Data protection

Data protection

1) Introduction and Contact Information of the Data Controller
1.1 We are pleased that you are visiting our website and appreciate your interest. Below, we inform you about how we handle your personal data when using our website. Personal data refers to any data that can be used to identify you personally.

1.2 The data controller responsible for processing personal data on this website, in accordance with the General Data Protection Regulation (GDPR), is Amal Rabih, Lot Al Maarij N4 Beni Mellal, Email: info@touda.de. The data controller is the natural or legal person who, alone or in collaboration with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website
2.1 When you visit our website purely for informational purposes, i.e., when you do not register or transmit information to us in any other way, we only collect data that your browser transmits to the server of the website (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website you visit

  • Date and time of access

  • Amount of data sent in bytes

  • Source/Reference from which you arrived at the page

  • Browser used

  • Operating system used

  • IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or further use of the data. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser bar.

3) Hosting & Content-Delivery-Network
Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transmission to Canada, an adequate level of data protection is ensured through an adequacy decision by the European Commission.

4) Cookies
To make the visit to our website attractive and enable the use of certain features, we use cookies, small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device longer and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

If personal data is also processed by certain cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent, or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in ensuring the best functionality of the website and a user-friendly and effective website experience.

You can configure your browser to inform you about the placement of cookies and to allow you to individually accept or reject cookies, or to block cookies in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us
5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

The processing of personal data transmitted via the chat is either in accordance with Art. 6(1)(b) GDPR because it is necessary for the initiation or execution of a contract, or in accordance with Art. 6(1)(f) GDPR due to our legitimate interest in providing effective support to our website visitors.
Your data transmitted this way will be deleted after the relevant issue has been resolved, unless there are statutory retention periods to the contrary.

Additionally, further information may be collected and evaluated for the creation of pseudonymized usage profiles using cookies, which, however, do not serve to personally identify you and will not be merged with other data sets. If these details can be linked to a person, the processing will be in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented through corresponding browser settings. However, in this case, the functionality of our website may be limited.

You may object to the collection and storage of data for the purpose of creating pseudonymized usage profiles at any time with future effect.

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transmission to Canada, an adequate level of data protection is ensured through an adequacy decision by the European Commission.

5.2 Trustpilot

For review reminders, we use the services of the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark

Only with your explicit consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and possibly other customer data to the provider so that they can contact you with a review reminder via email.

You can withdraw your consent at any time with effect for the future either to us or to the provider.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.3 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this, we use the "Business Version" of WhatsApp.

If you contact us via WhatsApp for a specific transaction (e.g., a placed order), we store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(b) GDPR to process and respond to your request. Based on the same legal basis, we may ask you for additional information (order number, customer number, address, or email address) to assign your inquiry to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., regarding our services, availability, or website), we store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in providing efficient and timely responses to your inquiries.

Your data will only be used to respond to your inquiry via WhatsApp. No data will be shared with third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this service and automatically transfers the phone numbers stored in the address book to a server of its parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device where the address book only contains WhatsApp contact data of users who have already contacted us via WhatsApp.

This ensures that anyone whose WhatsApp contact data is stored in our address book has already consented to the transfer of their WhatsApp phone number from their address books to their chat contacts according to Art. 6(1)(a) GDPR upon accepting the WhatsApp terms of use. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

For more details on the purpose and scope of data collection, processing, and usage by WhatsApp and your rights and privacy settings, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider, which protects our website visitors' data and prohibits unauthorized disclosure to third parties.

In the course of the processing described above, data may be transferred to Meta Platforms Inc. servers in the USA.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures compliance with European data protection standards through an adequacy decision by the European Commission.

5.4 In the course of contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the necessary extent.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it is clear that the matter has been conclusively resolved, and unless there are legal retention obligations.

6) Comment Function
In the context of the comment function on this website, besides your comment, the time of the comment's creation and the name you chose as a commentator are stored and published on this website. Additionally, your IP address is logged and stored. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts illegal content in their comment. We require your email address to contact you in case a third party objects to the published content as illegal.

The legal grounds for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.

7) Data Processing When Opening a Customer Account
In accordance with Art. 6(1)(b) GDPR, personal data will be collected and processed to the necessary extent when you provide it to us when opening a customer account. The required data for account creation can be found in the input form of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above address of the data controller. After the deletion of your customer account, your data will be deleted, provided all related contracts have been fully processed, there are no statutory retention periods preventing this, and we have no legitimate interest in further storage.

8) Use of Customer Data for Direct Marketing

8.1 Subscription to Our Email Newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for the newsletter subscription is your email address. Providing additional information is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive the newsletter once you have explicitly confirmed your consent to receive the newsletter by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give your consent for the use of your personal data according to Art. 6(1)(a) GDPR. We also store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of the registration to trace any potential misuse of your email address at a later time. The data we collect during the newsletter registration is used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve further data processing that is legally permitted and about which we inform you in this statement.

8.2 Shopify Email

Our email newsletters are sent through the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we share your data provided during the newsletter registration according to Art. 6(1)(f) GDPR with this provider, so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent in accordance with Art. 6(1)(a) GDPR, the provider also conducts statistical evaluations of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider, which protects the data of our site visitors and prohibits the transfer of data to third parties.

In case of data transmission to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8.3 Stock Availability Notification via Email

For temporarily unavailable items, you can sign up to receive stock availability notifications via email. In this case, we will send you a one-time email about the availability of the selected item. The only mandatory information required for sending this notification is your email address. Providing additional data is voluntary and will be used, if applicable, to address you personally. We use the so-called double opt-in procedure for sending the email, ensuring that you will only receive the notification once you have explicitly confirmed your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give your consent for the use of your personal data according to Art. 6(1)(a) GDPR. We also store your IP address registered by the ISP and the date and time of the registration to trace any potential misuse of your email address at a later time. The data we collect during the stock availability notification registration is used strictly for this purpose.

You can unsubscribe from the stock availability notifications at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list, unless you have explicitly consented to further use of your data or we reserve further data processing that is legally permitted and about which we inform you in this statement.

8.4 Cart Reminders via Email

In case you abandon your shopping before completing the order, you have the option to be reminded via email about the contents of your virtual shopping cart.

The only mandatory information required for sending this reminder is your email address. Providing additional data is voluntary and will be used, if applicable, to address you personally. We use the so-called double opt-in procedure for sending the email, ensuring that you will only receive the reminder once you have explicitly confirmed your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give your consent for the use of your personal data according to Art. 6(1)(a) GDPR for sending a cart reminder. We also store your IP address registered by the ISP and the date and time of the registration to trace any potential misuse of your email address at a later time. The data we collect during the cart reminder registration is used strictly for this purpose.

You can unsubscribe from the cart reminders at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list, unless you have explicitly consented to further use of your data or we reserve further data processing that is legally permitted and about which we inform you in this statement.

  1. Data Processing for Order Processing
    9.1 Transfer of Image Files for Order Processing via Email

On our website, we offer customers the option to commission the personalization of products by submitting image files via email. The submitted image will be used as a template for personalizing the chosen product.

Using the email address provided on the website, the customer can send one or more image files from the memory of the device being used to us. We capture, store, and use the submitted files exclusively for the creation of the personalized product as described on our website. If the submitted image files are passed on to specialized service providers for the creation and processing of the order, you will be explicitly informed in the following paragraphs. No further transfer will take place. If the submitted files or digital images contain personal data (especially images of identifiable persons), all the aforementioned processing activities are carried out exclusively for the purpose of fulfilling your online order in accordance with Art. 6(1)(b) GDPR.

Once the order is completed, the submitted image files will be automatically and fully deleted.

9.2 As required for the execution of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the authorized financial institution according to Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or digital products based on a contract, we process the contact details you provided during the order (name, address, email address) to inform you personally about upcoming updates within the legally prescribed period according to Art. 6(1)(c) GDPR. Your contact details will be strictly used for notifications about updates owed by us and processed only to the extent necessary for each notification.

For processing your order, we also cooperate with the following service providers who assist us in performing the contracts. Certain personal data will be transmitted to these service providers as specified in the following information.

9.3 Use of Payment Service Providers (Payment Services)

  • PayPal

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When selecting a payment method provided by this provider, where you pay in advance, your payment data (including name, address, bank and card information, currency, and transaction number) as well as information about the contents of your order will be transmitted to them according to Art. 6(1)(b) GDPR. The transmission of your data is solely for the purpose of processing the payment with the provider and only to the extent necessary.

If you select a payment method where we pay in advance, you will be asked to provide certain personal data (first and last name, street address, house number, postal code, city, date of birth, email address, phone number, and, if applicable, data for an alternative payment method).

To safeguard our legitimate interest in determining your creditworthiness, these data will be forwarded to the provider for a credit check according to Art. 6(1)(f) GDPR. The provider will check whether the selected payment method can be granted based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experience) considering payment and/or default risks.

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized statistical method. Among other things, address data is used in calculating the score values.

You can object to the processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractually agreed payment processing.

  • Shopify Payments

One or more online payment methods of the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

When selecting a payment method provided by this provider, where you pay in advance (e.g., credit card payment), your payment data (including name, address, bank and card information, currency, and transaction number) as well as information about the contents of your order will be transmitted to them according to Art. 6(1)(b) GDPR. The transmission of your data is solely for the purpose of processing the payment with the provider and only to the extent necessary.

Enter customer opinion:

Beni Ourain

Der Beni Ourain ist ein Berberteppich aus dem Herzen des Mittleren Atlas Gebirge in Marokko. Die außergewöhnlichen Teppiche aus reiner Schurwolle werden bei uns noch ganz traditionell innerhalb der Berberfamilien gefertigt.

Infos

Beni Mrirt

Der Beni Mrirt Berberteppich stammt aus der Region Mrirt-Khenifra. Der Berberteppich ist, ähnlich dem Beni Ourain, mit sehr hochwertiger Wolle geknüpft, unsere Beni Mrirt werden noch traditionell in kleinen Kooperativen hergestellt.

Infos

Azilal

Der Azilal Teppich stammt aus der Region Tadla-Azila, der Ebene und dem Hohen Atlas Marokkos. Die Knüpfung der Azilal Teppiche besteht aus einem einfachen Knoten und einem typischen, kurzen Flor.

Infos

Kelim

Das Kunsthandwerk des Webens, vor allem das der Kelim Teppiche, ist noch in ganz Marokko verbreitet. Der Berberteppich wird flach gewebt in vielen zahlreichen Musterungen.

Infos