The digital storefront is operated by AGK Carpet Deutschland GmbH, a corporate entity registered in Cologne, Germany. In accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), AGK Carpet Deutschland GmbH serves as the primary Data Controller for all personal information processed via this platform.

1. Data Controller Identification

Company: AGK Carpet Deutschland GmbH
Email: carpets@softsteprug.com
HRB: Amtsgericht Köln HRB 74124
Address: Longericher Straße 205, 50739 Köln
Phone: + 492219174640

2. Scope of Data Collection

To facilitate the successful execution of commercial transactions and provide professional customer support, we collect specific categories of personal data, including:

Full legal name and contact identifiers.

Billing and verified delivery addresses.

Email correspondence and telephone numbers.

Transaction history and specific order requirements.

Technical metadata, including browser specifications and device identifiers, collected to ensure website security and operational integrity.

3. Lawful Bases for Processing

Personal information is processed under the following lawful bases as defined by applicable data protection legislation:

Contractual Necessity: To fulfil orders, manage logistics, and provide post-purchase support.

Legal Obligation: To comply with German commercial and fiscal record-keeping requirements.

Legitimate Interests: To prevent fraudulent activity, mitigate financial risk, and enhance the security of our commercial environment.

4. Payment Processing and Financial Security

All financial transactions conducted on our platform are processed securely through Stripe, our designated payment processing service provider. When a payment is initiated, sensitive financial data is transmitted directly to Stripe via encrypted protocols.

Stripe acts as an independent data controller or processor concerning the execution of payments. This structural arrangement ensures that AGK Carpet Deutschland GmbH maintains a low-risk profile by not storing sensitive cardholder data on its internal servers. For comprehensive details on Stripe’s data handling practices, visitors are encouraged to review the Stripe Privacy Policy.

5. Data Retention and Statutory Limits

We adhere to the principle of data minimisation. Personal information is retained only for the duration necessary to achieve the stated purposes or as mandated by law. In compliance with German commercial (HGB) and tax (AO) regulations, specific transactional and fiscal records are retained for a period of ten (10) years. Administrative correspondence is retained for shorter periods relevant to the resolution of enquiries.

6. Disclosure and International Transfers

Personal information may be disclosed to essential service providers, such as logistics partners and technical infrastructure hosts, strictly to the extent required for operational fulfillment.

Where data is transferred outside the European Economic Area (EEA)—specifically to facilitate trade with the United States—we ensure such transfers are governed by appropriate safeguards, including Standard Contractual Clauses (SCCs), to maintain a high level of data protection.

7. Exercise of Individual Rights

Under the GDPR and associated legislation, individuals possess specific rights regarding their personal data, including the right to access, rectify, or request the erasure of their information. Enquiries regarding the exercise of these rights should be directed to our administrative office using the contact details provided above.

8. Policy Updates and Contact

This policy is subject to periodic review to ensure ongoing alignment with regulatory requirements. For any matters concerning data privacy, please contact:
carpets@softsteprug.com