Data Protection Policy

Protection of personal data

Identity of the data controller

Aquarelle Búcaro, S.L. (en adelante - C/Bell 17 - Getafe 28906. Registered in: Registro Mercantil de Madrid, Tomo 15268, de sociedades, Folio 122, Hoja M-255736, NIF: B82552878, EU VAT: ESB82552878.

A partnership of trust between and its customers takes great care to protect the personal data of its customers. To this end, we undertake to comply with European Regulation 2016/679 of 27 April 2016 on the protection of personal data, or “GDPR”.

By using the website, you agree to the collection and use of your personal data as set out in this data protection policy.

Scope of application

This data protection policy describes how processes your personal data when you use our website. Our policy also covers other personal data collection channels when you contact our Customer Service, including by telephone. Any subcontracting necessary to complete your order on our website or data processing service may, under their own general terms and conditions of use, have confidentiality rules that supplement this policy, in accordance with the GDPR.

Data collection and the purposes of data processing collects personal data on all users who browse, view and place orders on the website through the use of cookies, in accordance with applicable Spanish legislation and European regulations.

When do we collect your personal data?


What personal information do we collect?

The customer's personal data as indicated below is only retained for as long as strictly necessary for the above purposes.

Data concerning your order

The details strictly necessary to complete your orderare indicated by an asterisk and include:

1. Your full name
2. Your email address
3. Your landline or mobile telephone number
4. Your message and printed photo, if required
5. Your bank details
The following information is also required:
6. Details and full name of the recipient
7. Postal address and telephone number

We also collect personal information when you purchase our products, including the amount and nature of your purchases, your orders, your invoices and your customer path.

The message and photo you choose to send with your bouquet of flowers are considered confidential.

How do we use your data?

All personal data is confidential and access is restricted to employees or subcontractors acting on behalf of who need the information to carry out their tasks. Everyone with access to your data is bound by a duty of confidentiality. The details of the recipient of your bouquet of flowers are used solely to deliver your order on time. is bound by professional secrecy and will not pass this information on to third parties or use it for marketing purposes.

By law, we do not collect data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union, personal genetic data, personal biometric data for the purposes of identifying specific individuals, personal data concerning health, or personal data concerning the sex life or sexual orientation of individuals.

These specific types of personal data are never collected or processed by

The data collected is processed for the following purposes:

Managing obligations towards our customers and managing orders and deliveries.

In order to meet our obligations to our customers, we collect and use your personal data to manage our business relationship, especially your purchases and orders, to deliver your products and to offer our services and promotions that might interest you. This information helps us improve your online purchasing experience, as explained below.

Managing our customer relationship

We use and retain your personal data to update our customer files and offer you tailored and personalised services. We give you the option to join our Aquarelle Club loyalty programme to send you offers that fit your purchasing habits and interests as closely as possible.

Communicating with you

We collect and retain your personal information to communicate with you concerning your orders, invoices or Customer Service complaints.

Targeted partner advertising collects and analyses your data for marketing (profiling) purposes, with the assistance of specialist providers. To this end, your data is converted into detailed pseudonymised profiles (i.e. the profiles can no longer personally identify you when sending out advertising content when you browse the Internet), which are used by to conduct targeted Internet (display) advertising campaigns focused around your centres of interest and to send you offers that match your consumption habits.

Legal or regulatory requirements

We may be required to disclose your personal data if we receive legitimate requests from public authorities, for example to meet to national security, fraud prevention or law enforcement requirements.

Preventing and combating fraud

The personal data collected is also used to prevent and combat fraud, especially with bank cards. To prevent any fraudulent payments, reserves the right to verify the personal details disclosed by the customer when placing orders and to adopt all measures considered necessary to ensure that the owner of the payment account is the person placing the order. Such checks might include requests for proof of identity and/or addresses.

If the customer refuses, reserves the right to cancel the order placed by the customer.

Managing your personal data

• With, you have full control over your personal data

When you provide personal information to, you have access to your data and you can update, change or delete it at any time by writing to the following address:
Personal Data Protection Department
C/Bell 17 - Getafe 28906

• Your rights concerning the protection of your data

In accordance with GDPR, you have a number of rights over the management of your data:

• How to exercise your rights
Personal Data Protection Department
C/Bell 17 - Getafe 28906

If you require further information on these rights, please contact us at the above address.

We will respond to your requests as soon as possible, and within one month of receipt in all cases.

Transfer of personal data outside the European Union

The data collected may be processed outside the European Union. If this is the case, makes the necessary arrangements with its subcontractors to guarantee an appropriate level of protection for your personal data fully in accordance with applicable regulations.

If the subcontractors concerned are not party to the Privacy Shield agreement for transfers to the United States of America, or are not located in a country seen as having adequate protection, they will have signed the European Commission’s “standard contractual clauses” or shall be subject to binding internal rules approved by the authorities.

Data retention period

Your personal data is retained for the time necessary to serve the purpose for which they were collected.

Future of personal data after your death informs users that they may, during their lifetime, give instructions on the retention, deletion and disclosure of their personal data after their death. These instructions may be general or specific. Users may change or revoke their instructions at any time by submitting a request together with valid proof of identity to the following address:
Personal Data Protection Department
C/Bell 17 - Getafe 28906

We will respond to your duly completed requests as soon as possible, and within one month of receipt in all cases


When creating an account and when choosing their preferences in the “My account” section, users can subscribe to the newsletter and choose to receive regular information on new and exclusive

SMS / MMS may use customers’ mobile numbers to manage orders and for marketing purposes. Customers may object at any time and free of charge by simply writing to the following address, enclosing valid proof of identity:
Personal Data Protection Department
C/Bell 17 - Getafe 28906

We will respond to your requests as soon as possible, and within one month of receipt in all cases.


This service allows customers to post a review on the websites of our partners eKomi and Trustpilot to share their purchasing experience. The reviews are published anonymously and are publicly accessible and available on the websites at all times. Customers authorise to publish its review of the purchasing experience on the website. Reviews must not contain defamatory, abusive, illegal, vulgar or slanderous messages concerning third parties or natural or legal persons. They must not be racist, violent or pornographic, incite discrimination, harm the honour or reputation of others or, more generally, violate applicable law.

Updates to our personal data policy

This policy may be periodically updated without prior notice. Any amendments enter into force immediately from the time of publication of the new policy on We use your personal data in accordance with the policy in force when you submit the data to us. We will inform you of any significant change to our policy and we will request your consent where necessary and when it affects the purpose of the collecting your personal data. In order to remain compliant with current personal data protection regulations, this policy is reviewed every year by our services.


“Anonymisation” means the result of processing personal data in order to irreversibly prevent identification;

“Collect” means the gathering of personal data, through the use of questionnaires or online forms, for example;

“Consent” is defined as any free, specific, informed and unequivocal declaration of will whereby you agree, via a declaration or a clear positive act, to the processing of your personal data;

“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“Rights protecting your personal data”means all fundamental rights as described in European legislation concerning:


“Pseudonymisation” means any technical and organisational measures that involve replacing an identifier to ensure that the personal data is not attributed to an identified or identifiable natural person;

“Business relationship” refers to all relationships between and its customers including, for example, when you purchase products or services, use the after-sales service, take part in online games, return your products, submit complaints and take part in satisfaction surveys, or as part of your loyalty programme;

“Controller” means the person or body which, alone or jointly with others, determines the purposes and means of the processing of your personal data;

“Subcontractor” means the person who processes personal data on behalf of the person, organisation or body responsible for processing;

“Third party” refers to any person other than and yourself;

“Processing of personal data” means any operation or set of operations applied to your data, regardless of the type of online service and the procedure used.