Privacy

With the following data protection information, dedicom GmbH (hereinafter also referred to as "dedicom") informs you about which personal data is collected and processed when you use the websites, for what purposes the data is processed and what rights you are entitled to. The processing of your personal data is governed by applicable data protection laws, including the General Data Protection Regulation (GDPR).

Responsible

Insofar as your personal data is not processed on behalf of your employer, dedicom GmbH is the responsible party. The person responsible for data collection and data processing is dedicom GmbH, which can be reached at the following address:

dedicom GmbH
Fritz-Schäffer-Straße 9
81737 Munich
E-Mail: compliance@dedicom.de

Contact details of the data protection officer:

PROLIANCE GmbH
www.datenschutzexperte.de
Leopoldstr. 21 80802 Munich
E-Mail: datenschutzbeauftragter@datenschutzexperte.de

A) Processing of personal data when visiting the dedicom website

Every time you access the dedicom website, the data that your browser transmits to the server is collected. The following data is collected:

• IP address of the computer from which the request is sent,
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific pages)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Type of web browser
• Operating system and its interface
• Language and version of the browser software

This data is technically necessary to display the website to you, to improve the offer, to ensure the stability and security of the websites and to eliminate malfunctions (the legal basis is Art. 6 (1) (f) GDPR): It is not possible to draw conclusions about individual persons on the basis of this data. In particular, this data will not and cannot be used to create personal user profiles. This data will be deleted when it is no longer needed for the purposes described.

Cookies

In connection with the retrieval of the dedicom websites, so-called session cookies are transmitted to your browser in order to make it easier for you to use the websites. Cookies help to tailor the websites to your interests and to secure your personal settings. The cookies do not contain any personal data. These are small text files that are stored on your computer and stored by your browser. The session cookie used is deleted when you close your browser. The Employee Portal (MAP) cookie expires one hour after it is set and the cookies on the servers expire after 24 hours. You can prevent the storage of cookies by setting "do not accept cookies" in your browser. If you disable cookies, you may not be able to access and use all the functions of the websites to their full extent.

B) Input of data by you

The data entered by you, in particular data for ordering articles, will be stored and processed for the purpose of initiating and processing the leasing/rental contracts for the articles. Your data will be processed by dedicom in its own interest for offers to you about a possible purchase of the items after the end of the leasing / rental period (Art. 6 para. 1 lit. f) GDPR). If you decide to purchase the articles, dedicom will process them for the purpose of executing the contract (the legal basis is Art. 6 (1) (b) GDPR). Your data will be deleted as soon as it is no longer needed for the purposes described above and there are no longer any statutory retention periods, but no later than after the expiry of the retention periods.

C) Input of data for the calculation of tax advantages

When you perform a tax calculation (benefit calculation) using the tool integrated into the web pages, the calculated result of the marginal tax rate is stored via your session cookie. This result either expires at the end of your session or you can delete it at the appropriate point in the benefit calculator. Tax inputs or calculation bases are neither stored nor evaluated.

D) Integration of Vimeo videos

The provider Vimeo is used for the integration of videos into the websites. Vimeo is operated by Vimeo, LLC, which is headquartered at 555 West 18th Street, New York, New York 10011. Plugins from the provider Vimeo are used. When you access the websites provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which website you have visited. If you are logged in as a member of Vimeo (which is of course not necessary to view our video), Vimeo will assign this information to your personal user account. If you use the plugin, e.g. by clicking on the start button of a video, this information will also be assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo. Vimeo is integrated into Vimeo for the playback of videos for better presentation of the content in a legitimate interest (legal basis: Art. 6 para. 1 sentence 1 lit. f) GDPR). For more information on data processing and data protection by Vimeo, please visit https://vimeo.com/privacy.

E) Data processing in the event of other contact with dedicom

If you contact dedicom via the contact form, by e-mail or by post, the data you provide (your e-mail address, your address, your name, your telephone number and your request) will be stored and processed in order to process your enquiry. The processing is carried out in accordance with Art. 6 (1) (b) and (f) GDPR. The data collected in this context will be deleted after storage is no longer necessary, or restricted if there are statutory retention obligations.

F) Transfer of personal data

1. to your employer: Your order data will be transmitted to your employer with your personal data (excluding your private e-mail address and private telephone number). In this respect, order data are: order number, article, serial number, installment, lease start and end. Personal data in this respect are: personnel number, name and address if applicable, change agreement.
2. to the leasing company commissioned by your employer to execute the leasing/rental agreement between your employer and the leasing company. These are the tracking number of the shipping company, personnel numbers or personnel identifiers, ordered items (including serial numbers) per personnel number or personnel identifier.
3. to suppliers and carriers for delivery and, if necessary, to complain and investigate the items you have ordered. This includes the names and number of items you have ordered, your name and address, or if applicable. Your different delivery address
4. to the data center: Your data will be processed by a commissioned data center. In order to protect your data, there is a contract for order processing with the operator of the data center in accordance with the requirements of Article 28 GDPR and technical and organizational measures have been agreed. The data center is located in Germany and processes the data only within the European Union.
5. to other third parties.

G) Your rights

With regard to the personal data collected and processed, you have the following rights vis-à-vis the Controller:

• Right of access
• Right to rectification and erasure,
• Right to restriction of processing
• Right to object to processing
• on data portability

The legal basis for your rights is Articles 7, 15-22 of the GDPR, which are granted to you in accordance with these regulations. If necessary, you can contact the Data Controller or its Data Protection Officer to exercise your rights. You also have the right to complain to a data protection supervisory authority about our processing of your personal data (see below).

H) Withdrawal of consent

In addition, if you have given consent to the processing of certain personal data, you have the right to withdraw your consent at any time for the future. Send it to one of the above addresses. A revocation does not affect the lawfulness of the processing of your personal data prior to the revocation.

I) Right to object to processing in the case of processing in legitimate interest:

Insofar as the processing of your personal data is carried out in accordance with Art. 6 (1) (f) GDPR for the purpose of safeguarding our legitimate interests, you have the right to object to the processing of this data at any time on grounds relating to your particular situation in accordance with Art. 21 GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. The compelling legitimate grounds must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.

J) Right to lodge a complaint with a supervisory authority

Furthermore, you have the right to lodge a complaint with a supervisory authority. How do you find your local supervisory authority? – Find out more about this on the Internet, for example at https://www.datenschutz-bayern.de/infoquel/ds-inst/deutschland-privat.html
The supervisory authority responsible for dedicom GmbH is:Bavarian State Office for Data Protection Supervision, Promenade 27, 91522 Ansbach, Tel.: +49 (0) 981/53-1300, E-Mail: poststelle@lda.bayern.de, https://www.lda.bayern.de

K) Other information

Automated decision-making, including profiling, does not take place. Your data will not be transferred to a country outside the European Union. This data protection information will be adapted if this is necessary to reflect developments in data protection law or a change in the business model.

Last updated: March 2024