Privacy Policy

  1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Vartian Carpets e.U.

Arman Vartian

Wipplingerstraße 10

1010 Vienna, Austria

Phone: +43 1 5336396

Email: info@vartian-carpets.com

  1. General Information on Data Processing

2.1 Scope of Processing Personal Data

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing generally occurs only with the user's consent, except where prior consent is not feasible for practical reasons and processing is permitted by law.

2.2 Legal Basis

Where we obtain the data subject's consent for processing operations, Art. 6(1)(a) GDPR serves as the legal basis. For processing necessary to perform a contract, Art. 6(1)(b) GDPR applies. Where processing is necessary to protect a legitimate interest of ours or a third party, and the data subject's interests do not override this, Art. 6(1)(f) GDPR serves as the legal basis.

2.3 Erasure and Storage Period

Personal data will be erased or restricted as soon as the purpose of storage no longer applies. Retention beyond this point may occur if required by applicable statutory retention obligations.

  1. Hosting

This website is built and hosted via Framer (Framer B.V., Stadhouderskade 55, 1072 AB Amsterdam, Netherlands). Framer collects various log files including IP addresses.

We additionally use Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), a globally distributed Content Delivery Network that secures and accelerates our website. Processing is based on Art. 6(1)(f) GDPR. Any transfer of data to the USA is based on Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.

Further information: framer.com/privacy | cloudflare.com/privacypolicy

  1. Your Rights

With respect to your personal data, you have the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority in Austria is the Austrian Data Protection Authority (Oesterreichische Datenschutzbehoerde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

  1. SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

  1. Cookies and Consent Management (Cookiebot)

Our website uses cookies and similar technologies. Non-essential cookies are only used on the basis of your consent (Art. 6(1)(a) GDPR).

To manage your consents, we use Cookiebot by Usercentrics A/S (Havnegade 39, 1058 Copenhagen, Denmark). When you visit our website, a connection is established to Cookiebot's servers to obtain and store your consents. Data processed includes your IP address, time of consent, and device information.

Legal basis: Art. 6(1)(c) and (f) GDPR. Further information: cookiebot.com/en/privacy-policy

You can adjust or withdraw your cookie settings at any time via the cookie banner on our website.

  1. Google Tag Manager

This website uses Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager itself does not set cookies or collect personal data — it solely triggers other tags that may collect data. Tags are only triggered where you have given consent via Cookiebot.

  1. Google Analytics 4

Subject to your consent, we use Google Analytics 4 (Google Ireland Limited). Google Analytics uses cookies to enable analysis of website usage. We have enabled IP anonymisation so that your IP address is truncated within the EU before any transmission to the USA.

Legal basis: Art. 6(1)(a) GDPR. Cookie retention period: up to 14 months. Data transfers to the USA are based on the EU-U.S. Data Privacy Framework. Further information: policies.google.com/privacy

  1. Meta Pixel (Facebook/Instagram)

Subject to your consent, we use the Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). The Meta Pixel enables conversion tracking and the creation of target audiences for advertising on Facebook and Instagram. Data collected is anonymous for us; however, Meta connects it with the respective user profile.

Legal basis: Art. 6(1)(a) GDPR. Data transfers to the USA are based on the EU-U.S. Data Privacy Framework. Further information: facebook.com/privacy/policy

  1. LinkedIn Insight Tag

Subject to your consent, we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland). The Insight Tag enables conversion tracking and targeted advertising on LinkedIn. Data is processed in pseudonymised form.

Legal basis: Art. 6(1)(a) GDPR. Data transfers to the USA are based on the EU-U.S. Data Privacy Framework. Further information: linkedin.com/legal/privacy-policy

  1. HubSpot

11.1 Tracking by HubSpot

Subject to your consent, HubSpot (HubSpot Ireland Limited, One Dockland Central, Guild Street, Dublin 1, Ireland) uses cookies to analyse visitor behaviour on our website. Legal basis: Art. 6(1)(a) GDPR.

11.2 Contact Form

If you contact us via the contact form, the data you provide (name, email address and message content) will be stored to process your enquiry — either in our HubSpot CRM or forwarded by email to info@vartian-carpets.com. Your data will not be passed on to third parties without your consent.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(b) GDPR (pre-contractual measures). Data transfers to the USA are based on the EU-U.S. Data Privacy Framework. Further information: legal.hubspot.com/privacy-policy

  1. Social Media

Our website contains links to our profiles on Instagram, Facebook and LinkedIn. Visiting our website alone does not transmit any data to these platforms. Data is only transferred when you click on a link, at which point the respective provider's privacy policy applies.

  1. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in legal requirements or our services. The updated policy will apply from your next visit.

Last updated: June 2026