Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is: 

DICOMSS GmbH
Represented by Andreas Steiger, Founder and CEO  

Mittelstraße 24
10117 Berlin
Germany  

Website: https://dicomss.com
Email: hello@dicomss.com

2. General Information on Data Processing

We take the protection of personal data seriously. Personal data means any information relating to an identified or identifiable natural person, such as a name, email address or technical access data.

We process personal data only where necessary to provide our website, respond to enquiries, protect the security of our website or comply with legal obligations. Processing is carried out in accordance with the GDPR and applicable German data protection laws. 

3. Access Data and Server Log Files

 When you visit our website, technical data is automatically processed. This may include in particular:

• IP address
• date and time of access
• pages and files accessed
• referrer URL
• browser used
• operating system
• amount of data transferred
• status messages

This data is processed to technically provide the website, ensure system security and detect misuse or disruptions. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of our website.

4. Hosting and WordPress

Our website is operated using WordPress. Technical hosting is provided by:

Strato GmbH
Otto-Ostrowski-Straße 7, 10249 Berlin

The hosting provider processes technical access data and server log files where this is necessary for the operation and security of the website. Processing is based on Art. 6(1)(f) GDPR. Where required, we have entered into a data processing agreement with the hosting provider pursuant to Art. 28 GDPR. 

5. Contact Form

 If you contact us through the contact form, we process the data you provide, in particular:

• name
• email address
• content of your message, if a message field is provided
• time of the enquiry 

We use this data exclusively to process your enquiry and communicate with you. 

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the conclusion or performance of a contract. In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and communicating with prospects, customers and business partners.

The data will be deleted once it is no longer required to process your enquiry, unless statutory retention obligations apply.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies. Cookies are small text files stored on your device.

We distinguish between technically necessary cookies and non-essential cookies.

Technically necessary cookies are required for the website to function properly. The legal basis for processing personal data is Art. 6(1)(f) GDPR. Access to or storage of information on your device takes place, where required, based on Section 25(2) TDDDG. 

Non-essential cookies or comparable technologies, for example for external services or analytics purposes, are used only if you have given prior consent. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future, for example through the settings of the cookie banner. 

7. Google reCAPTCHA

We use Google reCAPTCHA to protect our website and, in particular, the contact form against spam, automated access and misuse.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on the processing, other companies of the Google group may also be involved.

When reCAPTCHA is used, technical information may be processed, such as IP address, browser information, device information, time spent on the page, mouse movements or other interaction data. This information is used to assess whether an input is made by a human or by automated means.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protecting our website against spam, misuse and automated attacks. Where consent is required for the use of reCAPTCHA, processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

It cannot be excluded that data may be transferred to Google companies outside the European Union or the European Economic Area. According to Google, appropriate safeguards are used for international data transfers, in particular standard contractual clauses where required.

Further information on data processing by Google can be found in Google’s privacy information. 

8. Cloudflare

We use services provided by Cloudflare for the secure and efficient delivery of our website. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. 

Cloudflare may be used as a content delivery network, security service and protection against attacks. In this context, technical data may be processed, in particular IP addresses, access times, accessed content, browser information and security-related event data.

Processing is carried out to improve the security, stability and loading speed of our website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient provision of our website.

Cloudflare may also process data outside the European Union or the European Economic Area. Where required, this is done on the basis of appropriate safeguards within the meaning of the GDPR, in particular standard contractual clauses. 

9. No Newsletter, No User Accounts, No Online Shop

Our website currently does not offer newsletter registration, user accounts or an online shop. Accordingly, we do not process website data for newsletter distribution, user profiles, orders or payment processing. 

10. Recipients of Personal Data

 Personal data may be shared with technical service providers where this is necessary for the operation, security and functionality of the website. This includes, in particular, hosting providers, Cloudflare and Google reCAPTCHA.

We do not share personal data with third parties for advertising purposes.

11. Retention Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Contact enquiries are deleted once the respective communication has been completed and there are no statutory or business reasons for further retention. Technical log data is generally stored only for a short period, unless longer storage is required for security or error analysis. 

12. Your Rights

Subject to the statutory requirements, you have the following rights: 

• right of access to your stored personal data
• right to rectification of inaccurate data
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to certain processing activities
• right to withdraw consent with effect for the future
• right to lodge a complaint with a data protection supervisory authority

To exercise your rights, you can contact us at any time: hello@dicomss.com

13. Objection to Direct Marketing

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. We will then no longer process your data for this purpose. 

14. Data Security 

We implement technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure. This includes measures for secure transmission and protection of the website infrastructure.

15. Changes to this Privacy Policy

We may update this Privacy Policy if our website, the services we use or legal requirements change. The current version published on this website applies. 

Last updated: June 2026