MyHighlands.de > Data protection

Data protection

[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Einstellungen anpassen”/]

Privacy policy

1. Information on the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Making contact
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract processing
7. Comments function
8. Use of your data for direct advertising
9. Use of social media: Video
10. Online marketing
11. Tools and other
12. Cookies and reports on access figures
13. Cookie consent with Borlabs Cookie
14. Rights of the data subject
15. Duration of storage of personal data

1. Information on the collection of personal data and contact details of the controller

1.1 Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data is basically all data with which you can be personally identified.

1.2. the person responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is

Stephan Goldmann
Agricolastr. 53a
80686 Munich
Munich, Germany
Phone: 49 177/608 50 17
E-mail: stephan@goldmann.de.

1.3. to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data collection when visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called “server log files”). The following data, which is technically necessary for us, is collected:

  • The website we visited
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Operating system used
  • Browser used
  • IP address used (if applicable: in anonymised form)

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

3. Making contact

If you contact us using the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us.
The data is used exclusively for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected and provided there are no statutory retention obligations to the contrary. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

4. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user’s end device. When a user accesses a website, a cookie may be stored on the user’s operating system. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR also lies in the above-mentioned purposes.

In addition, our website may use cookies that enable an analysis of the surfing behaviour of users (so-called third party cookies). Further information on the scope, purpose, legal basis and objection options can be found in the relevant sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, you may no longer be able to use all the functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings.

You can find help on the settings in the respective help menu of your browser or under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies used here are deleted again after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

5. Data processing for order processing

5.1. if you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to fulfil your order.

In some cases, we work together with external service providers to process your order. For this purpose, we must pass on the personal data required for this.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of payments, we pass on your data to the commissioned credit institution as required. If we use payment service providers, you will also be informed of this below.
The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR.

5.2. use of payment service providers

– PayPal

If you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal, payment is processed via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

We pass on your personal data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR to the extent necessary. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR due to PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
Which other data is collected by PayPal can be found in PayPal’s privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.

6. Data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 para. 1 lit. b GDPR. The scope of the data can be seen from the input form. The data you enter will be stored and used by us to process the contract.
You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to retention periods under tax and commercial law and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

7. Comment function

If you use the comment function on our website, information about the time the comment was created and the commentator name you have chosen will be saved and published on the website in addition to the content of your comment. Your IP address is also logged and stored.
The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or publishes illegal content by posting a comment. Your email address is required in order to contact you if a third party should object to your published content as unlawful. We reserve the right to delete comments if they are objected to by third parties as unlawful.

8. Use of your data for direct advertising

8.1. newsletter

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us. Only your email address is mandatory. If you make further voluntary entries, these will only be used to address you personally.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 para. 1 lit. a GDPR if the user has given consent. We obtain this consent by sending you a confirmation email containing a confirmation link after you have registered for the newsletter. If you click on this link, you also give your consent to receive the newsletter.
When you register for the newsletter, we store your IP address and the date and time of registration. The purpose of this storage is to be able to trace any possible misuse of your e-mail address.

We use the data collected by us when you register for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose. This also allows you to revoke your consent to the storage of the personal data collected during the registration process.

8.2. newsletter dispatch via MailChimp

We send our newsletter via The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/; hereinafter referred to as “Mailchimp”).
We pass on the data you enter when registering for the newsletter to Mailchimp in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in using an effective, secure and user-friendly newsletter system.
MailChimp uses this data to send the newsletter to you on our behalf and to statistically analyse the newsletter on our behalf. For this purpose, the emails contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. In this way, it is possible to track whether a newsletter message has been opened and which links have been clicked on. MailChimp thus automatically generates general, non-personal statistics on the response behaviour to newsletters.
We also have a legitimate interest in the statistical evaluation of newsletters in order to optimise our advertising communication. For this purpose, the web beacons are used in accordance with Art. 6 para. 1 lit f. GDPR (e.g. email address, time of access, IP address, browser type and operating system) and processed. This data can be used to identify the individual newsletter recipient. This data is processed by Mailchimp for the automated creation of statistics, which can be used to recognise whether a particular recipient has opened a newsletter message.
To deactivate this data analysis, you must unsubscribe from the newsletter.

It is also possible for MailChimp to use the data itself in accordance with Art. 6 para. 1 lit. f GDPR in order to determine the countries from which the recipients of the newsletter come for its own legitimate interest in the needs-based design and optimisation of the service or for market research purposes.
However, Mailchimp does not use your data itself for the purpose of contacting you or pass it on to third parties.
As a rule, your data is transferred to a MailChimp server in the USA and stored there. To protect your data in the USA, an order processing contract has been concluded with MailChimp on the basis of the standard contractual clauses of the European Commission. This data processing contract can be viewed at the following Internet address:
http://mailchimp.com/legal/forms/data-processing-agreement/.

MailChimp’s privacy policy can be viewed here:
https://mailchimp.com/legal/privacy/

8.3 WhatsApp newsletter

If you have subscribed to our WhatsApp newsletter, you will also receive it via WhatsApp.
To subscribe, we only need your mobile phone number. To subscribe to the newsletter,
save our mobile phone number in your contacts on your mobile phone and send the message “Start” to this number via WhatsApp. By doing so, you also give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR to send you our WhatsApp newsletter.

You can unsubscribe from the newsletter at any time by sending a “Stop” message via WhatsApp. We will then delete your mobile phone number from our mailing list unless you have expressly consented to further use of your data or we retain your data due to legal regulations.

9. Use of social media: Video

9.1. use of Vimeo videos

On our website, we integrate plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
If a page of our website with such a plugin is accessed, the browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. At the same time, Vimeo receives the information that your browser has accessed the corresponding page (including your IP address). This happens even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information is transmitted directly to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. As soon as you interact with one of the plugins (e.g. by clicking on the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.

This data processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR, namely your express consent.

To prevent the direct assignment of data to your Vimeo account, you must log out of Vimeo before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights in this regard and setting options to protect your privacy can be found in Vimeo’s data protection information: http://vimeo.com/privacy

The Google Analytics tracking tool is automatically integrated into videos from Vimeo that are embedded on this website. This is Vimeo’s own tracking tool, which we have no access to and which cannot be influenced by our website. Google Analytics uses “cookies” for tracking. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

This processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your express consent.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. details can be found here: https://vimeo.com/privacy

9.2. use of YouTube videos

On this website, we use the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the extended data protection mode, which, according to the provider, only starts storing user information when the video(s) is/are played. When you start playing embedded YouTube videos, the provider “YouTube” uses cookies to collect information about your user behaviour. according to “Youtube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them.

Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.a GDPR on the basis of your express consent.

You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Regardless of whether the embedded videos are played, a connection to the Google “DoubleClick” network is established each time this website is accessed, which may trigger further data processing operations without our influence.

Data may also be transmitted to the servers of Google LLC. in the USA. Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://policies.google.com/privacy?hl=de Settings for personalised advertising are possible at: https://adssettings.google.com/authenticated.

Google LLC, based in the USA, is certified for the us-European data protection agreement “EU-U.S. Data Privacy Framework”, which guarantees compliance with the data protection level applicable in the EU. You can find details here: https: //privacy.google.com/businesses/gdprcontrollerterms/

10. Online marketing

10.1. use of affiliate programmes

– Amazon affiliate programme (AmazonPartnerNet)

We participate in the affiliate programme “AmazonPartnerNet” (Amazon EU S.a.r.l., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter referred to as “Amazon”)).
We have placed adverts on our website as links that lead to offers on various Amazon websites.
For its part, Amazon uses cookies in order to be able to trace the origin of orders generated via our links. By using cookies, Amazon can recognise, among other things, that you have clicked on the partner link on our website and thus reached Amazon. We need this information to process payments between us and Amazon. If this information also contains personal data, this data is processed to protect our legitimate financial interest in receiving commission payments from Amazon. The legal basis for this is Art. 6 para. 1 lit. a GDPR, namely your express consent.
Details on the use of data by Amazon can be found in the Amazon.de privacy policy at
http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

You can block cookies by changing your browser settings.
You can also deactivate interest-based ads on Amazon via the link http://www.amazon.de/gp/dra/info

11. Tools and miscellaneous

Google Maps
We use “Google Maps” (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is used to display interactive maps and create directions. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google. When you access a web page on our website that contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data
– Date and time of the visit to the website in question,
– Internet address or URL of the website accessed,
– IP address, (start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this. If you are logged in to Google, your data will be assigned directly to your Google account. If you do not want this allocation, you must log out of Google. Google stores your data (including that of users who are not logged in) as usage profiles and analyses them. Such an evaluation is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your express consent.

If you do not want Google to collect, process or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information(https://policies.google.com/privacy?hl=de).

Google’s terms of use can be accessed here:
http://www.google.de/intl/de/policies/terms/regional.html
the terms of use for Google Maps can be accessed here:
https://www.google.com/intl/de_US/help/terms_maps.html
Google LLC, based in the USA, is certified for the us-European data protection agreement “EU-U.S. Data Privacy Framework”, which guarantees compliance with the level of data protection applicable in the EU. you can obtain further information about Google’s data protection provisions at the following Internet address:
http://www.google.de/policies/privacy/

12. Cookies and reports on access figures

We use “session cookies” from VG Wort, Munich, to measure access to texts in order to record the probability of copying. Session cookies are small units of information that a provider stores in the working memory of the visitor’s computer. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. Session cookies cannot store any other data. These measurements are carried out by Kantar Germany GmbH using the Scalable Central Measurement Method (SZM). They help to determine the likelihood of individual texts being copied for the purpose of compensating authors and publishers for their legal claims. We do not collect any personal data via cookies.

Many of our pages are equipped with JavaScript calls, which we use to report access to the collecting society Verwertungsgesellschaft Wort (VG Wort).

It is also possible to use our website without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

12.1. privacy policy for the use of the Scalable Centralised Measurement System

Our website and our mobile website use the “Scalable Central Measurement Method” (SZM) of Kantar Germany GmbH to determine statistical parameters for determining the copy probability of texts.

Anonymous measurement values are collected. To recognise computer systems, the access number measurement alternatively uses a session cookie or a signature that is created from various automatically transmitted information from your browser. IP addresses are only processed in anonymised form.

The procedure was developed with data protection in mind. The sole aim of the procedure is to determine the copy probability of individual texts.

At no time are individual users identified. Your identity is always protected. You will not receive any advertising via the system.

Our website uses the cookie consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection-compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

14. Rights of the data subject

14.1. the applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

– Right to information in accordance with Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved. meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;

– Right to rectification pursuant to Art. 16 GDPR:
You have the right to obtain without undue delay the rectification of inaccurate data concerning you and/or the completion of your incomplete data stored by us; the rectification or completion must be carried out without undue delay.

– Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you dispute, is being verified, if you refuse to have your data erased due to unauthorised data processing and instead request the restriction of the processing of your data, if you require your data for the establishment, exercise or defence of legal claims after we no longer require this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

– Right to erasure pursuant to Art. 17 GDPR:
You have the right to obtain the erasure of your personal data without undue delay if the requirements of Art. 17 para. 1 GDPR are met. However, this right to erasure does not exist in particular – not conclusively – if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims

– Right to information in accordance with Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

– Right to data portability in accordance with Art. 20 GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, where technically feasible;

– Right to cancellation pursuant to Art. 7 para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.
You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

– Right to lodge a complaint pursuant to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

14.2. right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up your interests.
If you make use of this right to object, we will stop processing your data unless there are demonstrably overriding compelling legitimate grounds for termination or if further processing serves the exercise or defence of legal claims.

15. Duration of storage of personal data

The duration of the storage of personal data depends on the statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required for the fulfilment or initiation of a contract and/or if we no longer have a legitimate interest in continuing to store it.