Data & Privacy Information | Deutsche Telekom Group
Data privacy information
The protection of your personal data has a high priority for the Deutsche Telekom Group. It is important for us to inform you about what personal data is collected, how they are used and what options you have in this regard.
1. What data is collected, how is it used, and how long is it stored?
a) Necessary processing for the provision of the digital service (Art. 6 para. 1b GDPR, §25 para. 2 no. 2 TDDDG)
When using our website careers.telekom.com, hereinafter referred to as the digital service: When you visit our digital service, the web server temporarily records the domain name or IP address of your computer, the file request (file name and URL) from the client, the http response code, and the website from which you are visiting us. The data logged is used solely for data security purposes, particularly to protect against attempted attacks on our web server (Article 6 (1) f GDPR). We do not use it to create individual user profiles, nor do we share the data with third parties. It is erased after seven days at the latest. We reserve the right to statistically analyze anonymized data records.
b) Processing in the provision of the digital service that is carried out on the basis of legitimate interest (Art. 6 para. 1 f GDPR, §25 para. 2 no. 2 TDDDG)
When you use our digital service, our servers temporarily record the domain name or IP address of your device as well as other data, such as the requested content or the response code.
The logged data is used exclusively for data security purposes, in particular to defend against attacks on our server. They are neither used for the creation of individual user profiles nor passed on to third parties and will be deleted after 7 days at the latest. We reserve the right to statistically evaluate anonymized data sets.
c) Processing in the provision of the Digital Service by third parties
Many operating systems provide the possibility to dictate the text in addition to input via keyboard. When using this function, the language is processed by the third party (e.g. Apple, Google, Microsoft) as the controller and the result is displayed in the input field. For details of the functionality, how you can switch the use on or off and the legal basis of the processing, please contact the respective operating system manufacturer (third party).
2. Data control of the social media plug-ins used or links to social media platforms
Some pages contain buttons from social media networks (such as Facebook, Instagram, LinkedIn) with which you can recommend the offers of the Deutsche Telekom Group to your friends and acquaintances.
To ensure that you have full control over your data, the buttons used only establish direct contact between the respective social network and the visitor when you actively click on the button (one-click solution).
In our digital service, we only use the pictograms of the respective social media network. Only by clicking on the pictogram will you be directed to the company page on the respective social media platform. The social media platforms as well as the third-party content providers, which can be reached via the pictograms, provide these services and the processing of their data under their own responsibility.
By activating the social media plug-in or link via the pictogram, also for sharing content (Art. 6 para. 1 a GDPR), the following data can be transmitted to the social media providers: IP address, browser information, operating system, screen resolution, installed browser plug-ins, previous page if you followed a link (referrer), the URL of the current page, etc.
On the next call, the social media plug-ins are again provided in the default inactive mode, so that no data is transmitted on a subsequent visit.
Further information on social media plug-ins, the scope and purposes of the respective data processing as well as further data protection-relevant information can be found in the Privacy Policy of the respective controller as well as for the explanation of the <<1-Click solution on Heise.de>>
3. Is my usage behavior evaluated, e.g. for advertising or tracking?
We want you to enjoy using our digital services and using our products and services. In order for you to find the information that interest you and for us to be able to design our digital service in a user-friendly way, we analyse your usage behaviour in pseudonymised form. Within the framework of the legal regulations, user profiles are created. In the following, we provide you with general information about the various purposes of the processing. By clicking on the "Consent to data processing" query, which appears when you access our digital service, you have the option of agreeing to the processing or rejecting it in part or in full. Processing necessary for the provision of the digital service (see explanation above under 1.) cannot be refused.
Tag management (strictly necessary): Tag management is used to manage the use of tools on our website. Tag management can be used to control where which tool is used.
Reach measurement provides statistics on a website's usage intensity and the number of users, along with comparable figures for all of the connected services. Individual users are not identified at any time. Your identity is always protected.
a) Basic digital service functionality
These processing’s are always active and necessary for our digital service to function properly.
Functional: These processing’s are necessary for you to be able to navigate through the Digital Service and use essential functions. In addition, they are used for the anonymous evaluation of user behavior, which we use to continuously develop our digital service for you. The legal basis for this processing is §25 (2) No. 2 TDDDG, Art. 6 (1b) GDPR or, in the case of third countries, Art. 44 et seq. GDPR.
Company | Purpose | Storage period | Country of processing |
|---|---|---|---|
Tealium* | Tag management | Cookie (12 month) | Germany |
Mapp* (formaly Webtrekk) | Website improvement, fault analysis | Session, no cookies | Germany |
*You can find details of our external service providers in the partner list below.
Analytical: These processing’s are necessary for us to carry out technical analyses, usage evaluations and reach measurements, with which we can ensure the quality and services offered and improve structural defects of the digital service and its functions. The necessary analytical processing is carried out without access to your terminal device and is based on information already collected for the provision of the digital service, see functionally necessary processing. After pseudonymisation, these are further processed exclusively for the purpose of ensuring a high-quality and service-oriented service implementation, storage period 3 months. The legal basis for this processing is Art. 6 (4) GDPR.
b) Optional processing
These processing’s are used when you use additional features, such as Youtube video or live-stream. The legal basis for this processing is §25 (1) TDDDG, Art. 6 (1) (a) GDPR or, in the case of third countries, Art. 49 (1) (a) GDPR.
Company | Purpose | Storage period | Country of processing |
|---|---|---|---|
Google LLC* | Google Youtube Videos & Live Stream | Cookie (up to 2 years) | USA |
*You can find details of our external service providers in the partner list below.
c) Deutsche Telekom AG analytics
These processing’s help us improve our understanding of user behavior. We use cookies and analytics technologies to get a better understanding of how our digital service is used. They help us optimize our digital services. For example, we can determine how many people visit our website or a particular service. They are also useful for statistical evaluations that show us how people use our digital services. The analysis is based on pseudonymous information. The legal basis for this processing is §25 (1) TDDDG, Art. 6 (1) (a) GDPR or, in the case of third countries, Art. 49 (1) (a) GDPR.
Company | Purpose | Storage period | Country of processing |
|---|---|---|---|
Tealium* | Tag management | Cookie (12 month) | Germany |
Mapp* (formaly Webtrekk) | Website improvement, fault analysis | Session, no cookies | Germany |
Conversion Expert GmbH* | A/B Testing | Cookie (3 month) | Germany |
*You can find details of our external service providers in the partner list below.
d) Deutsche Telekom AG marketing
We use these processing’s to show you personalized ads and content that is relevant to you. Cookies and similar marketing technologies ensure that you only see ads that match your interests instead of random ads. We also use marketing technologies to check how well users receive an advertisement. This helps us constantly improve our advertising. Marketing technologies are also used in digital services of our advertising partners. This is called retargeting. It enables us to show you suitable advertising on other sites as well. With the help of marketing technologies, we create pseudonymous profiles about the content and ads you view. This information helps us understand what interests you. It also enables us to show you relevant advertising in other digital services. The legal basis for this processing is §25 (1) TDDDG, Art. 6 (1a) GDPR or, in the case of third countries, Art. 49 (1a) GDPR.
Company | Purpose | Storage Period | Country of processing |
|---|---|---|---|
socialtelligence GmbH (Hi Candidate)* | Conversion optimized posting of social media ads | No cookies | Germany |
*You can find details of our external service providers in the partner list below.
e) Marketing through partners
We and our partners use these processings to show you personalized content that is relevant to you. We and our partners use cookies and similar marketing technologies to serve personalized advertising. Some of our partners act independently or in joint controllership with Deutsche Telekom AG. They use these technologies to collect data for marketing purposes. The data can be used for the partners’ advertising purposes, processed further and combined with data from other sources.When you use our digital service, we create a profile. This helps us show you ads in other digital services that are tailored to your interests. We also measure the effectiveness of this advertising and collect further information about your online behavior.
Company | Purpose | Storage Period | Country of processing |
|---|---|---|---|
Google LLC* | Google Ads | Cookie (13 months) | USA |
LinkedIn Inc.* | LinkedIn Insight Tag | Cookie (6 months) | USA |
Meta Platforms Ireland Ltd.* | Meta Business Tools | Cookie (12 months) | USA |
*You can find details of our external service providers in the partner list below.
4. Where can I find the information that is important to me?
Additional information on data protection when using our products as a customer of Telekom Deutschland GmbH can be found in the data protection information under www.telekom.de/datenschutzhinweise or under www.telekom.com/datenschutz.
5. What rights do I have?
You have the right to:
a) to request information on categories of data processed, processing purposes, possible recipients of the data, the planned storage period (Art. 15 GDPR);
b) request the correction or completion of incorrect or incomplete data (Art. 16 GDPR);
c) to revoke a given consent at any time with effect for the future (Art. 7 para. 3 GDPR);
d) to object at any time for the future to data processing that is to be carried out on the basis of a legitimate interest, for reasons arising from your particular situation (Art. 21 para. 1 GDPR), stating these reasons. You can object to data processing for direct marketing purposes at any time without stating these reasons (Art. 21 para. 2, 3 GDPR);
e) in certain cases, request the deletion of data within the framework of Art. 17 GDPR - in particular if the data is no longer required for the intended purpose or is processed unlawfully, or if you have withdrawn your consent in accordance with (c) above or have declared an objection in accordance with (d) above;
f) under certain conditions, to demand the restriction of data if deletion is not possible or the obligation to delete is disputed (Art. 18 GDPR);
g) data portability, i.e. You can receive your data that you have provided to us in a commonly used machine-readable format, such as z.B. CSV, and, if necessary, transmit it to others (Art. 20 GDPR;)
h) to complain to the competent supervisory authority about the data processing (for telecommunications contracts: Federal Commissioner for Data Protection and Freedom of Information; otherwise: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia).
6. To whom does Deutsche Telekom share my data?
To processors, i.e. companies that we commission to process data within the scope provided for by law, Art. 28 GDPR (service providers, vicarious agents). In this case, Deutsche Telekom remains responsible for the protection of your data. In particular, we commission companies in the following areas: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing.
To cooperation partners who provide services for you on their own responsibility or in connection with your telecom contract. This is the case if you commission services from such partners with us or if you consent to the involvement of the partner or if we involve the partner on the basis of a legal permission.
In addition, Deutsche Telekom is striving to cooperate with other service providers (e.g. smart home services). If you are also a user of these services, you can link your respective account to them. This linking must be done by you separately for each service. Once you have made a link, the personal data listed in this Privacy Policy may be used from your respective account for the relevant service. The respective service provider will inform you about the processing of your personal data.
Due to legal obligation: In certain cases, we are required by law to transmit certain data to the requesting government entity.
7. Where will my data be processed?
Your data will be processed in Germany and other European countries.
In some cases, your data is also processed in countries outside the European Union (i.e. in so-called third countries), currently for example:
Storage/hosting of customer data (excluding traffic data) by Amazon Web Services EMEA SARL, Microsoft Ireland Operations Ltd., Google Cloud EMEA Limited, Ireland and Salesforce.com Germany GmbH in Europe. Only administrators with technical support access from the USA are possible.
In all other respects, the following applies: If data processing takes place in third countries, this will take place insofar as you have expressly consented to this or if it is necessary for our provision of services to you or if it is provided for by law (Art. 49 GDPR).
Your data will only be processed in third countries if certain measures are taken to ensure that an adequate level of data protection is in place (e.g. adequacy decision of the EU Commission or so-called suitable safeguards, Art. 44 et seq. GDPR.
8. Who is responsible for data processing? Who is my contact person if I have questions about data protection at Deutsche Telekom?
The data controller is the Deutsche Telekom AG. If you have any questions, you can contact our customer service or our data protection officer Susanne Eichhorn, Friedrich-Ebert-Allee 140, 53113 Bonn, datenschutz@telekom.de.
9. Partnerlist
Processing company with company adress/data recipient | Tealium Inc.
11095 Torreyana Road |
|---|---|
Processing purpose according to consent category | necessary |
Products used/short description of the service used | Tag management |
Description of specific processing purpose | Tealium is used to control whether a cookie, pixel or server-to-server communication is loaded based on the consent decision and which data may be processed by cookies, pixels or server-to-server. Data is transferred to third-party providers via the browser and/or directly via server connections. The provider Tealium itself has no access to the content of the cookies and pixels. The software is required to provide the service and to implement the privacy settings made and therefore cannot be deactivated. |
Responsibilities | Deutsche Telekom AG is responsible for data protection. Tealium acts on behalf of Deutsche Telekom. |
Processed data | Browser version, IP address, device properties, services used, products and articles viewed and clicked on, pages visited, time measurement, device operating system, number of visits, usage data, screen resolution, usage/click behaviour, advertisements viewed |
Storage period | 3 months |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TTDSG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | USA |
Legal basis (Third country processing)
| EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Art 49 GDPR) |
Processing company with company adress/data recipient | MAPP DIGITAL GERMANY GMBH
Sandstr. 3
80335 Munich
Germany |
|---|---|
Processing purpose according to consent category | Analytics by Telekom |
Products used/short description of the service used | This is a web analysis and statistics service. |
Description of specific processing purpose | With this service, we analyse and optimise the interaction with our customers on our digital service as well as marketing campaigns. Segmentation and targeting help us to provide relevant content at the right time. The data helps us to better understand user behaviour and continuously improve our digital service. |
Responsibilities | Deutsche Telekom AG is responsible for data protection. Mapp Digital Germany GmbH acts on behalf of Deutsche Telekom. |
Processed data | Internet service provider, anonymised IP address, browser information, date and time of visit, device information, location information, referrer URL, user ID, order ID |
Storage period | 6 months |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TTDSG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | no third party processing |
Processing company with company adress/data recipient | Conversion Expert GmbH (ABlyft)
Zeppelinring 52c
24146 Kiel
Germany |
|---|---|
Processing purpose according to consent category | Analytics by Telekom |
Products used/short description of the service used | A/B Testing |
Description of specific processing purpose | We use this service to optimise the effectiveness of our marketing communication and campaigns. This involves testing different versions of content, layouts or offers to find out which version elicits the best reactions and interactions from our website visitors. The data obtained enables us to make informed decisions, improve the user experience and increase conversion rates. This helps us to develop targeted marketing and communication strategies that better meet the needs of our website visitors. |
Responsibilities | Deutsche Telekom AG is responsible for data protection. ABLyft GmbH acts on behalf of Deutsche Telekom AG. |
Processed data | IP addresses, browser types, operating systems and geographical locations, data on clicks, page views, dwell time and other actions performed by users during the tests, information on which version of a campaign or content is displayed to users, data on other characteristics relevant for the segmentation of target groups, cookie ID |
Storage period | 3 months |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TTDSG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | no third party processing |
Processing company with company adress/data recipient | Google Ireland Ltd.
Gordon House, Barrow Street,
Dublin 4, Ireland |
|---|---|
Processing purpose according to consent category | Marketing through partners |
Products used/short description of the service used | Google Ads |
Description of specific processing purpose | Google Ads is used to present interest-based adverts to visitors within the Google advertising network. In the digital service, the visitor can then be presented with adverts that relate to content that the visitor has previously accessed in other digital services that use Google's remarketing function. If you have reached our digital service via a Google advert, Google AdWords will store a cookie on your end device. This cookie loses its validity after 90 days. The information collected with the help of this so-called conversion cookie is used to compile statistics on our conversion rate. This means that we find out how many users have come to our websites via a Google advert and purchased a product within 90 days. |
Responsibilities | Deutsche Telekom and Google Ireland Ltd are responsible for this. You can find further information on data processing by Google in the data protection information of Google Ireland Ltd (https://business.safety.google/privacy/?hl=en-US).
|
Processed data | Cookie ID, date and time of the visit, device information, IP address, information about the operating system, referrer URL, web request, browser information |
Storage period | 13 months |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TTDSG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | Argentina; Israel; Japan; Canada; New Zealand; Switzerland; United States of America and the United Kingdom |
Legal Basis (Third country processing) | EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Art 49 GDPR) |
Processing company with company adress/data recipient | LinkedIn Unlimited Company,
Wilton Plaza, Wilton Place,
Dublin 2, Irland
|
|---|---|
Processing purpose according to consent category | Marketing with partners |
Products used/short description of the service used | LinkedIn Insight Tag |
Description of specific processing purpose | The LinkedIn Insight Tag enables the collection of statistical, pseudonymised data (referrer URL, IP address (shortened), device and browser characteristics) about the use of our online service and, on this basis, the provision of corresponding aggregated statistics. This information is also used to display interest-specific and relevant offers and recommendations after you have shown an interest in certain products, information and offers on our online service. This anonymous information is stored in a cookie for 6 months. |
Responsibilities | Deutsche Telekom AG and LinkedIn Unlimited Company are acting on their own responsibility in this regard. You can find further information on data processing in the LinkedIn Unlimited Company's privacy policy (https://de.linkedin.com/legal/privacy-policy). |
Processed data | Referrer URL, IP address (shortened), device and browser properties |
Storage period | 6 months |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TTDSG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | USA |
Legal Basis (Third country processing) | EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Art 49 GDPR) |
Processing company with company adress/data recipient | Google Ireland Ltd.
Gordon House, Barrow Street,
Dublin 4, Ireland |
|---|---|
Processing purpose according to consent category | optional |
Products used/short description of the service used | Google Youtube Videos and Live-Stream |
Description of specific processing purpose | YouTube collects data to provide users with better services - from identifying basic information, such as your language, to more complex issues, such as advertising. What data YouTube collects and how it is used depends on how you use the services and how you manage your privacy settings.
If you are not signed in to a Google Account, the data collected will be stored with unique identifiers associated with the browser, app or device. This ensures, for example, that the language settings are retained for all sessions.
If you are signed in to a Google Account, data is also collected that is stored in your Google Account and is considered personal data. |
Responsibilities | Deutsche Telekom and Google Ireland Ltd are responsible for this. You can find further information on data processing by Google in the data protection information of Google Ireland Ltd (https://business.safety.google/privacy/?hl=en-US).
|
Processed data | IP address, Device information (browser, operating system, etc.), Location data, Usage behaviour (videos viewed, length of stay, etc.) |
Storage period | up to 2 years |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TDDDG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | USA |
Legal Basis (Third country processing) | EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Art 49 GDPR) |
Processing company with company adress/data recipient | Meta Platforms Ireland Limited,
Merrion Road Dublin 4,
D04 X2K5 Ireland |
|---|---|
Processing purpose according to consent category | Marketing with partners |
Products used/short description of the service used | We use the Meta business tools to play out our campaigns. The Meta Pixel is used to measure and analyse the success of Facebook advertising campaigns and re-targeting on Meta platforms. |
Description of specific processing purpose | The Facebook service is used to display relevant adverts. For this reason, we share the interactions on our online service with Facebook. This is necessary to ensure that the content of the adverts is tailored to you. For example, we share information with Facebook about which products were of interest to you so that we can suggest products and services on Facebook that may be of interest to you. The data that is forwarded to Facebook also helps us to track and analyse the success of our marketing activities. This information is used to optimise the ads to ensure a high level of efficiency. |
Responsibilities | Deutsche Telekom AG and Meta Platforms Ireland Limited are acting on their own responsibility. You can find further information on data processing in Meta's privacy policy (https://www.facebook.com/privacy/policy). |
Processed data | Viewed ads, Viewed content, Device information, Geographic location, HTTP header, Interactions with ads, services and products, IP address, Clicked elements, Marketing information, Visited pages, Pixel ID, Referrer URL, Usage data, User behaviour, Facebook cookie information, Facebook user ID, Usage/click behaviour, Browser information, Device operating system, Device ID, User agent, Browser type, Browser ID (fbq), Event ID |
Storage period | up to 12 months |
Legal basis (processing) | This web service is used on the basis of § 25 para. 1 sentence 1 TDDDG, the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR. |
Third country processing | USA |
Legal Basis (Third country processing) | EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Art 49 GDPR) |
Status of the Privacy Policy 03.03.2026