Privacy Policy
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on the subject matter of data protection can be found in our privacy policy listed below this text.
Data Collection on this Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice regarding the Responsible Party" in this privacy policy.
How do we collect your data?
Your data is collected in one way when you provide it to us. This may be data that you enter in a contact form, for example.
Other data is collected automatically or with your consent during your visit to the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. Additionally, you have the right to request restriction of the processing of your personal data under certain circumstances. You also have a right to lodge a complaint with the competent supervisory authority.
For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time.
Analysis Tools and Third-Party Tools
When you visit this website, your browsing behavior can be statistically analyzed. This is done primarily with so-called analysis programs.
Detailed information on these analysis programs can be found in the following privacy policy.
2. Hosting
External Hosting
We host the contents of our website with the following provider:
This website is hosted externally. The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses, and any other data that is generated via a website.
External hosting is carried out for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or the access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
Our host will only process your data to the extent that is necessary to fulfill its service obligations and follow our instructions regarding this data.
We use the following host:
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723, USA
Server Location
Our website is hosted on servers in Frankfurt am Main, Germany.
Order Processing
We have a contract with Vercel for order processing (Data Processing Addendum, DPA) in accordance with Art. 28 GDPR. This contract ensures that Vercel processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Data Transfer to Third Countries
Since Vercel is based in the USA, the transfer of personal data to the USA cannot be excluded. This is based on the adequacy decision of the EU Commission on the EU-US Data Privacy Framework, under which Vercel Inc. is certified, as well as in addition to standard contractual clauses of the EU Commission (Art. 46 para. 2 lit. c GDPR).
3. General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g., when communicating by email) can have security gaps. A complete protection of the data from access by third parties is not possible.
Notice Regarding the Responsible Party
The responsible party for data processing on this website is:
dedicom GmbH
Fritz-Schäffer-Straße 9
81737 Munich
Email: compliance@dedicom.de
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
4. Consent, Cookies, and Comparable Technologies
4.1 Principle
Our website uses cookies and comparable technologies that store information on your end device or retrieve it from there. Cookies are small text files that do no harm to your end device. They are either temporarily stored for the duration of a session and automatically deleted thereafter or remain permanently stored until you delete them or their storage duration expires.
Part of these technologies is necessary for the functioning of our website and for storing your privacy settings. The basis for this is our legitimate interest in a technically error-free and secure provision of our offer (Art. 6 para. 1 lit. f GDPR) or § 25 para. 2 No. 2 TDDDG, insofar as access is absolutely necessary for the provision of the service you expressly requested.
All other technologies are used only with your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). Your consent is voluntary, not required for the use of our website, and can be revoked at any time for the future.
4.2 Managing Your Consent (Usercentrics)
To gather, manage, and document your consents, we use the consent management platform of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich.
When you visit our website, a connection to Usercentrics servers is established to display the consent dialog and record your decision. Your consent decision and the time it was made, a randomly generated identifier, information about your browser and device, and your truncated IP address are processed.
This processing is necessary to technically implement your decision and fulfill our legal obligation to prove granted consents. The legal basis is Art. 6 Para. 1 lit. c GDPR in connection with Art. 7 Para. 1 GDPR as well as our legitimate interest in lawful consent management (Art. 6 Para. 1 lit. f GDPR). We store consent data for the duration of the legal proof obligations, up to a maximum of three years.
The use of this platform is not dependent on your consent. Otherwise, we couldn't save your decision and would have to ask for it every time you visit a page.
Change or withdraw consent:Through the "Privacy Settings" link in the footer of each page, you can view your decision at any time, change it individually for each service, and withdraw it. You will also find the current and complete overview of all deployed services and the individual cookies with their storage durations there. A withdrawal is effective for the future; the lawfulness of the processing carried out until then remains unaffected.
Further information:https://usercentrics.com/privacy-policy/
4.3 Google Tag Manager
We use the Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a management tool through which we integrate and control the services used on our website. It does not create user profiles, store cookies for analytical purposes, or collect personal data for its own purposes. It ensures that services requiring consent are only triggered once you have consented to the respective service.
When the Google Tag Manager is loaded, your IP address is transmitted to Google as this is technically necessary to deliver the script to your browser. A transmission to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; additionally, the standard data protection clauses of the European Commission apply.
The Google Tag Manager is loaded on all pages to ensure your consent decision can be technically effective. The legal basis is our legitimate interest in efficient and lawful management of the deployed services (Art. 6 Para. 1 lit. f GDPR).
We use Google Consent Mode. As long as you have not consented, no cookies are set and no identifiers are transmitted that could recognize you.
Further information:https://policies.google.com/privacy
5. Analysis of website usage
5.1 Reach measurement with Matomo
For the statistical evaluation of our website usage, we use Matomo, an open-source software for reach measurement. We operate Matomo on our own server under our control.No data is transmitted to third parties.
We have configured Matomo so that no cookies are set and no information is stored on your device or retrieved from it. Your IP address is shortened and thus anonymized before any processing. Recognition beyond a single visit does not occur, and the collected data does not allow conclusions about your person.
Processed are the pages called and their titles, the date and time of the call, the website from which you accessed us, general information about the browser, operating system, and device type, and your approximate geographical origin at country and region level.
The purpose of processing is to statistically evaluate the use of our website and thereby improve our offering. The legal basis is our legitimate interest in a demand-oriented design of our website (Art. 6 Para. 1 lit. f GDPR). Since there is no access to your device, no consent is required for this reach measurement.
Storage duration: 14 months.
Further information:https://matomo.org/privacy-policy/
5.2 Google Analytics 4
If you have consented, we also use Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows us to analyze the usage of our website and evaluate the success of our marketing activities. Cookies and similar technologies are used to enable the recognition of your browser across multiple page calls and visits.
In particular, the following are processed:
the called pages and their titles as well as the dwell time
your interactions with contents and forms of our website
the website from which you reached us and campaign information from the address you accessed
information about browser, operating system, device type, and language setting
your approximate geographical origin at the level of country, region, and city
a randomly generated identifier through which your browser is recognized
Your IP address is not stored by Google Analytics 4. It is used exclusively to derive your approximate geographic origin and is discarded immediately after.
We do not transmit any information to Google that could directly identify you. If you submit one of our forms, we transmit cryptographically encrypted checksums of your contact details based on your consent so that Google can attribute advertising conversions more accurately. Your original details cannot be retrieved from these checksums.
The legal basis is your consent (Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TDDDG). You can withdraw it at any time via the privacy settings.
The transmission of your data to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; additionally, we have agreed with Google on the standard data protection clauses of the European Commission.
Storage duration with Google Analytics: 14 months.
Further information:https://policies.google.com/privacy
5.3 Assignment of advertising campaigns
If you have consented, we store identifiers of advertising platforms and campaign information contained in the address you accessed using comparable technologies in your browser.
These identifiers do not contain information that we could use to directly identify you. They allow us and the respective advertising platforms to determine that a request goes back to a specific advertising measure. Without this assignment, we could not assess the effectiveness of our advertising.
The storage duration is 90 days. If a visit calls a new campaign identifier, the previously stored identifiers are completely replaced.
The legal basis is your consent (Art. 6 Para. 1 lit. a DSGVO, § 25 Para. 1 TDDDG). You can delete the stored data at any time by clearing the website data in your browser.
6. Forms and Customer Relationship Management
6.1 Your inquiries via our forms
If you contact us via one of our forms, for example, for a contact request, a demo booking, or to subscribe to our newsletter, we process the information you provide to handle your request. Required information is indicated in the respective form.
We also process technical accompanying data necessary for assigning your request and preventing misuse: the address and title of the page from which you submitted the form, date and time, as well as your IP address.
The legal basis for inquiries with contractual relevance is Art. 6 Para. 1 lit. b DSGVO, otherwise your consent (Art. 6 Para. 1 lit. a DSGVO) or our legitimate interest in responding to your inquiry (Art. 6 Para. 1 lit. f DSGVO). For the newsletter dispatch, your consent is the legal basis; you can revoke it at any time via the unsubscribe link in each newsletter email.
We store the wording of the data protection notice you confirmed together with your request to be able to prove your consent (Art. 7 Para. 1 DSGVO).
Your data remains with us until the purpose of processing is no longer applicable, you request deletion, or you revoke your consent. Mandatory legal retention periods, especially commercial and tax law, remain unaffected.
About our advantages calculator:The information you enter there is processed exclusively in your browser to display the result to you. It is not transmitted to us, not stored, and not shared with third parties.
6.2 Processing of your inquiries in HubSpot
For the processing of your inquiries, our customer relationship management, and newsletter dispatch, we use HubSpot, a service of HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland.
The information you provide is stored and processed in HubSpot to handle your request, send you the newsletter, and manage our customer relationships. Processing takes place on servers within the European Union.
The legal bases are Art. 6 Para. 1 lit. b DSGVO for contractual and pre-contractual purposes, Art. 6 Para. 1 lit. a DSGVO for processing based on your consent, and Art. 6 Para. 1 lit. f DSGVO for our legitimate interest in efficient handling of your request. A contract for order processing exists with HubSpot.
A transfer to the USA cannot be ruled out. HubSpot, Inc. is certified under the EU-US Data Privacy Framework; additionally, the standard data protection clauses of the European Commission apply.
Further information:https://legal.hubspot.com/de/privacy-policy
6.3 Analysis of your usage by HubSpot
If you have consented, HubSpot also uses cookies to track your activities on our website and associate them with a contact in our customer relationship management, such as which pages you visited and which forms you submitted.
The purpose is to respond to your request in its context and tailor our approach to your interests. The script required for this is loaded only after your consent; without your consent, this analysis does not take place.
The legal basis is your consent (Art. 6 Para. 1 lit. a DSGVO, § 25 Para. 1 TDDDG). You can revoke it at any time via the privacy settings.
7. Own Services
Handling of applicant data
We offer you the opportunity to apply to us (e.g., by email, postal service, or via an online application form). Below, we inform you about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data comply with applicable data protection laws and all other legal provisions and that your data will be treated strictly confidentially.
Scope and purpose of data collection
If you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes during interviews, etc.) as necessary for deciding on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 Para. 1 lit. b DSGVO (general contractual initiation), and – if you have given consent – Art. 6 Para. 1 lit. a DSGVO. Consent can be revoked at any time. Your personal data will be shared within our company only with individuals involved in processing your application.
If the application is successful, the data you submitted will be stored in our data processing systems based on § 26 BDSG and Art. 6 Para. 1 lit. b DSGVO for the purpose of conducting the employment relationship.
Data retention period
If we cannot make a job offer to you, if you reject a job offer, or if you withdraw your application, we reserve the right to retain the data you submitted based on our legitimate interests (Art. 6 Para. 1 lit. f DSGVO) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Afterward, the data will be deleted, and physical application documents will be destroyed. Retention is particularly for providing evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period (e.g., due to a pending or anticipated legal dispute), deletion will only occur when the reason for further retention no longer applies.
Longer retention may also occur if you have given your consent (Art. 6 Para. 1 lit. a DSGVO) or if statutory retention obligations oppose deletion.
Inclusion in the applicant pool
If we do not make you a job offer, there may be an option to include you in our applicant pool. If included, all documents and information from the application will be transferred to the applicant pool to contact you in case of suitable vacancies.
Inclusion in the applicant pool occurs exclusively based on your explicit consent (Art. 6 Para. 1 lit. a DSGVO). Giving consent is voluntary and not related to the ongoing application process.The affected person can revoke their consent at any time.In this case, data from the applicant pool will be irretrievably deleted unless legal retention reasons exist.
Data from the applicant pool will be irretrievably deleted at the latest two years after consent is given.
dedicom
dedicom GmbH
Fritz-Schäffer-Straße 9
81737 Munich
AS OF: 30.09.2025
_________________________________________
Data protection information
for customers/ other contract partners and interested parties
Dear customer, dear interested party, dear contract partner,
In accordance with the provisions of Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your related data protection rights. The specific data processed and how they are used depend primarily on the requested or agreed services. To ensure that you are fully informed about the processing of your personal data within the framework of fulfilling a contract or conducting pre-contractual measures, please take note of the following information.
Responsible party under data protection law
dedicom GmbH
Fritz-Schäffer-Straße 9
81737 Munich
Purposes and legal bases of data processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as long as these are necessary for the establishment, execution, fulfillment of a contract or for conducting pre-contractual measures. As far as personal data is necessary for initiating or conducting a contractual relationship or within the framework of conducting pre-contractual measures, processing is lawful according to Art. 6 para. 1 lit. b GDPR.
If you have given us explicit consent to process personal data for certain purposes (e.g., transfer to third parties, evaluation for marketing purposes, or promotional contact via email), the legality of this processing is based on your consent according to Art. 6 para. 1 lit. a GDPR. A given consent can be revoked at any time with effect for the future (see section 9 of this privacy information).
If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfill legal obligations pursuant to Art. 6 para. 1 lit. c GDPR. Furthermore, processing may occur to safeguard legitimate interests on our part or those of third parties and for the defense and assertion of legal claims according to Art. 6 para. 1 lit. f GDPR. If required by law, we will inform you separately of the legitimate interest, as far as this is legally required.
Categories of personal data
We only process such data that are related to the establishment of a contract or pre-contractual measures. These can be general data about you or persons from your company (name, address, contact data, etc.) and possibly other data that you provide us within the framework of establishing the contract.
Sources of the data
We process personal data that we receive from you in the course of contacting you or establishing a contractual relationship or in the course of pre-contractual measures.
Recipients of the data
We transfer your personal data within our company exclusively to the areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interest.
Your personal data will be processed on our behalf based on processing contracts according to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is in accordance with the provisions of the GDPR. In this case, categories of recipients include providers of internet service providers, data centers, and cloud services, as well as providers of customer management systems and software.
Data transfer to recipients outside the company occurs only if legal provisions allow or require it, the transfer is necessary for processing and thus fulfilling the contract, or at your request, for the
conduct of pre-contractual measures is required, we have your consent, or we are authorized to provide information. Under these conditions, recipients of personal data can be, for example:
External tax advisor
Public authorities and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or regulatory obligation,
Recipients to whom the transfer is directly necessary for the establishment or fulfillment of the contract.
Duration of data storage
As far as necessary, we process and store your personal data for the duration of our business relationship or for fulfilling contractual purposes. This also includes the initiation and processing of a contract.
Furthermore, we are subject to various retention and documentation obligations, including those from the Commercial Code (HGB) and the Tax Code (AO). The retention and documentation periods prescribed there range from two to ten years.
Finally, the storage duration is also determined by the statutory limitation periods, which, for example, according to §§ 195 ff. of the Civil Code (BGB), usually amount to three years but can be up to thirty years in certain cases.
Your rights
Every data subject has the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to deletion according to Art. 17 GDPR, the right to restrict processing according to Art. 18 GDPR, the right to notify according to Art. 19 GDPR, as well as the right to data portability according to Art. 20 GDPR.
Furthermore, there is a right to lodge a complaint with a data protection supervisory authority according to Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The right to complain exists without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation only takes effect for the future. Processing that occurred before the revocation is not affected. Please also note that we may be required to retain certain data for a specific period to fulfill legal requirements (see section 8 of this privacy information).
Right to object:
If the processing of your personal data takes place based on Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right according to Art. 21 GDPR to object to the processing of these data at any time for reasons arising from your particular situation. We will no longer process these personal data, unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights, and freedoms, or the processing must serve the assertion, exercise, or defense of legal claims.
To uphold your rights, you can contact us using the contact details provided in section 1.
Necessity of providing personal data
The provision of personal data for deciding on contract conclusion, contract fulfillment, or for carrying out pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide such personal data that is necessary for the contract conclusion, contract fulfillment, or pre-contractual measures.
DATE: 30.09.2025