English Version
The protection of your personal data is crucial to Deutsche Telekom. It is important to us to inform you as to what types of personal data are collected, how they are used and what options you have in regards to this.
1. What types of data are collected, how are they used and how long do we store them for?
- When using the website www.hubraum.com, hereinafter referred to as online the service (Art. 6 para. 1b GDPR, §25 para. 2 No. 2 TTDSG (Telecommunications Telemedia Data Protection Act). When you use our online service, our servers temporarily record the domain name or IP address of your terminal device as well as other data, such as the content requested or the response code. The logged data is used exclusively for data security purposes, in particular to defend against attempted attacks on our web server (Art. 6 para. 1f GDPR). They are neither used for the creation of individual application profiles nor passed on to third parties and are deleted after 7 days at the latest. We reserve the right to statistically evaluate anonymized data records.2. Data control for social media plug ins; links to social media platforms
2. Data control for social media plug ins; links to social media platforms
Some pages feature clickable icons from social media networks (such as LinkedIn, Twitter, YouTube, Google, Facebook, Instagram, Pinterest or Xing) which can be used to recommend or forward Deutsche Telekom AG offers to friends or acquaintances.
On our pages, we only use the icons of each respective social media network. Only by clicking on the icon will you be forwarded to the company page on the social media platform you wish to visit. The social media platforms as well as the third-party content providers are responsible for making these services available and as such, take responsibility for offering these services and the processing of data.
Through activating social media plug-ins, such as by clicking links via the icon, even just in order to share content (Article 6, Paragraph 1a, GDPR), the following data may be transmitted to the social media service provider: your IP address, browser information, operating system, monitor resolution, installed browser plug ins like, for example, Adobe Flash Player, the previous page if you followed a link, the URL of the current page, etc.
The next time you visit the site, the social media plug-ins will be reset to an inactive mode, so no further data will be transmitted on a new visit to our website. Further information about social media plug-ins regarding the scope and purposes of data processing as well as further data security relevant information can be found in the data protection policies of each party.
3. Will my user behavior be evaluated, for example, for ads or tracking?
Explanation and definitions
We would like you to happily use our online services and make use of our products and services. We have an economic interest in this. As such, in order for you to find products that interest you and to ensure that our online services are developed in a user-friendly manner, we analyze anonymized data or pseudonymized data (data which is processed in such a manner that the personal data can no longer be attributed to a specific person). Within the framework of legal regulations, we, or companies commissioned by us, create user profiles. No conclusions can be drawn about you from such a user profile. We would like to inform you below about the different purposes we use data for. In terms of the query, “Consent to data processing”, which appears when you visit our online services, you have the option to consent to the processing of your data, to reject it in part or to wholly reject it. Processing which is necessary for the delivery of our online services (see the explanation above under 1.) unfortunately cannot be rejected.
Tools required
Tag-Management
Tealium Tag Management manages the use of tools on our web portal’s different sites. For this purpose, we have implemented a tag on each site. Using this tag, we can determine which tools should be used for which page. As such, tag management can be deployed in a goal-oriented fashion, so that tools are only used where they make sense and are legally legitimate.
Analytical tools
Market research/measuring our reach
The goal of measuring reach is to statistically determine the intensity of use and the number of users of a website, as well as comparable values for all connected offers. Market research attempts to learn more about the target groups who use services or applications and view ads. At no point would any individual users be identified — a user’s identity always remains protected.
Marketing Tools
Profile for needs-based design of our online service
In order to constantly improve our online service, we would like to piece together so-called “clickstream analysis”. Clickstream refers to your trajectory online. The analysis of your movement gives us information about user behaviour. This ensures we identify possible structural errors and so are able to improve the user experience.
Services from other companies (autonomous third-party providers)
Third-party services are integrated into Telekom’s online services. They provide services autonomously or in joint responsibility with Telekom. In doing so, data and information are transmitted to third party providers, processed for their own advertising purposes. In this context, data will be recorded about the use of online services via cookies or similar technology and transmitted to third parties,in part for Telekom’s own use. In what scope, for what purposes and on the basis of which legal basis further processing for the third party provider’s own purposes takes place is described below in section d. of this data protection policy.
a) Required tools
These tools are required for you to navigate our online service and use essential functions. They enable basic functions, such as processing your orders in the online store and access to secure areas of the online service. Moreover, they allow us to anonymously evaluate user behavior, which we use to constantly further develop our online service for you. The legal basis for these tools is §25 Paragraph 2, no. 2 TTDSG, Article 6, Paragraph 1b GDPR or, in the case of third countries, Article 44 et seq. GDPR.
Name of tool: Tealium (CONSENTMGR)
Provider: Deutsche Telekom AG
Purpose: Cookie which saves the user’s decision via the cookie banner.
Duration of storage: Approximately 1 year
Registered office, company: Germany, Usercentrics
Name of tool: Website operator (Neos_Session)
Provider: Deutsche Telekom AG
Purpose: Retains the user conditions for all pages.
Duration of storage: Until the end of the session.
Registered office, company: Germany
b) Analytic tools
These tools help us to better understand user behavior. Analytic tools make it possible to collect use and identification data in what is referred to as pseudonymous usage profiles. For example, we use analysis tools which track the number of users of an online service or to collect other statistics which give us information about how well our products run, as well as analyzing user behavior thanks to anonymous and pseudonymous information about how users interact with online services. No conclusion about an individual can be drawn from this information. The legal basis for these tools is §25 paragraph 1 TTDSG, Article 6, paragraph 1a GDPR or, in the case of non-member countries, Art. 49 para. 1a GDPR.
Name of tool: Vimeo (Webseite)
Provider: Vimeo
Purpose: Technical reasons, adverts, analytics.
Duration of storage: Cookie (approximately 24 months)
Registered office, company: USA, Vimeo, Inc.
Name of tool: Vimeo (Videoplayer)
Provider: Vimeo
Purpose: Technical reasons.
Duration of storage: Cookie
Registered office, company: USA, Vimeo, Inc.
Name of tool: Youtube (VISITOR_INFO1_LIVE)
Provider: Youtube
Purpose: Acceptance of website visitor, video on website.
Duration of storage: Cookie (approx 6 months)
Registered office, company: USA, Google
Name of tool: Youtube (Consent)
Provider: Youtube
Purpose: User gives permission for data to be forwarded to YouTube.
Duration of storage: Cookie (24 months)
Registered office, company: USA, Google
Name of tool: Youtube (Consent)
Provider: Youtube
Purpose: ID assignment – statistics.
Duration of storage: Cookie (duration of session)
Registered office, company: USA, Google
Name of tool: Youtube (Consent)
Provider: Youtube
Purpose: ID assignment, individualized adverts, statistics.
Duration of storage: Cookie (approximately 30 days).
Registered office, company: USA, Google
c) Marketing/Retargeting
These tools are used in order to show you personalized and as such, relevant advertorial content. Marketing tools are used to show you interesting advertising content and to measure how effective our campaigns are. This does not only happen in Telekom’s online services, but also on other online services’ (third-party services’) webpages and apps. This process is referred to as retargeting. It helps us create your pseudonymous content or advertorial profile, to show you relevant ads on other online services and to draw conclusions about target groups who have seen the ads and contents. However, it is not possible to draw conclusions about individuals from this information. Marketing and retargeting tools help us to show you relevant advertorial content. If you suppress marketing cookies, you will still see the same number of adverts, but it’s possible they will be less relevant for you. The legal basis for these cookies is §25 Paragraph 1 TTDSG, Article 6, Paragraph 1a, GDPR or, in the case of non-member countries, Article 49, Paragraph 1a GDPR.
Name of tool: Hubspot (__ptq.gif)
Provider: Hubspot
Purpose: Saves user settings when clicking on integrated YouTube videos.
Duration of storage: Cookie (Session)
Registered office, company: USA, HubSpot
Name of tool: Hubspot (__hssrc) Konfiguration
Provider: Hubspot
Purpose: Measures whether the visitor has started the browser afresh.
Duration of storage: Cookie (Session)
Registered office, company: USA, HubSpot
d) Services from other companies (autonomous third-party providers)
We have integrated services from third-party providers, who autonomously deliver their services. In this context, data is captured on using our online services via cookies or similar technology and transmitted to the respective third-party, in part for Telekom’s own uses. The legal basis for these tools is Article 6, Paragraph 1a, or Article 49, Paragraph 1a, GDPR. In what scope, for which purposes and on the basis of which legal basis further processing for the third-party provider’s own purposes takes place, please refer to the third-party provider’s own data protection policy. You can find information on the autonomous third-party providers below.
Name of tool: Provider: Purpose: Duration of storage: Registered office, company:
Name of tool: Google (IDE)
Provider: Google
Purpose: Google uses DoubleClick to register user action after click.
Duration of storage: Cookie (1 year)
Registered office, company: USA, Google
Name of tool: Google (test_cookie)
Provider: Google
Purpose: Test to see if the browser supports user’s cookies.
Duration of storage: Cookie (1 year)
Registered office, company: USA, Google
Name of tool: Google (pagead/1p-user-list/AW-600762591)
Provider: Google
Purpose: Pending
Duration of storage: Cookie (Session)
Registered office, company: USA, Google
Name of tool: LinkedIn (UserMatchHistory)
Provider: LinkedIn
Purpose: Individualized adverts.
Duration of storage: Cookie (approximately 30 days)
Registered office, company: USA, Microsoft
Name of tool: LinkedIn (AnalyticsSyncHistory)
Provider: LinkedIn
Purpose: Cookie assigns user ID individualized adverts.
Duration of storage: Cookie (approximately 30 days)
Registered office, company: USA, Microsoft
Name of tool: LinkedIn (bscookie)
Provider: LinkedIn
Duration of storage: Cookie (approximately 24 months)
Registered office, company: USA, Microsoft
Name of tool: LinkedIn (lidc)
Provider: LinkedIn
Purpose: Cookie assigns user ID individualized adverts.
Duration of storage: Cookie (approximately 24 hours)
Registered office, company: USA, Microsoft
Name of tool: LinkedIn (bcookie)
Provider: LinkedIn
Purpose: Tracking the use of embedded services.
Duration of storage: Cookie (2 years)
Registered office, company: USA, Microsoft
Name of tool: LinkedIn (li_gc)
Provider: LinkedIn
Purpose: Individualized adverts.
Duration of storage: Cookie (approximately 24 months)
Registered office, company: USA, Microsoft
Name of tool: LinkedIn (lang)
Provider: LinkedIn
Purpose: Saves the selected language for the website
Duration of storage: Cookie (Session)
Registered office, company: USA, Microsoft
Name of tool: Twitter
Provider: Twitter
Purpose: Display of tweets from the hubraum Twitter channel on the website.
Duration of storage: Cookie (5 years)
Registered office, company: USA
Name of tool: YouTube (VISITOR_INFO1_LIVE)
Provider: Youtube
Purpose: To evaluate user bandwidth on pages with integrated YouTube videos.
Duration of storage: Cookie (179 days)
Registered office, company: USA, Google
Name of tool: YouTube (yt-cast-installed)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube video.
Duration of storage: Cookie (Persistent)
Registered office, company: USA, Google
Name of tool: YouTube (YSC)
Provider: Youtube
Purpose: Registers a clear ID in order to store statistics from videos.
Duration of storage: Cookie (Session)
Registered office, company: USA, Google
Name of tool: YouTube (ytidb__LAST_RESULT_ENTRY_KEY)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: Cookie (Session)
Registered office, company: USA, Google
Name of tool: YouTube (yt-remote-cast-available)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: BluCookie (Session)bb
Registered office, company: USA, Google
Name of tool: YouTube (yt-remote-connectes-devices)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: Cookie (Persistent)
Registered office, company: USA, Google
Name of tool: YouTube (yt-remote-device-id)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: Cookie (Persistent)
Registered office, company: USA, Google
Name of tool: YouTube (yt-remote-fast-check-period)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: Cookie (Session)
Registered office, company: USA, Google
Name of tool: YouTube (yt-remote-session-app)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: Cookie (Session)
Registered office, company: USA, Google
Name of tool: YouTube (yt-remote-session-name)
Provider: Youtube
Purpose: Saves user settings when user clicks on integrated YouTube videos.
Duration of storage: Cookie (Session)
Registered office, company: USA, Google
Name of tool: YouTube (CONSENT)
Provider: Youtube
Purpose: After consent — permission to forward to YouTube.
Duration of storage: Cookie (24 months)
Registered office, company: USA, Google
Google Maps
On some of our online service’s sites, for example, in Shopfinder, we use Google Maps to show maps, locations and for planned routes. Google Maps is run by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Due to our embedding of Google Maps, your IP address will be transmitted directly to Google and a cookie stored as soon as you visit such a page. You can learn more about Google’s data processing via https://policies.google.com/privacy and object to this.
Google - YouTube Videos
YouTube collects data in order to offer their users better service — from assessing basic information, like for example your language, to more complex questions, like for example, adverts. What sort of data YouTube collects and how this data is used depends on how you use their services and how you manage your data protection settings.
If you are not logged into a Google account, the collected data will be saved with unique identifiers associated with your browser, app or device. This can ensure, for example, that the language settings are retained across all sessions. If you’re logged into a Google account, data will also be collected that is saved to your Google account and that will be flagged as personal data.
You can find further information at the following link: https://policies.google.com/privacy
Google — AdWords
In our online services, we use the remarketing and Google AdWords function of Google Inc. (“Google”). This function means that visitors within the Google advertising network are shown adverts which are relevant to their interests. Those visiting online services may see adverts connected to content that the visitor previously clicked on in other online services, that use the Remarketing function from Google. According to Google itself, the company does not collect any personal data during this process. However, if you do not wish to use the Google remarketing function, you can deactivate it by adjusting your settings at https://adssettings.google.com . Alternatively, you can disable interest-based advertising via the ad network by following the instructions listed at http://www.networkadvertising.org/managing/opt_out.asp. Further information on Google Remarketing and Google's privacy policy can be found at: https://policies.google.com/technologies/ads.
If you have joined us online via a Google ad, Google AdWords will store a cookie on your terminal device. This cookie is no longer valid after 30 days. We are not able to draw any conclusions about you as an individual from this data. The information obtained with the help of this so-called conversion cookie is used to help us compile statistics about our conversion rate. This means that we learn how many users have come to our online service through a Google ad and have bought a product within 30 days.
If you don’t want to take part in the tracking process, you can deactivate Cookies for conversion tracking by setting your browser preferences to block cookies from the relevant domain: Google AdWords: googleadservices.com. We use remarketing and the Google AdWords function of Google Inc. (“Google”) on our websites. This function is made possible via a cookie and means that visitors of the website who are in Google’s Ad Networks will be shown adverts relevant to their interests. It’s possible that visitors of these pages will be shown adverts connected to content that the visitor had previously accessed on websites that use Google’s remarketing function. According to Google, the company does not collect any personal data during this process. Nevertheless, if you would prefer not to use Google’s remarketing function, you can deactivate it by adjusting your settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising via the ad network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp. Further information on Google Remarketing and Google's privacy policy can be found at: https://policies.google.com/technologies/ads?hl=de/.
If you’re visiting our websites via a Google ad, Google AdWords will store a cookie on your computer. After 30 days, this cookie will no longer be valid. It is not possible to draw a conclusion about an individual using this information. With the help of this so-called conversion cookie, we obtain information which is used to compile statistics about our conversion rate. This means we learn how many users have visited our websites thanks to a Google ad and subsequently purchased a product within 30 days. If you do not wish to take part in the tracking process, you can disable cookies for conversion tracking by adjusting your browser preferences to block cookies from the following domain: Google AdWords: googleadservices.com
Twitter for Internet Data
Twitter content is integrated into some online services. This could be, for example, an embedded timeline or Twitter buttons. If you see such a website, it’s possible that Twitter (Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland) receives log data containing information about the online services you have visited. This information is used in order to improve the user experience of online services, to protect the security and integrity of the platform and to show relevant content, including adverts. There will be no connection drawn between your activities and your name, your email address, telephone number or username and the deletion, concealment or aggregation will be made after a maximum of 30 days. This data is not collected, since it is located in the European Union. You can find Twitter’s privacy policy at the following address: https://twitter.com/en/privacy
LinkedIn
The retargeting and conversion tracking conducted by LinkedIn (LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland), via the LinkedIn Insight Tag enables the collection of statistical, pseudonymised data (referrer URL, shortened IP address, device and browser characteristics) about the website visit and use of our website and to provide corresponding aggregated statistics on this basis. Beyond this, this information is used to display interest specific and relevant offers and recommendations after you have shown interest in certain products, information and offers on our website. This information is stored in a cookie for 6 months. You can inform yourself about the data processing by LinkedIn at any time at https://www.linkedin.com/legal/privacy-policy?trk=registration_footer-privacy-policy and object to it.
Integration of external web services and processing of data outside the EU
In our online services, we use active content from external providers, so-called web services. By using our online services, external providers may receive personal information about your visit to our online service. This may involve data being processed outside of the EU. You can prevent this by installing an appropriate browser plugin or by deactivating the execution of scripts in your browser. However, via doing this, you may experience functional limits on the website you are visiting.
We use the following external web services:
YouTube
In our online service, we use YouTube, made available by the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. The processing takes place in a country which is not a member of the European Union, where no resolution regarding an “adequacy decision” (the decision adopted by the European under Article 45 GDPR, establishing that a third country provides an adequate level of protection for personal data) has been passed. As such, the usual level of data protection for the GDPR in terms of data transmission cannot be guaranteed. It cannot be ruled out that in the non-member country, authorities can access the data collected.
The legal basis for the communication of personal data is your consent according to Article 6, Paragraph 1, GDPR or Article 9, Paragraph 2, GDPR, which you have given in our online service. The service enables the tracking of individual users on our website.
You can retract your consent at any time. You can find more information about retracting your consent either in the agreement itself or at the end of this privacy policy. For more information on the handling of transferred data, please refer to the provider's privacy policy at policies.google.com/privacy.
Tealium
In our online service, we use the service provided by Tealium, owned by the company Tealium, 9605 Scranton Rd. Ste. 600, San Diego, California, United States, 92121. The transmission and processing of personal data takes place exclusively on servers in the European Union.
The legal basis for the transmission and processing of data is Article 6, Paragraph 1, GDPR. The service enables us to comply with our legal obligations. To find out what rights you have with regards to data processing, please scroll to the end of this privacy policy. For more information on the handling of transferred data, please refer to the provider's privacy policy at https://tealium.com/privacy-notice.
4. Where can I find information which is essential for me to read?
This data protection statement delivers an overview of the points which apply to Telekom’s processing of your data in this web portal.
Further information, also in regard to data protection for general and specific products, can be found at https://www.telekom.com/en/company/data-privacy-and-security and https://www.telekom.com/en/company/data-privacy-and-security/governance-data-privacy.
5. Who is responsible for data processing? Who should I get in touch with, if I have further questions about how Telekom processes data?
The body responsible for data processing is Deutsche Telekom AG. If you have any questions, please don’t hesitate to contact our customer service or to contact our data protection officer, Dr Claus D. Ulmer, Friedrich-Ebert-Allee 140, 53113 Bonn, datenschutz@telekom.de.
6. What rights do I have?
You have the right
a) To demand information about the categories of the processed data; for what purpose it is being processed; possible recipients of the data; the planned duration of data storage (Article 15, GDPR);
b) To demand the correction or amendment of false or incomplete data (Article 16, GDPR);
c) To retract the agreement issued at any time, with future effect (Article 7, Paragraph 3, GDPR);
d) To object to data processing that is to be carried out on the basis of a legitimate interest for reasons arising from your particular situation (Article 21 (1), GDPR);
e) In certain cases within the framework of Article 17, GDPR, to request the deletion of data — in particular regarding data which is no longer necessary for the intended purpose or which is being illegally processed, or if you have retracted your agreement to data processing as per (c) or have registered an objection (d).
f) Due to certain requirements, to request a restriction of the data, insofar that a deletion is not possible or the obligation to delete the data is disputed (Article 18, GDPR).
g) To data transferability, which means you can receive the data that you provided to us in an accessible and machine readable format, like, for example, CSV and also have the right to transmit this data to others (Article 20, GDPR);
h) To complain to the relevant regulatory authority about the data processing (for telecommunications contracts: the federal commissioner for data protection and freedom of information; for others: the state representative for data protection and freedom of information, North Rhine-Westphalia).
7. Who does Telekom transmit my data to?
To processors, which refers to companies, who we commission to process data in a framework which is provided for by law, Article 28, GDPR (service providers, vicarious agents). Even in this case, Telekom remains responsible for the protection of your data. We commission companies in particular in the following sectors: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing.
To collaboration partners, who take sole responsibility for providing services or in connection with your Telekom contract. This is the case if you order the service of such partners from us, or if you consent to such a partner being involved, or if we involve the partner on the basis of a statutory license.
On the basis of a legal duty: in certain cases we are legally obliged to transmit data to the governmental agency making the request.
8. Where will my data be processed?
Your data will be processed in Germany and other European countries. Processing of your data also takes place in exceptional cases in countries outside of the European Union (in so-called “non-member countries”), this happens:
a) As far as you have explicitly consented to this (Article 49, Paragraph 1a, GDPR). In most of the countries outside of the EU, the level of data protection is not equivalent to EU standards. This applies in particular to the comprehensive surveillance and control rights of state authorities, for example, in the USA, which disproportionately interfere with the data protection of European citizens.
b) or as far as it is necessary for our service provision to you (Article 49, Paragraph 1b GDPR)
c) or as far as it is legally provided for (Article 6, Paragraph 1c, GDPR)
Furthermore, processing of your data in non-member countries will only happen if certain measures impose an adequate level of data protection (for example, the “adequacy policy” of the EU commission or adequate safeguards, Article 44, GDPR).
This is the status of our data protection policy 9.11.2023.