Your Data at Feyyn Rugs
We are pleased about your interest in our Feyyn Rugs online shop. Protecting your privacy is very important to us. As an emerging design company with a focus on online sales, we are very aware of the risks of digital data collection and therefore take the issue of data protection very seriously. Below, we provide detailed information on how we handle the data collected from visitors and customers.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a web page is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, transmitted data volume, and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offerings. This serves to protect our overriding legitimate interests in the correct presentation of our offerings according to Art. 6 Para. 1 Sent. 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit.
Hosting
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in designated forms on this website are processed on their servers. For questions regarding our service providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.
2. Data Processing for Contract Fulfillment, Contact, and Opening a Customer Account
We collect personal data when you voluntarily provide it to us during your order or when contacting us (e.g., via contact form or email). Required fields are marked as such because we necessarily need the data for contract fulfillment or to process your inquiry, and without providing them, you cannot submit the order or contact request. Which data is collected is indicated in the respective input forms. We use the data you provide to fulfill contracts and process your inquiries according to Art. 6 Para. 1 Sent. 1 lit. b GDPR.
If you have given your consent under Art. 6 Para. 1 Sent. 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of opening the customer account. Further information on processing your data, particularly regarding the transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After complete fulfillment of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiration of tax and commercial retention periods according to Art. 6 Para. 1 Sent. 1 lit. c GDPR, unless you have expressly consented to further use of your data under Art. 6 Para. 1 Sent. 1 lit. a GDPR or we reserve the right to further use of the data permitted by law and disclosed in this policy. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a designated function in the customer account.
For order and contract processing, we use inventory management systems from external service providers. Our service providers act as processors on our behalf. For questions regarding our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
3. Data Processing for Shipping
For the fulfillment of contracts under Art. 6 Para. 1 Sent. 1 lit. b GDPR, we pass your data to the shipping service provider commissioned with delivery, as far as this is necessary for the delivery of ordered goods.
Data transfer to shipping service providers for the purpose of delivery notification
If you have explicitly consented to this during or after your order, we pass your phone number to the selected shipping provider based on this consent under Art. 6 Para. 1 Sent. 1 lit. a GDPR, so that they can contact you prior to delivery for delivery notification or coordination.
You may revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping provider at the contact address provided below. After revocation, we delete the data you provided for this purpose unless you have expressly consented to further use or we reserve the right to further use the data as permitted by law and disclosed in this policy.
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
4. Data Processing for Payment
For processing payments in our online shop, we cooperate with the following partners: financial institutions
4.1 Data processing for transaction handling
Depending on the selected payment method, we pass the data necessary for processing the payment transaction to our technical service providers, who act as processors on our behalf, to the commissioned financial institutions, or to the selected payment service provider, as far as necessary for processing the payment. This serves contract fulfillment under Art. 6 Para. 1 Sent. 1 lit. b GDPR. In some cases, payment service providers collect the data required for payment processing themselves, e.g., on their own website or via technical integration in the order process. In such cases, the privacy policy of the respective payment service provider applies. For questions about our payment processing partners and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
4.2 Data processing for fraud prevention and optimization of our payment processes
If necessary, we provide our service providers with additional data, which they use along with the data necessary for payment processing as our processors for fraud prevention and optimization of our payment processes (e.g., invoicing, handling disputed payments, supporting accounting). This serves, under Art. 6 Para. 1 Sent. 1 lit. f GDPR, to protect our overriding legitimate interests in safeguarding against fraud and efficient payment management.
5. Advertising via Email
5.1 Email newsletter with subscription
If you subscribe to our newsletter, we use the data necessary for this or separately provided by you to send you our email newsletter regularly based on your consent under Art. 6 Para. 1 Sent. 1 lit. a GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a designated link in the newsletter. After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to further use of the data as permitted by law and disclosed in this policy.
5.2 Newsletter delivery
The newsletter may also be sent by our service providers as part of processing on our behalf. For questions regarding our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
6. Cookies and Other Technologiesn
General information
To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some cookies we use are deleted after the browser session ends (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).
We use technologies that are strictly necessary for using certain functions of our website (e.g., shopping cart function). Through these technologies, IP address, time of visit, device and browser information, as well as information about your use of our website (e.g., shopping cart content), are collected and processed. This serves our overriding legitimate interests in an optimized presentation of our offerings according to Art. 6 Para. 1 Sent. 1 lit. f GDPR.
We also use technologies to fulfill legal obligations to which we are subject (e.g., to document consent to the processing of your personal data) and for web analysis and online marketing. Further information, including the legal basis for data processing, can be found in the following sections of this privacy policy.
The cookie settings for your browser can be found at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of these technologies under Art. 6 Para. 1 Sent. 1 lit. a GDPR, you may revoke your consent at any time by sending a message to the contact option described in the privacy policy or
7. Use of Cookies and Other Technologies for Web Analytics and Advertising Purposes
To the extent you have given your consent for this according to Art. 6 Para. 1 Sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose has lapsed and the use of the respective technology by us ends, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your options to revoke consent can be found in the section “Cookies and Other Technologies.” Further information, including the basis of our cooperation with the individual providers, can be found for the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
7.1 Use of Google Services
We use the technologies shown below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on standard contractual clauses of the European Commission. If your IP address is collected via Google technologies, it is shortened before storage on Google’s servers by activating IP anonymization. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there. Unless stated otherwise for the individual technologies, data processing is based on an agreement for the respective technology concluded between joint controllers according to Art. 26 GDPR. Further information about data processing by Google can be found in the Google Privacy Policy.
Google Analytics
For the purpose of website analysis, data (IP address, time of visit, device and browser information, as well as information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other data from Google. Data processing is based on an agreement for commissioned data processing by Google.
For web analysis and advertising purposes, the Google Analytics add-on function uses the so-called DoubleClick cookie to enable recognition of your browser when visiting other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.
Google AdSense
Our website markets space for third-party ads via Google AdSense. These ads are displayed to you at various locations on this website. Through the so-called DoubleClick cookie, the display of interest-based advertising is made possible by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and automatically assigning a pseudonymous UserID, which is used to determine interests based on visits to this and other websites.
Google Ads
For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when visiting our website. It automatically collects and processes data (IP address, time of visit, device and browser information, and information about your use of our website) and, using a pseudonymous CookieID and based on the pages you visited, enables interest-based advertising. Further data processing only takes place if you have activated the “personalized ads” setting in your Google account. If in this case you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.
For website analysis and event tracking, we measure your subsequent usage behavior via Google Ads Conversion Tracking if you arrived on our website via a Google Ads advertisement. Cookies may be used for this purpose, and data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a page or newsletter registration) may be collected, from which usage profiles are created using pseudonyms.
Google Maps
For the visual representation of geographical information, Google Maps collects data about your use of the Maps functions, especially the IP address and location data, transmits it to Google, and then processes it. We have no influence on this subsequent data processing.
Google reCAPTCHA
For the purpose of protecting our web forms against misuse and spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information, and information about your use of our website) and uses a JavaScript script and cookies to analyze your use of our website. In addition, other cookies stored by Google services in your browser are evaluated. No personal data from the input fields of the respective form is read or stored.
Google Fonts
To ensure consistent presentation of content on our website, data (IP address, time of visit, device and browser information) is collected by the “Google Fonts” script code, transmitted to Google, and then processed by Google. We have no influence on this subsequent data processing.
7.2 Use of Facebook Services
Facebook Analytics
Within the scope of Facebook Analytics, the statistics created via the Facebook Pixel allow us to analyze visitor activity on our website. This serves to optimize the display and marketing of our website.
Facebook Ads
Through Facebook Ads we advertise this website on Facebook as well as on other platforms. We determine the parameters of each advertising campaign; Facebook is responsible for the precise implementation, in particular the decision regarding the placement of ads for individual users.
7.3 Other Providers of Web Analytics and Online Marketing Services
8. Social Media
8.1 Social Plugins from Facebook, Twitter, Instagram, Pinterest
Our website uses social buttons from social networks. These are only embedded as HTML links into the page, so that no connection to the servers of the respective provider is established when you access our website. Clicking on one of the buttons opens the website of the respective social network in a new window of your browser, where you can, for example, click the Like or Share button.
8.2 Our Online Presence on Facebook, Twitter, Instagram, LinkedIn
To the extent you have given your consent for this according to Art. 6 Para. 1 Sentence 1 lit. a GDPR to the respective social media operator, data is automatically collected and stored when visiting our online presences on the aforementioned social media for market research and advertising purposes, from which usage profiles are created using pseudonyms. These can be used, for example, to display ads inside and outside the platforms that are likely to match your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of the data by the respective social media operator, as well as a contact option and your related rights and settings to protect your privacy, can be found in the linked privacy policies of the providers. If you still need assistance in this regard, you can contact us.
Facebook is a service of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on standard contractual clauses of the European Commission. Data processing in connection with visiting a Facebook Fanpage is based on an agreement between joint controllers according to Art. 26 GDPR. Further information (information on Insights data) can be found here.
Twitter is a service of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). The information automatically collected by Twitter about your use of our online presence on Twitter is usually transmitted to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, and stored there. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on standard contractual clauses of the European Commission.
Instagram is a service of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on standard contractual clauses of the European Commission. Data processing in connection with visiting an Instagram Fanpage is based on an agreement between joint controllers according to Art. 26 GDPR. Further information (information on Insights data) can be found here.
LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn about your use of our online presence on Pinterest is usually transmitted to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on standard contractual clauses of the European Commission.
9. Contact Options and Your Rights
As a data subject, you have the following rights:
According to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
According to Art. 16 GDPR, the right to request immediate correction of inaccurate or completion of your personal data stored with us;
According to Art. 17 GDPR, the right to request deletion of your personal data stored with us, unless further processing is necessary
for exercising the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
for the establishment, exercise, or defense of legal claims;
According to Art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as
the accuracy of the data is disputed by you;
the processing is unlawful, but you object to deletion;
we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims; or
you have objected to the processing pursuant to Art. 21 GDPR;
According to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. In general, you may contact the supervisory authority of your usual place of residence, workplace, or our company headquarters.
For questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as revocation of given consents or objection to a specific data use, please contact us directly using the contact details in our imprint.
10. Right to Object
To the extent we process personal data as described above to safeguard our overriding legitimate interests in the context of a balancing of interests, you may object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If processing is carried out for other purposes, you only have a right to object if there are reasons arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.
This does not apply if processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.
Privacy Policy created with rechtstexter.de.
Controller for Data Processing and Data Protection Officer
Feyyn Rugs by Rabbithorse UG (haftungsbeschränkt)
Hansastr. 17
49090 Osnabrück
contact@feyynrugs.com