§ 1 Version and Change History

VersionDateAuthorReason
1.022/04/2025Malakhov AleksandrCreation

§ 2 General Information

Telekom attaches great importance to protecting your personal data. We inform you what personal data we collect, how your data is used, and the options available to you.

§ 3 Where Can I Find the Information Important to Me?

This General Data Privacy Information provides an overview of the aspects that generally apply to the processing of your data by Telekom. Additional information on data privacy associated with the use of our products, particularly regarding the intended purpose, deletion periods etc., can be found in the data privacy information for that particular product at www.telekom.de/datenschutzhinweise and in the Telekom Shop

We process your data in line with the regulations of European and German data privacy laws (the regulations cited below refer to the EU General Data Protection Regulation, GDPR), i.e. only to the extent that and insofar as

  • it is necessary for performance of a contract with you or to carry out steps at your request prior to entering into a contract (Art. 6 sec. 1b GDPR) or you have given your consent to the processing of your data (Art. 6 sec. 1a GDPR) or
  • processing is necessary in order to protect our own or third party legitimate interests, e.g. in the following cases: to assert claims, to defend our interests in lawsuits, to recognize and eliminate misuse; to prevent and investigate criminal offenses; to ensure secure IT operations at Telekom; Adjustment of our product and service range as well as our marketing campaigns by means of analytical and statistical procedures; Survey of individual customer contacts; consulting services (consulting companies); (Art. 6 sec. 1f GDPR) or
  • for compliance with legal requirements, e.g. the retention of documents for commercial and fiscal purposes (Article 6 sec. 1c GDPR), or where it is in the public interest (Article 6 sec. 1e GDPR) or further processing is carried out for another purpose (Art. 6 sec. 4 GDPR)
    • to anonymize data so that the personal reference is omitted;
    • to carry out technical analyses, usage evaluations and reach measurements in order to ensure the quality of our services and identify structural errors in our customer service systems. The processing is carried out on the basis of information already collected (original legal basis Art. 6 sec. 1 b GDPR), which was previously pseudonymized. This information is deleted after 3 months.

You can object to processing on the basis of legitimate interest (Art. 6 para.1 f DSGVO) at any time, see under: "What rights do I have?

§ 5 What Are My Rights?

You have the right

  • a. to demand information regarding the categories of data being processed, the purpose of processing, the recipients of the data, and the planned duration of data storage (Art. 15 GDPR);
  • b. to demand the rectification or completion of inaccurate or incomplete data (Art. 16 GDPR);
  • c. to withdraw your consent at any time with future effect (Art. 7 sec. 3 GDPR);
  • d. to object to data processing on the basis of a legitimate interest based on your particular situation (Art. 21 sec. 1 GDPR); You may object to data processing for direct marketing purposes at any time without stating these reasons (Art. 21 (2), (3) DSGVO);
  • e. in specific cases as outlined in Art. 17 GDPR, to demand the erasure of data, particularly where the data is no longer necessary for the intended purposes, or was processed unlawfully, or you have withdrawn your consent in accordance with (c) above, or have objected to data processing in accordance with (d) above;
  • f. under certain circumstances, to demand the restriction of data processing, to the extent that erasure is not possible, or the obligation to erase data is disputed (Art. 18 GDPR);
  • g. to data portability, i.e. you may receive your disclosed data in a commonly used, machine-readable format, such as CSV, and where applicable, transmit it to others (Art. 20 GDPR)
  • h. to complain to the competent supervisory authority (for telecommunications contracts: the Federal Officer for Data Privacy and Freedom of Information; in other cases: the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW).

§ 6 Does Telekom Carry Out Risk Assessments and Does It Work Together with Credit Agencies?

Telekom carries out a risk assessment before concluding a contract if it is to provide services that will only be remunerated later. The purpose of this is to protect against payment defaults. For this check, we use data about you and payment experiences from existing contracts, also with other companies of the Telekom Group. This includes information such as your name, address, date of birth and customer number, the term of your contracts, your order history, payment transactions and sales figures. If information from our group is not sufficient for a check, we also obtain information from credit agencies and debt collection companies. For this purpose, we transmit to them the name, address, date of birth and IBAN. If we receive data from credit agencies or debt collection companies, we also use scoring if necessary. This calculates the probability that a customer will meet his or her payment obligations in accordance with the contract. Scoring is based on a mathematically and statistically recognised and proven procedure. We save the results of a credit check for one year. Article 6 (1 b) GDPR set out the legal basis for these forms of data processing. We collaborate with the following credit agencies and debt collection companies: SCHUFA Holding AG; CRIF GmbH; Creditreform Boniversum GmbH; Creditreform Bonn Domschke & Rossen KG; Bisnode Deutschland GmbH; EOS Deutscher Inkasso-Dienst GmbH; KSP Kanzlei Dr. Seegers; Dr. Frankenheim Rechtsanwaltsgesellschaft mbH; Sirius Inkasso GmbH; Inkasso Tesch Forderungsmanagement GmbH; Intrum Deutschland GmbH; Phillips & Cohen Associates (Deutschland) GmbH. We also transmit to SCHUFA Holding AG and CRIF GmbH personal data collected within the framework of the contractual relationship regarding non-contractual or fraudulent behaviour (so-called negative data). This data is used by the credit agencies both for the purpose of checking creditworthiness and for fraud prevention. Furthermore, so-called positive data, i.e. information on undisturbed ongoing contractual relationships (application, execution and termination of the same) are exchanged with CRIF GmbH. This data is used exclusively for the purpose of fraud prevention (e.g. prevention of orders without payment intention or detection of identity theft). SCHUFA Holding AG and CRIF GmbH process the data received and also use it for the purpose of scoring in order to provide their contractual partners in the European Economic Area and in Switzerland as well as, if applicable, other third countries (insofar as an adequacy decision of the European Commission exists with regard to these) with information on, among other things, the assessment of the creditworthiness of natural persons. The socalled positive data are used exclusively to create scores for fraud prevention.

In addition to the above, SCHUFA supports its contractual partners by profiling them to identify conspicuous circumstances (e.g. for the purpose of fraud prevention in the mail order business). For this purpose, enquiries from SCHUFA's contractual partners are analysed in order to check them for potential anomalies. This calculation, which is carried out individually for each contract partner, may also include address data, information as to whether and in what capacity an entry exists in generally accessible sources for a public figure with matching personal data, as well as aggregated statistical information from the SCHUFA database. This procedure has no effect on the credit assessment and credit scoring at SCHUFA. The legal basis for the aforementioned data processing is Article 6 (1) f DSGVO. Further information on the activities of SCHUFA and CRIF can be found at www.schufa.de/datenschutz and www.crif.de/datenschutz.respectively.

§ 7 When and How Is My Data Used for the Purposes of Advertising and to Adapt Our Range of Products and Services?

In order to personalise your user experience and meet your needs, we take into account statistical information from external sources to the extent permitted by law. Our legitimate interest lies in the personalised marketing of our services and products, oriented towards your interests as an existing customer, as well as service-oriented customer communication (Art 6 I f DSGVO). As far as possible, this data processing takes place in anonymised, pseudonymised or aggregated form. You can object to this data processing at any time at www.telekom.de/widerspruch. We use your contact data for the above-mentioned purposes, provided this is permitted by law and you have not objected to this (§ 7 III UWG), or if you have consented. This applies to electronic contact channels, e.g. e-mail, SMS. Contact by telephone for the above-mentioned purposes only takes place with your consent. In addition, we process your contract data and other data, such as your usage data, traffic data, terminal device data, for advertising purposes only with your consent. Special regulations also apply when you are online, i. e. surfing our websites or using our apps. You will find information on this in the cookie/consent banner as well as in the data protection information of the respective online offer.

§ 8 Will Artificial Intelligence (AI) Be Used to Process My Data?

Deutsche Telekom develops and uses artificial intelligence to take the advantages that come with this technology. For example, AI helps us to simplify processes and increase customer satisfaction. We use AI responsibly and attach great importance to the fact that the use of AI follows defined ethical rules. We have defined this framework with our published self-binding guideline AI. We would like to provide you with the best possible support, especially with your service requests. For example, we provide you with a chatbot, voice and text chat. This is a digital assistant that recognizes your concerns and offers initial solutions. Detailed data protection information on this can be found in the privacy policy Chatbot, voice chat and text chat. When you call our customer service, automatic detection of topics during the conversation helps to solve your problem quickly and efficiently. An audio recording of the conversation will not take place unless you have expressly consented. In addition, the conversation is automatically summarized with the help of AI. Only when the person you spoke to has reviewed the summary will it be stored in our system. This means that we are always up to date if your request needs to be processed again. In order for this technical support to work well in service, we have to train and test the AI systems. To do this, we use anonymized data. Or we can explicitly ask you for your consent. The legal basis for this data processing is Article 6 (1) (b) and Article 6 (4) GDPR. Information on other product- or service-specific applications of AI can be found in the respective data protection notices.

§ 9 Who Does Telekom Share My Data With?

With so-called commissioned data processors, i.e. companies we have contracted to process data within the relevant statutory framework, see Article 28 of the GDPR (assistant, auxiliary persons). In these cases, Telekom is still responsible for protecting your data. We subcontract to companiesmainly in the following areas: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing. With cooperation partners who provide services on your behalf or in conjunction with your Telekom contract at their own responsibility. This applies if you have requested the services of such partners from us, or if you consent to the involvement of a partner, or if we involve the partner on the basis of a lawful permit. On the basis of our statutory legal obligations: In selected cases, we are legally obliged to transmit certain data to the requesting government agency. Example: Upon presentation of a court order, we are obliged under § 101 of the German Copyright Act (Urheberrechtsgesetz) to provide the owners of copyrights/ancillary copyrights with information about customers who have allegedly offered copyrighted works via Internet file sharing services. Telekom additionally seeks cooperation with other service providers (e.g. Smart Home Services). If you are also a user of these services, you can connect your respective account with them. You must carry out this connection separately for each service. As soon as you have carried out a connection, the personal data that is listed in these data privacy notes can be used from your respective account for the appropriate service. The relevant service provider will inform you about the processing of your personal data.

§ 10 Where Is My Data Processed?

Your data will be processed in Germany and Europe. Partially your data is processed in countries outside of the European Union (so-called third countries), for the time being e.g. Storage /hosting of customer data (except for traffic data) through Amazon web services EMEA SARL, Microsoft Ireland Operations Ltd, Google Cloud EMEA Limited, Ireland and Salesforce.com Germany GmbH in Europe. Only administrator-accesses within the framework of a technical support are possible from USA. Processing of customer data (except traffic data) by T-Systems Information and Communication Technology India Private Limited, Pune / India as well as processing of pseudonymous customer data by Deutsche Telekom Digital Labs Pvt. Ltd., Gurgaon / India. Your data will only be processed in third countries provided certain measures are taken to ensure an adequate level of data privacy (for example, an adequacy decision by the EU Commission or appropriate safeguards, Art. 44ff. GDPR, (see here). If any other data processing takes place in a third country this will be because you have given your explicit consent, or because it is necessary for performance of our contract with you, or because the law so permits (Art. 49 GDPR).

§ 11 Where Can I Find Further Information Regarding Data Protection at Telekom?

Further information, including data protection information for specific products, is available at https://www.telekom.de/datenschutzhinweise and at www.telekom.com/datenschutz.

§ 12 Who Is Responsible for Data Processing?

The controller is Telekom Deutschland GmbH, Landgrabenweg 149, 53227 Bonn, Germany. If you have any queries, please contact our Customer Services department or our Data Protection Officer, Dr. Claus D. Ulmer, Friedrich-Ebert-Allee 140, 53113 Bonn datenschutz@telekom.de. This translation is intended solely for informational purposes; the original German text shall be legally binding. This privacy information was last updated January 2025