Privacy policy

Status: October 2026

This privacy policy explains which personal data we process when you visit this website, for what purposes, on which legal basis and which rights you have. Details on cookies and similar technologies and on every individual service used on this website are provided in our Cookie Policy and in the privacy settings.

1. Controller and Data Protection Officer

Controller within the meaning of the General Data Protection Regulation (GDPR):

Deutsche Telekom AG
Friedrich-Ebert-Allee 140
53113 Bonn, Germany

Represented for this website by:
Deutsche Telekom AG, T-Labs
Winterfeldtstraße 21
10781 Berlin, Germany
Email: t-labs.info@telekom.de

Data Protection Officer:
Group Data Protection Officer of Deutsche Telekom AG
Friedrich-Ebert-Allee 140, 53113 Bonn, Germany
Email: datenschutz@telekom.de

2. Hosting and server log files

This website is hosted on servers in Germany. The servers are operated on our behalf by Deutsche Telekom IT GmbH, Landgrabenweg 151, 53227 Bonn, Germany, as a processor in accordance with Art. 28 GDPR.

Whenever you access this website, the web server automatically records the following data:

  • IP address of the requesting device
  • date and time of the request
  • requested file / URL
  • HTTP status code and amount of data transferred
  • referrer URL (the page from which you came)
  • browser type and version, operating system

Purpose: to deliver the website and to ensure the security and stability of our systems, in particular to detect and defend against attacks.
Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a secure and functional website).
Retention: log files are deleted automatically after 30 days. Data whose further storage is required as evidence of a security incident is kept until the incident has been resolved.

3. Cookies, similar technologies and consent management

We use the consent management tool “Real Cookie Banner” (devowl.io GmbH, Germany). The tool runs entirely on our own server; no data is transferred to the vendor.

When you make a decision in the cookie banner, we store a cookie / local storage entry on your device containing a pseudonymous consent ID, the time of the decision, the version of the banner settings and the services you accepted or rejected. In addition, this decision is documented on our server (consent ID, time, decisions, page URL, banner version). Your IP address is not stored with the consent.

Purpose: to save your privacy decisions and to be able to prove that consent was given (Art. 7 (1) GDPR).
Legal basis: § 25 (2) No. 2 TDDDG (storage on your device is strictly necessary) and Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (legal obligation to prove consent).
Retention: the cookie expires after 365 days; the consent documentation on our server is deleted after 120 months.

Storing information on your device or accessing information already stored there, where this is not strictly necessary, only takes place with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can change or withdraw your consent at any time with effect for the future via the privacy settings link in the footer of every page.

4. Web analytics with Matomo

We use the open-source web analytics software Matomo. Matomo is installed on our own server; the analytics data is not transferred to third parties. IP addresses are shortened by two bytes (e.g. 192.168.xxx.xxx) before they are stored, and the approximate location is derived only from the shortened IP address.

a) Matomo without cookies (default)
Without your consent, Matomo runs without cookies. In this mode, page views, the referring page, the time of the visit, browser and operating system information, screen resolution and the approximate location are recorded.
Purpose: statistical analysis of how our website is used, so that we can improve it.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in an anonymised range analysis). You can object to this processing at any time in the privacy settings.

b) Matomo with cookies (only with your consent)
If you consent to the service “Matomo” in the privacy settings, Matomo additionally sets cookies (e.g. _pk_id, _pk_ses) to recognise returning visits and to link the pages you view within a visit.
Legal basis: your consent, § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

Retention: raw analytics data is deleted automatically after 6 months. Aggregated, anonymous statistics are kept.

5. Embedded YouTube videos

Some pages contain videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Videos are blocked by default by a content blocker. They are loaded only after you have consented, either in the cookie banner or by clicking the placeholder. Only then does your browser connect to YouTube servers. At that point your IP address, device and browser information and the URL of our page are transmitted to Google, and Google may set or read cookies.

Legal basis: your consent, § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.
Third-country transfer: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). In addition, we ask for your consent in accordance with Art. 49 (1) (a) GDPR.
More information: https://policies.google.com/privacy

6. Contact by email

If you contact us by email (e.g. t-labs.info@telekom.de), we process your email address, your name (if provided) and the content of your message in order to answer your enquiry.
Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a (prospective) contract, e.g. a collaboration; otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
Retention: we delete your data once your enquiry has been fully dealt with, unless statutory retention obligations apply.

7. Links to external websites and social media profiles

Our website contains links to external websites (e.g. news articles, partner universities) and to our profiles on LinkedIn and YouTube. These are plain links: no data is transferred to the respective provider until you click on them. After you click, the privacy policy of that provider applies.

8. Recipients of personal data

Your data is processed only by the departments of Deutsche Telekom AG responsible for this website and by Deutsche Telekom IT GmbH as our processor for operating the servers (see section 2). Apart from YouTube (only with your consent, see section 5), we do not pass on data to third parties unless we are legally obliged to do so.

9. Your rights

You have the right:

  • to obtain information about the personal data we hold about you (Art. 15 GDPR),
  • to have incorrect data rectified (Art. 16 GDPR),
  • to have your data erased (Art. 17 GDPR),
  • to restrict processing (Art. 18 GDPR),
  • to data portability (Art. 20 GDPR),
  • to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR), e.g. via the privacy settings,
  • to object at any time to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, please contact t-labs.info@telekom.de or the Data Protection Officer (see section 1).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for Deutsche Telekom AG is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

11. Changes to this privacy policy

We update this privacy policy whenever the website or the legal requirements change. The current version is always available on this page.