Florestore.com Privacy Policy
"Florestore" is deeply committed to compliance with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures set forth in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in the Organic Law 3/2018, of December 5, of Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter LOPD).
In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through registration or contact forms, or by sending emails, and that these will be processed by "Florestore", responsible for the treatment, whose data are:
- Corporate Name: Telerosa Spain S.L.
- TAX ID: B92847920
- Registered OfficeEuropa Avenue, 5, 29003 Malaga, Spain
- Phone: 935 955 525
- eMail rgpd@florestore.com
Collection and Processing of Personal Data
A personal data is any information relating to a person: name, email, address, telephone, NIF/NIE.... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.
"Florestore", as Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending e-mail or by filling in the forms included in the website.
Only the data necessary to perform the contracted service, or to adequately respond to the request for information made by the User will be obtained. The data collected are identifying and correspond to a reasonable minimum to be able to carry out the activity performed. In particular, no specially protected data is collected at any time. In no case will the data be used for purposes other than those for which they were collected.
Contact forms/email
PurposeTo answer your request for information made through our contact form(s).
LegitimationThe legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
Transfer of dataThe personal data will be processed through servers managed by ProfessionalHosting, , who will be considered the Data Processor.
Mailing list registration forms (newsletter)
Purpose Sending communications, some of them commercial, of interest to users according to the subject of the web. As established by the LSSICE, "Florestore" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to customers for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.
LegitimationThe legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
Transfer of dataThe personal data will be processed through servers managed by Mailchimp, , who will be considered the Data Processor.
Customer registration/registration/contract forms
Purposes:
- Manage your User registration on our website.
- Manage purchases made.
- Provide information about the processing and status of purchases.
- Historical record of purchases made on our website.
- Comments and content management.
- Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of orders.
Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.
Transfer of data: "Florestore" will not transfer or communicate to any third party your data, except in the cases provided by law or when strictly necessary for the provision of a service. Specifically, the data may be transferred to:
- Technology or IT service providers.
- Payment service providers.
- Courier and parcel delivery companies.
- Third parties or intermediaries, as service providers, operating on our own behalf (agency, consultancy, etc.).
The transfer of data will be produced respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or adherence to their privacy policies set out in their respective websites. The User may refuse the transfer of his/her data to the Data Processors, by means of a written request, by any of the aforementioned means.
In addition, in those cases where it is necessary, Customer data may be transferred to certain agencies, in compliance with a legal obligation: Spanish Tax Agency, banks, Labor Inspection, etc..
Comments form
Purpose: to make a comment or review for publication on the website.
Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
Transfer of data: Personal data will be processed through the servers of this website, managed by ProfessionalHosting, which shall be considered as the Data Processor.
Only persons over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians is a mandatory condition for us to process their personal data.
On the other hand, only persons over 18 years of age will be able to contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.
User Registration
When the User registers through the corresponding form, the information we collect includes:
- Name and surname
- Email and/or telephone
- Shipping Addresses
- IP
- Username/password
The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter his/her email address to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping his/her password confidential, as well as for all the uses he/she makes of it. You must inform "Florestore" of any unauthorized use of your account or password as soon as possible.
The User, once registered, has access to a private panel, where you can view certain content, record purchases made, etc.. You can also manage your account options, such as password or user data.
The User may receive the following notifications:
- When registering on the platform (account validation email).
- When making purchases, such as proof of purchase, incidents, shipments made, etc.
- The User receives the newsletter of the store if he/she has registered in it, from which he/she can unsubscribe in his/her User panel and in the corresponding links included at the bottom of the newsletter.
- For comments made, and responses to them.
- By password recovery (specified in the previous field).
- When unsubscribing or deleting the account.
Users of the "Florestore" website are informed that the technical and organizational security measures available to us have been adopted to prevent the loss, misuse, alteration, unauthorized access and theft of data, and thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current legislation on data protection. The personal data collected in the forms are processed only by the staff of "Florestore" or the designated Data Processors.
The "Florestore" Web Site also has an SSL encryption, which allows the User to securely send their personal data through the contact or registration forms of the website.
Accuracy of data
The User declares that all data provided by him/her are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of his data and will be the only responsible for any disputes or litigation that may result from the falsity of such data. It is important that, so that we can keep the personal data updated, the User informs "Florestore" whenever there has been any change in them.
Transfer of data
"Florestore" will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a data processor. Thus, the User accepts that some of the personal data collected will be provided to these Data Processors (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of a contracted service or product purchased. The User also accepts that, in case of provision of services, these may be, in whole or in part, subcontracted to other persons or companies, which will be considered Processors, with whom the corresponding confidentiality contract has been agreed, or adhered to their privacy policies, established on their respective websites. The User may refuse the transfer of his/her data to the Data Processors, by means of a written request, by any of the aforementioned means.
In addition, in those cases where it is necessary, Customer data may be transferred to certain agencies, in compliance with a legal obligation: Spanish Tax Agency, banks, Labor Inspection, etc..
The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must contact us, providing documentation proving their identity (ID card or passport), by email to rgpd@florestore.com, or by written communication to the address that appears in our Legal Notice. Such communication must include the following information: name and surname of the User, the purpose of the request, the address and supporting data.
The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as legal representative of the User, providing the documentation proving such representation.
The User may request the exercise of the following rights:
- Right to request the access to personal data, which is the right to obtain information on whether their own personal data are being processed, the purpose of the processing that, if any, is being carried out, as well as the information available on the origin of such data and the communications made or planned for such data.
- Right to request your rectification, in the event that the personal data is incorrect or inaccurate, or deletion of data that proves to be inadequate or excessive.
- Right to request the limitation of their treatment, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "Florestore".
- Right to object to the processing: this refers to the data subject's right not to have his or her personal data processed or to cease processing in cases where the data subject's consent to the processing is not required, or in the case of commercial prospecting files or for the purpose of making decisions regarding the data subject and based solely on the automated processing of his or her data, unless for legitimate reasons or for the exercise or defense of possible claims, the data must continue to be processed.
- Right to portability of the data: in case you want your data to be processed by another company, "Florestore" will provide you with the portability of your data in exportable format.
In the event that consent has been granted for a specific purpose, the User has the right to withdraw the consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
We undertake to execute all these rights within the maximum legal term (1 month).
If a User considers that there is a problem with the way in which "Florestore" is handling his/her data, he/she can address his/her complaints to the Security Manager or to the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.
The personal data of the Users who use the contact form or the contact form to send us an email requesting information will be processed for the time strictly necessary to fulfill the request for information, or until the consent granted is revoked.
The Customer's personal data will be processed until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, and may be kept until the end of the contractual relationship:
- 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries...); Arts. 66 and following General Tax Law (accounting books...)
- 5 years: Art. 1964 Civil Code (personal actions without special time limit)
- 6 years: Art. 30 Code of Commerce (accounting books, invoices...)
- 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Law.
- No deadline: disaggregated and anonymized data.
On the other hand, the data of Users who register for the newsletter will be kept indefinitely, until the consent given is revoked.
In the case of data processing of candidates (C.V.), "Florestore" will be able to keep their curriculum for a maximum of two years to incorporate it to future calls, unless the candidate declares otherwise.
"Florestore" has profile in some of the main social networks on the Internet (Facebook, Twitter, Instagram), recognizing itself in all cases responsible for the processing of the data of its followers, fans, subscribers, commentators and other User profiles (hereinafter, followers) published by "Florestore".
The purpose of data processing by "Florestore", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized service to the User. The legal basis that legitimizes this treatment will be the consent of the person concerned, which may be revoked at any time.
In no case "Florestore" will extract data from social networks, unless the consent of the User is specifically and expressly obtained for this purpose (for example, for the realization of a contest).
"Florestore" uses the company's electronic communications delivery services Mailchimp, which is located in the United States. Standard contractual clauses approved by the European Commission have been signed with this entity, in order to ensure the adequate level of protection in the processing of your personal data, in accordance with the criteria established by RGPD.
By accepting this privacy policy, the User expressly and unequivocally grants his/her consent to the international transfer of his/her personal data to this/s the service provider/s.
The applicant who sends electronic communications to "Florestore", with the purpose of accessing the personnel selection processes of the responsible, authorizes us to analyze the documents sent (for example, the C.V.), all the content that is directly accessible through Internet search engines (for example, Google), the profiles maintained in professional social networks (for example, LinkedIn), the data obtained in the access tests and the information disclosed in the job interview, in order to evaluate his candidacy and to be able, if necessary, to offer him a job position. In case the candidate is not selected, "Florestore" will be able to keep his C.V. stored for a maximum of two years, in order to incorporate it to future calls, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.
Confidentiality
The information provided by the User will, in any case, be considered confidential, and cannot be used for purposes other than those described herein. "Florestore" undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested or the duration of its relationship with the User.
Validity
This privacy and data protection policy has been drafted by ExpertosLOPD®, a firm specializing in data protection for online stores, day January 24, 2022, y may vary according to changes in regulations and jurisprudence that may occur, being the responsibility of the owner of the data to read the updated document, in order to know their rights and obligations in this regard at all times.