This Privacy Policy explains how personal data is collected, used and processed when visiting or interacting with Matpause, operated by Baltruschat Carpet GmbH.
1. Data Controller
The data controller responsible for the processing of personal data is:
Baltruschat Carpet GmbH
Am Leveloh 3 – 7
45549 Sprockhövel
Germany
Email: carpet@matpause.com
Telephone: +49 2327 4128765
Website: www.matpause.com
2. Types of Data Collected
When users interact with the website, the following categories of data may be processed:
* Contact details submitted via forms or email communication (such as name and email address)
* Order and transaction-related information required for processing purchases (excluding sensitive payment card identifiers)
* Device and usage data such as browser type, IP address, pages visited, and access time
* Communication records exchanged with customer service channels
3. Purpose of Processing
Personal data is processed for the following purposes:
* To process and fulfil orders placed through the website
* To manage customer enquiries and communication
* To maintain website functionality, stability, and improve user experience
* To comply with applicable legal obligations and accounting requirements
* To prevent misuse of services, mitigate financial risks, and maintain operational integrity
4. Payment Processing and Security
Payment transactions are processed through authorized third-party payment service providers, including Stripe, Inc. and its affiliated entities (collectively “Stripe”).
To ensure maximum transaction security and compliance with the Payment Card Industry Data Security Standard (PCI-DSS), all payment card information is entered directly into Stripe’s secure infrastructure. Baltruschat Carpet GmbH does not collect, process, or store sensitive financial data, such as full credit card numbers or security codes, on its servers. Stripe processes transaction details, billing information, and relevant cryptographic tokens required to securely complete the transaction in accordance with its own privacy policy and legal requirements.
5. Legal Basis for Processing
Data processing is carried out based on applicable legal grounds, including:
* Performance of a contract
* Compliance with legal obligations
* Legitimate interests in operating and maintaining the website, secure payment routing, and business activities
* User consent where required
6. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, or as required under applicable legal and regulatory retention obligations.
Typical retention periods include:
* Transaction and accounting-related records: retained for up to 10 years in strict accordance with applicable commercial and tax regulations (such as the German Commercial Code / HGB and Fiscal Code / AO).
* Customer communication records: retained for as long as necessary to manage enquiries and ongoing business relationships.
* Technical usage data: retained for a limited period appropriate to system security, operation, and maintenance requirements.
After the applicable retention period, data is deleted or anonymised unless further retention is required under legal obligations.
7. Data Sharing
Personal data may be shared with:
* Payment service providers (including Stripe) for transaction processing, payment authorization, and automated fraud prevention screening.
* Service providers involved in hosting, communication, logistical fulfillment, or technical operational support.
* Public authorities where required under mandatory applicable laws or financial regulations.
All third parties are contractually required to handle personal data in accordance with applicable data protection standards.
8. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA) to destinations such as the United States, such transfers are carried out in strict accordance with applicable legal mechanisms, including Standard Contractual Clauses (SCCs), designed to ensure appropriate protection of personal data.
9. User Rights
Depending on applicable data protection laws (including the EU General Data Protection Regulation / GDPR and relevant US state privacy laws where applicable), individuals possess specific statutory rights, including:
* The right to access personal data held
* The right to request correction of inaccurate data
* The right to request deletion of personal data where applicable
* The right to restrict or object to certain types of processing
* The right to request data portability where applicable
* The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal
* The right to lodge a complaint with a competent data protection supervisory authority
To exercise any of these rights, individuals may contact our data controller directly using the contact details provided in Section 10.
10. Contact
For any questions regarding this Privacy Policy or the handling of personal data, users may contact:
Email: carpet@matpause.com
Telephone: +49 2327 4128765
Address: Am Leveloh 3 – 7, 45549 Sprockhövel, Germany
11. Updates
This Privacy Policy may be updated from time to time to reflect operational, legal or regulatory changes. The most current version will always be available on the website.