Data Privacy Policy

Cookie-Settings: You can access your Cookie Settings (1) again at any time to manage your preferences.

The protection of your personal data is of great importance to Telekom Healthcare Solutions. We want to inform you about which personal data is collected, how it is used, and what options you have in this regard.

What data is recorded, how is it used, and how long is it stored?
- Processing in the provision of the digital service based on legitimate interest (Art. 6 para. 1 f GDPR, §25 para. 2 no. 2 TTDSG)
- When using our website, referred to hereafter as the digital service, the web server temporarily records the domain name or IP address of your computer, the file requested by the client (filename and URL), the HTTP response code, and the website from which you visit our website.
- Processing in the provision of the digital service performed by third parties
  - Many operating systems provide the option to dictate text in addition to input via keyboard. When using this feature, the speech is processed by the third party (e.g., Apple, Google, Microsoft) as the controller, and the result is displayed in the input field. For details on how to enable or disable this functionality and the legal basis for the processing, please refer to the respective operating system manufacturer (third party).
Permissions for accessing data and functions of the end device by the digital service.
In order to use the digital service on your device, it must be able to access various functions and data of your device. To do this, you need to grant certain permissions (Art. 6 para. 1a GDPR, §25 para. 1 TTDSG).
The permissions are programmed differently by the various manufacturers. For example, individual permissions may be grouped into permission categories, and you may only agree to the permission category as a whole.
Please note that if you object to one or more permissions, you may not be able to use all the functions of our digital service.
As far as you have granted permissions, we will only use them to the extent described below:
- Internet Communication
  The digital service requires access to the internet via Wi-Fi or mobile data so that the browser can contact the web server and display the website.

Will my usage behavior be evaluated, e.g., for advertising or tracking?
We want you to enjoy using our digital services and to take advantage of our products and services. In order for you to find the products that interest you and for us to design our digital service to be user-friendly, we analyze your usage behavior in a pseudonymous manner. In accordance with legal regulations, usage profiles are created. Below, we provide general information about the various purposes of the processing activities. Through the query "Consent to Data Processing," which appears when you access our digital service, you have the option to agree to the processing activities or to partially or fully decline them. Processing activities that are necessary for the provision of the digital service (see explanation above under 1.) cannot be declined.

Basic functionality of the digital service
These processing activities are always active and necessary for the digital service to function correctly.

Functional
These processing activities are necessary for you to navigate through the digital service and utilize essential functions. They enable basic functions, such as order processing in the online shop and access to secure areas of the digital service. Additionally, they serve the anonymous evaluation of user behavior, which we use to continuously develop our digital service for you. The legal basis for these processing activities is §25 para. 2 no. 2 TDDDG, Art. 6 para. 1b GDPR, or for third countries, Art. 44 et seq. GDPR.

Processing Purpose According to Consent Category	Processing Company with Company Address / Data Recipient	Used Products / Short Description of the Service Used	Description of the Specific Processing Purpose	Responsibility	Processed Data	Storage Duration	Legal Basis (Processing)	Processing in Third Countries	Legal Basis (Processing in Third Countries)
Tealium	Tealium Inc. 11095 Torreyana Road San Diego, CA 92121, United States of America	Tag Management	Tealium controls whether a cookie, pixel, or server-to-server communication is loaded based on the consent decision and which data may be processed by cookies or pixels or server-to-server. Data transfer to third parties occurs via the browser and/or directly through server connections. The provider Tealium itself does not have access to the content of the cookies and pixels. The software is necessary for providing the service and implementing the established privacy settings, and therefore cannot be disabled.	Deutsche Telekom Healthcare and Security Solutions GmbH	Browser version, IP address, device characteristics, services used, viewed and clicked products and items, visited pages, time tracking, device operating system, number of visits, usage data, screen resolution, usage/click behavior, viewed advertisements.	3 Months		Adequacy decision or no comparable level of data protection as the EU.
Typo3	TYPO3 Association Gewerbestrasse 10 CH-4450 Sissach Switzerland	Content Management System	Typo3 is the content management system on which the website is based. Typo3 is hosted on-site. There is no data transfer to third parties. A cookie is set when the user interacts with the consent banner. This cookie stores whether and which data may be tracked or not.	Deutsche Telekom Healthcare and Security Solutions GmbH	No data is processed. The cookie is stored by the user and contains only an integer value.	Session cookie

Analytical
These processing activities are necessary for us to conduct technical analyses, usage evaluations, and reach measurements, which allow us to ensure the quality of the provided services and improve structural faults of the digital service and its functions. The required analytical processing is carried out without access to your end device and is based on information already collected for providing the digital service, see functionally required processing. This information is pseudonymized and is used solely to ensure the realization of high-quality and service-oriented services, with a storage duration of 3 months. The legal basis for this processing is Art. 6 para. 4 GDPR.

Analysis by Telekom Healthcare Solutions GmbH
We use cookies and analysis technologies to develop a better understanding of how our digital service is used. They help us optimize our digital services. For example, we can determine how many people visit our service or a specific feature. They are also useful for statistical evaluations that show us how our digital services are utilized. The analysis relies on pseudonymous information. The legal basis for these processing activities is §25 para. 1 TDDDG, Art. 6 para. 1 a GDPR or, for third countries, Art. 49 para. 1 a GDPR.

Processing Purpose According to Consent Category	Processing Company with Company Address / Data Recipient	Used Products / Short Description of the Service Used	Description of the Specific Processing Purpose	Responsibility	Processed Data	Storage Duration	Legal Basis (Processing)	Processing in Third Countries	Legal Basis (Processing in Third Countries)
Mapp Intelligence	Mapp Digital Germany GmbH (Mapp Digital c/o Webtrekk GmbH Schönhauser Allee 148, 10435 Berlin)	This is a web analytics and statistics service.		Deutsche Telekom Healthcare and Security Solutions GmbH	Internet provider, anonymized IP address, browser information, date and time of visit, device information, location information, referrer URL, user ID, order ID.	6 Months	This service is used on the basis of § 25 para. 1 sentence 1 TTDSG, and the subsequent processing of your personal data is carried out on the basis of Art. 6 para. 1 a) GDPR.	no

Where can I find the information that is important to me?
For more information, including data protection for specific products, please visit www.telekom.de/datenschutzhinweise and https://www.telekom.com/en/company/data-privacy-and-security/governance-data-privacy.
What rights do I have?
You have the right to:
- Request information about the categories of processed data, processing purposes, any recipients of the data, and the planned storage duration (Art. 15 GDPR);
- Request the correction or completion of inaccurate or incomplete data (Art. 16 GDPR);
- Withdraw any consent given at any time with effect for the future (Art. 7 para. 3 GDPR);
- Object to data processing based on legitimate interests for reasons arising from your particular situation (Art. 21 para. 1 GDPR), providing these reasons at any time for future objections. You can object to data processing for the purposes of direct marketing at any time without providing reasons (Art. 21 para. 2, 3 GDPR);
- Request the deletion of data in certain cases under Art. 17 GDPR – particularly if the data are no longer necessary for the intended purpose or are being processed unlawfully, or if you have revoked your consent as mentioned above (c) or made an objection as mentioned above (d);
- Request the restriction of data under certain conditions, where deletion is not possible or the obligation to delete is disputed (Art. 18 GDPR);
- Receive your data that you have provided to us in a commonly used machine-readable format, such as CSV, and possibly transmit it to others (Art. 20 GDPR);
- Lodge a complaint with the competent supervisory authority regarding data processing (for telecommunications contracts: Federal Commissioner for Data Protection and Freedom of Information; otherwise: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia).
To whom does Telekom Healthcare Solutions transfer my data?
To processors, which are companies that we contract to process data within the legally prescribed framework, Art. 28 GDPR (service providers, agents). Telekom remains responsible for the protection of your data even in this case. We contract companies primarily in the following areas: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing.
To cooperation partners who provide services for you or in connection with your Telekom contract under their own responsibility. This applies if you order services from such partners through us, if you consent to the involvement of the partner, or if we involve the partner based on legal permission.
Due to legal obligations: In certain cases, we are legally required to transmit specific data to the requesting governmental authority.
Where is my data processed?
Your data is processed in Germany and in other European countries. In some cases, your data is also processed in countries outside the European Union (i.e., in so-called third countries).
Furthermore, the following applies: If data processing takes place in third countries, it occurs only if you have explicitly consented to it, if it is necessary for the provision of our services to you, or if it is legally prescribed (Art. 49 GDPR).
Data processing in third countries occurs only if specific measures ensure that an adequate level of data protection is in place (e.g., an adequacy decision from the EU Commission or so-called suitable guarantees, Art. 44 et seq. GDPR, (see here).
Data processing in third countries takes place only when appropriate measures ensure that an adequate level of data protection is guaranteed (e.g., an adequacy decision from the EU Commission or so-called suitable guarantees, Art. 44 et seq. GDPR, (see here).
Who is responsible for data processing? Who is my contact person if I have questions about data protection at Telekom?
The data controller is Telekom Healthcare Solutions. If you have questions, you can contact our customer service or our data protection officer, Mr. Dr. Claus D. Ulmer, at Friedrich-Ebert-Allee 140, 53113 Bonn, datenschutz@telekom.de.

How can we support you?