Part I
gives you general information about the processing of your personal data by us when you visit and use our website, as well as information about the rights you have as a data subject.
Part II
informs you about how we process your data outside the website.
Part III
you will find information on when you can object to the processing of your data by us.
Part I: General data protection information
NAME AND CONTACT DETAILS OF THE RESPONSIBLE PERSON
dedified Germany UG (haftungsbeschränkt)
Brienner Straße 12
D – 80333 München
E-mail: support@dedipay.io
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Jan Marschner, LL.M.
Attorney at Law | Data Protection Officer
Markt 9
04109 Leipzig
E-mail: jm@datenschutzbeauftragter-leipzig.de
Phone: +49 (0) 341 – 2618 9373
PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
- Information about the browser type and version used
- The operating system of the user
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites that are called up by the user’s system via our website
The data is stored in log files at our technical service provider, Amazon Web Services, Inc. 410 Terry Avenue North, Seattle WA 98109, United States. The legal basis for the temporary storage of this data and the log files is Art. 6 (1) lit. f DSGVO. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage of the above-mentioned data in the log files is done to ensure the functionality of our website (e.g. for attack detection). These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In addition, log files are stored for seven days.
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
COOKIES
When you visit our website, technically necessary cookies are set that are required for the use of the website.
In addition, third-party cookies are set for the purpose of analysis (Google Analytics) and location determination (Google Maps).
In detail, these are the following cookies:
| Name | Function | Memory duration | Third party access |
| AWSALB | Registers which server cluster serves the visitor. This is used in the context of load balancing to optimize the user experience. | 6 days | No |
| AWSALBCORS | Registers which server cluster serves the visitor. This is used in the context of load balancing to optimize the user experience. | 6 days | No |
| io | Retains the user’s states for all page requests. | Session | No |
| test_cookie | Used to check if the user’s browser supports cookies. | 1 day | Yes |
| _ga | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 2 years | No |
| _gat | Used by Google Analytics to limit the request rate. | 1 day | No |
| _gid | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 1 day | No |
| _gcl_au | Used by Google AdSense to experiment with advertising efficiency on websites that use their services. | 3 months | No |
| _uetsid | Used to track visitors across multiple websites to present relevant advertising based on the visitor’s preferences. | Permanent | No |
| _uetvid | Used to track visitors across multiple websites to present relevant advertising based on the visitor’s preferences. | Permanent | No |
| ads/ga-audiences | Not classified | Session | Yes |
| MUID | Widely used by Microsoft as a unique user ID. The cookie enables user tracking by synchronizing the ID in many Microsoft domains. | 1 year | Yes |
| pagead/landing | Collects data on visitor behavior across multiple websites to present more relevant advertising. This also allows the website to limit the number of times the same advertisement is displayed. | Session | Yes |
| persist:DEDIPAY | User data for display in UI & automatic login | Permanent | No |
| 4ersist:DEDIPAY-search | Search-specific data for display in UI | Permanent | No |
| DEDIPAY-VC | For correct display of the UI | Permanent | No |
MICROSOFT ADVERTISING (BING ADS)
The legal basis for the processing of Microsoft Advertising is Art. 6 para. 1 p. 1 lit. a) DSGVO. Microsoft Advertising will only be started if you click on „Accept All“ in the Consent Management Tool or agree to the „Marketing“ function within the „Privacy Settings“.
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can revoke your consent by deleting all cookies in your browser or by calling up the „Privacy settings“ menu in the footer of our website, then clicking on „Edit privacy settings“ and deactivating the „Marketing“ function there by clicking on the checkbox.
We have no knowledge of how long Microsoft stores the personal data.
Microsoft is solely responsible for further data processing. You can find more information from the third-party provider Microsoft at: https://privacy.microsoft.com/de-de/privacystatement
GOOGLE ANALYTICS
In order to be able to optimally adapt our website to your interests, we use Google Analytics, a web analysis service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin (hereinafter referred to as „Google“). In Google Analytics, interactions of the user of our website are primarily recorded and systematically evaluated with the help of „cookies“.
If individual pages of our website are called up, the following data is stored:
- three bytes of the IP address of the calling system of the user (anonymized IP address)
- the called website
- the website from which the user accessed the page called up on our website (referrer)
- the subpages that are called from the called page
- the frequency of the call of the website
The legal basis for the processing of Google Analytics is Art. 6 para. 1 p. 1 lit. a) DSGVO. Google Analytics will only be started if you click on „Accept all“ in the Consent Management tool or agree to the „Statistics“ function within the „Privacy settings“.
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can revoke your consent by deleting all cookies in your browser or by calling up the „Privacy settings“ menu in the footer of our website, then clicking on „Edit privacy settings“ and deactivating the „Statistics“ function there by clicking on the checkbox.
The data stored by the tracking will be deleted after 24 months.
Google is solely responsible for further data processing. You can find more information from the third-party provider Google at: https://policies.google.com/privacy
GOOGLE MAPS
This website integrates the „Google Maps“ service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin (hereinafter referred to as „Google“), which serves to display maps or map sections and thus enables you to conveniently use the map function on the website. Google Maps is not yet started when you visit the website, but only when you click on the correspondingly marked map material. Google then receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned in the section „Provision of the website and creation of log files“ are transmitted to Google.
The legal basis for the processing of Google Maps is Art. 6 para. 1 p. 1 lit. a) DSGVO. Google Maps will only be launched if you click on „Accept all“ in the Consent Management tool or agree to the „Convenience“ function within the „Privacy settings“.
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can revoke your consent by deleting all cookies in your browser or by calling up the „Privacy settings“ menu in the footer of our website, then clicking on „Edit privacy settings“ and deactivating the „Convenience“ function there by clicking on the checkbox.
We have no knowledge of how long Google stores the personal data.
Google is solely responsible for further data processing. You can find more information from the third-party provider Google at: https://policies.google.com/privacy
GOOGLE FONTS
We use so-called web fonts for the uniform display of fonts, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as „Google“). Google Fonts is not yet started when you visit the website, but only when you have agreed to functional features in general or specifically „Google Fonts“ in the Consent Management Tool. Google then receives the data mentioned in the section „Provision of the website and creation of log files“.
The legal basis for the processing of Google Fonts is Art. 6 para. 1 p. 1 lit. a) DSGVO. Google Fonts will only be started if you click on „Accept All“ in the Consent Management Tool or agree to the „Convenience“ function within the „Privacy Settings“.
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can revoke your consent by deleting all cookies in your browser or by calling up the „Privacy settings“ menu in the footer of our website, then clicking on „Edit privacy settings“ and deactivating the „Convenience“ function there by clicking on the checkbox.
We have no knowledge of how long Google stores the personal data.
Google is solely responsible for further data processing. You can find more information from the third-party provider Google at: https://policies.google.com/privacy
GOOGLE TAG MANAGER
We use the Google Tag Manager on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin, Ireland (hereinafter referred to as „Google“). Google Tag Manager is a solution that allows marketers to manage website tags via an interface and implement other tools.
The legal basis for the processing of Google Tag Manager is Art. 6 para. 1 p. 1 lit. a) DSGVO. Google Tag Manager is only started when you click on „Accept All“ in the Consent Management tool or agree to the „Convenience“ function within the „Privacy Settings“.
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can revoke your consent by deleting all cookies in your browser or by calling up the „Privacy settings“ menu in the footer of our website, then clicking on „Edit privacy settings“ and deactivating the „Convenience“ function there by clicking on the checkbox.
We have no knowledge of how long Google stores the personal data.
Google is solely responsible for further data processing. You can find more information from the third-party provider Google at: https://policies.google.com/privacy
GOOGLE MARKETING PLATFORM
The legal basis for the processing of „Google Marketing Platform“ is Art. 6 para. 1 p. 1 lit. a) DSGVO. The „Google Marketing Platform“ is only started when you click on „Accept All“ in the Consent Management Tool or agree to the „Marketing“ function within the „Privacy Settings“.
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can revoke your consent by deleting all cookies in your browser or by calling up the „Privacy settings“ menu in the footer of our website, then clicking on „Edit privacy settings“ and deactivating the „Marketing“ function there by clicking on the checkbox.
We have no knowledge of how long Google stores the personal data.
Google is exclusively responsible for further data processing. You can find more information from the third-party provider Google at:
RIGHTS OF THE DATA SUBJECT
In accordance with Art. 15 DSGVO, you have the right to obtain information about the data stored about you. If incorrect personal data has been processed, you have the right to rectification in accordance with Art. 16 DSGVO.
If the legal requirements are met, you can request the deletion or restriction of processing and object to data processing (Art. 17, 18 and 21 DSGVO). According to Art. 20 DSGVO, you can assert the right to data portability for data that is processed automatically on the basis of your consent or a contract with you.
If you believe that data processing violates data protection law, you have the right to complain to a data protection supervisory authority of your choice (Art. 77 DSGVO in conjunction with § 19 BDSG). This includes the data protection supervisory authority responsible for us: Bavarian State Office for Data Protection Supervision https://www.lda.bayern.de
Part II: Data processing outside the website
COMMUNICATION IN GENERAL, ESPECIALLY BY E-MAIL
We process your personal data on the basis of Art. 6 para. 1 p. 1 letter b DSGVO. The processing serves the execution of our contracts or pre-contractual measures with you and the execution of your order, as well as all activities required for this in our company. The respective details on the purpose of the data processing can be found in the respective contract documents and terms and conditions. In addition, we process the personal data provided to us in the course of contacting you. The legal basis is Art. 6 para. 1 p. 1 letter f DSGVO. This is permissible insofar as the processing is necessary to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms require the protection of personal data to be overridden. Such a legitimate interest exists in the assertion of legal claims and defense in legal disputes, in the implementation of payment processing via external service providers, in ensuring IT security and operation of the company and in direct advertising. In addition, pursuant to Art. 6 (1) (c) DSGVO, we process personal data insofar as this is necessary for the fulfillment of legal obligations to which we are subject as a company. The purposes of the processing include, for example, commercial and tax retention obligations under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
Within the company, access to your data is granted to those departments that need it to fulfill contractual and legal obligations. Processors used by us (Art. 28 DSGVO) may also receive data for these purposes. These are companies in the categories of IT services, logistics, debt collection, and sales and marketing. In exceptional cases, professional secrecy holders (tax advisors, auditors, lawyers) and authorities may also be recipients of your data.
As far as necessary, we process and store your personal data for the duration of the business relationship. This also included the initiation and execution of the contract. In addition, we store your personal data for the duration of the existence of warranty and guarantee claims. Furthermore, we store your personal data insofar as we are legally obliged to do so. Corresponding obligations to provide proof and to store data arise in particular for reasons of commercial and tax law in accordance with Section 257 of the German Commercial Code (HGB) and Section 247 of the German Fiscal Code (AO).
The processing of personal data is necessary for communication as well as for the establishment and execution of the contract. Without the provision of your personal data, we usually have to refuse the conclusion of the contract or can no longer perform an existing contract or must terminate it.
DATA PROTECTION INFORMATION FOR APPLICANTS
We process the data that you have sent us in connection with your application in order to be able to assess the establishment of an employment relationship. The legal basis is Art. 6 (1) p. 1 lit. b DSGVO and Section 26 BDSG. Insofar as you have given us consent to process your data for inclusion in our applicant pool, the lawfulness of this processing is based on your consent (Art. 6 para. 1 p. 1 lit. a DSGVO). Consent given can be revoked at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
Beyond the implementation of the application process, we process personal data in accordance with Art. 6 (1) p. 1 lit. f DSGVO. This is permissible insofar as the processing is necessary to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms require the protection of personal data to be overridden. Such a legitimate interest exists in the assertion of legal claims and defense in legal disputes. In addition, we process personal data in accordance with Art. 6 (1) lit. c DSGVO, insofar as this is necessary for the fulfillment of legal obligations to which we are subject as a company.
Within the company, those departments will receive access to your data that need it to fulfill the contractual and legal obligations of the company. Processors used by us (Art. 28 DSGVO) may also receive data for these purposes. These are companies in the categories IT services and consulting.
If no employment relationship is established, the personal data will be deleted within 6 months after completion of the application process. If an employment relationship is established, your application will become part of your personnel file.
In the event that you have agreed to further storage of your personal data in our applicant pool, we will take over your data and delete it after two years at the latest.
Part III: Information about your right to object according to Art. 21 DSGVO
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) f DSGVO(data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases, we process your personal data in order to conduct direct advertising. You have the right to object at any time to the processing of data concerning you for the purpose of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made form-free and should preferably be addressed to the contact details mentioned above in the section „Name and contact details of the responsible person“.