§ 1 General Information on the Collection of Personal Data
1. The term personal data applies to all data that can be personally linked to you as a user, for example your name, address, e-mail addresses and information on your user behaviour.
2. The Controller in accordance with Article 4 paragraph 7 of the European General Data Protection Regulation (GDPR) is the association HIGH END SOCIETY e. V, represented by its Managing Directors Mansour Mamaghani, Dieter Amann, Kurt W. Hecker and Jürgen Timm (Chairman of the Board), Vorm Eichholz 2g, 42119 Wuppertal, Germany, telephone: +49 202 40864952, e-mail: firstname.lastname@example.org.
3. If you have any questions regarding the collection, processing or use of your personal data, would like to request information on or the correction, blocking or erasure of data or would like to withdraw any consent given, please contact our Controller pursuant to Article 4 paragraph 7 of the European General Data Protection Regulations (GDPR).
§ 2 Your Rights
1. You have the following rights against us with regard to your personal data:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to the processing,
- Right to data portability.
2. You additionally have the right to lodge a complaint with a supervisory authority for data protection with regard to the processing of your personal data by our company. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, place of work or place in which the alleged infringement took place if you believe that our processing of your personal data infringes the GDPR. The supervisory authority with which the complaint is lodged will inform the complainant about the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.
§ 3 Scope of the Collection and Storage of Personal Data in the Case of Informational Use
When you use our website solely for informational purposes, namely when you do not sign up, register or provide us with information in order to use the website, we will not collect any personal data with the exception of data that your browser transmits in order to enable you to visit our website. If you want to view our website, we collect the following data, which we require in technical terms in order to offer you the functions of our website and guarantee its stability and security: your IP address, the time and date of your request, the time-zone difference to Greenwich Mean Time (GMT), the content of your request (the concrete web page requested), your access status/HTTP status code, the data volume transmitted, the website from which the request stems, your browser, operating system and its user interface and the language and version of your browser software. The storage of the data in log files is required in order to provide a fully functioning website. We also use the data to optimise our website and to ensure the security of our IT systems. We only evaluate these data in order to improve our online services. They cannot be used to identify you. The data are not evaluated for marketing purposes within this context. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. f GDPR. The data are erased as soon as they are no longer required to meet the purpose for which they were collected. In the case of data recorded in order to provide our website, this occurs when the user ends their visit. In the case of the storage of the data in log files, this occurs after one month at the latest. Storage of the data past these deadlines is possible. In this case, the user’s IP address will be deleted or anonymised so that the client accessing the website can no longer be associated with the address.
§ 4 Cookies
§ 5 Information on the Collection, Processing, Use and Disclosure of Personal Data
Alongside the use of our website as a pure source of information, we also offer a number of different services that you can use if interested. In order to use these services, you normally need to submit further personal data that we use to provide the service in question and that are subject to the above-mentioned principles relating to the processing of data.
1. Contact by e-mail or via the contact form
When you contact us by e-mail or via the contact form on our website, we store your e-mail address provided and, if you voluntarily provide us with such data, your name, the subject specified, your company name, your street, your postcode, your place of residence, the country in which you live, your telephone number and your fax number in order to answer your questions and messages. If you contact us via e-mail, this is also the required legitimate interest for the processing of the data provided. The other personal data processed and voluntarily provided when you submit our contact form are used to prevent misuse of the form and to ensure that our IT systems remain secure. The legal basis for the processing of data transmitted when an e-mail is sent or the contact form is submitted is Article 6 paragraph 1 lit. f GDPR. If the objective of the e-mail contact or the contact via the contact form is the conclusion of a contract, an additional legal basis for the processing is Article 6 paragraph 1 lit. b GDPR. The mandatory details required in order to answer your questions and messages are individually marked as such; all other details are voluntary. We will delete the data as soon as they are no longer required to meet the purpose for which they were collected or, in the case of statutory periods of retention, we will limit data processing. With regard to the personal data entered on the contact form and the personal data sent via e-mail, this applies when the corresponding conversation with the user has come to an end. The conversation is deemed to have come to an end when the circumstances indicate that the issue in question has been conclusively clarified. The other personal data collected when you send us an e-mail are deleted after a period of one month at the latest.
2. Data processing by external providers
§ 6 Data Security
We use up-to-date technical measures to guarantee the security of data, especially in order to protect your personal data against risks in the case of data transfers and against being disclosed to or accessed by third parties. These measures are adapted in accordance with the current state of the art in terms of technology. When transmitted via the Internet, especially during the order process, your personal data are encrypted using SSL encryption. Our website and our other systems are protected by technical and organisational measures that aim to safeguard them against the loss, destruction, manipulation or disclosure of your data or your data being accessed by unauthorised individuals. If you have a customer account, access to your customer account is only possible by entering your e-mail address and your personal password. You should therefore always treat your login details as confidential, not disclose them and close your browser window once you have ended your communication with us. This especially applies if multiple people use the same computer.
§ 7 Newsletter
1. You can provide us with your consent to send you our newsletter, which we use to inform you about our current interesting products and services.
2. When you sign up to receive our newsletter, we use the so-called double opt-in method. This means that once you have submitted your e-mail address during the registration process, we send a confirmation e-mail to the e-mail address provided in which we ask you to confirm that you want to receive the newsletter. If you do not confirm your registration within 14 days, your information will be blocked and automatically deleted after a month. We also store the IP addresses used and the times of your registration and confirmation. We do so in order to be able to provide evidence of your registration and, where applicable, to explain any possible misuse of your personal data.
3. The only information that you are required to provide in order to be sent the newsletter is your e-mail address. Once you have confirmed your registration, we will store your e-mail address in order to send you our newsletter. The legal basis for this is Article 6 paragraph 1 sentence 1 lit. a GDPR.
4. The data are erased as soon as they are no longer required to meet the purpose for which they were collected. Your e-mail address is only stored for the period in which your newsletter subscription is active.
5. You can withdraw your consent to being sent the newsletter and cancel your subscription at any time. You can do so by clicking on the link provided in each newsletter e-mail, by sending an e-mail to email@example.com or by sending a message to the contact details specified in the Legal Notice.
§ 8 Use of Matomo
1. This website uses the web analytics service Matomo to analyse the use of our website and improve it on a regular basis. The statistics recorded enable us to improve our online services and make them more interesting for you as a user. The legal basis for the use of Matomo is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. This website uses Matomo with the extension "AnonymizeIP". This extension shortens IP addresses for further processing in order to exclude the possibility of direct identification of individual users. The IP address transmitted from your browser by Matomo will not be merged with other data that we collect.
§ 9 Reiteration of Any Declarations of Consent Provided
Where applicable, you have expressly given us the consent specified below. We have recorded this consent. In accordance with the German Telemedia Act (TMG), we are obliged to always keep the content of declarations of consent available to be accessed. You can withdraw your consent with effect for the future at any time.
Permission to send e-mail advertising
§ 10 Google Maps
1. We use the services provided by Google Maps on our website. This enables us to show you interactive maps directly on our website and allows you to conveniently use the map functions. The legal basis for the use of Google Analytics is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. You can find more information on the purpose and scope of the collection and processing of data by the individual plug-in provider in the privacy policies of the provider. These policies will also provide you with further information on your rights concerning this issue and the settings that you can use to protect your privacy: http://www.google.de/intl/en/policies/privacy. Google also processes your personal data in the USA and has agreed to comply with the requirements of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
4. Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; fax: +353 14361001.
§ 11 Objection to or Withdrawal of Consent to the Processing of Your Data
(1) If you have consented to the processing of your data, you can withdraw this consent at any time. Such withdrawal will have an impact on the legitimacy of the processing of your personal data after you have withdrawn your consent.
(2) If the processing of your personal data by us is based on the consideration of interests, you can file an objection to the processing. This is especially the case when the processing is not required in order to fulfil a contract with you, which is specified by us in the following description of the functions in each case. When you file such an objection, we request that you specify the reasons as to why we should not process your personal data the way we do. In the case of a justified objection, we will examine the situation and either stop or adjust our data processing activities or present you with our imperative reasons warranting protection on the basis of which we will continue our processing activities.