Status: 20.10.2025
1. Responsible party
HighEnd Computer GmbH
Oskar-Klumpp-Str. 16, 72135 Dettenhausen, Deutschland
E-Mail: info@highend-computer.de
Phone: 0156 79630356
Website: https://highend-computer.de/
2. Purposes & legal bases of processing
We process personal data for the following purposes (Art. 6 GDPR):
- Shop / Order / Customer account: Contract fulfillment and pre-contractual measures (Art. 6 para. 1 b).
- Payment: Processing via payment services (Art. 6 para. 1 b).
- Purchase on account (creditworthiness): Checking payment security (Art. 6 para. 1 f); legal obligations where applicable (Art. 6 para. 1 c).
- Shipping/logistics (DHL/freight forwarding): Delivery (Art. 6 (1) b).
- Support/RMA/Warranty: Contract processing (Art. 6 para. 1 b).
- IT security/logs: Operational security, prevention of misuse (Art. 6 para. 1 f).
- Marketing/analysis: only with consent (Art. 6(1)(a)).
3. Recipients / Categories of recipients
- Hosting & Technology: H22 GmbH & Co. KG, Dischingerweg 17, 72070 Tübingen, Germany. Server location: Germany/EU. GDPR pursuant to Art. 28 GDPR; no third-country transfers within the scope of hosting.
- Payment services: e.g., PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
- Logistics: DHL Paket GmbH and, if applicable, shipping partners (name available upon request).
3a. Website hosting (order processing)
Our website is hosted by H22 GmbH & Co. KG. Processing takes place in data centers in Germany (EU). We have a data processing agreement with the provider in accordance with Art. 28 GDPR. (Server location: DE)
4. Cookies, Consent & CookieYes
We use essential cookies (e.g., shopping cart, login). Non-essential services (e.g., analysis/marketing) are only activated after you have given your consent. Legal basis: § 25 TTDSG (storage/retrieval on end devices) and Art. 6 (1) a GDPR (consent).
We use the WordPress plugin “CookieYes | GDPR Cookie Consent” as our consent management platform (CMP). The banner allows consent by category, logs consent decisions, and sets a consent cookie to store your status (e.g., cookieyes-consent/cky-). Provider: CookieYes Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. (UK with adequacy decision – consent logs can be processed locally or by the provider, depending on the configuration.) cookieyes.com+2WordPress.org+2
Withdraw/change consent: You can adjust your selection here at any time:
5. Server log files
When you visit our website, we process your IP address (truncated), date/time, URL, referrer, and user agent. Purpose: operational security, error analysis (Art. 6 (1) f). Storage period is generally 7–14 days, longer only if necessary.
6. Customer account & orders
Customer accounts are voluntary; they can be deleted at any time (provided there are no retention obligations). We store order/invoice data for 6 or 10 years in accordance with the German Commercial Code (HGB) and Fiscal Code (AO).
7. Payment
- Prepayment/bank transfer: Processing of your order/invoice data for payment processing (Art. 6 (1) b).
- PayPal: Transfer of necessary data to PayPal for the purpose of executing the payment (Art. 6 para. 1 b). (PayPal's privacy policy applies.)
- Purchase on account & credit rating: If you select invoice, we will transmit identity/credit rating data to [insert specific credit agency] to decide on the payment method (Art. 6 (1) f). Upon request, we will check manually.
8. Shipping information
For delivery purposes, we will forward your name, delivery address, and, if applicable, your email address/telephone number to DHL/the shipping company for shipping/appointment notifications (Art. 6 (1) b).
9. Contact / Support / RMA
When you contact us by email/form, we process your details in order to deal with your request (Art. 6 (1) b/f). Storage periods depend on the process; support cases relating to contracts may be subject to retention obligations.
10. Social media links
Our pages contain only links to social media profiles (e.g., Facebook). When you simply visit our pages, no data is transferred to these providers. When you visit the platforms, the privacy policies of the respective providers apply.
11. Storage period
We store personal data only for as long as it is necessary for the purposes or as required by law (typically 6/10 years for tax-related documents). After that, we delete/anonymize the data.
12. Transfers to third countries
- Web hosting: no transfers to third countries; processing in Germany/EU.
- Payment services/other tools: Where transfers to third countries are made (e.g., support access/sub-processors), we use appropriate safeguards (in particular standard contractual clauses; in the case of the UK/EU-US, adequacy decision/DPF where applicable).
13. Your rights
You have the right to information, correction, deletion, restriction, data portability, and objection to processing based on Art. 6 (1) f GDPR and to direct marketing. You can revoke your consent at any time with effect for the future (Art. 7 (3) GDPR).
14. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is, among others:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI)
Postal address: P.O. Box 10 29 32, 70025 Stuttgart
Street address: Lautenschlagerstraße 20, 70173 Stuttgart
Phone: +49 711 615541-0 · Email: poststelle@lfdi.bwl.de · Website: https://www.baden-wuerttemberg.datenschutz.de/. bfdi.bund.de+1
15. Obligation to provide / Automated decisions
The provision of the data required for ordering/delivery/payment is mandatory; without it, we cannot conclude a contract. Automated decisions do not take place as a matter of principle; exception: automated decision on the payment method invoice (credit check). Upon request, we will check manually.