GDPR-compliant

Privacy & Data Protection

Contents

I Information about us as the controller II Rights of users and data subjects III Information about data processing

Introduction

Privacy Policy

We process personal data (hereinafter generally referred to simply as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered on it.

Pursuant to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” means any operation performed on personal data, whether or not by automated means, such as collection, storage, adaptation, retrieval, transmission or erasure.

In the following Privacy Policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data insofar as we determine the purposes and means of processing either alone or jointly with others.

Section I

Information about us as the controller

Controller

The controller responsible for this website within the meaning of data protection law is:

Jakobson Carpets
Proprietor: Farid Sedeghi
Brook 6, 20457 Hamburg, Germany
Tel.: +49 40 60 77 59 08
Email: info@jakobson-carpets.com
Data Protection Officer: Mr Farid Sedeghi

Section II

Rights of users and data subjects

Access & copy

Confirmation as to whether data is being processed, access to the data processed and copies of that data.

Art. 15 GDPR

Rectification

The right to have inaccurate data corrected or incomplete data completed.

Art. 16 GDPR

Erasure

The prompt erasure of the data concerned or, alternatively, restriction of its processing.

Art. 17 GDPR

Data portability

Receipt of your own data and transmission of that data to other providers or controllers.

Art. 20 GDPR

Complaint

The right to lodge a complaint with the supervisory authority if unlawful data processing is suspected.

Art. 77 GDPR

Objection

The right to object to the future processing of your own data, particularly for direct marketing purposes.

Art. 21 GDPR

The provider is obliged to inform all recipients to whom data has been disclosed of any rectification or erasure pursuant to Articles 16, 17(1) and 18 GDPR, unless this proves impossible or involves disproportionate effort.

Section III

Information about data processing

Data processed when you use our website will be erased or blocked as soon as the purpose for which it was stored no longer applies and provided that no statutory retention obligations prevent this.

Server data Art. 6(1)(f) GDPR

For technical reasons, data is transmitted to us by your internet browser. These server log files record, among other things, the browser type and version, operating system, referrer URL, pages visited, date and time of access and the IP address.

This data is stored temporarily and is not combined with other data relating to you. It is stored on the basis of our legitimate interest in improving the stability and security of our website. The data is erased after no more than seven days unless further retention is required for evidentiary purposes.

Cookie Manager Consent

The provider uses a Cookie Manager to obtain consent for the use of cookies that are not technically necessary. When the website is accessed, a cookie containing the preference information is stored so that the request does not need to be repeated during a subsequent visit. The installation of cookies can be prevented through the browser settings.

Cookies Art. 6(1)(b) and (f) GDPR

A – Session cookies

Cookies are small text files stored on your device by your browser. They process information such as browser or location data or your IP address and make our website more user-friendly and secure. The legal basis is Article 6(1)(b) GDPR (steps prior to entering into a contract) or Article 6(1)(f) GDPR (legitimate interest). Session cookies are deleted when the browser is closed.

B – Third-party cookies

Cookies from partner companies may also be used for advertising, analytics or functionality purposes. Please refer to the service sections below for details.

C – Options for removal

You can prevent or restrict the installation of cookies through your browser settings and delete cookies that have already been stored at any time. Flash cookies must be disabled through the Flash Player settings. Please note that not all functions of our website may be fully available when cookies are disabled.

Contact enquiries Art. 6(1)(b) GDPR

If you contact us using the contact form or by email, the data you provide will be used to process your enquiry. Without this data, we may be unable to respond to your enquiry or may only be able to do so to a limited extent.

Your data will be erased once your enquiry has been fully answered, provided that no statutory retention obligations prevent this.

Customer account Art. 6(1)(a) and (b) GDPR

If you create a customer account through our website, the data entered during registration will be used exclusively for pre-contractual services, performance of the contract or customer support. It will not be disclosed to third parties.

Consent that has been granted may be withdrawn at any time with future effect pursuant to Article 7(3) GDPR. The data collected will be erased as soon as processing is no longer necessary, subject to tax and commercial-law retention periods.

Contract processing Art. 6(1)(b) GDPR

The data transmitted in order to use our services is processed for the purpose of handling the contract and is necessary for this purpose. As part of this process, we disclose your data to the appointed transport company or financial service provider insofar as this is necessary to deliver the goods or process payment.

We erase the data once the contract has been fully processed, subject to tax and commercial-law retention periods.

Facebook Art. 6(1)(f) GDPR

We maintain a company presence on Facebook to promote our products and communicate with interested parties. We are jointly responsible for this together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The joint controllership is governed by facebook.com/legal/terms/page_controller_addendum .

Meta processes user data for market research and advertising purposes. Further information can be found in Meta’s Privacy Policy at facebook.com/privacy/policy.

Instagram Art. 6(1)(f) GDPR

Our website contains a link to our Instagram profile. The service is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. It is integrated using a linked graphic, and the user is only redirected to the platform after clicking it.

YouTube Art. 6(1)(a) and (f) GDPR

We use YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in “Privacy-Enhanced Mode”. This means that data is only transmitted to YouTube when a video is actually started.

Further information: policies.google.com/privacy

Google Tag Manager & Maps Art. 6(1)(f) GDPR

We use Google Tag Manager and Google Maps provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC participates in the Data Privacy Framework: dataprivacyframework.gov/list

Google Privacy Policy: policies.google.com/privacy

Matomo (formerly Piwik) Art. 6(1)(f) GDPR

We use Matomo to analyse the use of our website. We use Matomo with the “Automatically Anonymize Visitor IPs” function, which shortens your IP address by two bytes so that it cannot be associated with your connection.

You can prevent cookies from being stored through your browser settings.

PayPal Art. 6(1)(b) GDPR

If you choose to pay via PayPal, your contact details will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. This transmission is necessary to process your order.

Further information can be found in PayPal’s Privacy Statement at paypal.com – Privacy Statement.