Information relating to the processing of personal data of users in accordance with Regulation 2016/679 (“GDPR”)
Liable for personal data
AMMA FLOWERS LTD with registered office at Kennedy 67, ATHIENITIS KENNEDY PARK, 3rd floor, 1076 Nicosia, Cyprus (“Company”),
Data Protection Officer
Application of Personal Data Processing
Legal Framework for the Processing of Personal Data
Retention Period of Personal Data
|The personal data provided by you when completing a form will be processed by the Company to satisfy information requests about the Company and/or its products/services.
|Implementation of the contract for which the interested party is the data subject
|The Personal Data will be stored for one (1) year, i.e. for the time it is estimated that it will be required to process the requests. After this time-period, your data will be deleted or become anonymous.
Providing Personal Data
Your personal data (phone number, email, home country) is required to provide the company with the information you have requested, as a non-disclosure of such data will not allow the Company to process any requests you may have.
Your personal data must be provided so as to enable the company to provide you with the information you have requested, so if you do not provide the above personal data, the Company will not be able to process any of your requests.
Recipients of Personal Data
Your data (in this case your email or your full name if known to us) may be processed on behalf of the Company by third parties (e.g. controlling authorities or privacy agencies).
These generally fall into the following categories:
- Companies offering management and/or maintenance of the Company’s website.
- Companies offering customer management services who offer call center services
- Authorities-Control bodies and any public body lawfully entitled to request personal data
Authorized Data Processing Parties
Your personal data may be processed by employees of the company responsible for the processing of personal data. These employees have been explicitly authorized by the Company and have received proper instructions.
Transferring Personal Data Outside the European Union
Data transfer outside the EU is not expected.
Rights of Personal Data “Subjects” – Complaint to the Privacy Authority
By contacting email email@example.com, anyone who so wishes may request access, cancellation, correction of inaccuracies, and modification of incomplete personal data, as well as limitation of their processing in accordance with article 18 (GDPR), or the cancellation of their processing, if there is a legitimate interest of the data subject (i.e. the natural person concerned with personal data, i.e. if such data identifies or may identifies that person).
If processing is based on consent or a contract, it is automatically activated, whereas the interested parties have the right to receive data in a structured, widely used and easily readable form from an automatic device if this is technically possible.
Interested parties have the right to complain to the Personal Data Protection Authority in the Member State where they reside or work, or in the State where the alleged violation occurred.