Search

Required cookies

Processing company with
company address/
data recipient

Tealium Inc.
11095 Torreyana Road San Diego
CA 92121
United States of America

Processing purpose according
to consent category

Required

Products used/
short description
of the service used

iQ

Description of specific 
processing purpose

The Tealium iQ service ensures that you can configure settings
for data protection and that your specifications are implemented
when you use our website. For this purpose, Tealium iQ stores a
file in the browser on your end device. This controls which
technologies from which providers may be loaded and how
recorded data is transmitted. The file is stored on the client side,
i.e., in your browser, for subsequent page views.

Responsibilities

T-Systems International GmbH

Processed data

Tealium session ID

Storage duration

utag_main
cookie
12 months

CONSENTMGR
cookie
3 months

Legal basis
(data processing)

Art. 6 para. 1 lit. f GDPR

Third-country processing

Your online usage data is processed in the United States of
America. An adequacy decision from the EU Commission is
available for this state.

Legal basis 
(third-country processing)

EU adequacy decision Art. 45 GDPR
as well as consent pursuant to Art. 49 GDPR
Processing company with
company address/
data recipient

Tealium Inc.
11095 Torreyana Road San Diego
CA 92121
United States of America

Processing purpose according
to consent category

Required

Products used/
short description
of the service used

EventStream

Description of specific 
processing purpose

The Tealium EventStream service has a control function in
consent management: it converts data collected about the
use of our website and passes it on to other services in
accordance with the privacy settings you have implemented.
The data is not stored permanently on the servers of Tealium.

Responsibilities

T-Systems International GmbH

Processed data

Anonymized user interactions of users with the website

Storage duration

utag_main
cookie
12 months

CONSENTMGR
cookie
3 months

Legal basis
(data processing)

Art. 6 para. 1 sentence 1 lit. f GDPR

Third-country processing

Your online usage data is processed in the United States
of America. Anadequacy decision from the EU Commission
is available for this state.

Legal basis 
(third-country processing)

EU adequacy decision Art. 45 GDPR
as well as consent pursuant to Art. 49 GDPR

Analysis by T-Systems

Processing company with
company address/
data recipient

Mapp Digital Germany GmbH 
Mapp Digital c/o Webtrekk GmbH
Schönhauser Allee 148
10435 Berlin

Processing purpose according
to consent category

Analysis by T-Systems
(or processor) and, if applicable,
third-country processing via Art. 49 GDPR
Products used/
short description
of the service used

Customized design, marketing, personalization, newsletter

Description of specific 
processing purpose

We use this service to analyze and optimize the interaction with
our clients on our digital service as well as marketing campaigns.
Segmentation and targeting help us to provide relevant content
at the right time. The data helps us to better understand user
behavior and to continuously improve our digital service.

Responsibilities

T-Systems International GmbH is responsible under data
protection law. Mapp Digital Germany GmbH acts on behalf
of T-Systems International GmbH.

Processed data

IP address, information about user behavior, clicks, website
visits and engagement with content, purchase histories, and
information about orders to create personalized offers, cookie ID

Storage duration

6 months

Legal basis
(data processing)

This web service is used on the basis of § 25 para. 1 sentence
1 Telecommunications Telemedia Data Protection Act (TTDSG).
The subsequent processing of your data or data categories
takes place on the basis of Art. 6 para. 1 a) GDPR.

Third-country processing

None

Legal basis 
(third-country processing)

None

Analysis with partners

Processing company with
company address/
data recipient

Google Ireland Ltd.
Gordon House
Barrow Street
Dublin 4
Ireland

Processing purpose according
to consent category

Analysis with partners
(controllers and joint controllers) and, if applicable,
third-country processing via Art. 49 GDPR
Products used/
short description
of the service used

Playing embedded videos on the website.

Description of specific
processing purpose

YouTube collects data to provide users with better services –
from identifying basic information, such as your language, to
more complex issues, such as advertising. What data YouTube
collects and how it is used depends on how you use the services
and how you manage your privacy settings.

If you are not signed in to a Google account, the data collected
is stored with unique identifiers that are linked to the browser,
app or device. This can be used, for example, to ensure that the
language settings are retained for all sessions.

If you are signed in to a Google account, data that is stored in
your Google account and is considered personal data will also
be collected.

Further information can be found here.

Responsibilities

Google Ireland Ltd.
Gordon House, Barrow Street
Dublin 4
Ireland

Processed data

Device information, IP address, referrer URL, viewed videos

Storage duration

12 months

Legal basis
(data processing)

Art. 6 para. 1 sentence 1 lit. a GDPR

Third-country processing

This service may forward the collected data to another country.
This may also be a country in which the level of data protection
does not correspond to the legal standard in Germany. If your
data is transferred to the United States, it may be used by U.S.
authorities for the purposes of monitoring and surveillance
without you being able to take legal action against this. Below
you can see all countries to which the service transfers the data.
Further information on the security of your data can be found in
the data processor’s privacy policy. You can also contact the
data protection officer directly.

Legal basis 
(third-country processing)

Adequacy decision of the EU Art. 45 GDPR as well as
consent according to Art. 49 GDPR

Marketing by T-Systems

Processing company with
company address/
data recipient

Deep Media Technologies GmbH
Hohe Bleichen 8
20354 Hamburg

Processing purpose according
to
consent category

Marketing by T-Systems
(or processor) and, if applicable,
third-country processing via Art. 49 GDPR
Products used/
short description
of the service used

We use the Deep Media
Advertiser Tag on our digital service.

Description of specific
processing purpose

The Deep Media Advertiser Tag is a tag management pixel for
managing technologies for marketing and optimization purposes.
It is used in particular to place ads that are relevant and
interesting for you and to improve campaign performance reports.
When the advertiser tag is used, information, for example in the
form of cookies or click IDs, is processed. The processing of the
data and, if applicable, the forwarding of this online identifier by
Deep Media Technologies GmbH takes place only to providers
for which the user has given consent in the context of the data
protection settings.

Responsibilities

T-Systems International GmbH is responsible under data
protection law. Deep Media Technologies GmbH acts on behalf
of T-Systems International GmbH.

Processed data

IP address, device identifier

Storage duration

12 months

Legal basis
(data processing)

This service is used on the basis of § 25 para. 1 sentence
1 Telecommunications Telemedia Data Protection Act (TTDSG); 
the subsequent processing of your personal data is carried out
on the basis of Art. 6 para. 1 a) GDPR.

Third-country processing

This service may forward the collected data to another country.
This may also be a country in which the level of data protection
does not correspond to the legal standard in Germany. If your
data is transferred to the United States, it may be used by U.S.
authorities for the purposes of monitoring and surveillance
without you being able to take legal action against this. Below
you can see all countries to which the service transfers data. 
Further information on the security of your data can be found
in the data processor's privacy policy. You can also contact 
the data protection officer directly.

Legal basis 
(third-country processing)

Adequacy decision of the EU Art. 45 GDPR as well as consent 
according to Art. 49 GDPR

Marketing with partners

Processing company with
company address/
data recipient

Google Ireland Ltd.
Gordon House
Barrow Street
Dublin 4
Ireland

Processing purpose according
to consent category

Marketing with partners
(controller or joint controller) and, if applicable, third-country
processing via Art. 49 GDPR
Products used/
short description
of the service used

Google Ads: this web service determines and documents
website visits and measures the success of advertisements in
order to subsequently optimize advertising expenditure.

This web service uses cookies, pixels, and a local storage entry.

The web service employs read and write access to your end
device.

Further products: Floodlight, Consent Mode, Campaign
Manager 360/Display & Video 360

Description of specific 
processing purpose

Google Ads: are used to present interest-based advertisements
to visitors as part of the Google advertising network. In the digital
service, the visitor can then be presented with advertisements
that relate to content that the visitor has previously accessed
in other digital services that use the remarketing function of
Google. If you have reached our digital service via a Google ad,
Google AdWords will store a cookie on your device. This cookie
loses its validity after 90 days. The information collected with
the help of this so-called conversion cookie is used to generate
statistics about our conversion rate. This means that we find out
how many users have come to our websites via a Google ad and
purchase a product within 90 days. 

Campaign Manager: this web service is used for
performance measurement and the optimization of advertising
campaigns. It uses cookies to collect information for services
of the Google Marketing Platform (CampaignManager360
(CM360 AdServer), DisplayVideo360 (DV360 programmatic
purchasing platform), SearchAds360 (SA360)). The web
service employs read and write access to your end device.

Google Consent Mode is a function in connection with the web
services Google Analytics, Display & Video 360, Google Ads, and
GMP Floodlight with which we transmit information about your
consents to the aforementioned web services to 
Google Ireland Ltd. This information is used for projections for
the purpose of an improved statistical evaluation of the success
of our online advertising.

This web service is only used if you have also consented to
the use of Google Tag Manager.

Based on the consent you have given, your above-mentioned
data or data categories will also be processed in the United States.
For this transfer, an adequacy decision from the EU Commission 
is currently available.

Responsibilities

Controller (C2C), T-Systems International GmbH, and Google
Ireland Ltd act on their own responsibility. You can find further
information on data processing by Google in the
privacy policy of Google Ireland Ltd.

Processed data

Cookie ID, date and time of visit, device information, IP address, 
information about operating system, referrer URL, web request,
browser information

Storage duration

Your online usage data is not stored by Telekom. The web service
has a service life of 13 months. You can delete the local storage
via your browser settings.

Legal basis
(data processing)

This web service is used on the basis of § 25 para. 1 sentence
1 Telecommunications Telemedia Data Protection Act (TTDSG);
the subsequent processing of your personal data is carried out
on the basis of Art. 6 para. 1 a) GDPR.

Third-country processing

Your online usage data is processed in Argentina, Israel, Japan,
Canada, New Zealand, Switzerland, the United States of
America, and the United Kingdom. For these states, an
adequacy decision from the EU Commission is available. Based
on the consent you have given, your online usage data will
also be processed in the following unsafe third countries:
Australia, Brazil, Chile, India, Kenya, Colombia, Malaysia, Mexico,
Peru, Philippines, Singapore, South Africa, Taiwan, Turkey, and
United Arab Emirates. For these states, no
adequacy decision from the EU Commission is available.
T-Systems International GmbH can therefore not ensure that the
European level of data protection is observed for this data
processing. It cannot be ruled out that local authorities may
have access to your online usage data and that the exercise of
your rights as a data subject may be restricted or excluded.

Legal basis 
(third-country processing)

Adequacy decision of the EU Art. 45 GDPR as well as
consent according to Art. 49 GDPR

Processing company with
company address/
data recipient

Adform A/S
Silkegade 3B stuen & 1st floor
1113 Copenhagen
Denmark

Processing purpose according
to consent category

Marketing with partners
(controller or joint controller) Adform and, if applicable,
third-country processing via Art. 49 GDPR

Products used/
short description
of the service used


This service is used for the targeted display of advertising on
relevant platforms (retargeting) and conversion measurement.

This web service uses a pixel and cookies: TPC, GCM, CM,
CM14, Otsid, C, Uid, receive-cookie-deprecation are used. The
web service employs read and write access to your end device.
This web service is only used if you have not declared a global
opt-out to Adform here.

Description of specific
processing purpose

To receive evaluations about the performance of our campaigns,
targeting data, and advertisements

Responsibilities

T-Systems International GmbH and Adform A/S are jointly
responsible. In the privacy policy of Adform A/S you will
find further information on data processing by Adform.

Processed data

IP address, device identifier, probabilistic identifier,
browsing and interaction data, approximate location data,
usage data

Storage duration

13 months

Legal basis
(data processing)

This web service is used on the basis of § 25 para. 1 sentence
1 Telecommunications Digital Services Data Protection Act
(TDDDG); the subsequent processing of your personal data or
data categories is carried out on the basis of Art. 6 para. 1 a)
GDPR.

Third-country processing

None

Legal basis 
(third-country processing)

None

Processing company with
company address/
data recipient

The Facebook Pixel web service is a product of Meta Platforms
Ireland Limited, ATTN: Privacy Operations, Merrion Road,
Dublin 4, D04 X2K5, Ireland.

Processing purpose according
to consent category

Marketing with partners
(controller or joint controller) and, if applicable, third-party
processing via Art. 49 GDPR

Products used/
short description
of the service used
 

The web service Facebook Pixel and cAPI (Server to Server) is
used to measure and analyze the success of Facebook 
advertising campaigns and re-targeting on platforms from
Meta.

This web service uses cookies (“fr,” “fbp,” “fbc,” and “oo”) and
an entry in the local storage and in the index database on your
end device.

The web service employs read and write access to your end
device.

Facebook cAPI is a service for the personalization,
performance measurement, and analysis of Facebook
advertising campaigns.

Description of specific
processing purpose
 

The Facebook service is used to display relevant advertising.
For this reason, we share the interactions on our online
service with Facebook. This is necessary to ensure that the
content of the ads is tailored to you. For example, we share
with Facebook information about which products were of
interest to you so that we can suggest products and services
on Facebook that may be of interest to you.

The data that is forwarded to Facebook also helps us to track
and analyze the success of our marketing activities. Based on
this information, the ads are optimized to ensure a high level
of efficiency.

Responsibilities

Joint Controller (JC), T-Systems International GmbH and
Meta Platforms Ireland Limited are jointly responsible. In the
privacy policy of Meta Platforms Ireland Limited, you can find
more information on data processing.

Processed data

Ads viewed, content viewed, device information, geographic
location, HTTP header, interactions with ads, services, and 
products, IP address, elements clicked on, marketing
information, pages visited, pixel ID, referrer URL, usage data,
user behavior, Facebook cookie information, Facebook user ID,
usage/click behavior, browser information, device operating
system, device ID, user agent, browser type, email address
(hashed), gender (hashed), zip code (hashed), browser ID (fbq),
event ID.

Storage duration

12 months

Legal basis
(data processing)

This web service is used on the basis of § 25 para. 1 sentence
1 Telecommunications Digital Services Data Protection Act
(TDDDG); the subsequent processing of your personal data or
data categories is carried out on the basis of Art. 6 para. 1 a)
GDPR.

Third-country processing

Your data will be processed in the following third countries:
United States. For this country, an 
adequacy decision from the EU Commission is available.

Legal basis 
(third-country processing)

Adequacy decision of the EU Art. 45 GDPR as well as
consent according to Art. 49 GDPR

Processing company with
company address/
data recipient

LinkedIn Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland

Processing purpose  according to
consent category

Marketing with partners
(controller or joint controller) and, if applicable,
third-party processing via Art. 49 GDPR

Products used/
short description
of the service used

LinkedIn Insight Tag

Description of specific
processing purpose

The LinkedIn Insight Tag enables the collection of statistical,
pseudonymous data (referrer URL, IP address (shortened),
device and browser characteristics) about the use of our online
service and corresponding aggregated statistics are made
available on this basis . This information is also used to show
interest-specific and relevant offers and recommendations after
you have shown an interest in certain products, information,
and offers on our online service. This anonymous information
is stored in a cookie for six months.

Responsibilities

T-Systems International GmbH is responsible under data
protection law. LinkedIn Unlimited Company acts on behalf 
of T-Systems International GmbH.

Processed data

Referrer URL, IP address (shortened), device and browser
characteristics

Storage duration

180 days

Legal basis
(data processing)

This web service is used on the basis of § 25 para. 1 sentence
1 Telecommunications Digital Services Data Protection Act
(TDDDG); the subsequent processing of your personal data or
data categories is carried out on the basis of Art. 6 para. 1 a)
GDPR.

Third-country processing

This service may forward the collected data to another
country. This may also be a country in which the level of data
protection does not correspond to the legal standard in
Germany. If your data is transferred to the United States,
it may be used by U.S. authorities for the purposes of
monitoring and surveillance without you being able to take
legal action against this. Below you can see all countries
to which the service transfers the data. Further information
on the security of your data can be found in the data
processor’s privacy policy. You can also contact the data
protection officer directly.

Legal basis 
(third-country processing)

Adequacy decision of the EU Art. 45 GDPR as well as
consent according to Art. 49 GDPR

Do you visit t-systems.com outside of Germany? Visit the local website for more information and offers for your country.