1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Dixion Vertrieb medizinischer Geräte GmbH
Schiessstr. 55, 40549 Düsseldorf, Germany
Phone: +49 (0)211 / 388 388 68
Email: info@dixion.de
2. Data Protection Officer
For any questions on data protection, please contact our Data Protection Officer:
Anton Teslenko
Email: anton.teslenko@dixion.de
3. General information
We process personal data exclusively in accordance with the GDPR, the German Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG). Personal data means any information relating to an identified or identifiable natural person.
This privacy policy applies to the website dixion.com and its language versions.
4. Hosting and server log files
The website, its database and file storage are operated via the platform Lovable (Lovable Labs Incorporated) using cloud infrastructure from Cloudflare, Inc. and Supabase, Inc. Data is processed on our behalf under data processing agreements pursuant to Art. 28 GDPR. Processing outside the EU/EEA (in particular in the USA) is based on the EU–U.S. Data Privacy Framework and/or EU standard contractual clauses (Art. 45, 46 GDPR).
When you access the website, the following data is processed automatically for technical reasons: IP address, date and time of access, requested page, referrer URL, browser type and version, operating system. This data is required to deliver the website and to ensure its security and stability; it is not merged with other data sources and is deleted after a short period by the providers.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
5. Enquiry, service, partnership and NGO forms
Our website offers forms for equipment information requests (including requests for several products), service requests, distributor/partnership applications and NGO/foundation enquiries. We process the data you enter, for example name, company or organisation, country, email address, telephone number, selected products and quantities, and the content of your message.
The data is stored in our database and forwarded by email to the responsible department of our company (e.g. sales, service, management). You automatically receive a confirmation email of your submission from noreply@dixion.com; this address does not accept replies. Our staff will contact you separately.
While you compile a multi-product request, the selected products are stored temporarily in your browser (session storage) and removed when the browser tab is closed.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). The data is deleted once your enquiry has been fully processed, unless statutory retention obligations (in particular under commercial and tax law) apply.
6. Job applications (Career)
You can apply via the form on our Career page or by email to job@dixion.de. We process your name, contact details, the position you are interested in, your message and the uploaded CV (PDF) solely for the recruitment process. The application is stored in our system and sent by email to the persons responsible for recruitment.
Legal basis: Section 26 BDSG and Art. 6(1)(b) GDPR. If no employment relationship results, the application documents are deleted no later than six months after the end of the recruitment process, unless you have consented to longer storage or legal claims must be defended.
7. Email delivery
Automated emails of the website (form notifications, submission confirmations, sign-in codes for authorised staff) are sent via the email service of our hosting provider using the domain dixion.com. Processing takes place on the basis of a data processing agreement (Art. 28 GDPR). Legal basis: Art. 6(1)(b) and (f) GDPR.
8. Cookies, local storage and consent
On your first visit we ask whether you agree to website analytics ("Accept" / "Decline"). Your choice is stored in your browser for 180 days; after that you will be asked again. You can change your decision at any time by deleting the website data in your browser, after which the notice is shown again.
Technically necessary entries in the browser storage are: your consent decision, your selected website language, the temporary request list (section 5) and, for authorised staff only, the sign-in session for the management area. Legal basis: Section 25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR.
Storage for analytics purposes takes place only after your consent. Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
9. First-party website analytics
Only if you click "Accept" do we record how the website is used, with our own system and without third-party analytics services. We store the page address, referring website, device type, browser, operating system, website language, approximate time spent on the page, and the country and region derived by the hosting provider. The full IP address is not stored.
To distinguish new from returning visits, a random identifier and a random session identifier are stored in your browser. They are not linked to your name or any other profile and are not passed on to third parties.
The evaluation is carried out exclusively by authorised staff of our company for the planning and improvement of the website. Records are deleted automatically after 180 days at the latest.
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future by deleting the website data in your browser and selecting "Decline".
10. Google Maps
To display our location, we offer the map service Google Maps. The map is only loaded after you click "Show map"; before that, no data is transmitted to Google. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map is loaded, your IP address and technical information are transmitted to Google and may be processed in the USA. Google is certified under the EU–U.S. Data Privacy Framework.
Legal basis: your consent by clicking "Show map", Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The consent applies to the current page view only. Further information: https://policies.google.com/privacy.
11. Management area
The management area of the website is accessible only to authorised staff. For sign-in we process the email address, a one-time code, session data and security logs (including protection against repeated failed attempts). Legal basis: Art. 6(1)(f) GDPR and, for employees, Section 26 BDSG.
12. Recipients of personal data
Personal data is disclosed only where this is necessary for the performance of a contract, required by law, covered by a legitimate interest or based on your consent. Recipients may include: hosting and IT service providers (section 4), email service (section 7), Google (sections 10 and 11), shipping and logistics providers, tax advisors and public authorities where legally required. Data processing agreements pursuant to Art. 28 GDPR have been concluded where required.
13. Data retention
We retain personal data only for as long as necessary to fulfil the respective purpose, to comply with statutory retention obligations (up to 10 years under the German Commercial Code and Fiscal Code) or to establish, exercise or defend legal claims. Specific periods are stated in the respective sections.
14. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.
To exercise your rights, please contact us using the details in sections 1 and 2.
15. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
16. Data security
We implement appropriate technical and organisational measures pursuant to Art. 32 GDPR. The website uses TLS encryption; uploaded documents are stored in non-public storage with access restricted to authorised staff.
There is no automated decision-making including profiling within the meaning of Art. 22 GDPR. Providing data in the forms is voluntary, but without the mandatory fields we cannot process your enquiry.
17. Changes to this privacy policy
We adapt this privacy policy when the website or the legal situation changes. The current version is always available on this page.
Last updated: October 2026