How (not) to work with small probabilities: Evaluating the individual risk of railway transport