Skip to main contentSkip to footer
Get in touch with our experts
Data Privacy

Cookie Settings: You can open the layer for the Cookie Settings at any time and manage your preferences.

Data privacy information

The protection of your personal data has a high priority for Deutsche Telekom Global Business Solutions. It is important to us to inform you about what personal data are collected, how they are used and what options you have in this regard.

1. What data are collected, how are they used and how long are they stored?

a) Technical characteristics:

When using our website https://business.telekom.com, hereinafter referred to as online service, our servers temporarily record the domain name or IP address of your terminal device as well as other data, such as the content requested (file name and URL), the http response code, and the website from which you are visiting us (Art. 6 para. 1b GDPR, §25 para. 2 No. 2 TTDSG (Telecommunications Telemedia Data Protection Act)).

The logged data are used exclusively for data security purposes, in particular to defend against attempted attacks on our web server (Art. 6 para. 1f GDPR). They are neither used for the creation of individual application profiles nor passed on to third parties and are deleted after 7 days at the latest. We reserve the right to statistically evaluate anonymized data records.

b) Speech to text:

Many operating systems allow (provide the option) to dictate the text in addition to input via keyboard. When using this function, the speech is processed by a third party (e.g. Apple, Google, Microsoft) as the responsible party and the result is entered in the input field. For details of the functionality of how to enable or disable the use and the legal basis of the processing, please contact the respective operating system manufacturer.

c) Web forms:

Other personal data, such as your name, address, telephone number, job function, company name or email address will not be collected unless you provide this information voluntarily via the contact forms of the online service, e.g. for establishing contact with Deutsche Telekom Global Business Solutions or for downloading content such as whitepapers. This kind of personal data will be stored for 7 days if the double opt-in was not confirmed by you. After a confirmed double opt-in the data will be stored until you opt-out. Upon reception of your opt-out request, your data will be deleted within 7 days.

2. Data control for the social media plug-ins or links to social media platforms used

To ensure that you have full data control, we display grayed-out images of the respective functions in place of the actual social plug-ins when the page is loaded. Only by clicking on the checkmark next to the images is the data exchange activated by loading the respective social plug-in with the page. Only with a second click do you trigger the action, e.g. “Like” or “Play Video”.

3. Is my usage behavior evaluated, e.g. for advertising or tracking?

Explanations and definitions

We want you to enjoy using our online services and to make use of our products and services. This is in our economic interest. In order for you to find the products that interest you and for us to be able to design our online service in a user-friendly way, we analyze your usage behavior anonymously or pseudonymously. Within the framework of the legal regulations, we, or companies commissioned by us, create usage profiles. It is not possible to track this information directly back to you. In the following, we inform you in general about the different purposes. Via the query "Consent to data processing", which appears when you call up our online service, you have the option of consenting to the processing or rejecting it in part or in full. Processing that is necessary to provide the online service (see explanation above under 1.) cannot be refused.

Required tools

Tag management is used to manage the use of the tools on the various pages of our online service. For this purpose, a tag is defined for each page. The tag can then be used to determine which tools are to be used for this page. Tag management can thus be used to specifically ensure that tools are only used where they make sense and are legally legitimized.

Analytic tools

Market research / Reach measurement: The aim of reach measurement is to statistically determine the intensity of use and the number of users of an online service, as well as to obtain comparable values for all connected offers. Market research aims to learn more about the target groups that use services or applications and view ads. At no time are individual users identified. Their identity always remains protected.

Marketing tools

Profiles for needs-oriented design of the online service: In order to be able to constantly improve the online service, we would like to create so-called clickstream analyses. The clickstream corresponds to your movement in the online service. The analysis of the movement paths provides us with information about the usage behavior. This allows us to identify possible structural errors and thus improve the user experience.

Profiles for personalized recommendations: Deutsche Telekom would like to offer you individually adapted, personalized, action and click recommendations for offers, services or products. To do this, we use service providers to create a pseudonymous profile of the online services you access on the Internet and assign categories to this profile. You will be shown content or information that matches the profile.

Services from other companies (independent third-party providers)

Third-party services are integrated into Deutsche Telekom’s online service. These entities provide their services under their own responsibility or under joint responsibility with Deutsche Telekom. When using our online service, data and information are collected by means of cookies or similar technologies and transmitted to the respective third party ‒ partly for Deutsche Telekom’s own purposes ‒ processed for the third party’s own advertising purposes, and merged with third-party data. The legal basis for this tool is Art. 6 (1a) or Art. 49 (1a) GDPR. For information as to what extent, for what purposes and on what legal basis further processing for the third party provider’s own purposes takes place, please refer to the data protection policy of the third party provider. You can find the information on the independent third-party providers below.

a) Required tools
These tools are necessary for you to navigate through the online service and use essential functions. They enable basic functions, such as order processing in the online store and access to secure areas of the online service. Furthermore, they serve the anonymous evaluation of usage behavior in order to continuously develop our online service for you. The legal basis for these tools is §25 para. 2 no. 2 TTDSG (Telecommunications Telemedia Data Protection Act), Art. 6 para. 1b GDPR or, in the case of third countries, Art. 44 ff. GDPR.

CompanyPurposeStorage periodCountry of processing
TealiumMapp (formerly Webtrekk)
Tag ManagementImprovement of online service, fault analysis
3 months6 months
NetherlandsGermany

b) Analytic tools
These tools help us to better understand usage behavior. Analytic tools enable the collection of usage and recognition data by us or third parties, in so-called pseudonymous usage profiles. For example, we use analytic tools to determine the number of individual users of an online service or to collect other statistics relating to the operation of our products, as well as to analyze usage behavior based on anonymous and pseudonymous information about how users interact with online services. It is not possible to draw any direct conclusions about a specific person. The legal basis for these tools is §25 para. 1 TTDSG (Telecommunications Telemedia Data Protection Act), Art. 6 para. 1a GDPR or, in the case of third countries, Art. 49 para. 1a GDPR.

CompanyPurposeStorage periodCountry of processing
Mapp (formerly Webtrekk)
Improvement of online service, fault analysis
6 months
Germany

Cookie Settings: You can open the layer for the Cookie Settings at any time and manage your preferences.

c) Marketing / Retargeting
These tools are used to show you personalized and therefore relevant promotional content. Marketing tools are used to display interesting advertising content and to measure the effectiveness of our campaigns. This is done not only in Deutsche Telekom online services, but also in other online services (third-party providers). This is also referred to as retargeting. It is used to create pseudonymous content or ad profiles, to serve relevant ads in other online services and to derive insights about target groups that have viewed the ads and content. It is not possible to draw any direct conclusions about a person in this context. Marketing and retargeting tools help us to display potentially relevant advertising content to you. By suppressing marketing cookies, you will continue to see the same number of advertisements, but they may be less relevant to you. The legal basis for these cookies is §25 para. 1 TTDSG (Telecommunications Telemedia Data Protection Act), Art. 6 para. 1a GDPR or, in the case of third countries, Art. 49 para. 1a GDPR.

CompanyPurposeStorage periodCountry of processing
Mapp (formerly Webtrekk)Emetriq (formerly Xplosion)
Marketing automation (personalization)Profile creation, advertising
6 months12 months
GermanyGermany

d) Services from other companies (independent third-party providers)

I. Google

Google ‒ YouTube Videos: YouTube collects data to provide better services to users – from determining basic information, such as your language, to more complex issues, such as advertising. The information YouTube collects and how it is used depends on how you use the services and how you manage your privacy settings.

If you are not logged into a Google account, the data collected are stored with unique identifiers associated with the browser, app, or device. This can ensure, for example, that language settings are maintained across all sessions.

If you are logged into a Google account, data are also collected that is stored in your Google account and is considered personal data. You can find more information at: https://policies.google.com/privacy?hl=en&gl=en.

Google ‒ AdWords: We use the Remarketing and Google AdWords function of Google Inc. (“Google”) in our online service. This function is used to present visitors with interest-based advertisements within the Google advertising network. In the online service, visitors can then be presented with advertisements that relate to content that they have previously accessed in other online services that use Google’s Remarketing function. According to Google, it does not collect any personal data during this process. However, if you do not wish to use Google’s Remarketing function, you can deactivate it in general by adjusting the settings accordingly at https://adssettings.google.com/anonymous?hl=en. Alternatively, you can deactivate the use for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp. Further information on Google Remarketing and Google’s privacy policy can be found at: https://policies.google.com/technologies?hl=en.

If you have entered our online service via a Google ad, Google AdWords will store a cookie on your terminal device. This cookie loses its validity after 30 days. Is it not possible to draw any direction conclusions about your person. The information obtained with the help of this so-called conversion cookie is used to create statistics about our conversion rate. This means that we learn how many users have come to our online service through a Google ad. If you do not wish to participate in the tracking process, you can disable cookies for conversion tracking by setting your browser preferences to block cookies from the appropriate domain: Google AdWords: https://ads.google.com?hl=en


II. LinkedIn

The re-targeting and conversion tracking of LinkedIn (LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland) by means of the LinkedIn Insight Tag enables the collection of statistical, pseudonymous data (referrer URL, IP address (shortened), device and browser properties) about the use of our online service and to provide corresponding aggregated statistics on this basis. Furthermore, this information is used to be able to display interest-specific and relevant offers and recommendations after you have shown interest in certain products, information and offers in our online service. This information is stored in a cookie for six months. You can get informed about the data processing by LinkedIn at any time at https://www.linkedin.com/legal/privacy-policy?trk=registration_footer-privacy-policy and have the possibility to object to it.


III. emetriq GmbH

emetriq is a provider of targeting services in the area of online marketing of advertising space. Targeting stands for the precise addressing of target groups in online marketing and content personalization. For this purpose, emetriq operates a data pool, the goal of which is to significantly increase the quality of targeting so that advertisers can display relevant advertising according to user interests. To enable user-specific advertising and content to be displayed, emetriq GmbH, Vorsetzen 35, 20459 Hamburg, Germany, collects information about surfing behavior or app usage. Cookies, measuring pixels, APIs or SDKs are used, which can collect or process the following information:

  • Pseudonymous IDs: cookie ID, Identifier for Advertising (IDFA) or Advertising ID (AdID), IP address
  • App or browser information, for example, browser identifier, time zone, language, operating system
  • Information about viewed or clicked advertising banners
  • URL of the pages of our connected marketers visited
  • Sociodemographic data, such as decades of age, title, and shortened zip code
  • Hashed login data (e-mail)

The collected data are pseudonymized at the earliest possible time either already in the app, in the user’s browser or in the first processing system and only then is it processed further. All information collected about a user is stored exclusively using pseudonymous IDs. emetriq deletes this data after 6 months at the latest.

In order to also enable cross-device personalization of advertising, emetriq assigns an identifier (ID) for each of your end devices used via your hashed e-mail address. In cases where you have logged into online services using different end devices, this makes it possible to match the different IDs assigned to each other.

The integration of a neutral entity, the so-called trusted third party, ensures that emetriq does not gain access to the e-mail address. In individual cases, this makes it possible to assign an end device to a user across providers, even if the user has not logged into the Deutsche Telekom online service with their end device. This makes it possible to tailor the service to the user’s interests even without logging in.

Telekom Deutschland GmbH and emetriq GmbH are jointly responsible for this processing in accordance with Art. 26 GDPR. If you have any questions, please contact privacy@telekom.de.

Limited to the above-mentioned purposes, this data are also processed autonomously by emetriq and its technology partners. For more information, please contact emetriq: https://www.emetriq.com/datenschutz.

Furthermore, emetriq works together with the provider The Trade Desk Ltd. UK (“TTD” for short, at 1 Bartholomew Cl, EC1A 7BL, London, United Kingdom). The Trade Desk processes the IP address and usage data (such as pages and products viewed). For this purpose, users are assigned a randomly generated ID by means of a cookie, through which the user can be recognized in our online service as well as the online services of third parties in the advertising network of TTD and advertising campaigns can be optimized. You can find information on data privacy at The Trade Desk at https://www.thetradedesk.com/us/privacy.

Cookie Settings: You can open the layer for the Cookie Settings at any time and manage your preferences.

4. Where can I find the information important to me?

This privacy policy provides an overview of the points that apply to Deutsche Telekom’s processing of your data in this online service. Further information, including on data privacy in general and in specific products, is available at https://www.telekom.com/en/company/data-privacy-and-security/governance-data-privacy and at https://business.telekom.com/global/data-privacy.

5. Who is responsible for data processing? Who do I contact if I have questions about the data privacy policy at Deutsche Telekom?

Deutsche Telekom AG, Friedrich-Ebert-Allee 140, 53113 Bonn, Germany is the party responsible for the data (“controller”). If you have any questions, please contact our data privacy officer, Dr. Claus D. Ulmer, Friedrich-Ebert-Allee 140, 53113 Bonn, Germany, privacy@telekom.de

6. What rights do I have?

You have the right,

  1. to request information on the categories of data processed, the purposes of processing, any recipients of the data, or the planned storage period (Art. 15 GDPR);
  2. to demand the correction or completion of incorrect or incomplete data (Art. 16 GDPR);
  3. to revoke given consent at any time with effect for the future (Art. 7 para. 3 GDPR);
  4. to object to data processing that is to be carried out on the basis of a legitimate interest for reasons arising from your particular situation (Art. 21 (1) GDPR);
  5. in certain cases, within the framework of Art. 17 GDPR, to demand the deletion of data ‒ in particular, insofar as the data are no longer required for the intended purpose or is processed unlawfully, or you have revoked your consent in accordance with (3.) above or declared an objection in accordance with (4.) above;
  6. under certain conditions, to demand the restriction of data, insofar as deletion is not possible or the obligation to delete is disputed (Art. 18 GDPR);
  7. to data portability, i.e. you can receive your data that you have provided to us in a conventional machine-readable format, such as CSV, and transmit it to others if necessary (Art. 20 GDPR);
  8. to issue a complaint to the competent supervisory authority in Germany about the data processing (for telecommunication contracts: Federal Commissioner for Data Protection and Freedom of Information; otherwise: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia).

7. To whom does Deutsche Telekom pass my data?

To order processors, i.e. companies that we commission with the processing of data within the scope provided by law, Art. 28 GDPR (service providers, vicarious agents). Deutsche Telekom remains responsible for the protection of your data even in this case. We commission companies in the following areas in particular: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing.

To cooperation partners who independently provide services for you or in connection with your Deutsche Telekom contract. This is the case if you order services from such partners from us, if you consent to the involvement of the partner or if we involve the partner on the basis of legal permission.

Due to legal obligation: In certain cases, we are legally obligated to transmit certain data to the requesting government agency.

8. Where are my data processed?

Your data are processed in Germany and other European countries. If, in exceptional cases, processing of your data also takes place in countries outside the European Union (in so-called third countries), this will happen,

  • if you have expressly consented to this (Art. 49 para. 1a GDPR). (In most countries outside the EU, the level of data protection does not meet EU standards. This applies in particular to comprehensive monitoring and control rights of state authorities, e.g. in the USA, which disproportionately interfere with the data protection of European citizens,
  • or insofar as it is necessary for our provision of services to you (Art. 49 para. 1b GDPR),
  • or insofar as it is provided for by law (Art. 6 para. 1c GDPR).

Furthermore, your data will only be processed in third countries if certain measures ensure that an adequate level of data protection exists (e.g. adequacy decision of the EU Commission or so-called suitable guarantees, Art. 44ff GDPR).


Status of privacy policy: 27 February 2024