Digitalization and Data Security

Management Approach

At Vonovia, we aspire to generate long-term value through digitalisation and data security. By integrating advanced technologies into our operations—particularly customer service—we aim to enhance customer satisfaction and maintain a harmonised IT landscape. We offer our employees opportunities for mobile working to promote flexibility. Data protection and IT security are firmly embedded in our corporate culture, with clear guidelines and ongoing training to minimise risks and ensure full compliance. Embracing an AI-first approach enables us to drive process efficiency and standardisation, in order to create added value for our customers.

We recognise that growing digitalisation also entails risks—such as possible data protection violations, data leaks, or server outages. We monitor these risks closely and take action as needed.

Responsibility for IT at Vonovia rests with the Chief Information Officer (CIO), who oversees planning, operations, and technology selection. Furthermore, heads of each business unit are responsible for the security of all information and data collected, used, or processed in their respective domains (“data owners”). The implementation of data protection measures is monitored by the Compliance and Data Protection department , which also provides advice on relevant matters. Internal Audit reviews the adequacy and effectiveness of the data protection management system.

The Management Board receives an annual update on developments in data protection and information security. In Austria, the BUWOG Management is also provided with an annual status report. For the Supervisory Board, the Audit Committee addresses matters related to data security and also receives the annual data protection report.