BRANDS

0-9

Privacy Policy

TileForYou · your data

This page explains what personal data we process on tileforyou.eu, why we do it, on what legal basis, and what rights you have. This document has been drawn up in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

Version 1.0 · effective as of its publication on this page.

The short version

•What we collect: order data (name, email, phone number, shipping address), email correspondence, and technical data (cookies). We do not collect payment card data — that is handled by the payment provider Stripe.

•Why: to fulfill your order and deliver it, to answer your questions, and to keep our books as the law requires. Analytics — anonymized visitor statistics (cookies); you can manage these in your browser settings.

•Who we share it with: carriers for delivery, the payment provider Stripe, and the site's IT contractors. We do not sell your data.

•How long we keep it: as long as it is needed for the order and as long as tax law requires; after that we delete or anonymize it.

•Your rights: to request access, correction, erasure, and more — just email sale@tileforyou.eu. We reply within one month (in complex cases it takes longer, and we will tell you in advance).

This summary is for convenience only. The full text below is the legally binding version.

1. Who is responsible for your data

The controller of your personal data (that is, the company that determines why and how it is processed) is:

TileForYou Ltd

Email for personal data matters: sale@tileforyou.eu

We have not appointed a separate Data Protection Officer (DPO) — for any data-related question, please write to the address above.

2. What data we collect

Order and inquiry data. When you place an order, request samples, or write to us, we receive: your name, email, phone number, shipping address, the contents of your order, and the substance of your inquiry.

Correspondence. The emails you send to sale@tileforyou.eu and our replies — including attachments (for example, a photo of your interior for a tile match).

Account data. There is no customer account area on the site, so we do not collect account data.

Technical data and cookies. IP address, device and browser type, the pages you viewed, and cookie files. Full details are in our Cookie Policy.

What we do not collect. We neither collect nor see payment card data: the payment is handled by the payment provider Stripe on its own secure side. We have no need for special categories of data (health, beliefs, and the like) — please do not send them to us.

If the recipient's delivery address was provided by someone other than you (for example, the order was placed on another person's behalf), we received that data from the customer and use it solely to deliver that order.

Without the data required to place an order (name, contact details, shipping address), we cannot accept or fulfill the order.

3. Why we use your data and on what legal basis

The GDPR requires every processing purpose to have a legal basis (Art. 6 GDPR). Here are ours:

Performance of a contract — Art. 6(1)(b) GDPR

Accepting and processing your order, delivering tile and samples, communicating about your order, returns and claims.

Legitimate interest — Art. 6(1)(f) GDPR

Answering pre-order questions and matching tile to your request; preventing fraud and abuse; keeping the site running and secure. Our interest is in a service that works and in fair dealing; it does not override your rights.

Consent — Art. 6(1)(a) GDPR

Analytics cookies (see our Cookie Policy). We do not currently run an email newsletter; if we launch one, it will be sent only with your separate consent. You may withdraw consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal.

Legal obligation — Art. 6(1)(c) GDPR

Accounting and tax records for orders, and responding to lawful requests from public authorities.

We do not make decisions based solely on automated processing that would have legal or similarly significant effects for you.

4. Who we share your data with

We share data only with those without whom the order cannot be fulfilled, and only to the extent needed:

•Carriers and logistics companies — your name, phone number, and address, so they can deliver your order or samples.

•The payment provider Stripe — for card payment processing; only Stripe sees your card data.

•Hetzner hosting (Germany, EU) — its servers run the website and our own CRM; it maintains the site, email, and backups under contract and on our instructions.

•retailai.com — a voice and chat agent service; it handles calls and correspondence with customers.

•Public authorities — only where the law expressly requires it.

We do not sell personal data and do not pass it to third parties for their own advertising.

5. Transfers of data outside the EEA

Data is stored on servers in Germany (EU). Certain services (Stripe, for example) may process data outside the EEA — in such cases, Standard Contractual Clauses (SCCs) and/or adequacy decisions apply (Chapter V GDPR).

If the shipping address is outside the EEA, we pass the carrier the data needed to deliver to the recipient's country — this is necessary for the performance of our contract with you (Art. 49(1)(b) GDPR).

6. How long we keep your data

•Order data and payment records — for the periods set by tax and accounting law.

•Email correspondence — for as long as it is needed to support your order and answer your questions, after which it is deleted or anonymized.

•Technical data and cookies — the retention periods are listed in our Cookie Policy.

Once the period expires or the data is no longer needed, we delete it or irreversibly anonymize it (aggregate statistics are not personal data).

7. Your rights

Under the GDPR (Art. 15–21), you may at any time:

•Request access — find out what data of yours we hold and receive a copy of it.

•Request rectification — correct inaccurate or incomplete data.

•Request erasure — the "right to be forgotten," where we have no lawful reason to keep the data any longer (a tax reason, for instance).

•Restrict processing — "freeze" the data while a dispute or verification is pending.

•Object — to processing based on legitimate interest.

•Port your data — receive the data you gave us in a machine-readable format.

•Withdraw consent — for processing based on consent (cookies, for example).

To exercise any of these rights, write to sale@tileforyou.eu — the link opens a ready-made request email.

We will reply within one month (Art. 12 GDPR); if the request is complex, the deadline may be extended by up to two further months — we will let you know in advance. As a rule, requests are handled free of charge; where requests are manifestly unfounded or excessive (repetitive ones, for example), we may charge a reasonable fee or refuse to act (Art. 12(5) GDPR). To avoid disclosing data to the wrong person, we may ask you to confirm that the request really came from you.

8. Right to lodge a complaint with a supervisory authority

If you believe we are processing your data in breach of the GDPR, you have the right to lodge a complaint with the data protection supervisory authority of the country where we are registered, as well as with the authority of the country where you live or work in the EU/EEA.

We would appreciate it if you wrote to us first at sale@tileforyou.eu — most matters are resolved faster directly with us.

9. Data security

The connection to the site is protected by encryption (HTTPS). Access to personal data is limited to those employees and contractors who need it for their work — contractors are contractually required to protect the data and to act only on our instructions.

No method of transmitting data guarantees absolute security. If a breach occurs that could create a risk to your rights, we will notify the supervisory authority (Art. 33 GDPR), and where the risk is high, we will notify you directly as well (Art. 34 GDPR).

10. Children

The site is intended for adult buyers and is not directed at children. We do not knowingly collect data from children under 16. If you learn that a child has given us their data, please write to us and we will delete it.

11. Changes to this policy

We may update this policy — for example, when the law or our processes change. The current version is always published on this page. If the changes are significant, we will post a prominent notice on the site. The current version is 1.0 · effective as of its publication on this page.

Questions about your data: sale@tileforyou.eu