Last updated: 2 November 2026. This is a translation for information purposes; in the event of any discrepancy, the Spanish version shall prevail.
This policy explains how we process the personal data you provide through this website and our contact channels, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller: Peiman Esmati (Alfombras Esmati)
- Foreigner ID number (NIE): Y2236616H
- Address: C. de Segovia, 6, 28970 Humanes de Madrid (Madrid), Spain
- Email: [email protected]
- Phone: +34 910 111 648
2. What data we process
The data you give us when you request a quote or contact us through the form, by email, WhatsApp or phone: name, email address, phone number, the content of your message (for example, the type of rug or the damage) and, if you hire our services, the pick-up and delivery address and the details needed for invoicing.
We do not ask for special categories of data. You do not need to give us more data than the fields marked as required in the form.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a quote | Steps taken at your request before entering into a contract (art. 6.1.b GDPR) |
| Providing the service you hire: pick-up, cleaning or restoration and delivery | Performance of a contract (art. 6.1.b GDPR) |
| Issuing invoices and meeting accounting and tax obligations | Legal obligation (art. 6.1.c GDPR) |
We do not make automated decisions or create profiles with your data, and we will not send you marketing communications without your consent.
4. How long we keep it
- Quote requests that do not lead to a booking: 12 months from the last contact, after which they are deleted.
- Customers: for as long as the relationship lasts and, afterwards, for the periods required by law to deal with any liabilities and tax and commercial obligations (generally up to 6 years for accounting records and invoices).
5. Who we share it with
We do not pass your data on to third parties, except where required by law (for example, to the tax authorities).
To operate, we rely on the following service providers, which access the data only as far as necessary to provide their services to us:
- TePublico, provider of the website hosting and of the tool in which we receive and manage quote requests. Its servers are located in the European Union (France).
- Google (Gmail), the email service where we receive form submissions. Google may process data outside the European Economic Area, in particular in the United States, relying on the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
If you choose to contact us via WhatsApp, the conversation is also subject to WhatsApp’s (Meta’s) terms and privacy policy.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, by writing to [email protected] or by post to the address in section 1. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse, including sending forms over an encrypted connection (HTTPS).
8. Changes to this policy
We may update this policy to reflect changes in the law or in our services. The current version is always the one published on this page, with its last-updated date.