We highly value your privacy and the protection of your personal data. Personal data is carefully processed and secured by us. NavaRugs is responsible for the data processing. In this privacy statement, we explain which personal data we collect, use, and for what purpose. We hope you read this statement carefully. If you have any questions, you can always contact us.

1. Conditions for Processing Personal Data

In our processing of personal data, we adhere to the requirements set by privacy legislation. Specifically, this means that we find the following points important and comply with them:

• We clearly state the purposes for which we process personal data. You can read more about this further in this privacy statement.
• We limit the collection of personal data to only the data needed for legitimate purposes.
• We ask for explicit permission to process your personal data in cases where special permission is required.
• We take appropriate security measures to protect your personal data and also require this from parties processing personal data on our behalf. Where necessary, this is laid down in so-called “processing agreements.”
• We make it possible to access, correct, or delete your personal data at any time.

2. Use of Personal Data

When using our web store, we obtain certain data about you. This can also include personal data. We only retain and use the personal data that is provided directly by you in the context of the service you have requested, for example, when checking out an order.

We use the following data for the purposes stated in this privacy statement:

• Email address
• Name and address details
• Telephone number
• Billing address
• Payment details
• IP address

2.1 Registration

In certain parts of our web store, you must register to use the functionalities. After registration, we retain the personal data you provided. We store this data so that you can use our services without having to re-enter your data each time. We may also use this data to contact you regarding the execution of the agreement, such as the delivery of the products from your order or to answer your questions.

We collect the following data for registration:

• Your first name, initials
• Last name
• Email address
• Password

We will not provide the registration data to third parties unless this is necessary for the execution of the agreement you enter into with us or if this is legally required. In case of suspected fraud or misuse of our web store, we may be required to hand over personal data to the competent authorities.

2.2 Handling Orders

When you place an order with us, we use your personal data to process it. If necessary for proper handling, we may also provide your personal data to third parties, but only to parties with whom we have a processing agreement. You can trust that these parties handle your personal data appropriately as described further in this privacy statement.

In addition to the account data, we ask for the following information:

• Street name
• House number
• Postal code
• City
• Telephone number

Orders are further stored with the following information:

• Date and time of the order
• Order number
• Invoice number
• Total amounts
• Delivery information
• Delivery costs
• Payment information
• IP address

2.3 Use of Contact Form and Newsletter

We offer the possibility to ask questions via a contact form on our web store, where you are asked to fill in information to handle your question more easily. You choose which information you provide. The data you send us will be retained as long as necessary for the complete handling of your question.

When sending messages via the web store, we use the following data:

• Name
• Email address

We also offer a newsletter to inform interested parties about our products and/or services. Each newsletter contains a link to easily unsubscribe. Your email address is automatically added to the database of our email software, from which secure handling of your personal data is ensured under a processing agreement.

3. Advertising

We can inform you about our new products and services in addition to the information on our website: via email, social media, push notifications, phone, or other communication methods. Fortunately, this only happens when you have given explicit permission, which can always be withdrawn.

4. Publication

When using our web store, no data is published by default. If this happens, you choose which information to publish, such as liking or following our social media channels.

5. Provision to Third Parties

We may involve our group companies and other parties in the processing of your data. To the extent that these other parties process data for the services of NavaRugs, they do so as processors and we have entered into an agreement with these parties. To the extent that these other parties determine the purposes and means for processing data themselves, they do so as responsible parties. This also means that they must have a legal basis to process your data. We are not responsible for the processing of your data by these parties. This privacy statement does not apply to them.

6. Cookies

Our web store uses cookies. When you visit our web store for the first time, a notification is displayed explaining why and for what purpose we use these cookies. We use so-called functional and non-functional cookies, for the use of non-functional cookies we always ask for your permission; if you do not give this permission, we will not use these cookies. The use of cookies is further explained via this [link].

You can also disable functional cookies through your browser. Please note that our website may not work optimally if you disable cookies.

7. Google Analytics

We use Google Analytics to track how visitors use our web store. We have concluded a processing agreement with Google to make arrangements about the handling of our data. Furthermore, we have not allowed Google to use the obtained Analytics information for other Google services, and finally, all IP addresses of measured traffic are anonymized with us.

8. Security

We take careful security measures to limit misuse of and unauthorized access to personal data. These measures are part of our processes and are reviewed periodically.

9. Retention Periods

The personal data described above are kept as long as necessary to handle your orders, including warranty. After that, we keep your data for a maximum of one year for the described statistical purposes. The data will then be deleted unless there is a legal obligation that requires longer retention (such as the seven-year fiscal retention obligation for payment data).

10. Third-Party Websites

In our shop, you may find links to websites of other parties or be referred to us. Although we select and monitor these relationships carefully, we are not responsible for the processing of your data via these websites. This privacy statement does not apply to them.

11. Changes to this Privacy Statement

We reserve the right to make changes to this privacy statement.

12. Access and Modification of Your Data

After logging into your account within our web shops, you have access to the data we have about you. You can request to modify or delete data. For questions about our privacy policy, you can always contact us using the contact details below.