Engagement with own workforce and workers’ representatives, channels for expressing concerns or needs and approaches to remedy

Processes for engaging with own workforce and workers’ representatives about impacts (S1-2)

Employees can submit data protection concerns or questions about data subject rights via the Group-wide input management system. An “input” includes any data-protection-related request addressed to DB Group via the intended communication channels (email, post), regardless of whether it is an inquiry, a complaint, a notification or an assertion of data subject rights. The Group-wide input management system receives all inquiries via the aforementioned channels. It serves as the central first point of contact for customers and employees with data protection concerns such as requests for information, complaints or requests for erasure. The data protection organization systematically records and evaluates the input and derives measures for process optimization.

Processes to remediate negative impacts and channels for own workforce to raise concerns (S1-3)

Data protection incidents are recorded and examined centrally, systematically remedied by the respective specialist departments using technical and organizational measures and, if they are subject to a reporting obligation, reported to the relevant supervisory authority. Employees can assert their rights to information, correction, erasure or objection in accordance with standardized procedures. In addition, an internal communication channel is available for data-protection-related concerns. All reports are treated confidentially. Risks or potential for improvement are incorporated into the continuous optimization of data protection processes.