PRIVACY POLICY

In accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and current legislation on the protection of personal data, users of this Website are informed about the processing of their personal data.

This Privacy Policy aims to inform users about the collection and processing of personal data obtained through the Website sympathyflowers.london (hereinafter "the Website").

WHAT DATA IS COLLECTED THROUGH THE WEBSITE?

The personal data to which the CONTROLLER will have access shall be those voluntarily provided by the user when contacting the CONTROLLER by email or any other means provided on the Website.

Specifically, the CONTROLLER shall record the following information: data provided through sending emails to the addresses identified on the Website, the email address provided by users to subscribe to our newsletter, and data provided by completing forms or using the functionalities offered on the site.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The personal data provided by the user shall be processed on the following legal bases: the explicit consent of the data subject (Article 6(1)(a) UK GDPR), the performance of a contract or the application of pre-contractual measures (Article 6(1)(b) UK GDPR), compliance with legal obligations (Article 6(1)(c) UK GDPR), and legitimate interest (Article 6(1)(f) UK GDPR) to improve our services, respond to enquiries and ensure the security of the Website.

WHO IS THE DATA CONTROLLER?

The identity of the data controller is Envios y Servicios Flor 10 S.L (hereinafter, the controller), with tax identification number B01358159 and registered address at Clemente Arráiz Margolariaren Kalea, 3, Loc BAJO. The telephone number is 945 20 40 90 and the email address info@flor10.com

The CONTROLLER complies with the provisions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, guaranteeing at all times the correct use and processing of the user's personal data.

FOR WHAT PURPOSE WILL YOUR PERSONAL DATA BE PROCESSED?

Personal data shall be included in the CONTROLLER's processing records for the following purposes: resolving queries or requests, managing the requested service, maintaining and managing the contractual relationship, sending informative communications about similar products or services, carrying out analyses to improve the Website and managing newsletter subscriptions. No automated decisions will be made, nor will commercial profiles be created based on the data provided.

TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED?

Your data shall be processed ensuring integrity and confidentiality. They will not be transferred to third parties, except where required by law or for the provision of services necessary for the business activity, always under a data processing agreement. No international data transfers outside the European Economic Area are foreseen, unless they are carried out in compliance with the guarantees established by European policies.

The Website user shall be solely responsible for the truthfulness of the data provided. In the event of providing third-party data, the user guarantees that they have obtained the prior consent of such persons and have informed them of the content of this Privacy Policy.

DATA OF MINORS

We do not process data of minors under 14 years of age. Therefore, the user is asked to refrain from providing such data if they have not reached that age or from providing data of third parties who have not reached the stated age. The CONTROLLER declines all responsibility for non-compliance with this provision.

WHAT DATA PROTECTION RIGHTS DO YOU HAVE?

The user has the right to know whether we are processing their data, to access them, to request their rectification if inaccurate, to request their erasure when no longer necessary, to request restriction of processing in certain cases, to request data portability and to withdraw consent at any time.

You may exercise these rights by writing to the registered address of the CONTROLLER or by sending an email to info@flor10.com. If you believe your rights have not been respected, you may lodge a complaint with the Information Commissioner's Office (ICO).

HOW LONG DO WE TAKE TO RESPOND?

The maximum period for responding to the exercise of rights is one month from the request, which may be extended by a further two months in cases of particular complexity, subject to prior notification to the data subject.

HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

Data shall be retained for as long as the relationship with us continues or until erasure is requested or consent is withdrawn. Thereafter, data shall be kept blocked during the legal limitation periods (minimum 5 years) to address any liabilities arising from the processing or regulatory obligations.

SECURITY, COOKIES AND IP ADDRESSES

The Website uses security techniques such as firewalls and encryption mechanisms to prevent unauthorised access to data. In the event of a security breach that poses a high risk to users' rights, the CONTROLLER will notify the Information Commissioner's Office and the data subjects as soon as possible.

The Website may use cookies to record the user's activities during browsing, with the sole purpose of making navigation easier and measuring traffic parameters. The user can configure their browser to prevent the installation of cookies. Likewise, servers may automatically detect the user's IP address for exclusively statistical and technical purposes.

UPDATES AND MODIFICATIONS

The CONTROLLER reserves the right to modify this Privacy Policy to adapt it to legislative changes or industry practices. Changes will be communicated through the Website or other appropriate means.