Privacy policy of highQ Computerlösungen GmbH
1. Data protection at a glance
General information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You will find the contact details of the responsible entity below in this privacy policy and in the legal notice.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may include, for example, data that you enter into a contact form, send to us by email or provide when subscribing to a newsletter.
Other data is collected automatically or with your consent when you visit the website by our IT systems or the services we use. This includes, in particular, technical data such as IP address, browser, operating system, time of page access and pages visited.
What do we use your data for?
Some of the data is collected to ensure the technically error-free and secure provision of the website. We use other data to process inquiries, send newsletters and – in accordance with the following information – for statistical analysis of our website and to measure the success of our Google Ads advertising.
Your rights
Within the framework of the statutory requirements, you have in particular the right to information, correction, deletion and restriction of the processing of your personal data. You may also have a right to data portability and a right to object to certain processing activities.
If processing is based on your consent, you can withdraw this consent at any time with effect for the future.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
2. General information and mandatory information
Data protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is processed. This privacy policy explains what data we collect, for what purposes we use it and on what legal basis the processing takes place.
Please note that data transmission over the Internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is technically impossible.
Responsible entity
The responsible entity for data processing on this website is:
highQ Computerlösungen GmbH
Christian Disch, Thomas Hornig
Schwimmbadstraße 26
79100 Freiburg
Phone: 0049 761 70 60 40
Email: info(at)highq.de
The responsible entity is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Data protection officer
We have appointed a data protection officer for our company.
Schwimmbadstraße 26
79100 Freiburg
Phone: 0049 761 70 60 40
Email: datenschutz(at)highq.de
Data transfer to third countries
A large proportion of the systems used on this website are operated on our own servers or by service providers with server locations in Germany. However, for individual services, particularly services from Google and Atlassian, processing of personal data outside the European Union or the European Economic Area cannot be completely ruled out.
If data is transferred to a third country, this is done on the basis of the statutory mechanisms provided for this purpose. These may include, in particular, an adequacy decision by the European Commission, a company's participation in the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
Withdrawal of your consent
Many data processing operations are only permitted with your consent. You can withdraw consent that you have already given at any time with effect for the future. The lawfulness of the processing carried out until withdrawal remains unaffected.
Right to object under Art. 21 GDPR
If the processing of your personal data is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.
If personal data is processed for the purpose of direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising at any time.
Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. This applies in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation.
Right to data portability
Under the statutory requirements, you have the right to receive data that we process automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format or to have it transferred to another responsible entity, insofar as this is technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection in particular by the fact that the address line of your browser begins with “https://”.
Information, correction and deletion
Within the framework of the applicable statutory provisions, you have the right at any time to obtain information about your stored personal data and, where applicable, the right to have this data corrected or deleted.
Right to restriction of processing
Under the statutory requirements, you have the right to request the restriction of the processing of your personal data. This applies in particular in the following cases:
- if you dispute the accuracy of the data we have stored,
- if the processing is unlawful and you request restriction instead of deletion,
- if we no longer need the data, but you need it to assert, exercise or defend legal claims,
- if you have objected to processing and it has not yet been determined whose interests prevail.
3. Hosting and data collection on this website
Hosting on our own servers
The website and the directly associated technical infrastructure are operated by us on our own servers. Unless an external service provider is expressly named in this privacy policy, the data generated in connection with providing the website is not transferred to an external hosting provider.
Server log files
When our website is accessed, technically necessary information is automatically processed in server log files. This may include, in particular, the following data:
- browser type and browser version,
- operating system used,
- referrer URL,
- hostname of the accessing device,
- date and time of the server request,
- IP address,
- pages and files accessed.
Processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free, secure and stable provision of our website.
Cookies and similar technologies
Our website may use cookies and similar technologies. Cookies are small data sets that are stored on your device or can access information already stored there.
Technically necessary cookies or access to your device are used insofar as this is necessary to provide a digital service expressly requested by you.
If cookies or comparable technologies are used for analysis, marketing or other purposes that are not technically necessary, this generally takes place only after you have given your consent. The legal bases are Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
You can change or withdraw your consent at any time using the cookie or data protection settings provided on our website.
Contact form
If you send us an inquiry via a contact form, we process the data you enter to process your inquiry and for any follow-up questions.
We use services from rapidmail for the technical processing of our contact forms. The provider is Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany.
The data processed via the forms is stored on servers in Germany.
Processing is based on Art. 6 para. 1 lit. b GDPR insofar as your inquiry serves to initiate or perform a contract. In all other cases, processing is based on our legitimate interest in efficiently processing inquiries pursuant to Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR.
Inquiries by email or telephone
If you contact us by email or telephone, we process the personal data resulting from your inquiry to process your request and for any follow-up questions.
The legal basis is Art. 6 para. 1 lit. b GDPR insofar as the inquiry is related to a contract or pre-contractual measures. In all other cases, processing is based on Art. 6 para. 1 lit. f GDPR.
4. Analytics and online marketing
Matomo
We use the open-source web analytics software Matomo on this website. Matomo is used to statistically evaluate the use of our website and to technically and substantively optimize our services.
Matomo is operated by us on our own servers. The analytics data collected with Matomo is therefore not transmitted to Matomo or the manufacturer InnoCraft Ltd.
Depending on the configuration, the following data in particular may be processed:
- shortened or anonymized IP address,
- pages accessed,
- date and time of page views,
- referrer URL,
- browser type and operating system,
- screen resolution and technical device information,
- time spent on the website,
- navigation within our website.
The IP address is shortened or anonymized in such a way that direct attribution to a specific person is prevented or made considerably more difficult.
If Matomo is used without cookies and without comparable access to your device, processing is based on our legitimate interest in the statistical analysis and optimization of our website pursuant to Art. 6 para. 1 lit. f GDPR.
If Matomo is used with cookies or other technologies requiring consent, processing takes place exclusively after your consent on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
Matomo data is not combined with data from Google Analytics. Google Analytics or GA4 is not used on this website.
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used for the technical management and deployment of tags on our website. In particular, it is used to control the Google Ads conversion tracking we use.
The Tag Manager itself is not used for independent analysis of user behavior. However, technical data such as the IP address may be transmitted to Google when it is used. In addition, the services integrated via the Tag Manager may themselves process personal data and use cookies or similar technologies.
If services requiring consent are activated via Google Tag Manager, they are only activated on the basis of your corresponding consent. The legal bases are Art. 6 para. 1 lit. a GDPR and, insofar as information is stored on or read from your device, § 25 para. 1 TDDDG.
The transfer of data to Google LLC in the USA cannot be ruled out. Google bases corresponding data transfers, among other things, on the data protection transfer mechanisms provided for this purpose.
Google Ads and conversion tracking
We use Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in Google Search and, where applicable, other Google services. We use Google Ads conversion tracking to measure the success of these advertisements.
If you reach our website via a Google advertisement and, after giving your consent, perform an action defined by us, such as submitting an inquiry or accessing a specific page, Google and we can determine that this action occurred in connection with an advertisement.
The following data in particular may be processed:
- IP address,
- information about browser and device,
- pages accessed,
- time of access,
- information about clicked advertisements,
- information about conversion actions performed,
- cookies and other technical identifiers.
As a rule, we receive statistical analyses from Google about the success of our advertising measures and not clear data that is directly intended to identify individual users.
The use of Google Ads conversion tracking is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be withdrawn at any time with effect for the future via the cookie or data protection settings on our website.
The processing or transfer of personal data to Google LLC in the USA cannot be ruled out. The EU-US Data Privacy Framework applies, among other things, to data transfers to appropriately certified US companies. Additional suitable safeguards such as standard contractual clauses may also be used.
5. Newsletter
Newsletter and rapidmail
If you subscribe to our newsletter, we process in particular your email address and, where applicable, other voluntarily provided data.
We use rapidmail to send and manage our newsletters. The provider is Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany.
The data processed via rapidmail for newsletter distribution is stored on servers in Germany.
Registration is generally carried out using the double opt-in procedure. After registering, you will receive an email in which you must confirm your subscription. The verification data generated for this purpose may be stored in order to document the proper registration.
Rapidmail also enables statistical analysis of our newsletters. This may include processing information about whether a newsletter was opened and which links were clicked.
Processing for newsletter distribution and the associated performance measurement is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.
You can withdraw your consent at any time and unsubscribe from the newsletter. You will find a corresponding unsubscribe link in every newsletter.
The data stored for newsletter subscriptions is generally stored until you unsubscribe and is then deleted from the active newsletter distribution list, unless another legal basis or statutory retention obligation justifies further storage.
We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR.
6. Plugins, external content and technical services
YouTube
Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When a YouTube video is loaded or played, a connection to Google or YouTube servers may be established. In particular, your IP address, browser and device information, and information about the page you visit may be processed.
If you are simultaneously logged into a Google or YouTube account, Google may be able to associate the visit with your user account.
If embedding YouTube requires consent, processing only takes place after your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can withdraw your consent at any time via the cookie or data protection settings.
The transfer of data to the USA cannot be ruled out.
Google reCAPTCHA
We use Google reCAPTCHA to protect our forms against abusive automated entries and spam. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA analyzes technical characteristics and behavior when using the website to determine whether an entry is likely made by a human or automatically. This may include processing IP address, browser information, device information, time and duration of access, and interactions with the website.
The transfer of personal data to Google or to servers outside the European Union cannot be ruled out.
Processing is carried out to protect our website and forms against misuse and spam. If consent is required for this purpose, activation is based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Otherwise, processing may be based on our legitimate interest in the security of our systems pursuant to Art. 6 para. 1 lit. f GDPR.
digi·access – accessibility functions
To improve the digital accessibility of our website, we use the digi·access accessibility tool. The provider is digi·access GmbH, Quarzstraße 4, 51371 Leverkusen, Germany.
The script used adds technical functions to our website that are intended to make it easier for people with different impairments to use the website. These include, for example, adjustments for keyboard operation, screen readers and the visual presentation of content.
When loading and using the service, technically necessary information such as IP address, browser information, device information and pages accessed may be processed. According to the provider, the service is hosted in Germany.
The service is used based on our legitimate interest in providing our digital services as accessible and barrier-free as possible pursuant to Art. 6 para. 1 lit. f GDPR. If individual functions legally require consent, the corresponding processing only takes place after this consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
Locally embedded fonts
The fonts used on our website are provided locally on our own servers. When our website is accessed, no connection to Google Fonts or Google servers is therefore established to load fonts.
7. Our own services
Handling applicant data
We offer you the opportunity to apply to us, for example by email or via an online application form. In doing so, we process the personal data you provide insofar as this is necessary to conduct the application process.
This may include, in particular, contact and communication data, application documents and information from interviews.
The legal basis is in particular § 26 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR. If you give us consent for further processing, this processing is based on Art. 6 para. 1 lit. a GDPR.
We use the applicant management system of softgarden e-Recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, to conduct application procedures.
We have concluded a data processing agreement with the provider. Within our company, only those persons involved in conducting the application process have access to applicant data.
If no employment relationship is established, applicant data is generally deleted no later than six months after completion of the application process, unless statutory reasons or consent given by you justify longer storage.
Support inquiries and Jira
We currently still use the Jira software provided by Atlassian to process support inquiries.
If you send a support inquiry to a support address provided by us or use our support portal, your email address, name, inquiry, technical information contained therein and other data voluntarily provided by you may be processed.
If you use a user account, the data required to set up and manage this account may also be processed.
For the Jira environment we use, European data residency is provided for, insofar as supported by Atlassian for the respective data. However, Atlassian is an international provider. Processing or access from countries outside the European Union or the European Economic Area therefore cannot be completely ruled out in every case.
We are currently reviewing the replacement of Jira with an alternative support solution based and processing data in Germany or within the European Union. Until this changeover is completed, we will continue to use Jira to process support inquiries and limit the data processed there to what is necessary for this purpose.
Processing is based on Art. 6 para. 1 lit. b GDPR insofar as it is necessary to fulfill contractual obligations or carry out pre-contractual measures. In addition, processing is based on our legitimate interest in the structured and efficient processing of support inquiries pursuant to Art. 6 para. 1 lit. f GDPR.
We have concluded the required data protection agreements with Atlassian for data processing. According to Atlassian, suitable transfer mechanisms are available for international data transfers.
8. Current status of this privacy policy
We reserve the right to amend this privacy policy if the services we use, technical procedures or the legal framework change.
As of: August 2026