Complaint to the Privacy Authority


Processing of personal data of users in accordance with the provisions of Regulation 2016/679 (“GDPR”) – COMMUNICATION (“Newsletter”)

Data Controller

AMMA FLOWERS LTD with registered office at Kennedy 67, ATHIENITIS KENNEDY PARK, 3rd floor, 1076 Nicosia, Cyprus (“Company”),

Data Protection Officer



Purposes of Personal Data Processing



Legal Framework for the Processing of Personal Data


Retention Period of Personal Data


Emails are sent to users who explicitly request it by entering their own email address in the respective personal data collection form. Implementation of a contract for which the interested party is a “subject”


The Personal Data collected (email account) will be saved until you request cancellation from the Newsletter service. Once this service is canceled, your personal data will be destroyed and will become anonymous.


Marketing Purposes: E-mailing promotional and commercial communications about services / products provided by the Company or corporate events announcement, as well as customer satisfaction notification, market research, and statistical analysis.



Consent (optional and can be revoked at any time)


Until the revocation of consent.


 Providing Personal Data

According to article 13.2 (e) of the Regulation (GDPR), we inform you that the provision of the email address is obligatory for the aforementioned purpose.

It will be impossible to send you a “Newsletter” (“newsletters”) if you do not provide us with your email.

Deletion from the Service

If you no longer wish to receive a “Newsletter”, you should choose “Cancel”, or any respective option that you can find in every newsletter of ours.

You can also contact customer service and explain how to cancel this service.

Recipients of Personal Data

Your data (in this case your email or your name if known to us) can be processed by third parties (e.g., controlling authorities or privacy agencies).

The data may be processed, on behalf of the Company, by third parties who have been appointed as Directors of the Company and have received proper instructions.

These third parties generally fall into the following categories:

  1. companies offering e-mail messaging services
  2. service providers for the implementation of what is mentioned in this information note (media, IT vendors)

Authorized Data Processing Parties

Your personal data may be processed by employees of the company responsible for the processing of personal data. These employees have been explicitly authorized by the Company and have received proper instructions.

Transferring Personal Data Outside the European Union

Data transfer outside the EU is not expected.

Rights of Personal Data “Subjects” – Complaint to the Privacy Authority

By contacting email, anyone who so wishes may request access, cancellation, correction of inaccuracies, and modification of incomplete personal data, as well as limitation of their processing in accordance with article 18 (GDPR), or the cancellation of their processing, if there is a legitimate interest of the data subject (i.e. the natural person concerned with personal data, i.e. if such data identifies or may identifies that person).

If processing is based on consent or a contract, it is automatically activated, whereas the interested parties have the right to receive data in a structured, widely used and easily readable form from an automatic device if this is technically possible.

Interested parties have the right to complain to the Personal Data Protection Authority in the Member State where they reside or work, or in the State where the alleged violation occurred.