Data Privacy Policy

We would like to thank you for your interest in our website. In this Privacy Policy, we provide you with detailed information on how we handle your data.

§ 1 General Information on the Collection of Personal Data
1. The term personal data applies to all data that can be personally linked to you as a user, for example your name, address, e-mail addresses and information on your user behaviour.
2. The Controller in accordance with Article 4 paragraph 7 of the European General Data Protection Regulation (GDPR) is the association HIGH END SOCIETY e. V, represented by its Managing Directors Mansour Mamaghani, Dieter Amann, Kurt W. Hecker and Jürgen Timm (Chairman of the Board), Vorm Eichholz 2g, 42119 Wuppertal, Germany, telephone: +49 202 40864952, e-mail: timm@highendsociety.de.
3. If you have any questions regarding the collection, processing or use of your personal data, would like to request information on or the correction, blocking or erasure of data or would like to withdraw any consent given, please contact our Controller pursuant to Article 4 paragraph 7 of the European General Data Protection Regulations (GDPR).

§ 2 Your Rights
1. You have the following rights against us with regard to your personal data:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to the processing,
- Right to data portability.
2. You additionally have the right to lodge a complaint with a supervisory authority for data protection with regard to the processing of your personal data by our company. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, place of work or place in which the alleged infringement took place if you believe that our processing of your personal data infringes the GDPR. The supervisory authority with which the complaint is lodged will inform the complainant about the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.

§ 3 Scope of the Collection and Storage of Personal Data in the Case of Informational Use

When you use our website solely for informational purposes, namely when you do not sign up, register or provide us with information in order to use the website, we will not collect any personal data with the exception of data that your browser transmits in order to enable you to visit our website. If you want to view our website, we collect the following data, which we require in technical terms in order to offer you the functions of our website and guarantee its stability and security: your IP address, the time and date of your request, the time-zone difference to Greenwich Mean Time (GMT), the content of your request (the concrete web page requested), your access status/HTTP status code, the data volume transmitted, the website from which the request stems, your browser, operating system and its user interface and the language and version of your browser software. The storage of the data in log files is required in order to provide a fully functioning website. We also use the data to optimise our website and to ensure the security of our IT systems. We only evaluate these data in order to improve our online services. They cannot be used to identify you. The data are not evaluated for marketing purposes within this context. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. f GDPR. The data are erased as soon as they are no longer required to meet the purpose for which they were collected. In the case of data recorded in order to provide our website, this occurs when the user ends their visit. In the case of the storage of the data in log files, this occurs after one month at the latest. Storage of the data past these deadlines is possible. In this case, the user’s IP address will be deleted or anonymised so that the client accessing the website can no longer be associated with the address.

§ 4 Cookies
In order to make visits to our website attractive, to enable the use of certain functions and to show you suitable products, we also use so-called cookies alongside the data specified above on our different web pages if you give us your prior consent to the use of cookies. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. a GDPR. If you do not give us your consent to the use of cookies, we will not use any cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies that we use are deleted at the end of your browser session, namely when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to identify your browser the next time you visit our website (persistent cookies). You can find details on the duration of storage in the overview in your browser's cookie settings. You can change your browser settings so that you are informed as soon as cookies are installed on your device and in order to decide whether to allow cookies in individual cases or to deactivate the acceptance of cookies in specific cases or in general. Each browser is different when it comes to the management of its cookie settings. This is described in each browser’s help menu, which explains to you how you can change your cookie settings.

§ 5 Information on the Collection, Processing, Use and Disclosure of Personal Data

Alongside the use of our website as a pure source of information, we also offer a number of different services that you can use if interested. In order to use these services, you normally need to submit further personal data that we use to provide the service in question and that are subject to the above-mentioned principles relating to the processing of data.
1. Contact by e-mail or via the contact form

When you contact us by e-mail or via the contact form on our website, we store your e-mail address provided and, if you voluntarily provide us with such data, your name, the subject specified, your company name, your street, your postcode, your place of residence, the country in which you live, your telephone number and your fax number in order to answer your questions and messages. If you contact us via e-mail, this is also the required legitimate interest for the processing of the data provided. The other personal data processed and voluntarily provided when you submit our contact form are used to prevent misuse of the form and to ensure that our IT systems remain secure. The legal basis for the processing of data transmitted when an e-mail is sent or the contact form is submitted is Article 6 paragraph 1 lit. f GDPR. If the objective of the e-mail contact or the contact via the contact form is the conclusion of a contract, an additional legal basis for the processing is Article 6 paragraph 1 lit. b GDPR. The mandatory details required in order to answer your questions and messages are individually marked as such; all other details are voluntary. We will delete the data as soon as they are no longer required to meet the purpose for which they were collected or, in the case of statutory periods of retention, we will limit data processing. With regard to the personal data entered on the contact form and the personal data sent via e-mail, this applies when the corresponding conversation with the user has come to an end. The conversation is deemed to have come to an end when the circumstances indicate that the issue in question has been conclusively clarified. The other personal data collected when you send us an e-mail are deleted after a period of one month at the latest.

2. Data processing by external providers
We partly use the services of external providers to process your data. We carefully select and commission these providers, who are bound to our instructions and checked by our company on a regular basis. When processing data on our behalf, a third-party provider provides us with website hosting and design services. This service provider is based in a member state of the European Union or in other contractual states of the Agreement on the European Economic Area. All data that are collected within the scope of your use of this website or in forms intended for this purpose in the online shop as described below are processed on the service provider’s servers. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. b GDPR. Processing on other servers only takes place within the scope explained in this Privacy Policy.

§ 6 Data Security

We use up-to-date technical measures to guarantee the security of data, especially in order to protect your personal data against risks in the case of data transfers and against being disclosed to or accessed by third parties. These measures are adapted in accordance with the current state of the art in terms of technology. When transmitted via the Internet, especially during the order process, your personal data are encrypted using SSL encryption. Our website and our other systems are protected by technical and organisational measures that aim to safeguard them against the loss, destruction, manipulation or disclosure of your data or your data being accessed by unauthorised individuals. If you have a customer account, access to your customer account is only possible by entering your e-mail address and your personal password. You should therefore always treat your login details as confidential, not disclose them and close your browser window once you have ended your communication with us. This especially applies if multiple people use the same computer.

§ 7 Newsletter
1. You can provide us with your consent to send you our newsletter, which we use to inform you about our current interesting products and services.
2. When you sign up to receive our newsletter, we use the so-called double opt-in method. This means that once you have submitted your e-mail address during the registration process, we send a confirmation e-mail to the e-mail address provided in which we ask you to confirm that you want to receive the newsletter. If you do not confirm your registration within 14 days, your information will be blocked and automatically deleted after a month. We also store the IP addresses used and the times of your registration and confirmation. We do so in order to be able to provide evidence of your registration and, where applicable, to explain any possible misuse of your personal data.
3. The only information that you are required to provide in order to be sent the newsletter is your e-mail address. Once you have confirmed your registration, we will store your e-mail address in order to send you our newsletter. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. a GDPR.
4. The data are erased as soon as they are no longer required to meet the purpose for which they were collected. Your e-mail address is only stored for the period in which your newsletter subscription is active.
5. You can withdraw your consent to being sent the newsletter and cancel your subscription at any time. You can do so by clicking on the link provided in each newsletter e-mail, by sending an e-mail to timm@highendsociety.de or by sending a message to the contact details specified in the Legal Notice.

§ 8 Use of Matomo
1. This website uses the web analytics service Matomo to analyse the use of our website and improve it on a regular basis. The statistics recorded enable us to improve our online services and make them more interesting for you as a user. The legal basis for the use of Matomo is Article 6 paragraph 1 sentence 1 lit. f GDPR.
2. In order to carry out this evaluation, the service stores cookies (see Section 4 of this Privacy Policy for further details) on your computer. The Controller only saves the information collected by these cookies on its server in the Netherlands. You can stop the evaluation by deleting existing cookies and preventing cookies from being stored. If you prevent the cookies from being stored, please note that you may not be able to use this website to the full extent. You can prevent the storage of cookies by changing your browser settings.
3. This website uses Matomo with the extension "AnonymizeIP". This extension shortens IP addresses for further processing in order to exclude the possibility of direct identification of individual users. The IP address transmitted from your browser by Matomo will not be merged with other data that we collect.
4. The program Matomo is an open-source project. You can find information on the Privacy Policy of the third-party provider at http://Matomo.org/privacy/policy.

§ 9 Reiteration of Any Declarations of Consent Provided

Where applicable, you have expressly given us the consent specified below. We have recorded this consent. In accordance with the German Telemedia Act (TMG), we are obliged to always keep the content of declarations of consent available to be accessed. You can withdraw your consent with effect for the future at any time.
Permission to send e-mail advertising
I would like to subscribe to the newsletter. Unsubscribing from the newsletter is possible at any time. (More information on the newsletter and the Privacy Policy)     

§ 10 Google Maps
1. We use the services provided by Google Maps on our website. This enables us to show you interactive maps directly on our website and allows you to conveniently use the map functions. The legal basis for the use of Google Analytics is Article 6 paragraph 1 sentence 1 lit. f GDPR.
2. When you visit our website, Google is informed that you have visited the corresponding page of our website. It is also provided with the data specified in Section 4 of this Privacy Policy. This occurs irrespective of whether Google offers a user account and you are logged into this account or you do not have a user account with Google. If you are logged into a Google account, these data will be directly associated with your account. If you do not want Google to associate your actions with your profile, you must log out of your account before activating the button. Google stores your data as a use profile and uses them for the purposes of advertising, market research and/or the needs-oriented design of its website. The evaluation of the data is particularly (even in the case of users who are not logged in) carried out in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles but must contact Google in order to exercise this right.
3. You can find more information on the purpose and scope of the collection and processing of data by the individual plug-in provider in the privacy policies of the provider. These policies will also provide you with further information on your rights concerning this issue and the settings that you can use to protect your privacy: http://www.google.de/intl/en/policies/privacy. Google also processes your personal data in the USA and has agreed to comply with the requirements of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
4. Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; fax: +353 14361001.

§ 11 Objection to or Withdrawal of Consent to the Processing of Your Data
(1) If you have consented to the processing of your data, you can withdraw this consent at any time. Such withdrawal will have an impact on the legitimacy of the processing of your personal data after you have withdrawn your consent.
(2) If the processing of your personal data by us is based on the consideration of interests, you can file an objection to the processing. This is especially the case when the processing is not required in order to fulfil a contract with you, which is specified by us in the following description of the functions in each case. When you file such an objection, we request that you specify the reasons as to why we should not process your personal data the way we do. In the case of a justified objection, we will examine the situation and either stop or adjust our data processing activities or present you with our imperative reasons warranting protection on the basis of which we will continue our processing activities.
(3) You can, of course, object to the processing of your personal data for the purpose of advertising and data analysis at any time. You can use our contact details to inform us about your objection to advertising. You can find our contact details under Section 1 subsection 2 of this Privacy Policy or in our Legal Notice.

December 2018