Exploitation Rights RCS - Service

This data privacy information provides an overview of the items which apply to Deutsche Telekom processing your data in this web portal.
Further information, including information on data protection for specific products, is available at
https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/data-protection and
https://www.telekom.com/en/deutsche-telekom/privacy-policy-1744.

The service platform for RCS service is located in Belgium. The service is currently managed from US. Processing of data is done in line with legal provisions.Deutsche Telekom AG (hereinafter referred to as Deutsche Telekom), Friedrich-Ebert-Allee 140 , 53113 Bonn acts as the data controller. If you have any queries, please contact our Customer Services department or the Group Data Privacy Officer, Dr. Claus D. Ulmer, Friedrich-Ebert-Allee 140, 53113 Bonn, Germany datenschutz@telekom.de.

You have the right
a) To request information on the categories of personal data concerned, the purpose of the processing, any recipients of the data, the envisaged storage period (Art. 15 GDPR);

b) To request incorrect or incomplete data is rectified or supplemented (Art. 16 GDPR);

c) To withdraw consent at any time with effect for the future (Art. 7 (3) GDPR);

d) To object to the processing of data on the grounds of legitimate interests, for reasons relating to your particular situation (Art 21 (1) GDPR);

e) To request the erasure of data in certain cases under Art. 17 GDPR – especially if the data is no longer necessary in relation to the purposes for which it was collected or is unlawfully processed, or you withdraw your consent according to (c) above or objected according to (d) above;

f) To demand under certain circumstances the restriction of data where erasure is not possible or the erasure obligation is disputed (Art. 18 GDPR);

g) To data portability, i.e. you can receive your data which you provided to us, in a commonly used and machine-readable format, such as CSV and can, where necessary, transmit the data to others (Art. 20 GDPR);

h) To file a complaint with the competent supervisory authority regarding data processing (for telecommunications contracts: the German Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit); for any other matters: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Nordrhein-Westfalen).

- to processors, i.e. companies we engage to process data within the legally defined scope, Art. 28 GDPR (service providers, agents). In this case, Deutsche Telekom also remains responsible for protecting your data. We engage companies particularly in the following areas: IT, sales, marketing, finance, consulting, customer services, HR, logistics, printing.
- to cooperation partners who, on their own responsibility, provide services for you or in conjunction with your Deutsche Telekom contract. This is the case if you contract with us services from these partners or if you consent to the incorporation of the partner or if we incorporate the partner on the basis of legal permission.
- Owing to legal obligations: In certain cases, we are legally obliged to transfer certain data to the requesting state authority.

In general, your data is processed in Belgium and in other European countries.
If your data is also processed in countries outside the European Union (i.e. in third countries) by way of exception, this is done only if you have explicitly given your consent or it is required so we can provide you with services or it is prescribed by law (Art. 49 GDPR). Furthermore, your data is only processed in third countries if certain measures ensure a suitable level of data protection (e.g. EU Commission’s adequacy decision or suitable guarantees, Art. 44 ff. GDPR).
https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:en:PDF

We have taken extensive technical and operational precautions to protect your data against unauthorized access and misuse. The RCS - Service can be used over mobile network or WiFi. In both cases the transmission of data (text messages, images and other file formats) is encrypted.

a. To provide the agreed services:

- At registration: To register for the service the MSISDN is used. A mobile phone with a preinstalled RCS solution automatically retrieves the MSISDN from the network. This data is required for communication with other users and is stored on our servers as long as the service is used. If the service is not used for a period of 31 days data is deleted.
- When using RCS enabled application: When you use the app, our web servers temporarily record the IP address of your computer and other technical features such as the requested URL and file name. This data is deleted after each Internet session is concluded.
- Other: During the registration process cookies are used. This ensures that the right device is sending the pass code which you receive via SMS back to the system. During usage of the RCS - Service the Smartphone checks the contacts stored in your address book whether they are supporting RCS - Service. A request is sent to the smartphone of your contact and if it is an RCS capable device it answers as such. The result will be stored locally on your device. Some devices / apps are indicating this with an icon in your contacts. Different from the other messenger we neither store the result of your request nor copy and store your address book to our server. In case a RCS - Service is used it will be checked in real time which services are supported by your communication partner.
- Other personal details such as your name, address or e-mail address will not be recorded.

b. When will my registration data being deleted?

- If you use a downloadable app, and then remove it, the service platform stores your registration for two months. After this period, we will delete it automatically.
- If you are not connected to RCS - Service for two months, regardless of using the application only or the device preinstalled with the RCS - Service.
- If you terminate the mobile phone contract with your service provider.

- Your location will only be used (or collected) if you have explicitly given your consent and you request a localization through the RCS client, e. g. want to send it in a message to a friend.
- You can do this either when you install the RCS app or later in the settings on your device. You can revoke this consent again at any time in the settings on your device.