Privacy Policy

Information relating to the processing of personal data of users in accordance with Regulation 2016/679 (“GDPR”)

Data processing

Data Controller

AMMA FLOWERS LTD with registered office at Kennedy 67, ATHIENITIS KENNEDY PARK, 3rd floor, 1076 Nicosia, Cyprus (“Company”),

Data Protection Officer

e-mail: info@ammaflowers.com

Processing of Personal Data

Statistics of particular importance.
Contact info.

Purchase details.

PROCESSING OBJECTIVE

LEGAL FRAMEWORK FOR PROCESSING

DATE RETENTION PERIOD

Online purchases of goods

 

 

 

Performing a contract to which you are a party (e.g. purchase agreement)

 

 

 

For the duration of the contract and, after its validity, usually for a period of 10 years.

 

 

 

Sign up for our website, participate in the loyalty programs and/or subscribe to the Company’s Customer Relationship Management

 

 

 

Performing the contract for which you are a party

 

 

 

For the duration of the contract and, after its validity, usually for a period of 10 years.

 

 

 

Enabling the requested exclusive services (gift card, order tracking, wish list, satisfied customers or product returns)

 

 

 

Performing the contract for which you are a party

 

 

 

For the duration of the contract and, after its validity, usually for a period of 10 years.

 

 

 

Participate in competitions, events, awards, customer loyalty programs, online and social initiatives.

 

 

 

Performing the contract for which you are a party

 

 

 

For the duration of the contract and, after its validity, usually for a period of 10 years.

 

 

 

Managing notification and complaint activities, customer service

 

 

 

Performing the contract for which you are a party

 

 

 

For 10 years to fulfill administrative and accounting obligations

 

 

 

Satisfaction of obligations according to the regulations, with the National and the International Legal Framework.

 

 

Need to comply with legal obligations

 

 

For 10 years to fulfill administrative and accounting obligations

 

 

 

If necessary, verify, exercise or protect the rights of the data subject in the event of a legal appeal.

 

 

 

Legitimate interest (legal protection)

 

 

In the case of litigation until a final judgment is given.

 

 

 

Recovery of extrajudicial charges

 

 

 

Legitimate interest (legal protection)

 

 

In the case of litigation until a final judgment is given.

 

 

 

The goal of direct marketing is to send automated communications (e.g., sms, mms, e-mail, social media, instant messaging, alerts) and traditional means (telephone calls, mail) communications about the provided services/products of the Company or to announce corporate events, as well as communication on the level of customer satisfaction, market research and statistical analysis.

 

 

 

Consent (optional and can be revoked at any time)

 

 

 

Significant statistics and contact details:

 

 

They shall be maintained until the consent is withdrawn

 

Purchase details:

 

7 years after collection

 

 

Communication/transfer of personal data to companies of the Group. Particularly important statistics and contact details will be communicated to companies of the Group to which the company belongs (e.g. sending by automated means of communication-sms, mms, e-mail, social media, instant messaging applications, and traditional means such as telephone calls and traditional post-advertising and commercial communications for products provided by companies or corporate events, as well as for the execution of market studies and statistical analysis) with their products.

 

 

 

Consent (optional and can be revoked at any time)

 

 

 

Until the consent is withdrawn

 

 

Purpose of creating a profile:

 

 

analyze your preferences, habits, behaviors and interests also through the installation of cookies (e.g. navigation analysis, selected product tracking and virtual shopping cart, see our cookies policy to send you personalized commercial communications/targeted advertising initiatives/offers and services related to your requirements/preferences.

 

 

Consent (optional and can be revoked at any time)

 

 

 

Significant statistics and contact information:

 

 

until the consent is withdrawn

 

Purchase data:

 

7 years after collection

 

 

Upon the end of the storage period mentioned above, personal data will be destroyed, deleted or made anonymous.

COMPULSORY DATA PROVISION

Particularly important statistics and contact details are mandatory for the definition of contracts.

For navigation data, please refer to the Cookies Policy on the homepage of our site.

Recipients of Personal Data

The data may be processed by third parties (e.g. controlling authorities, personal data protection authorities).

All those offering electronic payment services are also considered third parties.

The data may be processed, on behalf of the Company, by third parties who have been appointed Company Directors and have received proper instructions.

These generally fall into the following categories:

 

  1. companies offering e-mail messaging services
  2. companies offering services to achieve goals listed in an information note (IT vendors, senders)
  3. companies offering support to carry out market studies.

Your data may also be shared/transferred to other companies of our group for the purposes stated above and only with the explicit consent of the person concerned, which may be revoked at any time.

Authorized Data Processing Parties

The data may be processed by employees of the company responsible for the processing of Personal Data who are expressly authorized for processing and have received proper instructions.

Transferring Personal Data Outside the European Union

Data transfer outside the EU is not expected.

Rights of Personal Data “Subjects” – Complaint to the Privacy Authority

By contacting email info@ammaflowers.com, anyone who so wishes may request access, cancellation, correction of inaccuracies, and modification of incomplete personal data, as well as limitation of their processing in accordance with article 18 (GDPR), or the cancellation of their processing, if there is a legitimate interest of the data subject (i.e. the natural person concerned with personal data, i.e. if such data identifies or may identifies that person).

If processing is based on consent or a contract, it is automatically activated, whereas the interested parties have the right to receive data in a structured, widely used and easily readable form from an automatic device if this is technically possible.

At any time, interested parties have the right to withdraw the consent offered for commercial purposes and to oppose processing of their data for marketing purposes, including the profile associated with direct marketing.

Interested parties have the right to complain to the Personal Data Protection Authority in the Member State where they reside or work, or in the State where the alleged violation occurred.