Deutsche Telekom : Information on data protection

DATA PROTECTION INFORMATION FOR DEUTSCHE TELEKOM AG SHAREHOLDERS AND SHAREHOLDER REPRESENTATIVES

The following information outlines how personal data on shareholders and their representatives is processed. It refers exclusively to data processing in connection with their position as shareholders or shareholder representatives. In particular, this data protection information does not cover data processing in connection with any customer relationship.

1. WHO IS RESPONSIBLE FOR DATA PROCESSING, AND WHOM CAN YOU CONTACT?

Deutsche Telekom AG processes the personal data of shareholders and their representatives in its role as data controller within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR).

Deutsche Telekom AG's contact details are: Deutsche Telekom AG Friedrich-Ebert-Allee 140

53113 Bonn, Germany

Deutsche Telekom AG's Global Data Privacy Officer is Dr. Claus D. Ulmer. He can be contacted at: Deutsche Telekom AG

- Datenschutzbeauftragter - Friedrich-Ebert-Allee 140 53113 Bonn, Germany

If you have any questions about data protection for shareholders and their representatives, please email them to: [e-mail].

2. FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS IS YOUR DATA PROCESSED?

We process your data on the basis of Article 6 (1) Sentence 1 c) GDPR, insofar as is necessary to fulfill our legal obligations. That includes complying with the obligations we are subject to under stock corporation, trading and tax law, and with regulatory require- ments. Consequently, the purpose of data processing includes, in particular, maintenance of the shareholders' register, enabling shareholders to exercise their rights in connection with the share- holders' meeting, compliance with statutory requirements relating to the shareholders' meeting, disclosure requirements in connection with voting rights' notifications under the German Securities

Trading Act (Wertpapierhandelsgesetz- WpHG), and fulfilling the burden of proof and retention obligations imposed by the German Stock Corporation Act (Aktiengesetz- AktG), the German Commercial Code (Handelsgesetzbuch- HGB), and the German Fiscal Code.

1. In addition, we process your personal data on the basis of Article 6 (1) Sentence 1 f) GDPR. This states that data processing is permitted if it is necessary to protect our legitimate interests or those of a third party, and these are not overridden by your inter- ests or by your fundamental rights and freedoms, which require protection of your personal data. We have a legitimate interest in the processing of personal data to ensure compliance with non- European securities regulations, for capacity planning as well as other organizational planning for the current and future share- holders' meetings, to present and analyze the shareholder struc- ture and its development, including the number of transactions, and to provide overviews of our largest shareholders.
2. We are legally required to contact you in advance before pro- cessing your data for any purpose not listed above.

3. WHERE DO WE OBTAIN YOUR PERSONAL DATA? WHAT CATE- GORIES OF PERSONAL DATA DO WE PROCESS? IS THERE AN OBLIGATION TO PROVIDE PERSONAL DATA?

We obtain personal data from shareholders or their representatives or from the respective custodian bank (normally via Clearstream Banking AG).

The data processed by Deutsche Telekom AG comprises the last name, first name, title and form of address, as well as other contact details of the shareholder and, where applicable, the shareholder's legal or business representatives, data on the shares (including where they are held), administrative data, as well as data on the exercise of shareholder rights, including the right to vote.

Under § 67 (1) Sentence 2 of the German Stock Corporation Act (AktG), shareholders are required to notify us of the data to be included by law in the shareholders' register. In accordance with

• 67 (4) Sentence 1 AktG, this applies analogously to custodian banks. Providing your personal data is mandatory in connection with the exercise of shareholder rights (except where voting rights are exercised on behalf of the person concerned).

4. WHICH CATEGORIES OF RECIPIENTS RECEIVE YOUR PERSONAL DATA?

For the purposes set forth in section 2 above, we use service providers that we only provide with the personal data required to perform the relevant services. Alongside ADEUS Aktienregister-Service- GmbH, which maintains the shareholders' register, they include, in particular, service providers used to prepare and conduct the shareholders' meeting, (to create and send the notification in accordance with § 125 AktG, to record and process registration for the shareholders' meeting, authorizations and the exercise of share- holders' rights, technical processing for the meeting in general, and to provide legal advice) as well as service providers in the areas of legal advice, printing, dispatch, and publication media.

If authorized by the shareholder or their representative in connection with the shareholders' meeting, the Company-appointed proxy shall only receive the personal data required to cast the vote as instructed.

Requests for additional agenda items pursuant to § 122 (2) AktG as well as counter-motions and nominations according to § 126 (1) and

• 127 AktG will be made available publicly by us as set out in the invitation to the shareholders' meeting and, where relevant, put to the vote at the shareholders' meeting. With respect to questions submit- ted prior to the shareholders' meeting pursuant to § 2 (1) sentence 1 no. 3 and sentence 2 of the German act on temporary measures under company, cooperative, association, foundation, and residential property law to combat the effects of theCOVID-19 pandemic (Ges- RuaCOVBekG) the name of the person asking the question may be disclosed at the shareholders' meeting in the context of providing an answer insofar as the asker consented to this when submitting their question. Consent can be withdrawn at any time, preferably by send- ing an email to [e-mail]. The personal data belonging to the participants of the shareholders' meeting or the shareholders represented (except in the event when exercising voting rights on behalf of the person concerned) as well as, where necessary, of the shareholders' representatives shall be incorporated into a list of par- ticipants in accordance with § 129 AktG in the version applicable according to § 26j (4) of the Introductory Act to the Stock Corpora- tion Act that shall be made accessible to shareholders­ or their repre- sentative in accordance with § 129 (4) AktG.

In addition, we may be required to transmit personal data to authori- ties, especially the Federal Financial Supervisory Authority (BaFin), e.g., on the basis of statutory notification requirements in the event that voting rights thresholds defined by law are exceeded. We transmit personal data to courts, arbitration tribunals and legal advisors, where this is necessary to establish, exercise, or defend legal claims.

5. HOW LONG WILL YOUR DATA BE STORED FOR?

The data recorded in the shareholders' register must normally be retained for ten years after the shares are sold. If not saved in the

shareholders' register, the personal data processed in connection with the shareholders' meeting shall be erased or anonymized by Deutsche Telekom AG three years after the day of the shareholders' meeting at the latest unless legal rules prescribe a longer retention period, namely if required by the Stock Corporation Act, the Securities Trading Act, the German Commercial Code and the Fiscal Code, or on the basis of the legitimate prevailing interest of the company, namely to establish, exercise, or defend legal claims.

If we believe someone has been wrongfully included in the share- holders' register, the entry can only be erased after the company has informed the data subject that it intends to erase the entry and given them reasonable time to object. If a data subject objects within the deadline the data is not erased.

6. WHAT ARE YOUR DATA PROTECTION RIGHTS?

Provided that the relevant legal conditions are met, you can obtain information from us about your personal data in accordance with Article 15 GDPR. Furthermore, you are entitled to have your personal data corrected in accordance with Article 16 GDPR, to have it erased in accordance with Article 17 GDPR, to have processing restricted in accordance with Article 18 GDPR, to demand the transfer of certain personal data to you or to a third party appointed by you (right to data portability) in accordance with Article 20 GDPR and to object to processing of the data in accordance with Article 21 GDPR. You can assert these rights free of charge using the contact details in section 1 above. Furthermore, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR.

This includes the data protection authority responsible for us, which can be contacted as follows:

Landesbeauftragte für

Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 200444

40102 Düsseldorf

Tel.: [phone]

Fax: [phone]

Email: [e-mail]

In accordance with § 67 (6) Sentence 1 of the German Stock Corporation Act (AktG), shareholders can demand information from the company on the personal data entered on them in the shareholders' register. At www.telekom.com/hv-service, under the section for the shareholders' register service, you can view the main data held in the shareholders' register about you and, if necessary, change your address.

RIGHT TO OBJECT, ARTICLE 21 GDPR:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of Article 6 (1) Sentence 1 f) GDPR (data processing on an assessment of legitimate interests). If you object, we will no longer process your personal data, unless we can prove that there are mandatory reasons for processing that override your inter- ests, rights and freedoms, or that the purpose of data processing is to establish, exercise, or defend legal claims. Such objection can be submitted without any specific formal requirements, where possible to the contacts set out in section 1 above.

DEUTSCHE TELEKOM AG

Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman)

Board of Management: Timotheus Höttges (Chairman),

Adel Al-Saleh, Birgit Bohle, Srinivasan Gopalan, Dr. Christian P. Illek, Thorsten Langheim, Claudia Nemat, Dr. Dirk Wössner Commercial Register: Local court Bonn HRB 6794

Registered Office: Bonn