PERSONAL DATA PROTECTION POLICY – PDP

The new European Union law regarding personal data protection, GDPR ("General Data Protection Regulation"), came into force on May 25, 2016, but will begin to take effect on May 25, 2018. This law represents the biggest change in the field of personal data protection in the last 20 years and has objectives that go far beyond the simple protection of private space.

The protection of your personal data is important to us, therefore, we pay particular attention to protecting the privacy of visitors who access the website www.theflowerstation.ro, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR").

Please pay close attention to reading the following Policy (hereinafter referred to as "PDP") to understand how your information ("personal data") will be handled.

The PDP explains The Flower Station's online practices regarding the application of GDPR provisions, as well as your rights regarding how your information is used through The Flower Station website.

WHO ARE WE?

We are S.C. THE FLOWER STATION S.R.L., with headquarters in Bucharest, Iuliu Maniu Boulevard 244j, sector 6, registration number in the Trade Register J40/12140/2024, unique registration code 50253263, represented by Administrator, Ion Alexandra. Our main field of activity is retail trade through mail order houses or via the Internet, according to CAEN 4791.

WHAT IS PERSONAL DATA?

"Personal data" means any information or information that can identify you directly (e.g., your name) or indirectly (e.g., through pseudonymous data, such as a unique identification number). This means that personal data includes things like your email address, home address, mobile phone number, username, profile photos, personal preferences and shopping habits, user-generated content, financial information, and financial status information. This could also include unique numerical identifiers such as your computer's IP address or your mobile device's MAC address, as well as cookies.

WHAT DOES PERSONAL DATA PROCESSING MEAN?

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

PERSONAL DATA CONTROLLER

The personal data controller (hereinafter referred to as "the controller") is THE FLOWER STATION S.R.L. (The Flower Station).

DATA PROTECTION OFFICER (DPO)

The Flower Station, as the controller, has appointed Ms. Roxana Stoica as the Data Protection Officer (hereinafter referred to as "DPO"), with the obligation to verify compliance with GDPR provisions in data processing operations carried out by the controller and to represent the controller in relation to data subjects and the supervisory authority.

WHAT DATA DO WE PROCESS

www.theflowerstation.ro will collect information or data that allows the identification of individuals (name, address, telephone number, email address). These are necessary to enable payment processors to collect the value of orders and to deliver the ordered products to you. Also, www.theflowerstation.ro will collect the IP address as traffic data.

DATA PROCESSING PRINCIPLES

The Flower Station undertakes to comply with the personal data protection principles (hereinafter referred to as "Principles") provided by the GDPR, to ensure that all data are:

• Processed fairly, lawfully, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed
• Accurate and up-to-date
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed
• Processed in accordance with the rights of the data subject, in a manner that ensures appropriate security of the processing, so that the data is integral, confidential, and available

LEGAL BASIS AND PURPOSES OF PERSONAL DATA PROCESSING

For the purpose of concluding and executing contracts – According to Article 6(1)(b) of the GDPR, personal data may be processed for the purpose of concluding or executing a contract. In order to offer you our products, we need to process your personal data.

For the purpose of fulfilling legal obligations – According to Article 6(1)(c) of the GDPR, personal data may be processed for the purpose of fulfilling legal obligations. We request a series of personal data, including, in certain situations, the personal identification number, in order to fulfill our obligations imposed by tax authorities in connection with invoicing and reporting to tax authorities.

For marketing purposes – According to Article 6(1)(a) of the GDPR, personal data may be processed if the data subject has given consent to the processing of their personal data for one or more specific purposes.

NEWSLETTER

If you have subscribed to The Flower Station Newsletter section, your personal data will be used exclusively to send you marketing information about The Flower Station products and services, offers and/or promotions, news, future campaigns, invitations to various events held by The Flower Station during a certain period.

Your personal data will be deleted immediately when you unsubscribe from The Flower Station's Newsletter section.

You can unsubscribe at any time via the link attached to the received Newsletter or by a written request addressed to The Flower Station's Data Protection Officer.

The Flower Station reserves the right to select the individuals to whom it will send newsletters and/or alerts, as well as the right to remove from its database any Member or Client who has previously consented to receive newsletters and/or alerts, without any subsequent commitment from The Flower Station, or any prior notification to them.

PROCESSING OF CONTACT FORM

THE FLOWER STATION will use the information you provide in the corresponding contact section on the website exclusively for the purpose of processing your request.

By providing any personal data through the website www.theflowerstation.ro, you understand and agree that your data will be processed in accordance with the provisions of THE FLOWER STATION's PDP.

Please note that in order to process your requests submitted through the contact section of the website, it may be necessary, in certain circumstances, for us to disclose your data to partners with whom THE FLOWER STATION collaborates and/or other third-party service providers of THE FLOWER STATION.

However, THE FLOWER STATION has adopted appropriate technical and organizational measures to ensure the security of data transfer, as well as the processing of your data by the aforementioned entities in accordance with GDPR requirements.

Your personal data may be transmitted to other third-party entities only with your express consent, except in situations where there is a legal obligation for THE FLOWER STATION to do so.

THE FLOWER STATION undertakes not to process personal data provided for any purpose other than that for which they were transmitted, except in situations where there is your express consent to use them for other purposes.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Personal data processed through www.theflowerstation.ro may be disclosed and/or transferred to third parties only if there is your express consent to do so, except in situations where there is a legal/contractual obligation for THE FLOWER STATION to do so.

Please note that it is possible that, in certain circumstances, we may be obligated to disclose your personal data to partners with whom THE FLOWER STATION collaborates and/or other third-party service providers of THE FLOWER STATION.

Third parties who have access to data are: delivery companies, payment processors, email marketing services.

DATA PROCESSING BY THIRD PARTIES, OTHER SITES AND SPONSORS

The website www.theflowerstation.ro may, at some point, contain links to other websites whose data processing policies may differ from those of THE FLOWER STATION.

Please also note and consult the personal data protection policies of other websites, as THE FLOWER STATION does not assume responsibility for information sent or collected by these third parties.

AUTOMATED DATA PROCESSING. COOKIE

The website www.theflowerstation.ro uses Cookie identifiers. The cookies used by theflowerstation.ro (own or from third parties) include: Google Analytics, Facebook Login, The Marketer, SmartsUpp, trusted, globessl, pinterest, clicktale, profitshare, facebook, plusone, google experiments, twitter, adwords. In this regard, you can consult our Cookie Policy, available on the website, and you can exercise your right to disable Cookies, as specified below.

DATA STORAGE PERIOD

THE FLOWER STATION may retain processed data for various periods of time, considered reasonable, in accordance with the purposes indicated above. We retain your data only for the period necessary to achieve the purpose for which we hold the data, to satisfy your needs or to fulfill our legal obligations.

To know how long your data may be retained, we use the following criteria:

When you purchase products and services, we retain your personal data for the duration of our contractual relationship;

If you participate in a promotional offer, we retain your personal data for the duration of the promotional offer;

If you contact us with a query, we retain your personal data for the period necessary to process your queries, but no longer than 5 years from the last correspondence sent;

If you create an account, we retain your personal data until you request us to delete it or after a period of inactivity (without active interaction with our brands) defined in accordance with local regulations and guidelines. In this regard, we mention that data processed for this purpose will be deleted 5 years after the last interaction with the account user (such as logging into your account);

If you have given your consent for marketing, we retain your personal data until you unsubscribe or request us to delete it or after a period of inactivity (without active interaction with our brands) defined in accordance with local regulations and guidelines. In this regard, we mention that data stored in our databases for the purpose of direct marketing communications are deleted from the records of these databases 5 years after your last interaction with us;

If cookies are stored on your computer, we retain them for as long as necessary for them to achieve their purposes (e.g., for the duration of a session for shopping cart cookies or session ID cookies) and for a period defined in accordance with local regulations and guidelines. In this regard, we mention that data processed through cookies used to provide online behavioral advertising, to personalize our services for you, and to allow the distribution of our content on social networking sites (share buttons intended for displaying the site), will be retained for a maximum period of 5 years from their collection, based on your consent.

DATA SUBJECT RIGHTS

In accordance with GDPR, you have a series of rights regarding the personal data that THE FLOWER STATION processes:

• Right of access to processed data – You have the right to access the personal data we hold. The first provision of information will be free of charge. If you need additional copies of the information already provided, we may charge a reasonable fee, taking into account the administrative costs of providing the information. Clearly unfounded, excessive, or repeated requests may not receive a response.
• Right to rectification of data – You have the right to request that your Data be rectified if it is inaccurate or outdated and/or to complete it if it is incomplete. If you have an account, it may be easier to correct your own data through the "My Account" function.
• Right to erasure of data ("right to be forgotten") – In some cases, you have the right to obtain the erasure or destruction of your Data. This is not an absolute right, as sometimes we may be forced to retain your Data for legal or judicial reasons.
• Right to restriction of processing – You have the right to request the restriction of the processing of your Data. This means that the processing of your Data is limited, so that we can still store the data, but not process it for other purposes.
• Right to data portability – You have the right to obtain a copy of your Data in a structured, commonly used and machine-readable format. You also have the right to request that your data be transmitted directly to another controller, where technically feasible.
• Right to object – You have the right to object to the processing of your Data, particularly for direct marketing purposes, when we process your Data based on our legitimate interest or that of a third party.
• Right to withdraw consent – If you rely on your consent to process your Data, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint – If you believe that the processing of your Data does not comply with the law, you have the right to lodge a complaint with a supervisory authority, such as the National Supervisory Authority for Personal Data Processing (ANSPDCP).

CONTACT

For questions, suggestions, or to exercise any of your rights mentioned above, please contact THE FLOWER STATION's Data Protection Officer (DPO) at the email address: office@theflowerstation.ro