ÖBB defines payment information as the information we need to process payments. No payment information such as credit or debit card numbers or the Card Validation Code (CVC) is stored.
When a specific booking is made, the card type (VISA, MasterCard, etc.) and the last 4 digits of the payment method are saved. Certified and PCI-certified payment service providers are used to process the payment transaction, which process and use the payment information for handling the booking.
Payment data will only be stored by ÖBB in exceptional cases, for instance if we are unable to carry out a cancellation automatically and must subsequently transfer the cancellation amount. We store the following data for this purpose: name of the applicant, IBAN, BIC, name of the bank and the address (postcode, town, country, street and house number).