Data Privacy Statement

Telekom Austria AG

Lassallestraße 9, 1020 Vienna Austria
December 2023

1. General Information about this Privacy Statement

For Telekom Austria AG, the safe and sensitive handling of data is of vital importance. You can trust us to handle your data securely – this is very important to us. We comply with European and national data protection regulations, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG) 2021. An essential part of this is to make our regulations regarding data protection transparent for all data subjects. The following Privacy Statement explains which personal data we process about you, to what extent and for what purpose.

2. Who is responsible for the data processing?

Telekom Austria AG is responsible for processing your personal data.
You can contact Telekom Austria AG or our data protection officer at the following address:
Lassallestraße 9, 1020 Vienna

3. Personal data, processing purpose and legal ground

General Communication

Purpose and type of data
We may process personal data (for example, name, family name, email, telephone number, time and content of communication or other information submitted to us) to respond to customer enquiries or to manage complaints and feedback.

Legal Basis
Depending on the type of communication and the purpose for which it was sent, the legal basis for this processing will be:

  • Consent where we explicitly asked for your consent to process your data;
  • Our legitimate business interests for us to manage our relationship with you, for example, to defend our case in a legal dispute; and/or
  • Compliance with legal obligations to which we are subject, for example where we need to respond to your requests pertaining to exercising your data privacy rights.

Legal obligations

Purpose and type of data
We may process personal data to comply with any legal or regulatory obligations (including in connection with a court order).

Legal Basis
This processing is necessary for compliance with legal obligations to which we are subject.

Press releases

Purpose and type of data
If you signed up to receive our press releases and newsletters, we will process your email address, first and last name.

Legal Basis
In such case, the legal basis of the processing will be your consent.

Log files

Purpose and type of data
We process some technical data when you visit this website to the extent that this is necessary for the functional provision of this website. Please refer to section “Log files” below.

Legal Basis
The legal basis for this processing will be the legitimate interests in the functionality, stability, and security of our website.

Cookies

Purpose and type of data
This website uses “cookies” to ensure that our services are user-friendly and more effective for our clients.

Legal Basis
We rely on your consent when using optional cookies. You can withdraw your consent at any time.

Investor relations

Purpose and type of data
In the context of investor relations, we may process such personal data as name, job title, company name, email, office address, other contact details, history and content of our communication. We process the above data for the purpose of managing relations with investment community. In particular, we may require the data to process inquiries, keep our investors informed about the recent developments, organise events and meetings, to respond to questions and complaints as well as comply with our legal and regulatory obligations.

Legal Basis
We carry out this processing based on the following basis:

  • Consent: We may rely on your consent where, for example, you gave us your consent to contact you or if you subscribed to receive market related information about Telekom Austria AG.
  • Compliance with our legal obligations: We may process personal data to communicate with shareholders and keep records pertaining to general meetings; comply with reporting obligations, respond to authorities’ request, and provide updates to investors.
  • Legitimate interests: In some cases, we rely on our legitimate interest to process personal data, e.g. where we need to respond to various inquiries, analyse statistical information or defend legal claims.

4. Website functionality and log files

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

  • Information about the browser type and the version used;
  • The operating system of the retrieval device;
  • The IP address of the retrieval device;
  • Date and time of access; and
  • Websites and resources (images, files, other page content) accessed on our site.

This data is stored in the log files of our system. These data are not stored together with the personal data of a specific user, so that individual site visitors are not identified. Logging is done out of our legitimate interest to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshooting. For this purpose, it is necessary to log the technical data of the accessing computer to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. The data is also used to optimize the website and to ensure the general security of our information technology systems. We adhere to the principle of storage limitation. Therefore, after two months starting from the first day of tracking, all the collected logging data is permanently deleted from our system. 

5. Cookies

This website uses cookies. Cookies are small text files placed on the device that recognize a user when they return to the site. We use the following categories cookies:

  1. Necessary cookies for the basic functionality of our website;
  2. Functional cookies for additional functionality and increased website security; and
  3. Analytical cookies to and to analyze how our services work and are used.

We further distinguish between the following cookies:

  1. Session cookies: These are temporary cookies stored in temporary memory, which are automatically erased when you close your browser.
  2. Persistent cookies: Cookies that are used to recognise visitors and are stored on your device for future sessions. These cookies are valid for a predefined period of time.

We only use non-essential cookies (analysis and marketing cookies) with the explicit consent of the users. You can configure your browser settings to control the use of cookies, for example to require your consent before using a cookie, to accept only selected cookies or decline all cookies.
However, disabling cookies may lead to disabling certain functionality and features on our website. You will find the complete list of the cookies we use on our website together with the indication of the purpose of specific cookie and its expiration period.

Google-Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.
If IP anonymization is activated on this website, however, Google will shorten your IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plugin. If there is no add-on support for your browser, you can set a cookie to prevent tracking.
This site uses the Analytics features for Google Analytics reports for performance by demographics and interests. You can disable Google Analytics for display advertising and customize ads on the Google Display Network by viewing the ad settings.

6. Press releases and newsletter

You can subscribe to our press releases or newsletters in Newsroom section of our website. You can also subscribe to receive capital-market related information about Telekom Austria AG in the Investor Relations section of our website.
Our press releases, capital market information and newsletter provide current updates on A1 business including corporate news and financial results. These services require you to disclose your e-mail address, first name and last name. The corresponding legal ground for this processing of your personal data is your consent, which you can withdraw at any time with immediate effect.

7. Who are the recipients of the personal data?

We will only transfer your personal data to third parties if we have a valid reason for such transfer and to the extent such transfer complies with applicable law. As a rule, we will not pass on your data to third parties without your consent. However, we may be legally obliged to disclose your information to courts, prosecutors, police or other authorities. Our service providers may also process your personal data. These service providers normally carry out certain tasks or provide services for us such as IT services, delivering administration tools and software solutions etc. Even if we commission such a processor, we remain responsible for the protection of your personal data. For this reason, we contractually oblige third-party companies to keep your data confidential and to comply with data protection regulations.

8. When are personal data transferred to a third country?

Some of the recipients of your personal data may be located abroad or outside the EU/EEA and process your data there. We will only use processors outside the European Union if (i) a European Commission adequacy decision has been made for the third country in question or (ii) if we have agreed appropriate guarantees or binding internal data protection regulations with the processor to ensure that the European level of data protection and the European data security standards are maintained.

9. How long is the personal data stored?

We will not store your data for longer than is necessary to achieve the purposes set out in point 3 above, to comply with the legal obligations on data retention or to assert, exercise or defend legal claims. It is possible that the data may be anonymized instead of deleted. In this case, any personal reference will be irretrievably removed, thus eliminating the data protection obligations to delete.

10. Data security

We take effective technical and organizational measures to protect your personal data. Our employees are also trained in the handling of personal data.

11. Which rights may I exercise regarding the processing of personal data?

Right of Access: You can ask us to confirm whether and to what extent we process your personal data. Simply use our contact details indicated in this Privacy Statement. Please be aware that we cannot reveal any details about our business and trade secrets within the scope of our duty to provide information. To protect your data, it is necessary for us to carry out an identity check.

Right to Rectification: If we process your personal data that is incomplete or incorrect, you may request that we correct or complete it at any time.

Right to Erasure: You can request us to delete your personal data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent an immediate deletion, e.g. in the case of legally regulated storage obligations.

Right to Restriction of Processing: You can ask us to restrict the processing of your data if:

  • you dispute the accuracy of the data for a period that allows us to verify the accuracy of the data,
  • the processing of the data is unlawful, but you refuse to delete it and instead demand a re- striction on the use of the data
  • we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
  • you have objected to the processing of the data.

Right to Data Portability: You may request that we make available to you the data you have entrusted to us for storage in a structured, common and machine-readable format, provided that:

  • we process this data based on your given and withdrawable consent or for the fulfilment of a contract between us, and
  • such processing is carried out using automated procedures.

Right to Object: If we process your data for the performance of tasks in the public interest, for the exercise of official authority or if we refer to the necessity of safeguarding our legitimate interest during processing, you may object to this data processing if there is a predominant interest in protecting your data. You can object to the sending of an offer or advertisement at any time without giving reasons.

Right to Appeal: If you are of the opinion that we violate Austrian or European data protection law when processing your data, please contact us to clarify any questions you may have. Of course, you also have the right to complain to the Austrian Data Protection Authority (www.dsb.gv.at) as well as to a supervisory authority within the EU.

12. How can you assert your rights?

If you wish to assert any of the aforementioned rights, please contact us at the address indicated in this Privacy Statement above.

Confirmation of Identity:
When processing your inquiry, we may request additional information to confirm your identity, e.g. a legible copy of a valid photo ID with signature. This is to protect your rights and privacy.

Excessive Claiming of Rights:
Should you exercise any of the above rights manifestly unfounded or particularly frequently, we may charge a reasonable processing fee or refuse to handle your request.