DIH SolutionsHospitality.Made Investable.
DE|EN

Privacy policy

1. Controller

The controller responsible for data processing on this website is:

DIH Solutions GmbH
Baberowweg 14A
14482 Potsdam
Germany
Phone: +49 (0) 176 47337209
Email: info(at)dih-solutions.de
Website: www.dih-solutions.de

2. General information

We process personal data only where this is necessary to provide this website, to handle enquiries or for business communication. Personal data is any information relating to an identified or identifiable person.

3. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, server log files may be processed, in particular your IP address, date and time of access, the file requested, referrer URL, browser type and version, and operating system. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and error-free operation of the website.

4. Contact form and quick contact

If you contact us through the contact form or the quick contact, we process the data you provide. This may include your name, email address, phone number, message, project details and any other information you choose to share. We process it to handle your enquiry and for business communication.

The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to pre-contractual or contractual measures. In all other cases the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in handling business enquiries.

Your message is delivered to DIH Solutions by email. The email is sent through Microsoft 365 (see section 6).

5. Requesting hotel market reports

On our Research pages you can request hotel market reports as a PDF. For this we process your first and last name, company, role and business email address, together with the details of the request: the report you asked for (market, language, data period), the page you requested it from and the time of the request.

Providing the report. You receive the report immediately through a personal download link, and by email as well. The link is valid for seven days and can be used up to five times. We forward every request to DIH Solutions as an internal email. It contains the details above and the status of your consent, but no download link. We use it to handle your request and to answer questions about the report. The legal basis is Art. 6(1)(b) GDPR. As a rule we delete the internal email after 12 months if no business relationship or project develops. If a business relationship does develop, the usual business and statutory retention rules apply instead.

Technical security. To check the download link we store only a cryptographic hash of it, not personal data. To protect against abuse we count requests per IP address and per email address; these counters are hashed and deleted after 24 hours. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the security and availability of this function.

Cloudflare Turnstile. To protect our forms against automated access and abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. For this, a script from Cloudflare is loaded when you open the form.

Turnstile analyses technical signals of the browser and device used, in particular the IP address, browser and device information, the user agent, technical connection characteristics and information about the website visited. We do not transmit form data such as your name or email address to Turnstile; for the check, our server passes only the one-time Turnstile token and our access key to Cloudflare. The processing serves to protect our website and forms against bots, spam and abusive access, on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

Cloudflare processes data to provide Turnstile partly on our behalf and, according to its own statements, also processes certain technical signals to improve its own bot detection. Processing may also take place in the USA. Cloudflare refers, among other things, to the EU-U.S. Data Privacy Framework and to EU standard contractual clauses. Further information is in the Cloudflare Turnstile privacy notice.

Optional consent. If you tick the corresponding box, we may email you about relevant hospitality real estate topics, current hotel market reports and suitable projects. Consent is voluntary; you receive the report either way. It only takes effect once you confirm it through the link in a separate email (double opt-in). That email serves only to confirm your consent and contains no advertising. The legal basis is Art. 6(1)(a) GDPR.

As proof we store on our server, outside the publicly accessible pages: your email address, a request identifier, the report requested, language, the time of the request and of the confirmation, and the version and wording of the consent text. If you do not confirm within 15 days, we delete this entry automatically and do not use your details for advertising. We keep the proof of a confirmed consent for as long as the consent is active. After a withdrawal, or once we permanently stop using the consent, we keep the proof for another three years to defend against possible legal claims and then delete it.

Withdrawal. You can withdraw your consent at any time with effect for the future by email to info(at)dih-solutions.de.

We do not pass on your details from a report request to third parties. Recipients in the course of technical processing are our hosting provider (section 3), the email service (section 6) and Cloudflare (Turnstile, see above).

6. Email delivery through Microsoft 365

Emails triggered by your input on this website are sent through Microsoft 365 (Microsoft). This covers messages from the contact form and the quick contact, the email with your download link, the confirmation email for consent, and our internal notification. Microsoft processes the email content as part of this.

7. Contact by email or phone

If you contact us by email or phone, we process the contact details and content you send us to handle your enquiry. The legal basis is the same as stated for the contact form and quick contact.

8. External links to WhatsApp and LinkedIn

This website contains links to WhatsApp and LinkedIn. Merely visiting our website does not transfer data to WhatsApp, Meta or LinkedIn. You leave our website only when you click such a link, and the provider’s privacy policy then applies to any further processing.

9. Cookies, local storage and consent

This website does not use analytics cookies that are not technically necessary without your consent. For language selection, the quick contact and your cookie choice, information may be stored in your browser through localStorage or sessionStorage. This storage serves the user-friendly provision of the website and is based on Art. 6(1)(f) GDPR.

10. Web analytics

No web analytics service is currently live. Before one is activated, this privacy policy will be updated to reflect the configuration actually used and legally approved. Optional analytics scripts are not loaded without your active consent.

11. Your rights

Within the limits of the law you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21). You can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.