Privacy policy
This translation is for information only. The legally binding text is the German privacy policy (Datenschutzerklärung).
Last updated: October 2026
Controller
Akin Emre Karagülle, trading as “moschee-teppich.de”
Westerwaldstraße 20, 65232 Taunusstein, Germany
Email: info@moschee-teppich.de (for the Turkish-language site cami-halisi.de: info@cami-halisi.de)
This privacy policy applies to the websites moschee-teppich.de, cami-halisi.de (Turkish), mosque-carpet.com (English) and tapisdemosquee.fr (French).
We have not appointed a data protection officer, as there is no legal obligation to do so. If you have questions about data protection, please write to the email address above.
Overview
We process personal data only to the extent necessary to operate this website, handle your enquiries and carry out orders. We do not use marketing or tracking cookies, do not create user profiles and do not sell data. The connection to this website is encrypted with TLS (recognisable by “https://” in the address bar).
Hosting and delivery of the website
This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary access data, in particular your IP address, the date and time of access, the page requested, browser type and operating system. This is necessary to deliver the website and to protect it against attacks and misuse.
The legal basis is our legitimate interest in providing our website securely and reliably (Art. 6 (1) (f) GDPR). We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR. Processing in the USA is possible; Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The European Commission’s standard contractual clauses apply in addition.
Fonts are loaded from our own server; no connection to Google Fonts is made.
No storage on your device
This website does not set cookies and does not store information on your device for analytics or advertising purposes. After you submit the enquiry form, the website briefly stores your name, the name of the mosque and your financing choice in your browser’s session storage so that the thank-you page can address you personally; the data is deleted there immediately and is not transmitted to us. This storage is strictly necessary for the function you requested (§ 25 (2) no. 2 of the German TDDDG). Consent is therefore not required, and we do not show a cookie banner.
Web analytics with Cloudflare Web Analytics
To understand how our website is used and to improve its loading times, we use Cloudflare Web Analytics. The provider is Cloudflare, Inc. (address above).
When a page is opened, a small script runs that transmits performance data from your browser (e.g. loading times), the page requested, the referring website, device type, browser, operating system and country to Cloudflare. We only see aggregated statistics (e.g. the number of views per page). Cloudflare Web Analytics does not set cookies, does not store information on your device and does not read information stored there. No user profiles are created and you are not tracked across websites. According to Cloudflare, your IP address is used only for transmission and is not stored.
The legal basis is our legitimate interest in designing our website according to need and optimising it technically (Art. 6 (1) (f) GDPR). For the transfer to the USA, see the “Hosting” section. You can find more information in Cloudflare’s privacy policy.
Enquiry form
If you contact us via the enquiry form, we process the data you provide: name of the mosque or institution, postcode and town, first and last name, role, WhatsApp number, email address, preferred language, your project details (dimensions, material, design, desired date, budget range, financing), how you found us, and an optional message. Mandatory fields are marked; without this information we cannot process your enquiry. The data is sent to us by email and is not stored in a database on the website.
The legal basis is the performance of pre-contractual measures at your request (Art. 6 (1) (b) GDPR). If you are enquiring on behalf of a mosque, association or other institution, we process your contact details as its contact person on the basis of our legitimate interest in communicating with that institution (Art. 6 (1) (f) GDPR).
To protect against spam, the form contains an invisible check field; no additional personal data is stored in the process.
Contact by email and WhatsApp
If you email us, we process your email address and the content of your message to deal with your request (Art. 6 (1) (b) or (f) GDPR).
If you give your WhatsApp number in the form, we may contact you via WhatsApp with questions and to send our quote; you can also send us photos and plans via WhatsApp. The provider of WhatsApp is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Message content is end-to-end encrypted; however, WhatsApp and its parent company Meta Platforms, Inc. (USA) process metadata (e.g. phone number, time of communication). Meta is certified under the EU-US Data Privacy Framework. We use WhatsApp only to communicate about your enquiry or order. If you do not want to be contacted via WhatsApp, just let us know and we will reply by email. You can find more information in WhatsApp’s privacy policy.
Campaign pages for carpet sponsorships
At moschee-teppich.de/kampagne/… we provide mosque associations with free pages for fundraising campaigns. Donations go exclusively by bank transfer or via the association’s own PayPal account directly to the association. We do not receive any money and do not receive donors’ bank or payment details. The GiroCode (QR code for the bank transfer) and the calendar reminder are generated locally in your browser; no data is transmitted to us in the process. If you use the association’s PayPal link, PayPal’s privacy policy applies.
Voluntary pledge. Anyone who wishes to be named or to report a pledge can fill in a form. We process the name, the amount pledged, optionally a phone number or email address, the language of the page and the time. Because a donation to a mosque community may reveal religious beliefs, we process this data only with your explicit consent (Art. 6 (1) (a) and Art. 9 (2) (a) GDPR). To protect against spam, the form contains an invisible check field and a minimum completion time.
The data is sent via our email service (see “Email delivery and mailbox”) directly to the treasurer of the association running the campaign. It is not stored on the website. We ourselves receive only a notification without names or contact details (campaign, amount, reference number). We are responsible for providing the campaign page and transmitting the pledge; the association itself is responsible for any further processing after receiving the email.
Publication of names. Your name appears on the campaign page only if you have separately agreed to this, and only after the association has confirmed receipt of your donation, always without the amount. You can withdraw your consent at any time with effect for the future, either with the association or with us (info@moschee-teppich.de); your name will then be removed. The lawfulness of processing carried out before withdrawal remains unaffected.
Responsibility of the association. The association alone is responsible for the donation itself, the use of the donations, donation receipts and the data on its account.
Email delivery and mailbox
To deliver form enquiries we use the email service Zoho CPaaS; our mailbox is hosted by Zoho Mail. The provider of both is Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands. The data is processed in data centres in the EU. We have concluded a data processing agreement with Zoho under Art. 28 GDPR. The legal basis is our legitimate interest in reliable and secure email communication (Art. 6 (1) (f) GDPR).
Storage period
We delete enquiries that do not lead to an order no later than 12 months after our last communication, unless you request deletion earlier. If an order is placed, we store the data for the duration of the contract and beyond that where statutory retention obligations apply: as a rule 6 years for business correspondence (§ 257 HGB) and 8 years for invoices and accounting records (§ 147 AO). The data is then deleted.
Recipients
Your data is received only by the service providers named above, who act on our behalf. Where necessary to carry out an order, we pass the required information (e.g. delivery address, dimensions, contact person on site) to manufacturers, freight carriers or installation companies (Art. 6 (1) (b) GDPR). Data is not passed on for advertising purposes.
No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). A message to info@moschee-teppich.de is sufficient.
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.
Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.
Changes
We update this privacy policy when our website or the services we use change. The version published here applies.