PERSONAL DATA PROTECTION POLICY – DPP

The new European Union law on the protection of personal data, GDPR (“General Data Protection Regulation”), entered into force on May 25, 2016, but will begin to take effect on May 25, 2018. This law represents the biggest change in the field of personal data protection in the last 20 years and has objectives that go far beyond the simple protection of private space.

The protection of your personal data is important to us, therefore, we pay particular attention to protecting the privacy of visitors who access the website www.theflowerstation.ro , in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”).

Please pay special attention to reading the following Policy (hereinafter referred to as “DPP”) to understand how your information (“personal data”) will be treated.

The DPP explains The Flower Station's online practices regarding the application of the GDPR provisions, as well as the rights you have regarding how your information is used through The Flower Station website.

WHO ARE WE?

We are SC THE FLOWER STATION SRL, headquartered in Bucharest, Bulevardul Iuliu Maniu 244j, sector 6, registration no. in the Trade Register J40/12140/2024, unique registration code 50253263, represented by Administrator, Ion Alexandra. Our main field of activity is retail trade through order offices or via the Internet according to CAEN 4791.

WHAT IS PERSONAL DATA?

“Personal data” means any information or data that can identify you directly (for example, your name) or indirectly (for example, through pseudonymous data such as a unique identification number). This means that personal data includes things like your email address, home address, mobile phone number, username, profile photos, personal preferences and shopping habits, user-generated content, financial information and financial status information. It could also include unique numerical identifiers, such as your computer’s IP address or your mobile device’s MAC address, as well as cookies.

WHAT DOES PERSONAL DATA PROCESSING MEAN?

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

PERSONAL DATA CONTROLLER

The personal data controller (hereinafter referred to as the “controller”) is THE FLOWER STATION SRL (The Flower Station).

DATA PROTECTION OFFICER (DPO)

The Flower Station, as the controller, has appointed Ms. Roxana Stoica, as Data Protection Officer (hereinafter referred to as the "DPO"), with the obligation to verify compliance with the GDPR provisions in data processing operations carried out by the controller and to represent the controller in relations with data subjects and with the Supervisory Authority.

WHAT DATA DO WE PROCESS?

www.theflowerstation.ro will collect information or data that allows the identification of natural persons (name, address, telephone number, e-mail address). These are necessary to be able to collect the value of orders from payment processors and to deliver the ordered products to you. www.theflowerstation.ro will also collect the IP address as traffic data.

PRINCIPLES REGARDING DATA PROCESSING

The Flower Station undertakes to comply with the personal data protection principles (hereinafter referred to as the "Principles") set out in the GDPR, to ensure that all data is:

• Processed fairly, legally and transparently
• Collected for specified, explicit and legitimate purposes
• Adequate, relevant and limited in relation to the purposes for which they are processed
• Correct and up-to-date
• Kept in a form that does not permit identification of data subjects for longer than is necessary for the purpose of the processing
• Processed in accordance with the rights of the data subject, in a manner that ensures adequate security of processing, so that the data is intact, confidential and available

GROUNDS AND PURPOSES OF PROCESSING PERSONAL DATA

For the purpose of concluding and performing contracts – According to art. 6 para. 1 lit. b) of the GDPR, personal data may be processed for the purpose of concluding or performing the contract. In order to be able to offer you our products, we need to process personal data belonging to you.

For the purpose of fulfilling legal obligations – According to art. 6 para. 1 letter c) of the GDPR, personal data may be processed for the purpose of fulfilling legal obligations. We request a series of personal data, including, in certain situations, the personal identification number, in order to fulfill our obligations imposed by the tax authorities in connection with invoicing and reporting to the tax authorities.

For marketing purposes – According to art. 6 para. 1 letter a) of the GDPR, personal data may be processed if the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

NEWSLETTER

If you have subscribed to The Flower Station Newsletter section, your personal data will be used for the exclusive purpose of sending you information with marketing content, about The Flower Station products and services, about offers and/or promotions, news, future campaigns, invitations to various events held by The Flower Station during a certain period.

Your personal data will be deleted immediately when you unsubscribe from The Flower Station's Newsletter section.

You can unsubscribe at any time via the link attached to the Newsletter you receive or by a written request addressed to The Flower Station's Data Protection Officer.

The Flower Station reserves the right to select the persons to whom it will send newsletters and/or alerts, as well as the right to remove from its database any Member or Client who has previously expressed consent to receive newsletters and/or alerts, without any further commitment from The Flower Station, or any prior notification thereof.

CONTACT FORM PROCESSING

THE FLOWER STATION will use the information you provide in the appropriate contact section on the site solely for the purpose of processing your request.

By providing any personal data through the website www.theflowerstation.ro, you understand and agree that your data will be processed in accordance with the provisions of THE FLOWER STATION's DPP.

Please note that in order to process your requests submitted in the contact section of the site, we may, under certain circumstances, be required to disclose your data to partners with whom THE FLOWER STATION collaborates and/or to other third party service providers of THE FLOWER STATION.

However, THE FLOWER STATION has adopted appropriate technical and organizational measures to ensure the security of data transfer, as well as the processing of your data in accordance with GDPR requirements by the aforementioned entities.

Your personal data may be transmitted to other third parties only based on your express consent, except in situations where there is a legal obligation for THE FLOWER STATION to do so.

THE FLOWER STATION undertakes not to process the personal data provided for any purpose other than that for which they were transmitted, except in situations where there is your express consent to use them for other purposes.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Personal data processed through the website www.theflowerstation.ro may be disclosed and/or transferred to third parties only if there is your express consent to do so, except in situations where there is a legal/contractual obligation for THE FLOWER STATION to do so.

Please note that, under certain circumstances, we may be required to disclose your personal data to partners with whom THE FLOWER STATION collaborates and/or to other third party service providers of THE FLOWER STATION.

Third parties that have access to data are: delivery companies, payment processors, email marketing services.

DATA PROCESSING BY THIRD PARTIES, OTHER SITES AND SPONSORS

The website www.theflowerstation.ro may contain, at some point, access links to other websites whose data processing policies may be different from those of THE FLOWER STATION.

Please be aware of and consult the personal data protection policies of other sites, as THE FLOWER STATION assumes no responsibility for the information sent or collected by these third parties.

AUTOMATIC DATA PROCESSING. COOKIES

The website www.theflowerstation.ro uses Cookie identifiers. The cookies used by theflowerstation.ro (own or third-party) include: Google Analytics, Facebook Login, The Marketer, SmartsUpp, trusted, globessl, pinterest, clicktale, profitshare, facebook, plusone, google experiments, twitter, adwords. In this regard, you can consult our Cookie Policy, available on the website, and you can exercise your right to disable Cookies, as specified below.

DATA STORAGE PERIOD

THE FLOWER STATION may retain the processed data for different periods of time, deemed reasonable, in accordance with the purposes indicated above. We retain your data only for the period necessary to achieve the purpose for which we hold the data, to meet your needs or to comply with our obligations imposed by law.

To know how long your data can be kept, we use the following criteria:

When you purchase products and services, we retain your personal data for the duration of our contractual relationship;

If you participate in a promotional offer, we retain your personal data for the duration of the promotional offer;

If you contact us with a question, we retain your personal data for the time necessary to process your questions, but no longer than 5 years from the last correspondence sent;

If you create an account, we retain your personal data until you request us to delete it or after a period of inactivity (without active interaction with our brands) defined in accordance with local regulations and guidelines. In this regard, we note that data processed for this purpose will be deleted 5 years after the last interaction with the account user (such as logging into your account);

If you have provided your consent for marketing, we retain your personal data until you unsubscribe or request us to delete it or after a period of inactivity (without active interaction with our brands) defined in accordance with local regulations and guidelines. In this regard, we note that data stored in our databases for the purpose of direct marketing communications is deleted from the records of these databases 5 years after the last interaction with you;

If cookies are stored on your computer, we keep them for as long as necessary to achieve their purposes (for example, for the duration of a session for shopping cart cookies or session ID cookies) and for a period defined in accordance with local regulations and guidelines. In this regard, we note that data processed through cookies used to provide online behavioral advertising, to personalize our services for you and to enable the sharing of our content on social media sites (sharing buttons intended to display the site), will be kept for a maximum period of 5 years from their collection, based on your consent.

RIGHTS OF THE DATA SUBJECTS

In accordance with the GDPR, you have a number of rights regarding the personal data that THE FLOWER STATION processes:

• Right of access to processed data – You have the right to access the personal data we hold about you. The first provision of information will be made without any charge. If you require further copies of the information already provided, we may charge a reasonable fee taking into account the administrative costs of providing the information. Manifestly unfounded, excessive or repeated requests may not receive a response.
• Right to rectification of data – You have the right to request that your Data be rectified if it is inaccurate or outdated and/or to complete it if it is incomplete. If you have an account, it may be easier to correct your own data through the “My Account” function.
• Right to erasure (“right to be forgotten”) – In some cases, you have the right to obtain the deletion or destruction of your Data. This is not an absolute right, as sometimes we may be forced to retain your Data for legal or regulatory reasons.
• Right to restriction of processing – You have the right to request restriction of processing of your Data. This means that the processing of your Data is limited so that we can continue to store the data, but do not process it for other purposes.
• Right to data portability – You have the right to obtain a copy of your Data in a structured, commonly used and machine-readable format. You also have the right to request that your Data be transmitted directly to another controller, to the extent that this is technically feasible.
• Right to object – You have the right to object to the processing of your Data, in particular for direct marketing purposes, when we process your Data based on our legitimate interest or that of a third party.
• Right to withdraw consent – ​​If we rely on your consent to process your Data, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
• Right to lodge a complaint – If you consider that the processing of your Data is unlawful, you have the right to lodge a complaint with a supervisory authority, such as the National Supervisory Authority for the Processing of Personal Data (ANSPDCP).

CONTACT

For questions, suggestions or to exercise any of your rights mentioned above, please contact THE FLOWER STATION's Data Protection Officer (DPO), at the email address: office@theflowerstation.ro