Privacy Policy

Controller

IPEK Warenhandelsgesellschaft mbH
Borsteler Chaussee 85-99a, Haus 21
22453 Hamburg

E-Mail: hello@rugtales.com

Legal Basis for Data Processing

The processing of personal data is based on the GDPR, particularly Art. 6(1) (consent, contract performance, legitimate interests).

Data Collected

Website Access (Automatic)

• Browser type and version
• IP address
• Date and time of access
• Pages accessed

Cookies

Technical and analytical cookies to improve user experience. Deactivation is possible via browser settings.

Contact Forms

Email addresses are processed solely for responding to inquiries and are deleted upon completion of the process.

Order Data

Name, delivery address, and payment details are processed for contract execution and deleted after statutory retention periods.

Room studio: photos for floor detection

In the room studio you can upload a photo of your own room to see a rug in it at true scale. Use is voluntary; without a photo, all prepared room scenes remain available as before.

Purpose. Your photo is analysed solely to determine the floor area in the image. From that area we calculate the perspective used to show the rug at its real size. The furniture standing on the floor is detected and cut out as well, so the rug appears underneath it rather than on top of it.

Process. Your browser reduces the photo to a maximum edge length of 1024 pixels and transmits it once to our own server in Finland (EU). There an image model operated by ourselves evaluates it and returns four coordinates of the floor area together with a cut-out image of the detected furniture. Processing is then complete.

Storage and recipients. We do not store your photo. It is neither saved on our server nor recorded in log files; only technical metrics such as processing time and image size are logged, with no reference to the image content. The photo is not passed on to third parties and does not leave our own infrastructure. In your browser it remains only while the page is open. The request itself is not recorded in our server's access log either; general server logs of other page visits are deleted automatically after seven days at the latest.

Legal basis. Art. 6(1)(a) GDPR, consent, which you give by deliberately selecting and uploading a photo.

Please do not upload photos in which people can be identified. This is not needed for floor detection.

Third Parties

• Shopify Inc. — Shop system and transaction processing (Privacy Policy: shopify.com/legal/privacy)
• Google Tag Manager & Google Analytics — Reach measurement and analysis
• Pinterest — Marketing and tracking
• Meta (Facebook/Instagram) — Marketing and tracking
• reCAPTCHA v3 — Protection against automated access (Google LLC)
• PostHog Ltd. — Web analytics and user behaviour (session recordings, heatmaps, funnels). Data is processed exclusively in the EU (EU hosting). IP addresses are not stored. Form inputs in session recordings are automatically masked. Legal basis: consent (Art. 6(1)(a) GDPR). Privacy policy: posthog.com/privacy

Data Subject Rights (GDPR)

You have the right at any time to:

• Access your stored data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure ("right to be forgotten", Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with the competent supervisory authority

Please direct inquiries to: hello@rugtales.com