Data Privacy Policy
NOTICE REGARDING THE PROCESSING OF YOUR PERSONAL DATA THROUGH THE WEBSITE WWW.TELEKOM.GR
LAST UPDATED: 7-9-2026
The OTE Group considers the protection of your personal data particularly important and upholds the principle of transparency regarding its processing.
If you would like general information about how OTE processes your personal data, please read the General Data Privacy Notice regarding the Protection of Your Personal Data.
With this notice we wish to inform you specifically about the processing of your personal data when using the website www.telekom.gr (hereinafter the "Website"). The Website offers simple browsing, as well as navigation and the completion of transactions through the online store (hereinafter "e-shop"), for which no registration is required.
Through the Website you are given access to the following services / sites, for which you can refer to the corresponding data protection notice:
- My Telekom
- Online bill payment (included in the My Telekom data processing notice)
- Magenta Moments
- Telekom ID
FREQUENTLY ASKED QUESTIONS
1. What is the identity and contact details of the data controller for personal data?
|
DATA CONTROLLER |
REGISTERED OFFICE |
CONTACT DETAILS |
|
HELLENIC TELECOMMUNICATIONS ORGANIZATION SOCIÉTÉ ANONYME ("the Company") |
99 Kifisias Ave., Maroussi |
13888 for residential customers
13818 for business customers |
2. What categories of personal data do we collect and process?
|
CATEGORY |
EXAMPLES |
|
Telekom ID user information |
See the separate notice on data processing through Telekom ID. |
|
Identification data |
Full name, tax ID (AFM), ID card/passport number, occupation. |
|
Contact details |
Email, phone number and addresses. |
|
Product information |
Products / Services, time of purchase. |
|
Payment information |
Payment method, credit card details. |
|
Customer service data |
Data submitted through contact forms. Data for booking a store appointment. Sign-language video calls. |
|
Website navigation data |
E.g. computer IP address, URL of the page visited, time. |
|
CATEGORY |
EXAMPLES |
|
Data from cookies and similar technologies |
See the "Cookie Settings" menu in the Website footer. |
3. For what purpose do we process your personal data, and on what legal basis?
3.1 For the provision of services through the Website (Legal Basis: Performance of a Contract)
|
PROCESSING PURPOSE |
DATA CATEGORIES |
RETENTION PERIOD |
|
To register and log in to the Website via Telekom ID. Simple browsing does not require creating a Telekom ID. |
Telekom ID user information |
See the separate notice on Telekom ID login. |
|
To make purchases through the online store (Telekom e-shop). To facilitate ordering, the contact details saved in your Telekom ID are used, as well as addresses declared in fixed-line, mobile and/or TV subscription contracts. |
Telekom ID user information, Identification data, Contact details, Product information, Payment information |
Your purchase history is kept indefinitely and is deleted if you do not log in or place an order for 2 years. For tax documents: 12 years. |
|
For customer service purposes (contact form, sign-language video call, booking a store appointment) |
Customer service data |
12 months. The video call itself is not recorded/stored. |
3.2 Based on your consent
|
PROCESSING PURPOSE |
DATA CATEGORIES |
RETENTION PERIOD |
|
Telephone contact with you ("Come to Telekom" campaign) |
Contact phone number |
1 year from the contact. Call recordings are kept for 6 months. |
3.3 Based on the legitimate interest of the Company or of website users
|
PROCESSING PURPOSE |
DATA CATEGORIES |
RETENTION PERIOD |
|
Reminder for an incomplete order left in the e-shop shopping cart |
Order data (shopping cart) |
5 days |
|
For the smooth and secure operation of the website |
Navigation data |
2 years |
3.4 For compliance with legal obligations
|
PROCESSING PURPOSE |
DATA CATEGORIES |
RETENTION PERIOD |
|
Compliance with tax legislation |
Order data - tax documents |
Twelve (12) years from the issuance of the tax document |
4. In what ways do we communicate with you?
|
PURPOSE |
MEANS OF COMMUNICATION |
LEGAL BASIS |
OPT-OUT AVAILABLE |
|
To inform / assist you following your request (e.g. "Come to Telekom") |
By phone |
Consent |
See section 6 |
|
To inform you about the status of your order |
|
Performance of a contract |
— |
5. Who are the recipients of personal data, and for what purpose is it transferred to them?
Recipients of your personal data may be third-party companies we work with, active in the following fields:
- Development of IT systems and technical support
- Advertising and marketing
In these cases, the third-party companies act as processors on behalf of OTE, i.e. OTE partners who undertake the execution of a specific task following our instructions and applying the OTE Group's strict procedures regarding the processing of your personal data.
OTE remains responsible for the processing. Processing by our partners for the above purposes is carried out mainly within Greece and the European Union (EU). Where we work with companies outside the EU, they will only process your data on our instructions and where an EU adequacy decision exists or appropriate safeguard clauses have been agreed.
Beyond the above companies, OTE does not process or disclose your personal data to third parties, except where such disclosure/transfer is required by applicable law.
6. What are your rights as a user of the Service regarding the processing of your personal data?
|
RIGHT |
DESCRIPTION |
|
Access |
To obtain confirmation regarding the processing of your data, information about it, and copies of it. |
|
Rectification |
To request correction of inaccurate data (e.g. address, contact details, ID number) and completion of incomplete data. |
|
Erasure |
To request deletion of your personal data once it is no longer necessary or you have withdrawn your consent. |
|
Restriction of processing |
To request restriction of processing for a specific purpose (e.g. sending promotional messages). |
|
Portability |
To receive your personal data in a structured, commonly used and machine-readable format. |
|
Objection |
To object to processing where it is based on legitimate interest and/or where profiling takes place. |
To exercise your rights and/or to contact the Data Protection Officer, you may:
- Send an e-mail to customerprivacy@telekom.gr, or
- Send a letter to "Customer Service, 99 Kifisias Ave., 15124, Maroussi" with the subject "Exercise of personal data rights", stating your full name and phone number.
If you believe we have not adequately addressed your request, you may file a complaint with the Hellenic Data Protection Authority (Athens, 1-3 Kifisias Avenue, P.C. 115 23 | tel: +30 210 6475600).
OTE will respond to your requests free of charge and without delay, within one month of receiving the request. In exceptional cases this period may be extended by two (2) further months due to complexity, in which case we will inform you accordingly. If we consider your request manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or to refuse to act on the request.
7. What trackers (trackers/cookies) are used on the Website?
We use cookies and similar technologies on our website to store, retrieve and process information on your device. This helps us improve your experience, analyze website traffic, and show you content and advertisements relevant to your interests. For this purpose, user profiles are created per website and device. Our partners also use these technologies.
Processing of tracker data is carried out:
- For the "Necessary and Functionality" category, on the Legal Basis: Performance of a contract
- For the remaining tracker categories, on the Legal Basis: Consent
More information on tracker categories can be found in the website footer, under "Cookie Settings", while the detailed list of trackers is provided in the "List of partners-recipients and trackers" section of this document.
8. What measures are applied to protect your personal data?
OTE takes appropriate organizational and technical measures to ensure data security and to protect it against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.
More information on this topic is available in the General Data Privacy Notice regarding the Protection of Your Personal Data.
9. List of partners-recipients and trackers used on the Website
The following trackers relate to www.telekom.gr. help.telekom.gr additionally uses the following partner-related trackers: Google Tag Manager, Google Analytics and Hotjar.
Processing purpose: Necessary and functionality
|
Partner - data recipient |
Service |
Processing purpose |
Data processed |
Retention period |
Third countries / Safeguards |
|
Google Ireland Ltd., Dublin 4, Ireland |
Google Tag Manager |
Adds/manages tracker scripts; activates trackers based on consent. |
User's tracker consent choices |
Session |
— |
|
F5, Inc., Seattle, WA, United States |
F5 Big-IP |
Network load balancing |
Number of users, IP address, navigation data |
Session |
US — Data Privacy Framework (adequacy decision) |
|
OTE S.A., 99 Kifisias Ave., Maroussi |
Tracker consent management |
Cookie_Consent_Set, to store consent choices |
User's tracker consent choices |
3 months |
— |
|
BARE MENTAL I.K.E. |
Findbar |
Storage of search history |
Search history |
1 month |
— |
|
OTE S.A., 99 Kifisias Ave., Maroussi |
Shopping cart / Telekom ID login / Website settings |
Storing the cart, processing the order, user login, retaining settings (e.g. language) |
Cart products, unique Telekom ID identifier, user preferences |
1 month to 2 years |
— |
Processing purpose: Performance (for OTE S.A.'s own purposes)
|
Partner - data recipient |
Service |
Processing purpose |
Data processed |
Retention period |
Third countries / Safeguards |
|
Google Ireland |
Google Analytics |
Collection of data for |
User/session |
14 months (2 |
Countries with and |
|
Ltd., Dublin 4, |
|
performance reports |
statistics, |
months for ag |
without an EU |
|
Ireland |
|
(pseudonymized |
approximate location, |
e/gender/inter |
adequacy decision, |
|
|
|
information). |
device/browser |
ests) |
based on consent |
|
|
|
|
information, |
|
(SCC with TIA / Article |
|
|
|
|
interactions, age, |
|
49 GDPR) |
|
|
|
|
gender, interests |
|
|
|
Hotjar Ltd., St |
Hotjar |
Provides business |
Website interactions, |
2 years |
SCC with TIA / |
|
Julian's, Malta |
Heatmaps, |
insights to improve |
anonymous |
|
Consent (Article 49 |
|
|
recordings, |
the service and |
recordings, survey |
|
GDPR) |
|
|
surveys, |
customer experience. |
responses |
|
|
|
|
Feedback button |
|
|
|
|
|
Medallia Inc., |
Medallia — |
Improves the website |
IP, survey responses, |
12 months (IP |
US — adequacy |
|
San Francisco, |
customer |
through display and |
participation |
is not stored) |
decision / SCC / |
|
CA, United |
satisfaction |
analysis of customer |
frequency, MSISDN (if |
|
Consent |
|
States |
surveys |
satisfaction surveys. |
provided), device |
|
|
|
|
|
|
identifier |
|
|
|
Dynatrace |
Website |
Improves website |
Website interactions, |
35 days |
Possible processing in |
|
Limited, |
improvement |
performance. |
response time |
|
third countries — SCC |
|
Maidenhead, |
|
|
|
|
with TIA / Consent |
|
United Kingdom |
|
|
|
|
|
Processing purpose: Advertising through partners
|
Partner - data recipient |
Service |
Processing purpose |
Data processed |
Retention period |
Third countries / Safeguards |
|
Google Ireland |
Google Ads, |
Determines/document |
Cookie ID, IP and |
13 months |
Countries with and |
|
Ltd., Dublin 4, |
Campaign |
s visits and measures |
device identifiers, |
|
without an EU |
|
Ireland |
Manager, |
advertising success, |
location, Client IDs, |
|
adequacy decision, |
|
|
Display & Video |
and optimizes |
operating system, |
|
based on consent |
|
|
360, Search Ads |
advertising spend |
referrer URL, browser |
|
(SCC with TIA / Article |
|
|
360 (Consent |
(cookies, pixels, local |
information |
|
49 GDPR) |
|
|
Mode & |
storage). |
|
|
|
|
|
Floodlight) |
|
|
|
|
|
Meta Platforms |
Meta Business |
Measures the success |
IP, browser/device |
12 months |
US — adequacy |
|
Ireland Ltd., |
tools / Meta |
of, and analyzes, |
information, page |
|
decision / SCC / |
|
Dublin 4, Ireland |
Pixel |
advertising |
views, geographic |
|
Consent |
|
|
|
campaigns on |
location, referrer URL, |
|
|
|
|
|
Facebook, and |
date/time, ad |
|
|
|
|
|
enables retargeting |
views/clicks, |
|
|
|
|
|
on Meta platforms. |
purchases/searches, |
|
|
|
|
|
|
IDs (fbq, event, pixel, |
|
|
|
|
|
|
cookie, Facebook ID) |
|
|
|
Microsoft Ireland |
Microsoft |
Tracks/analyzes user |
Ads/conversions, |
12 months |
US — adequacy |
|
Operations Ltd., |
Advertising (UET |
behavior, measures |
browser language, IP, |
|
decision / SCC / |
|
Dublin 18, |
tag / Bing) |
advertising success, |
Microsoft Click ID, |
|
Consent |
|
Ireland |
|
and enables |
number of visits, |
|
|
|
|
|
retargeting. |
referrer URL, UET ID, |
|
|
|
|
|
|
URL, User Agent Data |
|
|
Previous versions
- Version 10/2024 (PDF)
- Version 2/2024 (PDF)