1. Who we are

This Policy explains what personal data we collect when you visit our website, place an order or contact us, and how we use it. We process data in accordance with the EU General Data Protection Regulation (GDPR) and Austrian law.

Controller:
[First and last name], trading as FLOWERY
Address: [address]
E-mail: flowerydelivery13@gmail.com
Phone: +4367763680974
Website: [website address]

2. What data we collect

Your contact details: name, phone number, email, and your messenger contact if you write to us there.

Order details: the bouquet you choose, size, price, delivery date, delivery address, the recipient’s name and phone number, the card message and any wishes for the order.

Payment details: amount, payment method, payment status and transaction number. We do not receive or store your full bank card details - they are processed only by the payment service.

Technical data: IP address, browser and device type. These are recorded automatically by the service our website runs on, for its operation and security.

3. What we use the data for

• to accept, confirm and fulfil your order;
• to prepare and deliver your bouquet;
• to contact you or the recipient about the delivery;
• to send you a photo of the finished bouquet before delivery;
• to process payments, refunds and your requests;
• to keep accounts as required by law;
• to keep the website running securely.

We do not currently send marketing messages. If we start, it will only be with your separate consent.

4. Legal bases

Performance of a contract (Art. 6(1)(b) GDPR) - processing orders and delivery.
Legal obligation (Art. 6(1)(c) GDPR) - accounting and tax records.
Legitimate interest (Art. 6(1)(f) GDPR) - website security, fraud prevention, protecting our rights in case of disputes.
Consent (Art. 6(1)(a) GDPR) - optional newsletters or cookies, if we use them. You can withdraw your consent at any time.

5. Recipient’s data

If you order flowers for someone else, you give us their name, address and phone number. By placing the order, you confirm that you are entitled to share this data with us for the delivery. We use the recipient’s data only to deliver that order and never for advertising.

6. Who we share data with

We do not sell personal data. We share only the data needed to fulfil the order:

• service providers who prepare and deliver your order (recipient’s details, address, delivery date, card message);
• the payment services PayPal and Stripe;
• the service our website runs on;
• the messengers WhatsApp, Telegram and Viber, if you chose this way of contact yourself;
• an accountant or tax adviser for bookkeeping;
• public authorities, where required by law.

7. Transfers outside the EU

Some services (for example messengers, payment services or the service our website runs on) may process data outside the EU, including in the USA. In such cases the transfer is based on adequacy decisions of the European Commission or on the EU Standard Contractual Clauses.

8. Cookies

Our website uses only technically necessary cookies, without which it cannot work.

9. How long we keep data

Accounting records (invoices, payments) - 7 years, as required by Austrian law.
Order data and correspondence - up to 3 years after the order is fulfilled, in case of complaints or disputes.
Technical website data - no longer than needed for security.

After that, the data is deleted.

10. Data protection

We limit access to your data, use a secure connection (HTTPS) and share with service providers only what is needed for delivery.

11. Your rights

You have the right to:

• find out what data we hold about you;
• correct inaccurate data;
• request deletion of your data, unless the law requires us to keep it;
• restrict or object to processing;
• receive your data in a convenient format;
• withdraw your consent, if you gave it.

To exercise these rights, write to us at flowerydelivery13@gmail.com. We will reply within one month.

If you believe your data is being processed incorrectly, we ask you to contact us first - we will do our best to resolve the matter. You also have the right to lodge a complaint with the data protection supervisory authority.

12. Is providing data mandatory?

Without your contact details and delivery address, we cannot fulfil your order. We do not use automated decision-making or profiling.

13. Changes

We may update this Policy. The current version is always available on this page.

Contact
FLOWERY
[First and last name]
[Address]
flowerydelivery13@gmail.com
+4367763680974