Privacy Notice & Cookies

PRIVACY POLICY AND COOKIES
This privacy policy sets out how the Casa Rugs website (hereinafter “the online store”) handles and protects data shared by customers. Casa Rugs is committed to protecting the privacy of its customers and users. Based on this, we have prepared these privacy policy principles, which deal with the collection, use, publication, transmission and storage of customer data. Our activities on the Internet are in accordance with all relevant activities and the relevant legislation of the European Union and the laws of the Republic of Estonia. Please take a moment to familiarize yourself with our privacy policy.

COLLECTION AND USE OF PERSONAL DATA
Personal data refers to data specifically or indirectly associated with you as an individual. Casa Rugs collects and processes these data to fulfill contracts with individuals, establish contact, and comply with legal obligations.
The collection of personal data can occur through the following means:

• Providing contact information (including your name, personal identification code, mailing address, phone number, email address, preferred method of contact) on our website or elsewhere.
• Using customer account information or cookies on the website.
• Storing data related to personal contact information or purchase preferences when making a purchase or order in our physical store or online store (Casa Rugs may request the voluntary submission of personal data and personal information on certain web pages. Required personal data may include name, address, postal code, email address, phone number, and other data).

COLLECTION OF OTHER DATA
We also collect non-personalized data – data that cannot be directly linked to a specific person (gender, age, language preference, location). We may also collect data about customer activities on our website. This data is aggregated and used so that we can deliver more useful information to our customers and learn which parts of the website, products and services are of most interest to us. Aggregated data is treated as non-personalized data in this privacy policy.

USE AND STORAGE OF COLLECTED PERSONAL DATA
With the help of collected personal data, we can inform customers about Casa Rugs product news, promotions and upcoming events. A customer who does not want to be on our newsletter list or receive notifications about products that may interest him can remove himself from the target group of recipients at any time.
We also use the collected personal data to deliver the goods and to fulfill our obligations to the customer.
By accepting the terms of the privacy policy, the customer gives the e-shop consent to the automated processing of his data. You can always withdraw your consent via our website or by making a statement in a form that allows for written reproduction. There is no retroactive effect on the application or withdrawal of consent.
In order to better serve the customer, Casa Rugs may disclose information about individual users to a third party that provides services to Casa Rugs and is contractually obligated to keep the shared information confidential. The third party is, for example, our partner, whose tasks are the transport of goods sold in the e-shop.
The customer’s personal data is kept by Casa Rugs until the customer contract is terminated. Casa Rugs stores data that Casa Rugs is obliged to store as a result of legislation (e.g. accounting data) based on the requirements set out in legislation.

SECURITY
All customer personal data obtained during visits to the Casa Rugs e-store and making purchases are treated as confidential information. An encrypted data communication channel with banks ensures the security of the purchaser’s personal data and bank details.

All customer personal data obtained during the visit to the Casa Rugs online store and the process of making purchases is treated as confidential information. An encrypted data channel with banks ensures the security of the purchaser’s personal data and banking details.

HOW DO WE USE “COOKIES”?
A “cookie” is a small text file that a web server sends to the user’s web browser and requests permission to store it on the hard drive. Once you’ve given consent to store a “cookie,” the file is saved to your hard drive, allowing the “cookie” to analyze web traffic or notify you when you visit a specific site. “Cookies” enable web applications to respond to you as an individual. A web application can tailor its actions to your needs, likes, and dislikes by collecting and remembering information about your preferences. We use “cookies” from web traffic logs to identify which web pages are being used. This helps us analyze data about web traffic and improve our website according to users’ needs. We use this information solely for statistical analysis purposes and then remove all data from our system.
In general, “cookies” help us provide you with a better website by allowing us to track which pages you find necessary and which you don’t. A “cookie” doesn’t grant us access to your computer or any data connected to you, unless you have chosen to share it with us. You have the option to accept or decline “cookies.” Most web browsers automatically accept “cookies,” but you can modify your web browser settings to disable them. However, this might prevent you from getting the full user experience while visiting the website.

MODIFYING COLLECTED PERSONAL DATA
Customers can view, modify, and supplement the personal data collected for identifying and contacting them on our website in the “My Account” section.
Casa Rugs implements all necessary precautions (including administrative, technical, and physical measures) to protect customer personal data. Access to modify and process data is only granted to authorized individuals. If you suspect that your personal data has been processed contrary to what’s described in this privacy policy or that your data has been leaked to third parties, please inform us immediately. Only in this way can we minimize potential harm. Customers have the right to demand the cessation of their data processing, information about data usage, and data transmission to themselves or a third party in a publicly accessible format. To avoid the misuse of customer data and rights, requests can only be made in a form where the applicant’s identity is identifiable (digitally signed or personally signed in representation). We have the right to respond to such requests within 30 days. Customers can always inquire and download customer data collected by Casa Rugs in CSV format on the account management page. To do this, navigate to the privacy settings page and follow further instructions. Customers have the right to express their desire for account deletion or anonymization of data. To do this, please contact us at support@casarugs.eu, express your desire, and follow further instructions. The requirement to cease data processing will be treated as a termination statement of a permanent customer contract.

PRIVACY POLICY TERMS AND AMENDMENTS
By using our website or filling out the permanent customer application, you have become familiar with these principles and conditions and have agreed to them. We reserve the right to change the general terms of the privacy policy if necessary, informing all permanent customers, but we will do our best to keep our privacy policy up-to-date and accessible to you on our website. The responsible data processor for customer personal data is Casa Studio OÜ. For all questions or concerns regarding the privacy policy or data processing, please contact us at support@casarugs.eu.

You always have the right to appeal to the Data Protection Inspectorate or the court to protect your data. The Data Protection Inspectorate is a national authority that you can also contact for consultation or assistance regarding issues related to data protection.