Privacy Policy
Vodafone Speedtest Plus

The Vodafone Speedtest Plus serves to implement legal requirements and is intended to enable users to measure the Internet speed of their connection in order to identify any deviations from the contractual agreed transmission rate. The test is based on the speed reached by the end user device in terms of Quality of Experience (QoE).

Vodafone has introduced a speed measure for its customers and other Internet users to access at https://speedtest.vodafone.de. The dedicated speed test servers are distributed across different locations in Vodafone’s global IP backbone, thus eliminating any interference outside the company's own network. Externally hosted speed test servers are also available. The test can be carried out by end devices in the mobile or landline network. Vodafone has decided on a two-stage measurement process for its own cable customers, which, after an initial measurement between server and end device, carries out a second (shorter) test solely on the cable modem, in the event of a negative result. This is to rule out possible sources of error in the user's home network. In addition, individual tips for the customer are determined and displayed from the recognised framework parameters.

Vodafone GmbH, Ferdinand-Braun-Platz 1, 40549 Düsseldorf, Germany, is the controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data in connection with the use of Speedtest Plus.

This applies to all users of the service, irrespective of whether they are Vodafone customers or of the access technology used.

If you visit our website for purely informational purposes, you are generally not required to provide us with any personal data. In this case, we only collect and use the information that your internet browser automatically transmits to us, such as:

• The date and time you access one of our web pages,
• The type and settings of the internet browser you use,
• The operating system you use,
• The website you visited immediately before accessing our website,
• Your IP address.

We collect and use this information solely for informational purposes and to enable you to use the web pages you have requested. The web server log data, which includes your IP address, is stored for a period of 7 days in order to detect attacks, usage anomalies, and availability issues, thereby ensuring the secure operation of the website.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and proper provision of the website, as well as in preventing unauthorized access, attacks, and other forms of misuse.

Cookies

We use so-called cookies on our websites to provide you with a convenient and optimized user experience.

Cookies are small text files that are stored on your computer or smartphone. They are used, for example, to determine how frequently a website is used and how many users access it, helping us make our online services more user-friendly and effective. There are so-called session cookies, which are stored only for the duration of your visit and are automatically deleted afterwards. In addition, we may use persistent cookies, which remain stored for a longer period of time.

The legal basis for setting and reading technically necessary cookies is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional provision of our online services.

We process all non-essential cookies only after you have provided your consent. The legal basis for such processing is your consent pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect via the cookie settings.

Further information about the cookies used on this website, in particular their purpose, provider, and storage period, can be found in our Cookie Policy.

This application saves measured values via the Internet connection between Vodafone and the end device. We process the following data:

• The time at which the measurement takes place
• The download and upload speed and latency (ping) between the end device and the Vodafone speed test server.
• Other technical parameters to assess the quality of the connection, and device information, such as device type, operating system (including version) or browser (including version) to identify device-specific influencing factors
• The unique speed test ID for each measurement
• The shortened IP address

For measurements from the Vodafone network, the following data is also processed:

• The booked download and upload speed
• The download speed between modem and the Vodafone speed test server (measurement taken at the second stage, if a negative result was previously measured)
• The network topology data (the technical units on the route of the line from Vodafone to the house transfer point)
• The connection type used (WiFi or LAN) of the end device with the modem
• The WiFi standard used (2.4 GHz or 5 GHz)
• The device address of the modem

The data is collected to provide a functional speed test. Further to this, the data is also used for the operation and troubleshooting of the speed test, and to provide tips to the end user. All data is stored for a maximum of 6 months (in line with Section 8 (2) of the German law TKTransparenzV).

The legal basis on which the data is processed is in accordance with Article 6 Section 1 lit. b) DSGVO i.V.m. § 6 Section 1 No. 2 of the German law TKTransparenzV.

The collected data collected is stored for a maximum of 6 months in accordance with Section 8 (2) of the German law TKTransparenzV.

We store personal data only for as long as this is necessary for the provision of Speedtest Plus, the display of your measurement history, technical analysis and the fulfillment of legal obligations.

The measurement results collected in the course of a speed test and the technical information required to assign them to the respective connection are generally stored for a period of up to six months. This allows you to view your measurement history and supports the traceability of your connection quality over a longer period of time.

Individual categories of data may be subject to shorter retention periods if they are not needed for the stated purposes for the entire period. Once the respective retention period has expired, the data is deleted or anonymized.

To provide and operate Speedtest Plus, we work with carefully selected service providers who support us in delivering, securing, and improving the service. These providers process personal data solely on our behalf and in accordance with data processing agreements concluded pursuant to Article 28 GDPR.

Depending on the functionality used, personal data may be shared with the following service providers:

• ANW.net GmbH for hosting and content delivery services required to provide and deliver the service, for troubleshooting and error analysis, as well as for analyzing the usage and reach of the service.

• Imperva, Inc. for security services, in particular to protect the application against cyberattacks and to operate a Web Application Firewall (WAF).

• Medallia, Inc. for conducting surveys and user feedback studies aimed at improving the service.

These service providers process personal data only for the purposes described in this Privacy Notice and in compliance with applicable data protection laws.

Some of the service providers we use are located outside the European Union (EU) or the European Economic Area (EEA), or belong to international corporate groups. As a result, personal data may, in certain cases, be processed in countries outside the EU or EEA.

Whenever personal data is transferred to a third country, we ensure that an adequate level of protection is maintained in accordance with the requirements of the General Data Protection Regulation (GDPR). Where required, appropriate safeguards are implemented, such as the European Commission’s Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms pursuant to Articles 44 et seq. GDPR.

We use technical and organizational security measures to protect incoming and collected data. In particular, this protects against accidental or intentional manipulation, loss, destruction or against attacks by unauthorised individuals. We are continuously improving our security measures in line with technological developments.

You have the right to request access to the data collected when using Vodafone services, as well as the correction or deletion of such data. You may also exercise your right to restriction of processing, data portability, and to object to the processing of your personal data.

Where processing is based on Article 6(1)(f) GDPR (legitimate interests), you have the right to object to such processing at any time on grounds relating to your particular situation. In this case, it may no longer be possible to use the Vodafone service properly.

You also have the right to lodge a complaint with a supervisory authority.

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

For further questions or comments regarding data protection, and to exercise your rights as a data subject, you can contact the relevant data protection officer:

Dr Anastasia Meletiadou
Data Protection Officer

Ferdinand-Braun-Platz 1
40549 Dusseldorf
Email: datenschutz@vodafone.com

General information on Vodafone’s data protection measures is available at: www.vodafone.de/datenschutz