Data Privacy

Privacy policy of www.hyghstreet.com

This application collects personal data from its users.

This document can be printed out for storage purposes using the ‘Print’ command in the browser.

Provider and responsible party

 

Hyghstreet

c/o beeclever GmbH

Friedrich-Mohr-Str. 1

56070 Koblenz

E-mail address of the provider: info@hyghstreet.com

Types of data collected

 

Among the types of Personal Data that this Application collects, by itself or through third parties, there are Tracker; Usage Data; number of Users; session statistics; city; browser information; device information; first name; last name; phone number; email address.

Full details of each type of personal data processed are provided in the dedicated sections of this Privacy Policy or selectively through explanatory texts displayed prior to data collection.

 

Personal data may be provided voluntarily by the user or, in the case of usage data, collected automatically when this application is used.

 

Unless otherwise specified, the provision of all data requested by this application is mandatory. If the User refuses to provide the Data, this Application may not be able to provide its services to the User. In cases where this Application expressly states that the provision of Personal Data is optional, Users may choose not to provide such Data without any consequences for the availability or functionality of the Service.

 

Users who are unclear about which personal data is mandatory can contact the provider.

 

Any use of Cookies - or other tracking tools - by this Application or third-party service providers used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy.

Users are responsible for all personal data of third parties that is obtained, published or passed on through this application.

Type and location of data processing

 

Processing methods

The provider processes the personal data of users in a proper manner and takes appropriate security measures to prevent unauthorised access and the unauthorised forwarding, modification or destruction of data.

 

Data processing is carried out using computers or IT-based systems in accordance with organisational procedures and practices that are specifically geared to the stated purposes. In addition to the Data Controller, other parties may operate this Application and have access to the Data, either internally (human resources, sales, marketing, legal department, system administrators) or externally (such as providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), if necessary, appointed by the Data Controller as Data Processors. An up-to-date list of these parties can be requested from the provider at any time.

Location

The data is processed at the provider's branch and at all other locations where the offices involved in the data processing are located.

 

Depending on the user's location, data transfers may involve transferring the user's data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section with detailed information on the processing of personal data.

Storage duration

Unless otherwise specified in this document, personal data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period if necessary due to a legal obligation to be fulfilled or based on the user's consent.

Purposes of processing

Personal data about the user is collected so that the provider can provide the service and also fulfil its legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), detect malicious or fraudulent activity. In addition, data is collected for the following purposes: Analytics and administration of data collection and online surveys.

 

Users can find more detailed information on these processing purposes and the personal data used for each purpose in the ‘Detailed information on the processing of personal data’ section of this document.

Detailed information on the processing of personal data

Personal data is collected for the following purposes when using the following services:

 

Analytics

With the services listed in this section, the provider can monitor and analyse data traffic and track the behaviour of users.

Google Analytics 4 (Google LLC)

 

Google Analytics 4 is a web analytics service provided by Google LLC (‘Google’). Google utilises the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualise and personalise the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in a data centre or on a server. Users can find out more by consulting Google's official documentation.

 

To understand Google's use of data, consult the Partner Guidelines and the Business Data page.

 

Personal Data processed: Number of users; Usage data; Session statistics; Trackers.

 

Processing location: United States - Privacy Policy - Opt Out.

 

Google Analytics - Collection of granular location and device data (Google LLC)

 

Google Analytics on this application has enabled granular data collection that captures location and device data per region. It allows the owner to create and analyse user reports based on these metrics.

 

Personal Data processed: Number of users; browser information; device information; usage data; session statistics; city; tracker.

 

Processing location: United States - Privacy policy.

 

 

Management of data collection and online surveys

 

This type of service allows this Application to manage the creation, provision, administration, distribution and analysis of online forms and surveys in order to collect, store and reuse data from all responding Users.

 

The personal data collected depends on the information requested and provided by users in the corresponding online form.

 

These services can be integrated with a variety of third-party services to enable the provider to take further steps with the processed data - e.g. managing contacts, sending messages, analytics, advertising and payment processing.

 

Klaviyo Forms

 

Klaviyo Forms is a form builder (for creating online forms) and a data collection platform provided by Klaviyo Inc.

 

In order to provide the service offered via Klaviyo, the provider typically shares information about (purchasing) users, such as contact details and purchase history. An explanation of the extent of such sharing can be viewed under ‘Processed personal data’.

 

Processed personal data: E-mail; surname; telephone number; first name.

Cookie Policy

This application uses trackers. Further information can be found in the cookie policy.

 

Further information for users

 

Legal bases of the processing

 

The provider may only process users' personal data if one of the following points applies:

 

– Users have given their consent for one or more specific purposes.

– the data collection is necessary for the fulfilment of a contract with the user and/or for pre-contractual measures;

– the processing is necessary for the fulfilment of a legal obligation to which the provider is subject;

– the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider;

– processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party.

 

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.

Further information on the storage period

Unless otherwise specified in this document, personal data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period if necessary due to a legal obligation to be fulfilled or based on the user's consent.

 

Therefore, the following applies:

 

Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.

 

Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfil these purposes. Users can obtain more information about the legitimate interests of the Owner in the relevant sections of this document or by contacting the Owner.

 

Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfil a legal obligation or by order of an authority.

 

After the retention period has expired, personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired.

 

The rights of users under the General Data Protection Regulation (GDPR)

Users can exercise certain rights in relation to their data processed by the provider.

 

In particular, users have the right to do the following to the extent permitted by law:

 

– Revoke consent at any time. If the user has previously consented to the processing of personal data, they can withdraw their consent at any time.

– object to the processing of their data. The user has the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.

– receive information about their data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.

– have it checked and corrected. The user has the right to check the accuracy of their data and to request that it be updated or corrected.

– request the restriction of the processing of their data. Users have the right to restrict the processing of their data. In this case, the provider will not process the data for any purpose other than storage.

– request the deletion or other removal of personal data. Users have the right to demand that the provider erase their data.

– receive your data and have it transferred to another controller. The user has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.

– lodge a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Users also have the right to be informed of the legal basis for the transfer of data abroad or to an international organisation governed by international law or established by two or more countries, such as the UN, and of the security measures taken by the provider to protect their data.

Details on the right to object to processing

If personal data is processed in the public interest, in the exercise of an official authority vested in the provider or to protect the legitimate interests of the provider, the user may object to this processing by providing a justification relating to their particular situation.

 

Users are informed that they can object to the processing of their personal data for direct marketing purposes at any time free of charge and without giving reasons. If the user objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Users can find out whether the provider processes personal data for direct marketing purposes in the relevant sections of this document.

How to exercise the rights

All requests to exercise user rights may be addressed to the Owner using the contact details provided in this document. These requests can be made free of charge and will be answered by the Owner as soon as possible, at the latest within one month, providing Users with the information required by law. Any rectification or erasure of personal data or restriction of processing shall be notified by the Owner to all recipients to whom personal data have been disclosed, if any. Unless this proves impossible or involves a disproportionate effort. The provider shall inform the user of these recipients if the user so requests.

 

Further information on the collection and processing of data

 

Legal measures

The User's personal data may be processed by the Provider for the purposes of enforcing rights within or in preparation for legal proceedings arising from the improper use of this Application or the associated services.

 

The user declares that he is aware that the provider could be obliged by the authorities to disclose personal data.

Further information about the user's personal data

In addition to the information contained in this privacy policy, this Application may provide the User with additional contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance

This Application and third-party services may collect files for operation and maintenance purposes that record the interaction taking place via this Application (system logs) or use other personal data (e.g. IP address) for this purpose.

Information not contained in this privacy policy

Further information on the collection or processing of personal data can be requested from the provider at any time using the contact details provided.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.

 

If changes affect the use of data based on the user's consent, the provider will - if necessary - obtain new consent.

 

 

Definitions and legal notes