Privacy
With the following data protection information, dedicom GmbH (hereinafter also referred to as "dedicom") informs you about which personal data is collected and processed when you use the websites, for what purposes the data is processed and what rights you are entitled to.
The processing of your personal data is governed by applicable data protection laws, including the General Data Protection Regulation (GDPR).
Responsible
Insofar as your personal data is not processed on behalf of your employer, dedicom GmbH is the responsible party.
The person responsible for data collection and data processing is dedicom GmbH, which can be reached at the following address:
dedicom GmbH
Fritz-Schäffer-Straße 9
81737 Munich
Email: compliance@dedicom.de
Contact details of the data protection officer
PROLIANCE GmbH
https://www.proliance.ai
Leopoldstr. 21
80802 Munich
E-Mail: datenschutzbeauftragter@proliance.ai
A) Processing of personal data when visiting the dedicom website
Every time you access the dedicom website, the data that your browser transmits to the server is collected. The following data is collected:
- IP address of the computer from which the request is sent
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific pages)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Type of web browser
- Operating system and its interface
- Language and version of the browser software
This data is technically necessary to display the website to you, to improve the offer, to ensure the stability and security of the websites and to eliminate malfunctions (the legal basis is Art. 6 (1) (f) GDPR):
It is not possible to draw conclusions about individual persons on the basis of this data. In particular, this data will not and cannot be used to create personal user profiles. This data will be deleted when it is no longer needed for the purposes described.
Cookies
In connection with the retrieval of the dedicom websites, so-called session cookies are transmitted to your browser in order to make it easier for you to use the websites. Cookies help to tailor the websites to your interests and to secure your personal settings. The cookies do not contain any personal data. These are small text files that are stored on your computer and stored by your browser.
The session cookie used is deleted when you close your browser. The Employee Portal (MAP) cookie expires one hour after it is set and the cookies on the servers expire after 24 hours.
You can prevent the storage of cookies by setting "do not accept cookies" in your browser. If you disable cookies, you may not be able to access and use all the functions of the websites to their full extent.
Access to and storage of information in terminal equipment
By using our website, access to information (e.g. IP address) or storage of information (e.g. cookies) in your terminal equipment may occur. This access or storage may involve further processing of personal data pursuant to the GDPR.
In cases where such access to information or such storage of information is strictly necessary for the technically error-free delivery of our services, this is done on the basis of § 25 para. 2 no. 2 TDDDG.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this will only be carried out on the basis of § 25 para. 1 TDDDG with your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.
For more information on the processing of your personal data and the relevant legal basis in this context, please refer to the following sections on the specific processing activities on our website.
Web Analysis with Matomo
We would like to inform you that we use the open-source web analysis tool Matomo on this website to analyze and optimize the use of our website. Matomo uses a Technology called "Device Fingerpringting" to recognize Visitors without setting cookies.
Data Collection and Processing
The following data is collected with each page view:
- Anonymized IP address (the last bytes are deleted)
- Date and time of the access
- Accessed page and transmitted data volume
- Referrer URL (previously visited page)
- Information about the used browser and operating system
- Screen resolution
Based on the collected technical information, an anonymous identifier is generated. This allows us to analyze visitor patterns on our website and track usage across different page views without using personal data or directly identifying individual users. This method helps us continuously improve the functionality and user experience of our website while maintaining a high standard of data protection.
Purpose of Data Processing
The collected data is used exclusively for the following purposes:
- Analysis of user behavior to optimize our web offering
- Improvement of user-friendliness
- Quality assurance of our content
The data is not passed on to third parties and remains on our own servers in Germany.
Storage Duration
The data is deleted as soon as it is no longer needed for our recording purposes. The generated statistics and underlying data are not deleted.
Legal Basis
For the use of Matomo, we rely on the legal basis of legitimate interest according to Art. 6 para. 1 lit. f GDPR. As an open-source solution, Matomo provides comprehensive information about its data protection practices, which can be viewed on the official website of the project. If you wish to prevent data collection by Matomo, an opt-out option is available (insert exact location here). By activating this option, a special cookie is set in your browser that prevents the storage of usage data. Please note that if you delete all cookies, this opt-out cookie will also be removed. In this case, you will need to deactivate it again on your next visit. If no checkbox is displayed, data collection has already been prevented by another blocking measure.
Data collection and processing
By default, we do not use cookies for web analysis, but rather data protection-friendly technologies that process information from your browser or end device to measure the statistical reach of our online shop and optimize our offering.
In particular, the following data is processed:
- IP address (in abbreviated form)
- Date and time of access
- Pages and files accessed
- Referrer URL
- Browser information
- Operating system and end device
- As well as any other technical parameters required for the evaluation.
This data is used to create pseudonymized usage profiles; it is not combined with other data or used to identify individual persons, and no personal user profiles are created.
Purpose of data processing
The collected data is used exclusively for the following purposes:
- Analysis of user behavior to optimize our online shop
- Improvement of user-friendliness
- Ensuring the stability, security, and quality assurance of our content.
Duration of storage
The data will be deleted as soon as it is no longer required for our evaluation and recording purposes; aggregated statistics may be stored for longer without any personal reference.
Legal basis
Data processing is carried out on the basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in analyzing user behavior to design our online shop to meet user requirements, to ensure its stability and security, and to continuously improve it.
Right to object and revoke consent
You can object to the data processing described above at any time for future processing or revoke your consent by using the corresponding opt-out or consent function (e.g., slider or cookie settings) in the shop. If no slider is displayed, data collection has already been prevented by corresponding browser settings or blocking measures.
B) Input of data by you
The data entered by you, in particular data for ordering articles, will be stored and processed for the purpose of initiating and processing the leasing/rental contracts for the articles.
Your data will be processed by dedicom in its own interest for offers to you about a possible purchase of the items after the end of the leasing / rental period (Art. 6 para. 1 lit. f) GDPR). If you decide to purchase the articles, dedicom will process them for the purpose of executing the contract (the legal basis is Art. 6 (1) (b) GDPR).
Your data will be deleted as soon as it is no longer needed for the purposes described above and there are no longer any statutory retention periods, but no later than after the expiry of the retention periods.
C) Input of data for the calculation of tax advantages in the shop
When you perform a tax calculation (benefit calculation) using the tool integrated into the web pages, the calculated result of the marginal tax rate is stored via your session cookie. This result either expires at the end of your session or you can delete it at the appropriate point in the benefit calculator. Tax inputs or calculation bases are neither stored nor evaluated.
D) Integration of Vimeo videos
The provider Vimeo is used for the integration of videos into the websites. Vimeo is operated by Vimeo, LLC, which is headquartered at 555 West 18th Street, New York, New York 10011. Plugins from the provider Vimeo are used. When you access the websites provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which website you have visited. If you are logged in as a member of Vimeo (which is of course not necessary to view our video), Vimeo will assign this information to your personal user account. If you use the plugin, e.g. by clicking on the start button of a video, this information will also be assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
Vimeo is integrated into Vimeo for the playback of videos for better presentation of the content in a legitimate interest (legal basis: Art. 6 para. 1 sentence 1 lit. f) GDPR).
For more information on data processing and data protection by Vimeo, please visit https://vimeo.com/privacy.
E) Integration of Cloudflare Turnstile
Cloudflare Turnstile is used to protect our website from abuse by automated programs and spam. It utilizes a so-called "non-interactive captcha" check, which automatically operates in the background without requiring you to solve any tasks yourself.
Turnstile analyzes technical information such as your IP address, browser and device details, time spent on the site, movements, or interactions to determine whether the access comes from a human user.
Processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in protecting the website from abusive automated requests.
Cloudflare may also process data on servers in the USA. We have a data processing agreement with Cloudflare according to Article 28 GDPR. The data processing relies on standard contractual clauses to ensure an adequate level of data protection. Further information about data processing and your rights and options for objection can be found in Cloudflare’s privacy policy.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA designed to guarantee compliance with European data protection standards when processing data in the USA. Any company certified under the DPF commits to observing these data protection standards.
F) Data processing in the event of other contact with dedicom
If you contact dedicom via the contact form, by e-mail or by post, the data you provide (your e-mail address, your address, your name, your telephone number and your request) will be stored and processed in order to process your enquiry. The processing is carried out in accordance with Art. 6 (1) (b) and (f) GDPR.
The data collected in this context will be deleted after storage is no longer necessary, or restricted if there are statutory retention obligations.
G) Transfer of personal data
- to your employer: Your order data will be transmitted to your employer with your personal data (excluding your private e-mail address and private telephone number). In this respect, order data are: order number, article, serial number, installment, lease start and end. Personal data in this respect are: personnel number, name and address if applicable, change agreement.
- to the leasing company commissioned by your employer to execute the leasing/rental agreement between your employer and the leasing company. These are the tracking number of the shipping company, personnel numbers or personnel identifiers, ordered items (including serial numbers) per personnel number or personnel identifier.
- to suppliers and carriers for delivery and, if necessary, to complain and investigate the items you have ordered. This includes the names and number of items you have ordered, your name and address, or if applicable. Your different delivery address
- to the data center: Your data will be processed by a commissioned data center. In order to protect your data, there is a contract for order processing with the operator of the data center in accordance with the requirements of Article 28 GDPR and technical and organizational measures have been agreed. The data center is located in Germany and processes the data only within the European Union.
- to other third parties.
H) Your rights
With regard to the personal data collected and processed, you have the following rights vis-à-vis the Controller:
- Right of access
- Right to rectification and erasure
- Right to restriction of processing
- Right to object to processing
- on data portability
The legal basis for your rights is Articles 7, 15-22 of the GDPR, which are granted to you in accordance with these regulations.
If necessary, you can contact the Data Controller or its Data Protection Officer to exercise your rights.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data (see below).
I) Withdrawal of consent
In addition, if you have given consent to the processing of certain personal data, you have the right to withdraw your consent at any time for the future. Send it to one of the above addresses.
A revocation does not affect the lawfulness of the processing of your personal data prior to the revocation.
J) Right to object to processing in the case of processing in legitimate interest
Insofar as the processing of your personal data is carried out in accordance with Art. 6 (1) (f) GDPR for the purpose of safeguarding our legitimate interests, you have the right to object to the processing of this data at any time on grounds relating to your particular situation in accordance with Art. 21 GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. The compelling legitimate grounds must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.
K) Right to lodge a complaint with a supervisory authority
Furthermore, you have the right to lodge a complaint with a supervisory authority. How do you find your local supervisory authority? - Find out more about this on the Internet, for example at https://www.datenschutz-bayern.de/infoquel/ds-inst/deutschland-privat.html
The supervisory authority responsible for dedicom GmbH is:
Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Tel.: +49 (0) 981/53-1300
E-mail: poststelle@lda.bayern.de
https://www.lda.bayern.de
L) Other information
Automated decision-making, including profiling, does not take place.
Your data will not be transferred to a country outside the European Union.
This data protection information will be adapted if this is necessary to reflect developments in data protection law or a change in the business model.
Last updated: September 2026