LAST UPDATED: 20/03/2026
The Telekom Group considers the protection of your personal data particularly important and adheres to the principle of transparency regarding its processing.
If you wish to be informed generally about the processing of your personal data by Telekom, please read the General Data Privacy Notice, which you can find here. With this notice we wish to inform you specifically about the processing of your personal data when using the Telekom App (hereinafter the Application) and/or the My Telekom website https://www.telekom.gr/selfcare (hereinafter "the Website"). Through the Application and/or the Website, access is provided to the following services/sites of the Telekom Group, for which you can refer to the corresponding data protection notice found here:
| Data controller | Registered office | Contact details |
|---|---|---|
| "HELLENIC TELECOMMUNICATIONS ORGANIZATION SOCIETE ANONYME" (hereinafter "the Company") | 99 Kifisias Ave., Maroussi | 13888 for residential customers 13818 for business customers |
| Data categories | Details |
|---|---|
| Telekom ID User Details | Data necessary for the registration and creation of a Telekom ID user, which allows Registered Users to access websites and applications of the Telekom Group with the same "single sign on" credentials. Information about data processing through Telekom ID can be found here. |
| Telekom ID Addresses | Addresses you have saved in Telekom ID |
| Identification Details |
|
| Contact Details |
|
| Product / Service Details |
|
| Equipment Data |
|
| Payment Data |
|
| Contacts Data | Phone contacts data |
| Promotional Activities Data | Information about your preferences (e.g. interests, information about you such as age, family status) |
| Survey Data |
|
| Benefits Data |
|
| Biometric Data |
|
| Data arising from the use of cookies and similar technologies | You can find information about the use of cookies and similar technologies in the "Cookie Settings" menu, found in the footer of the Website. |
| BOX Usage Data | Frequency of use of the "www.box.gr" website and the BOX Application |
| Telekom Insurance Contract Data | Tax number (TIN) and email address corresponding to the contract, as well as basic details of your insurance contracts (such as contract number and type, status, term of validity, insured risk, documents related to your insurance, and renewal information). |
Users who register on the Application as non-subscribers of the Company are registered as "Registered Users", while subscribers of the Company who register and are identified are registered as "Identified Users".
For information on the retention of data of Identified Users, see here.
Processing purpose
For registration and login on the Website and/or Application via Telekom ID. Simple browsing does not require creating a Telekom ID.
Data categories
Telekom ID User Details
Contact Data
Retention period
For more information on the processing of your data through the Telekom ID login feature, see here.
Processing purpose
For the Renewal of Prepaid Talk Time
Data categories
Product / Service Details
Retention period
2 years from the date of top-up.
Processing purpose
For managing the services and programs you hold with companies of the Group
Data categories
Product / Service Details
Retention period
2 years from the date the request or order was submitted.
Processing purpose
For submitting requests and orders
Data categories
Product / Service Details
Retention period
2 years from the date the request or order was submitted.
Processing purpose
For the activation and operation of the service (Always online)
Data categories
Equipment Data
Retention period
No data is stored
Processing purpose
For the management of the Fiber Router RDK
Data categories
Equipment Data
Retention period
Information about the processing of your data can be found in the document Special Contract Terms for Telekom Double Play, specifically in section C – Provision of Terminal Equipment, which is posted here.
Processing purpose
For router management functionality when using the Speed Test Tool (speedtest)
Data categories
Equipment Data
Retention period
For information regarding the processing of your personal data when using the Speed Test Tool through the Telekom App, click here.
Processing purpose
For bill payment (mobile and/or fixed telephony and/or MagentaTV)
Data categories
Payment Data
Retention period
2 years from the payment date.
Processing purpose
For displaying BOX service information for users registered on the "www.box.gr" website and the BOX Application with the same Telekom ID they have on the Telekom App, such as their current points balance, their active coupons, and suggested stores based on the addresses saved in their Telekom ID.
Data categories
BOX Usage Data, Telekom ID User Details, Telekom ID Addresses. More information here
Retention period
—
Processing purpose
For the electronic identification process
The use of the photograph & moving images with real-time sound enables us (through technologies such as machine learning, artificial intelligence (AI) and biometrics combined with human review) to verify whether the person requesting a transaction is indeed the same person shown in the identification document presented (police ID card or passport, etc.), thereby ensuring the security of our transactions. If consent to the processing of biometric data is not given, the transaction cannot be completed electronically and another method of completing your request must be followed (e.g. through the store network).
Data categories
Biometric Data
Retention period
30 days from the submission of your request, after which it is permanently deleted with no possibility of recovery. We nevertheless retain the result of the processing of biometric data (i.e. whether identification based on their use was successful or not) for as long as you remain our subscriber and for an additional 14 months after the discontinuation of our services.
Processing purpose
For displaying and managing the insurance contracts of the Magenta Insurance service (as referred to in the terms of the Telekom application and/or the My Telekom website – section 3.2)
The user declares that they have obtained the consent of the person whose tax number (TIN) and email address were declared, in the case that it concerns another person. The consent provided may be revoked at any time following a relevant request from the contract holder to the Company, through the call center.
Data categories
Telekom ID User Details, Magenta Insurance Contract Data
Retention period
No data is stored. Data is retrieved in real time from Magenta Insurance and displayed during your session. The link between your Telekom ID and your insurance contracts is retained until consent is withdrawn.
Processing purpose
For sending personalized gifts/benefits/discount coupons or for customizing the content of the Application to match your needs (e.g. if you complete the "My Preferences" section in "My Rewards")
Data categories
Promotional Activities Data
Retention period
13 months.
Processing purpose
For sending questionnaires about the sustainability of your habits
Data categories
Telekom ID in pseudonymized form
Questionnaire responses
Retention period
Until the end of the activity
Processing purpose
For creating an individual subscriber or user profile
Data categories
More information here
Retention period
OPT-OUT OPTION: Menu section, "Profile" → "Personal Data" → "Subscriber Profile" in the Application and on the website
Processing purpose
For promoting the Application as well as the services provided through it and informing you of changes/news or offers
Data categories
Contact Details
Benefits Data
Retention period
up to 12 months
Processing purpose
For providing gifts/benefits/discount coupons in accordance with section 7 of the terms and conditions of use of the Application (FOR YOU section)
Data categories
Benefits Data
Retention period
13 months
Processing purpose
For sending satisfaction surveys or evaluations of products or services we provide to you
Data categories
Survey Data
Retention period
12 months
These specific types of processing based on our legitimate interest are particularly important to us and to the development of our products and services, but also for your own protection and your interest as a consumer. Nevertheless, you can at any time state your objection to one or more types of processing carried out on the basis of legitimate interest. For the ways to exercise the right to object, please see here.
Processing purpose
Necessary communications regarding matters of the services provided through the Application
E.g. for bill issuance, Application functionality matters such as changing the wifi name
Communication method
PUSH NOTIFICATIONS
Legal basis
Contract Performance
Opt-out option
Right can be exercised as described in article 7
Processing purpose
Promotional communications/offers based on the personalized profile
Communication method
PUSH NOTIFICATIONS
Legal basis
Consent
Opt-out option
To manage your preference, you can follow these steps in the Application: Profile → Personal Data → Promotional Communications
The installation and use of the Application, depending on the operating system on which it is installed, may require or request optional access to the following data on the subscriber's terminal device in order to be installed and function:
| Access to terminal application data (permissions) | Processing purpose |
|---|---|
| Location Data (GPS) | To inform you of stores serving your area based on your location on the map. For the use of Location Data for Magenta Moments purposes, see the Application section "Personal Data - Terms and Conditions of Magenta Moments". To display stores serving the area through BOX or BOX offers based on your location. Applies to users of the Application, regardless of whether they are users of the BOX service (BOX section). |
| SMS | For the automatic reading of the code sent via SMS by Telekom. |
| Contacts | E.g. for using the subscriber's contact photo to set as an Avatar Image, as well as informing them which of their contacts are Telekom subscribers |
| Camera | E.g. for using the camera to scan the QR code for automated login to the application, scanning the bar code of the SIM card for service activation, taking a photo to set as an Avatar image, taking a photo for the electronic identification process. |
| Storage | For selecting a photo from the device's photo library for the purpose of changing the Avatar image or saving the subscriber's photo in case a photo is taken through the application. This access is also required for storing PDF files of bills, contract renewals, and their payment receipts. |
| Internet | For communicating with Telekom's systems and displaying information relevant to subscribers (e.g. connection details, account details, etc.). |
| SIM Card | For recognizing the mobile phone connection number (MSISDN) used by the subscriber's device, for the purpose of automatically filling in their number in the login field. |
Recipients of your personal data may be third-party companies we collaborate with, which operate in the following sectors:
In these cases, these third-party companies are processors acting on behalf of Telekom, i.e. Telekom partners, who undertake the execution of a specific task following our instructions and applying the strict procedures of the Telekom Group regarding the processing of your personal data. In these cases Telekom continues to be responsible for the processing of your personal data.
The processing of your personal data for the above purposes by our partners takes place primarily within Greece and the European Union (EU). If we collaborate with companies outside the EU, they will only process your data following our instructions and in cases where there is an adequacy decision of the European Commission or where appropriate clauses are agreed that ensure a high level of security regarding the processing of your personal data.
Beyond the above companies, OTE does not process or disclose your personal data to third parties, except in cases where such disclosure/transfer is required by applicable law.
The rights you can exercise include:
| Right of Access | You have the right to receive information about the processing of your data and copies of it. |
| Right of Rectification | You have the right to request the correction of inaccurate data about you (e.g. correction of address, contact details), as well as the completion of incomplete data about you. |
| Right of Erasure | You have the right to request the deletion of your personal data when it is no longer necessary in relation to the purposes for which it was processed, or when you have withdrawn the consent on the basis of which we collected and processed it. |
| Right to Restriction of processing | You have the right to request the restriction of processing for a specific purpose (e.g. for sending promotional messages). |
| Right to Portability | You have the right to receive the personal data you have provided to the company, in a structured, commonly used format that is also machine-readable |
| Right to Object | You have the right to object to the processing of your personal data in cases where you do not wish your personal data to be processed, provided that the processing is based on legitimate interest and/or when profiling takes place. |
To exercise your rights and/or contact the Data Protection Officer, you can:
If customers believe that we have not adequately satisfied their request and that the protection of their personal data is being affected in any way, they can file a complaint via the dedicated online portal of the Hellenic Data Protection Authority (Athens, 1-3 Kifisias Avenue, P.C. 115 23 | tel: +30 210 6475600). Detailed instructions for filing a complaint are provided on the Authority's website.
Telekom will respond to your requests free of charge without delay within one month of receipt of the request. In exceptional cases, this deadline may be extended by two (2) months if this is required due to the complexity of your request. In any case we will inform you of such extension and the reason for the delay.
If we consider your request to be manifestly unfounded or excessive, we reserve the right to charge a reasonable fee for fulfilling it, taking into account the administrative costs of executing it, or even to refuse to act on your request.
Telekom takes appropriate organizational and technical measures for the security of data and its protection from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.
More information on this topic can be found in the General Data Privacy Notice regarding the Protection of Your Personal Data (General Data Privacy Notice).
We use cookies and similar technologies on our website to store, retrieve and process information on your device. In this way, we improve your experience, analyze website traffic, and show you content and advertisements that interest you. For this purpose user profiles are created per website and device. Our partners also use these technologies.
The processing of tracker data takes place:
More information about tracker categories can be found in the footer of the Website under the "Cookie settings" link, while the detailed list of trackers and their partners-recipients can be found in the section "List of partners-recipients and trackers used on the Website" of this document.
Partner - data recipient
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Service
Google Tag Manager
Processing purpose
Adding and managing tracker scripts on the website. Checks the user's choices on tracker categories and activates, based on their consent, these trackers
Responsibilities
Telekom S.A. is responsible for data protection. Google Ireland Ltd. acts on behalf of Telekom S.A
Data processed
User choices regarding tracker consent
Storage period
Session
Processing in third countries
-
Transfers under appropriate safeguards / Exceptions
-
Partner - data recipient
F5, Inc. Attn: Privacy Office 801 5th Ave Seattle, Washington 98104 United States
Service
F5 Big-IP
Processing purpose
Network load balancing
Responsibilities
Telekom S.A. is responsible for data protection. F5, Inc. acts on behalf of Telekom S.A
Data processed
Number of users, IP address, browsing data
Storage period
Session
Processing in third countries
Your online usage data is processed in the USA
Transfers under appropriate safeguards / Exceptions
Data Privacy Framework (adequacy decision)
Partner - data recipient
Telekom S.A. 99 Kifisias Ave., 15124 Maroussi
Service
Tracker consent management
Processing purpose
Cookie_Consent_Set is used to store your choices regarding tracker consent
Responsibilities
Telekom S.A.
Data processed
User choices regarding tracker consent
Storage period
3 months
Processing in third countries
-
Transfers under appropriate safeguards / Exceptions
-
Partner - data recipient
Telekom S.A. 99 Kifisias Ave., 15124 Maroussi
Service
Shopping cart
Processing purpose
Storage of products and services added to the shopping cart, order processing
Responsibilities
Telekom S.A.
Data processed
products and services added to the shopping cart
Storage period
2 years
Processing in third countries
-
Transfers under appropriate safeguards / Exceptions
-
Partner - data recipient
Telekom S.A. 99 Kifisias Ave., 15124 Maroussi
Service
Telekom ID login functionality
Processing purpose
User login to the website
Responsibilities
Telekom S.A.
Data processed
Unique user identifier for logging into Telekom ID
Storage period
6 months from the last login
Processing in third countries
-
Transfers under appropriate safeguards / Exceptions
-
Partner - data recipient
Telekom S.A. 99 Kifisias Ave., 15124 Maroussi
Service
Retaining settings on the website
Processing purpose
Retaining choices related to website settings, such as language
Responsibilities
Telekom S.A.
Data processed
User choices
Storage period
1 month
Processing in third countries
-
Transfers under appropriate safeguards / Exceptions
-
Partner - data recipient
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Service
Google Analytics
Processing purpose
Google Analytics collects data from websites to generate reports providing business insights, e.g. how many users visited a page or purchased a product. Google Analytics uses a JavaScript measurement code added to the pages of the digital service to collect pseudonymous information about how users interact with a page.
Responsibilities
Telekom S.A. is responsible for data protection. Google Ireland Ltd. acts on behalf of Telekom S.A
Data processed
User count statistics, session statistics, approximate geographic location, browser and device information, interactions (events) with the website such as pages visited, files downloaded, Age, Gender, Interests
Storage period
The user-level data retention period is 14 months. The event data retention period is 14 months. The retention period for age, gender and interests data is: 2 months.
Processing in third countries
Your online usage data is processed in Argentina, Israel, Japan, Canada, New Zealand, Switzerland, the United States of America and the United Kingdom. The European Commission has issued an adequacy decision for these countries (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_el). Based on your consent, your online usage data will also be processed in the following unsafe third countries: Australia, Brazil, Chile, India, Kenya, Colombia, Malaysia, Mexico, Peru, Philippines, Singapore, South Africa, Taiwan, Turkey and the United Arab Emirates. There is no adequacy decision from the European Commission (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_el) for these countries. Telekom S.A. cannot, therefore, guarantee that the European level of data protection is maintained for these data processing operations. It cannot be excluded that local authorities may have access to your online usage data, or that the exercise of your rights as a data subject may be restricted or excluded.
Transfers under appropriate safeguards / Exceptions
EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Article 49 of the GDPR
Partner - data recipient
Hotjar Ltd. Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta
Service
Hotjar Heatmaps, recordings, surveys, Feedback button.
Processing purpose
Hotjar Heatmaps, recordings, surveys, and the Feedback button collect data, such as recordings, feedback and survey results from the website for the purpose of providing business insights to improve the service and the customer experience.
Responsibilities
Telekom S.A. is responsible for data protection. Hotjar Ltd. acts on behalf of Telekom S.A
Data processed
Interactions (events) with the website such as pages visited, files downloaded, anonymous recordings of the movements of users on the site. It also has questionnaires where we collect user opinions.
Storage period
12 months
Processing in third countries
You can find information about the transfer countries at: https://help.hotjar.com/hc/en-us/articles/360058514233-Sub-Processors-Used-by-Hotjar
Transfers under appropriate safeguards / Exceptions
EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Article 49 of the GDPR
Partner - data recipient
Medallia Inc, 575 Market St Suite 1850, San Francisco, CA 94105, United States of America.
Service
Medallia service for the display and evaluation of customer satisfaction surveys
Processing purpose
Improving the website through the display and analysis of customer satisfaction surveys. The following cookies and LocalStorage are used: DECLINE_DATE, SUBMIT_DATE, kampyleUserSessionsCount, kampyleUserSession, kampyleSessionPageCounter, kampyleInvitePresented, kampylePageLoadedTimestamp, kampyleUserPercentile, LAST_INVITATION_VIEW, kampyle_userid, cd_user_id. The service has read and write access to your device.
Responsibilities
Telekom S.A. is responsible for data protection. Medallia Inc acts on behalf of Telekom S.A
Data processed
IP address, your survey responses, if you have participated, frequency of your survey participation, your MSISDN number – if you provided it as part of the survey with a request to be called for the survey, randomly generated device identifier
Storage period
Your IP address is not stored. The data or categories of data will be deleted after one year or if you withdraw your consent. The service's operational lifespan is 12 months.
Processing in third countries
When using the service, the collected data may be transferred to another country and/or a country that does not have the necessary data protection standards. Below you will find a list of the countries to which data is transferred. For more information about the security measures, please refer to the privacy policy of the respective provider or contact the provider directly. Based on your consent, your data or categories of data will be processed in the following third country: USA. The European Commission has issued an adequacy decision for this country (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).
Transfers under appropriate safeguards / Exceptions
EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent pursuant to Article 49 of the GDPR
Partner - data recipient
Dynatrace Limited, Quantum 60, Norden Road, Maidenhead, Berkshire, SL6 4AY, United Kingdom
Service
Website improvement
Processing purpose
Improving website performance
Responsibilities
Telekom S.A. is responsible for data protection. Dynatrace Limited acts on behalf of Telekom S.A
Data processed
Interactions (events) with the website such as pages visited, files downloaded, website response time to actions
Storage period
35 days
Processing in third countries
Dynatrace operates in the following countries: https://www.dynatrace.com/company/locations/. It also uses cloud applications from other providers, whose infrastructure may be located in third countries, as shown here: https://www.dynatrace.com/company/trust-center/policies/. This means there is a possibility that data processing may occur in these countries
Transfers under appropriate safeguards / Exceptions
—