves advertising or third-party analytics.

Contacting us by email

When you email us, we process your address, the message and any attachments to answer your inquiry. The legal basis is our legitimate interest in handling it (Art. 6(1)(f) GDPR), or Art. 6(1)(b) GDPR for inquiries about a contract. We keep messages as long as needed to handle them and while claims may arise.

Recipients

Only the service providers named here receive personal data, within their task: Cloudflare (delivery), Google (consent service) and CARTO (map, see “Map”). We do not sell data or pass it on for advertising.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to [email protected].

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Our lead authority is the Garante per la protezione dei dati personali in Italy; you can also contact the authority where you live.

You are not obliged to provide data. Without the technical connection data, however, we cannot deliver the website, and without location permission you search for stations by hand. We do not make automated decisions within the meaning of Art. 22 GDPR.

Changes

We update this notice when the website, the services we use or the law change. The version published here applies.