Privacy Policy

Data protection and privacy

The person responsible for data processing is:

Farbod KALANTARI SAGHAFI
Lascygasse 20/13
1170
Vienna, Austria
+ 43-720-111006
info@carpet-plaza.com

Thank you for your interest in our online shop. The protection of your privacy is very important to us. In the following we will inform you in detail about the handling of your data.

Access to data and hosting

You can visit our website without providing any information about yourself. Every time a website is accessed, the web server only automatically saves a so-called server log file. contains the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call.

These access data are only evaluated in order to guarantee the smooth operation of the website and to improve our offer. According to Art. 6 Para. 1 S. 1 lit. f GDPR to safeguard our predominantly legitimate interests in the correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the website.

1.Third Party Hosting Services

As part of the processing on our behalf, a third-party provider provides us with the hosting and presentation of the website. This serves to protect our predominantly legitimate interests in a correct presentation of our offer. All data that is collected when using this website or in the forms provided in the online shop as described below are processed on their servers. Processing on other servers takes place only within the framework explained here.

This service provider is located in a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing, establishment of contact

We collect personal data when you provide it to us as part of your order or when you contact us (e.g. via the contact form or the e-mail address). Mandatory fields are marked as such, as in these cases we need the data to process the contract or your contact and you cannot complete the order or send the contact without their details. You can find out which data is collected from the respective input forms. We use the data you provide in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for contract processing and processing your inquiries. After the contract has been fully processed, your data will be restricted for further processing and deleted after any tax and trade retention periods have expired, unless you have expressly consented to the further use of your data or we reserve the right to add further data which is legally permissible and about which we inform you in this declaration.

3. Data transfer

To fulfill the contract according to Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected additional payment service. In some cases, the selected payment service providers also collect this data themselves when you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies.

We use payment service providers and shipping service providers based in a country outside the European Union. The transfer of personal data to these companies takes place only in the context of the performance of the contract.

Data transfer to shipping service providers

If you have given us your express consent during or after your order, we will give you your consent in accordance with Art. 6 Para. 1 S. 1 lit. As GDPR, you forward your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery to notify or coordinate the delivery.

The consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address given below. After the revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use further data that are legally permissible and about which we Inform you about this explanation.

4. Email newsletters

E-mail advertising with registration for the newsletter

If you register for our newsletter, we will use the data required or provided separately by you to regularly send you our e-mail newsletter with your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time and you can either send a message to the contact option described below or use a link provided in the newsletter. After unsubscribing, we will delete your e-mail address, unless you have expressly consented to the further use of your data or we reserve the right to use additional data that is legally permissible and about which we inform you in this Declaration will inform.

As part of processing on our behalf, the newsletter is sent by a service provider to whom we will forward your email address.

This service provider is located in a country of the European Union or the European Economic Area.

5. Use of data for payment processing

Identity and credit checks when choosing Klarna payment services

If you decide to use Klarna’s payment services, we ask for your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR that we may transmit the data required to process the payment as well as an identity and credit check to Klarna. In Germany, the credit agencies named in Klarna’s privacy policy can be used for identity and credit checks.

Klarna uses the information received about the statistical probability of default in payment for a balanced decision on the establishment, implementation or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the contact details given below. As a result, we may no longer be able to offer you certain payment options. Klarna can revoke your consent to this use of personal data at any time.

Hire purchase

When selecting the payment method “hire purchase” and granting the data protection consent required for this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, personal data (first name, last name, address, email, telephone number, date of birth, IP address, gender) together with the data required for transaction processing (article, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time) for the purpose of processing this payment method to our partner Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm.

To check the identity or creditworthiness of the customer, our partner carries out queries and information from publicly accessible databases and credit agencies. The providers from whom information and, if necessary, creditworthiness information is obtained on the basis of mathematical-statistical procedures, as well as further details on the processing of your data after transmission to our partner Klarna Bank AB (publ), please refer to their data protection declaration, which you can find here:
http: / /cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Our partner Klarna Bank AB (publ) uses the information received about the statistical probability of default in payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. You have the opportunity to express your point of view by contacting our partner Klarna Bank AB (publ) and to contest the decision.

The consent given to the transfer of data during the ordering process can be revoked at any time, even without giving reasons, with effect for the future.

6. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order has been placed.

This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in optimal marketing by enabling safe shopping in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str.15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found here.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security issues. The log files are automatically deleted no later than 90 days after creation.

Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered to use a product is automatically checked using a neutral parameter, the email address hashed by a cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted for Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.

This is for the fulfillment of our and Trusted Shops ‘overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services according to Art. 6 para. 1 sentence 1 lit. f GDPR required. Further details, including how to object, can be found in the Trusted Shops data protection declaration linked above and in the Trustbadge.

7. Online Marketing

Google Ads Remarketing

We use Google Ads to promote this website in Google search results and on third party websites. If you give us your consent in accordance with Art. 6 Para. 1 S. 1 lit. The so-called remarketing cookie is set by Google as GDPR when you visit our website. This automatically enables interest-based advertising using a pseudonymous CookieID and based on the pages you have visited. After the purpose and the end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted.

Further data processing will only take place if you have agreed with Google that your web and app browser history will be linked to your Google account by Google and that the information from your Google account will be used to personalize ads that you post on the web find see. In this case, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing if you are logged in to Google while visiting our website. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups.

Google Ads is an offer from Google Ireland Limited, a company under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). As far as information from Google is transmitted to servers in the USA and stored by Google, the American company Google LLC is certified according to the EU-US Privacy Shield.

A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, this has established an appropriate level of data protection for companies that are certified under the Privacy Shield.

You can revoke your consent at any time with future effect by deactivating the remarketing cookie via this link. In addition, you can receive information about the setting of cookies from the digital Advertising Alliance and make settings for this.

Google Maps

This website uses Google Maps to visually display geographic information. Google Maps is a service from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our predominantly legitimate interests in an optimized presentation of our offer and easy access to our locations in accordance with Art. 6 Para. 1 lit. f) GDPR.

When using Google Maps, Google transmits or processes data about the use of the map functions by website visitors, including in particular the IP address and the location data. We have no influence on this data processing.

As far as information from Google is transmitted to servers in the USA and stored by Google, the American company Google LLC is certified according to the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, this has established an appropriate level of data protection for companies that are certified under the Privacy Shield.

To deactivate the Google Maps service and thus prevent data transmission to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot be used or only to a limited extent.

Further information on data processing by Google can be found in Google’s data protection information. The terms of use for Google Maps contain detailed information on the map service.

The data processing takes place on the basis of an agreement between co-responsible persons according to Art. 26 GDPR, which you can view here.

Google Fonts

The script code “Google Fonts” is integrated on this website. Google Fonts is an offer from Google Ireland Limited, a company under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to strengthen our predominantly legitimate interests in a uniform presentation of the content on our website in accordance with Art. 6 Paragraph 1 lit. f) GDPR.

In this context, a connection is established between the browser you are using and the Google servers. This gives Google the knowledge that our website was accessed via your IP address.

As far as information from Google is transmitted to servers in the USA and stored by Google, the American company Google LLC is certified according to the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, this has established an appropriate level of data protection for companies that are certified under the Privacy Shield.

Further information on data processing by Google can be found in Google’s data protection information.

BingAds remarketing

We use BingAds to promote this website in the search results of Bing, Yahoo and MSN as well as on third party websites. If you give us your consent in accordance with Art. 6 Para. 1 S. 1 lit. With a GDPR, a cookie is automatically set when you visit our website, which automatically enables interest-based advertising using a pseudonymous CookieID and based on the pages you have visited. After the purpose and the end of the use of BingAds Remarketing by us, the data collected in this context will be deleted.

BingAds is an offer from Microsoft Corporation (www.microsoft.com). Microsoft Corporation is headquartered in the USA and is certified according to the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, this has established an appropriate level of data protection for companies that are certified under the Privacy Shield.

You can revoke your consent at any time with future effect by deactivating the remarketing cookie via this link. In addition, you can receive information about the setting of cookies from the digital Advertising Alliance and make settings for this.

8. Social media plug-ins

Use of social plugins from Facebook, Google, Instagram, Pinterest with the “2-click solution”

So-called social plugins (“plugins”) are used by social networks on our website. In order to increase the protection of your data when you visit our website, the plugins are integrated into the page with a so-called “2-click solution”. This integration ensures that when you visit a page on our website that contains such plugins, no connection is made to the servers of the respective social network. Only when you activate the plugins does your browser establish a direct connection to the servers of the respective social network.

The content of the respective plugin is then transferred directly to your browser by the associated provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you interact with the plugins, for example click on the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and shown to your contacts there. This serves to safeguard our predominantly justified interests in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

The purpose and scope of the data collection and the further processing and use of the data by the provider as well as a contact option and the associated rights and setting options for protecting your privacy can be found in the provider’s data protection information:

https://www.facebook.com/policy.php
https://developers.google.com/+/web/buttons-policy
https://help.instagram.com/155833707900388
https://about.pinterest.com/de/privacy-policy

Youtube video plugins

Third-party content is included on this website. This content is made available by Google (“provider”).

YouTube is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

The extended data protection setting is activated for videos from Youtube that are integrated on our site. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your related rights and setting options to protect your privacy can be found in Google’s data protection information

https://policies.google.com/privacy.

Our online presence on Facebook, Google, Instagram, Pinterest

Our presence on social networks and platforms serves for better, active communication with our customers and interested parties. There we provide information about our products and current special promotions.

When you visit our online presence on social media, your data can be automatically collected and saved for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from this data. These can be used to e.g. To place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your device. The visitor behavior and the interests of the user are stored in these cookies. According to Art. 6 para. 1 lit. f. GDPR to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked for consent (consent) to data processing by the respective social media platform operator, e.g. With the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.

As far as the aforementioned social media platforms are headquartered in the USA, the following applies: For the USA, the European Commission has issued an adequacy decision. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.

The detailed information on the processing and use of the data by the providers on their pages as well as a contact option and your related rights and setting options to protect your privacy, in particular options for objection (opt-out), can be found in the data protection information of the providers linked below. If you still need help in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/

The data processing takes place on the basis of an agreement between jointly responsible persons in accordance with Art. 26 GDPR, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum

Google/ YouTube: https://policies.google.com/privacy
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about.pinterest.com/de/privacy-policy

Widerspruchsmöglichkeit (Opt-Out):
Facebook: https://www.facebook.com/settings?tab=ads
Google/ YouTube: https://adssettings.google.com/authenticated
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de/?next=/settings/

9. Sending evaluation reminders by email

If you give us your express consent during or after your order in accordance with Art. 6 Para. 1 S. 1 lit. As GDPR, we use your email address as a reminder to submit an evaluation of your order via the evaluation system we use.

This consent can be withdrawn at any time by sending a message to the contact option described below.

10. Contact Options and Your Rights

As a data subject, you have the following rights:

According to Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;

in accordance with Art. 16 GDPR, the right to immediately request the correction of incorrect or incomplete personal data that we have saved;

In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, provided that these are not processed further

– Exercise the right to freedom of expression and information;

– to comply with a legal obligation;

– for reasons of public interest or

– for the establishment, exercise or defense of legal claims

is necessary;

according to Art. 18 GDPR the right to request the restriction of the processing of your personal data, if

– You dispute the accuracy of the data;

– The processing is unlawful, but you refuse to delete it.

– We no longer need the data, but you need them to assert, exercise or defend legal claims or

– You have the processing in accordance with Art. 21 GDPR;

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have made available to us in a structured, shared and machine-readable format or to request that it be transmitted to another responsible person;

According to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, the correction, restriction or deletion of data as well as the revocation of the consent given or the objection to a specific use of data, please contact us directly using the contact details in our legal notice.

Data protection officer:

Farbod KALANTARI SAGHAFI
Lascygasse 20/13
1170
Vienna, Austria
+ 43-1-4120049
info@carpet-plaza.com

Right to object

If we process personal data as explained above in order to protect our legitimate interests, which prevail in the context of a weighing of interests, you can object to this processing with effect for the future. If the processing is carried out for the purpose of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right of objection if there are reasons that arise from your particular situation.

After exercising your right of objection, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing requires the assertion, exercise or defense of Serves legal claims.

This does not apply if the processing is carried out for direct marketing purposes. Then we will no longer process your personal data for this purpose.