Privacy policy

We would like to inform you about the relevant data protection aspects when using the "www.diro.eu" page as follows:

• Responsible for data protection is DIRO AG (Große Bleichen 32, 20 354 Hamburg, Phone: +49 (0) 40 41 352 231, Fax: +49 (0) 40 41 352 294, E-Mail: diro (at) diro.eu) (hereinafter “DIRO”, “we” or “us”).
• Your IP address will be processed. The processing is carried out for the purpose of being able to present the contents of the website to you. The legal basis for the processing of the data is the safeguarding of legitimate interests pursuant to Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR) as well as processing for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR, if you request it.
• The aforementioned legitimate interest according to Art. 6 para. 1 lit. f GDPR consists in the technically mandatory use of third parties in transfers via website (internet server operators). Without the involvement of third parties, it is not possible to display the content in your internet browser. The involvement of third parties is limited to those directly involved in the communication process.
• Your internet browser may also send us additional data, such as the date and time of access or the name and URL of the file retrieved, as well as data about your system, such as browser type and version, operating system used, name of the access provider, if you clicked on a hyperlink on a third party that points to our website, the address of this third party site (“referrer”) and the name of your computer. This information is temporarily stored in a so-called log file. This data is processed for the following purposes: Ensuring a smooth connection of the website, ensuring a comfortable use of our website, evaluating system security and stability. The legal basis for the processing of the data is the safeguarding of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR .
• The aforementioned legitimate interest according to Art. 6 para. 1 lit. f GDPR is that we would like to offer you a secure, functioning and comfortable website.
• DIRO deletes the data immediately after the conclusion of the contact with you, unless otherwise stated below. If you first request deletion, the data will be deleted immediately, unless there is another legal basis for processing.
• For the maintenance of the website, DIRO involves 3st kommunikation GmbH, Taunusstraße 59-61, 55 118 Mainz via order processing. The latter acts strictly under instructions on behalf of DIRO. 3st kommunikation GmbH, in turn, involves a hosting service provider via order processing, namely Hetzner Online GmbH Industriestr. 25 91 710 Gunzenhausen. This hosting service provider, in turn, acts under strict instructions on behalf of of the 3rd communication GmbH.
• There is a right to information (Art. 15 GDPR) and to correction (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) or a right to object to processing (Art. 21 GDPR) and a right to data portability (Art. 20 GDPR). The data subject has the right to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her which is based on legitimate interests (Art. 6 (1) lit. f GDPR) processed by us to lodge an objection; This also applies to profiling based on these provisions.
• There is a right to lodge a complaint with a data protection supervisory authority. You may choose between several data protection supervisory authorities. The data protection supervisory authority responsible for our headquarters is “The Hamburg Commissioner for Data Protection and Freedom of Information. "
• The provision of personal data by you is not required by law or contract or necessary for the conclusion of a contract. You and the data subject are under no obligation to provide the data. If you do not provide the data, you may not be able to access all or part of the DIRO website and may not be able to view the content accordingly.
• There is no automated decision-making and no profiling according to Art. 22 GDPR.
• Please also note the information below under “Cookies”, “Matomo” and “OpenStreetMap.”

Cookies are small identifiers that are sent to your browser and that your computer saves when the appropriate setting is set and then transmits it back later. Some cookies come from us, some from third-party providers. So-called session cookies are deleted when the browser is closed the next time (i.e. after the “session”).

When you visit the website, the following cookies may be used (in some cases depending on your consent):

• Keyword / Names of cookies & validity period / Provider / Integration via third parties / Purpose
• Storage of settings / DIRO-Multisite-Cookie (1 year) = dd_cookie_consent_status = 1 Year / diro.eu / Saves the user’s own settings on the site as well as the user-approved content of external providers.
• OpenStreetMaps (Maps) / _ osm_location = 10 years ; _ pk_id = 1 year / OpenStreetMap Foundation / Display of addresses on a map that is integrated into the website.
• Matomo (usage analysis) / _ pk_id = 13 months ; _ pk_ref = 6 months ; _ pk_ses = 30 minutes / Matthieu Aubry u.a. / Self-hosted / website analytics / Generates statistical information about how the visitor uses the website.
• reCAPTCHA / NID (6 months) / Google Ireland Limited v Google Ireland Limited / The cookie set by Google protects our website from abusive entries in the contact form by automated machine processing.

• The legal basis is the protection of legitimate interests according to Art. 6 para. 1 lit. f GDPR. We use the cookies exclusively for the purposes stated above.
• The aforementioned legitimate interests pursuant to Art. 6 (1) lit. f GDPR is that we would like to offer you an appealing and user-friendly website. Regarding the reCAPTCHA cookie, we have a legitimate interest in ensuring that only real people and not bots can use our contact form. We want to protect ourselves from spam with this (see below for more info). Regarding Matomo and OpenStreetMap, please see the explanations below.
• Your IP address is known to us - technically necessary on the Internet. We have no direct possibility to assign the IP address to your person. Despite the communication of the IP address and the setting of cookies, you therefore remain anonymous to us when visiting our websites, as long as you do not consciously provide us with additional information about your identity.
• There is a right to information (Art. 15 GDPR) as well as to correction (Art. 16 GDPR) or deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and furthermore a right to data portability (Art. 20 GDPR) as well as a right to object to processing (Art. 21 GDPR).
• The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which are processed by us on the basis of legitimate interests (Art. 6(1)(f) GDPR); this also applies to profiling based on these provisions.
• There is a right of appeal to a data protection supervisory authority. You may have the choice of several data protection supervisory authorities. The data protection supervisory authority responsible for our headquarters is "The Hamburg Commissioner for Data Protection and Freedom of Information.
• The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. Possible consequence if you do not provide the data is that the functions of the website of DIRO will not work completely or partially.
• There is no automated decision-making and profiling according to Art. 22 GDPR. Please note that you can completely prevent the setting of a cookie by the appropriate setting in your browser.
• Further information on "reCAPTCHA": In order to protect our website against improper entries in the contact form by automated machine processing, we use the service reCAPTCHA of the company Google LLC, provided by Google Ireland Limited ("Google"). By means of reCAPTCHA, we can recognize whether our website is accessed by a human or abusively by a bot. To do this, we send the IP address of your end device (e.g. computer or smartphone) and possibly other data required by Google for the reCAPTCHA service (e.g. click path, user behavior and time spent on our website, browser language, user input, JavaScript objects, browser plug-ins) to Google. Your IP address is transmitted by us to a Google server in a member state of the European Union or the European Economic Area and shortened there. Only in exceptional cases will your full IP address be transmitted by Google to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of reCAPTCHA and, if applicable, the above-mentioned other data required by Google for the reCAPTCHA service will not be merged with other data from Google. Please also note Google's privacy policy, which can be found at https://policies.google.com/privacy .
• Please also note the further explanations on "Matomo" and "OpenStreetMap" below.

We offer a contact form through which you can send us a message. We would be happy to respond to your message. For this, we need your consent to process the data you provide. We inform you on the occasion of the data collection as follows:

Content of the consent you are asked for in the contact form: You consent to DIRO AG storing and using the data you provide in order to respond to your inquiry.

The granting of consent is completely voluntary. You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can declare a revocation e.g. at our premises, by letter post to DIRO AG, Große Bleichen 32, 20354 Hamburg or by e-mail to diro(at)diro.eu or fax to the fax number +49 (0)40 41352294.

• The data controller is DIRO AG (see above).
• The processing is carried out for the following purpose: You can contact us via the contact form. This is an alternative, for example, to contacting us by e-mail. We would like to respond to you afterwards. The data concerned is the data you have entered in the contact form (the specification of an e-mail address is required) and additionally for technical reasons: Your IP address, the date and the time. The legal basis for the processing of the data is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you give us when sending a message, and with regard to the integration of transport companies (e.g. if we send you an e-mail to your e-mail address) also the protection of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
• The aforementioned legitimate interest in the involvement of carriers pursuant to Art. 6 para. 1 lit. f GDPR consists in the fact that it is technically mandatory to involve third parties in transmissions, in particular via website (internet server operators) and via e-mail (the internet server operators on the communication path and the providers of e-mail inboxes). Without the involvement of third parties it is not possible to contact you. The involvement of the third parties is limited to those directly involved in the communication process.
• For the support of the Internet presence, DIRO integrates 3st kommunikation GmbH, Taunusstrasse 59-61, 55118 Mainz, Germany, via order processing. This company acts strictly in accordance with instructions on behalf of DIRO. 3st kommunikation GmbH in turn uses a hosting service provider for the website via order processing, namely Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen. This hosting service provider in turn acts strictly in accordance with instructions on behalf of 3st kommunikation GmbH.
• DIRO will delete the data immediately after the conclusion of the contact with you. If you request deletion beforehand, the data will be deleted immediately unless there is another legal basis for the processing.
• There is a right to information (Art. 15 GDPR) as well as to correction (Art. 16 GDPR) or deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) or a right to object to processing (Art. 21 GDPR) as well as a right to data portability (Art. 20 GDPR). The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which are processed by us on the basis of legitimate interests (Art. 6(1)(f) GDPR); this also applies to profiling based on these provisions. You have the right to object to the processing of data that we process for direct marketing purposes.
• There is a right to revoke consent at any time without affecting the lawfulness of the processing carried out on the basis of consent until revocation.
• There is a right of appeal to a data protection supervisory authority. If necessary, you have the choice between several data protection supervisory authorities. The data protection supervisory authority responsible for our headquarters in any case is "The Hamburg Commissioner for Data Protection and Freedom of Information."
• The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. Possible consequences if you do not provide the data is that you would have to contact us via another channel for existing questions or comments.
• There is no automated decision-making and profiling according to Art. 22 GDPR.

We use on the site OpenStreetMap Maps . These maps are provided by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom, (in this section below: “OpenStreetMap”). The integration of the maps on our website takes place by means of an iframes or by retrieving the so-called tiles (map images) from the provider’s server. This will transfer your IP address to the OpenStreetMap server. In addition, a session cookie is set (for information on cookies, see “Cookies” above in this privacy policy).

We also inform you as follows:

• DIRO AG is responsible for data protection (see above).
• The use of OpenStreetMap maps is for the purpose of providing you with map material. It serves to make it easy to find the addresses provided by us on the website.
• The legal basis for the processing of the data is the safeguarding of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR .
• The aforementioned legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR consists in the fact that we want to include maps in a user-friendly and generally compatible manner for offering the website.
• There is a right to information (Art. 15 GDPR) and to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and furthermore a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR). The data subject has the right to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her which is based on legitimate interests (Art. 6 (1) lit. f GDPR) processed by us to lodge an objection; This also applies to profiling based on these provisions.
• There is a right to lodge a complaint with a data protection supervisory authority. You may choose between several data protection supervisory authorities. The data protection supervisory authority responsible for our headquarters is “The Hamburg Commissioner for Data Protection and Freedom of Information.”
• The provision of personal data by you is not required by law or contract or necessary for the conclusion of a contract. You and the data subject are under no obligation to provide the data. The possible consequence of not providing the data is that you will not be able to see maps.
• There is no automated decision-making and no profiling according to Art. 22 GDPR.
• For more information, see the privacy policy of the OpenStreetMap Foundation: h ttps://wiki.osmfoundation.org/wiki/Privacy_Policy

Our website uses the analysis service Matomo (formerly Piwik). Matomo is an open source software for statistical analysis of visitor access. By using Matomo it is possible for us to learn how the website is used. This enables us to continuously improve the quality of our website and its content.

Matomo uses cookies. These text files are stored on your computer and enable us to analyse the use of our website. For this purpose, the information obtained by the cookie about the use is transmitted to our servers and stored so that the user behavior can be evaluated. Information on cookies can be found under “Cookies” above. Information on the processing of personal data when you access our website can be found above under “Information when you access our website.”

The following data is collected when individual pages of our website are accessed:

• 2 bytes of the IP address of the user’s calling system
• The visited website
• The website from which the user accessed the website (referrer)
• The subpages that are accessed from the visited website
• The length of time spent on the website
• The frequency of access to the website

It is not possible to draw conclusions about a specific person when using Matomo, as your IP address is anonymized.

The legal basis for the processing of personal data when using Matomo is Art. 6 para. 1 lit. f GDPR (“the legitimate interest”).

If you do not agree with the storage and use of your data, you can deactivate the storage and use of your data here. In this case, an opt-out cookie is stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be activated again when you visit our site again.

Further information about Matomo can be found here: https://matomo.org/faq/general/faq_146/

Weiter informieren wir Sie wie folgt:

• Datenschutzrechtlich Verantwortlicher ist die DIRO AG (siehe oben).
• Dauer der Speicherung: Die Daten werden unverzüglich gelöscht, sobald die allgemeine Statistik, der Ihre Daten im Einzelnen nicht mehr entnehmbar sind, erstellt ist. Falls Sie zuvor die Löschung begehren, werden die Daten unverzüglich gelöscht, soweit keine andere Rechtsgrundlage für die Verarbeitung besteht.
• Es besteht ein Recht auf Auskunft (Art. 15 DSGVO) sowie auf Berichtigung (Art. 16 DSGVO) oder Löschung (Art. 17 DSGVO) oder Einschränkung der Verarbeitung (Art. 18 DSGVO) und ferner ein Recht auf Datenübertragbarkeit (Art. 20 DSGVO) sowie ein Recht auf Widerspruch gegen die Verarbeitung (Art. 21 DSGVO). Die betroffene Person hat das Recht, aus Gründen, die sich aus ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung sie betreffender personenbezogener Daten, die aufgrund von berechtigten Interessen (Art. 6 Abs. 1 lit. f DSGVO) von uns verarbeitet werden, Widerspruch einzulegen ; dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling.
• Es besteht ein Beschwerderecht bei einer Datenschutz-Aufsichtsbehörde. Sie haben dabei gegebenenfalls die Wahl unter mehreren Datenschutz-Aufsichtsbehörden. Die jedenfalls für unseren Sitz zuständige Datenschutz-Aufsichtsbehörde ist „Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.“
• Die Bereitstellung der personenbezogenen Daten durch Sie ist weder gesetzlich noch vertraglich vorgeschrieben oder für einen Vertragsabschluss erforderlich. Sie und die betroffene Person sind nicht verpflichtet, die Daten bereitzustellen. Mögliche Folge, wenn Sie die Daten nicht bereitstellen, ist, dass Ihre Daten nicht in die allgemeine Statistik mit einfließen und bei der Auswertung und damit der Verbesserung unserer Website nicht berücksichtigt werden können.
• Es besteht keine automatisierte Entscheidungsfindung und kein Profiling gem. Art. 22 DSGVO.

Unsere Website enthält Links zu verschiedenen Social-Media-Plattformen. Dies ist so ausgestaltet, dass alleine durch Ihren Besuch auf unserer Website keine Daten an die Betreiber der Plattformen übermittelt werden. Möglicherweise erheben Plattformen jedoch Daten über Ihren Besuch auf unserer Website, wenn Sie selbst eine Seite oder Anwendung einer solchen Plattform im Hintergrund verwenden.

Wenn Sie auf einen Link einer Social-Media-Plattform klicken, werden Sie auf die jeweilige Plattform weitergeleitet. Auf anderen Websites als der unsrigen finden ausschließlich die dortigen Datenschutzerklärungen Anwendung.

Diese Datenschutzerklärung ist aktuell gültig und hat den Stand Oktober 2020 .

Durch die Weiterentwicklung unserer Website und Angebote darüber oder aufgrund geänderter gesetzlicher beziehungsweise behördlicher Vorgaben kann es notwendig werden, diese Datenschutzerklärung zu ändern. Die jeweils aktuelle Datenschutzerklärung kann jederzeit auf der Website unter diro.eu/datenschutz.html von Ihnen abgerufen und ausgedruckt werden.