How we handle your information

Read how realrugs.dk processes personal data when you visit the website, contact us, or buy a rug.

Data controller

realrugs.dk, Danish company registration number (CVR) 43914030, is the controller for the processing described here.

Brett Watson
Vildrosevej 17
3500 Værløse
Denmark
realrugsdk@gmail.com
+45 20 95 06 26

Data, purposes, and legal bases

Website visits

Hosting and security services may process technical data such as IP address, time, requested page, browser, and device information to deliver and protect the website. The legal basis is our legitimate interest in a secure and reliable website under GDPR Article 6(1)(f).

Traffic measurement

We use Vercel Web Analytics for aggregated statistics such as page views, referrer, country, browser, device, and operating system. We use these statistics to understand demand and improve the website. Vercel states that the service does not use third-party cookies and does not associate data points with an identified person or IP address. The legal basis is our legitimate interest in understanding and improving the website under GDPR Article 6(1)(f).

Enquiries, appointments, and purchases

When you write, call, arrange a visit, or buy a rug, we process the information you provide, such as your name, contact details, message, SKU, and necessary delivery and payment information. We use it to respond, enter into or perform a contract, and keep required records. The legal bases are steps at your request before a contract or performance of a contract under GDPR Article 6(1)(b), and legal obligations such as bookkeeping under Article 6(1)(c). Other ordinary enquiries are handled under our legitimate interest in responding, Article 6(1)(f).

eBay

If you trade with us through eBay, eBay processes your information under eBay's own privacy notice. realrugs.dk receives the order, contact, and delivery information needed to complete the transaction. Our automated order synchronisation stores listing, order, and SKU references to prevent double selling; it does not copy the buyer's address, contact, or payment details into the rug catalogue.

Cookies

The public website does not use advertising cookies and does not require a login. Vercel Web Analytics does not use third-party cookies. The restricted owner area sets only a technically necessary, secure login cookie after the owner signs in; it expires after 12 hours.

Recipients and processors

We disclose information only where needed for the purposes above or required by law. The following providers may process information on our behalf or as independent controllers for their own services:

Vercel – hosting, operational logs, and aggregated web analytics.
Supabase – database, authentication, and application storage.
Cloudflare – media storage, delivery, and security.
Google – email communications.
eBay – marketplace, orders, and payment when you use eBay.

Some providers are established or use subprocessors outside the EU/EEA. Where personal data is transferred to a country without an adequate level of protection, the transfer must use a valid mechanism, such as the European Commission's Standard Contractual Clauses. You may contact us for more information about the applicable safeguards.

If you follow a link to Google Maps, Instagram, DBA, or another external service, that service's own privacy policy applies.

Retention

We retain enquiries for as long as needed to respond and document the dialogue. Purchase information and accounting records are retained for the current financial year plus five years as required by Danish bookkeeping law. Information may be retained longer where necessary to establish, exercise, or defend a legal claim. It is then deleted or anonymised. Providers' technical log and security data follows their documented retention periods.

Your rights

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, data portability, and objection to our processing. These rights may be limited by requirements such as bookkeeping obligations or necessary legal claims. We do not use your information for automated decision-making or profiling.

Email realrugsdk@gmail.com to exercise a right or ask a question. You may also lodge a complaint with the Danish Data Protection Agency.

Last updated: 8 September 2026.