Privacy Policy for Partners

This privacy policy informs partners about how Highcovery processes personal data when using our Partner Dashboard at dashboard.highcovery.com to manage their businesses and products and connect them to our platform. This statement applies exclusively to partners and outlines the data collection and processing within the Partner Dashboard.

For comprehensive information on the processing of personal data in connection with the use of our website and mobile applications, please refer to our Web & App Privacy Policy.

I. Data Controller

The data controller according to the GDPR is:
Highcovery
Sportstraße 6, 50737 Cologne
Email: leonardo@highcovery.com
Phone: +49 221 27645575

II. Purposes and Legal Basis for Processing

Processing of Contact Data during Registration

• - First and last name

• - Email address

• - Company

• - Company address (including verification documents)

• - Phone number

Legal basis: Art. 6(1)(b) and (a) GDPR

Verification of Business Data

To prevent misuse, the business address is manually verified using business registration or similar documents.
Legal basis: Art. 6(1)(b) GDPR

Processing of Business Data in the Dashboard

To display your data in the app/website, we process the following:

• - Type, name, URL, address, opening hours

• - API-based verification via locationiq.com

• - Images, active/inactive status, delivery regions

• - Name, type, price, THC content, genetics

• - Product images, attributes, status

Legal basis: Art. 6(1)(b) GDPR

Usage Data in the Dashboard

• - IP address

• - Device and browser

• - Cookies (e.g., “hc_session”)

Legal basis: Art. 6(1)(f) GDPR

Cookies and Tracking

• - Essential cookies: e.g., for login session

• - Matomo: anonymous usage statistics

Legal basis: Art. 6(1)(f) GDPR (essential) / Art. 6(1)(a) GDPR (tracking)

III. Data Transfer to Third Countries

Data transfers to third countries occur only with consent or when contractually necessary. EU Standard Contractual Clauses apply.

IV. Data Retention

Data is stored only as long as legally or contractually required and will then be deleted – unless explicit consent or a legitimate interest exists.

V. Rights of the Data Subject

• - Right of access (Art. 15 GDPR)

• - Right to rectification (Art. 16 GDPR)

• - Right to erasure (Art. 17 GDPR)

• - Right to restriction of processing (Art. 18 GDPR)

• - Right to withdraw consent (Art. 7(3) GDPR)

• - Right to object (Art. 21 GDPR)