Data Protection Policy

Protection of personal data

Data Controller

UNIVERSAL FLOWER SAS, a simplified joint-stock company registered in France under SIREN number 419 910 641, with registered office at 39 rue Anatole France, 92300 Levallois-Perret, France, is the data controller for the personal data collected and processed through the website https://www.aquarelle.es.

The products and services sold in Spain through the website https://www.aquarelle.es are managed by Aquarelle BĂșcaro, S.L., which is involved in the commercial and operational management of orders placed in Spain, in coordination with UNIVERSAL FLOWER SAS.

For the purposes of this Data Protection Policy, any references to “Aquarelle.es” shall be understood as referring to the service provided through the website https://www.aquarelle.es, under the responsibility of UNIVERSAL FLOWER SAS and with the operational involvement of Aquarelle BĂșcaro, S.L. in Spain.

A relationship of trust between Aquarelle.es and its customers

Aquarelle.es pays special attention to the protection of its customers’ personal data. We therefore undertake to comply with the General Data Protection Regulation, Regulation (EU) 2016/679 of 27 April 2016, on the protection of natural persons with regard to the processing of personal data.

By using https://www.aquarelle.es, you accept the collection and use of your personal data under the terms described in this Data Protection Policy.

Scope of application

This Data Protection Policy describes how your personal data is processed when you use our website https://www.aquarelle.es or any of the channels made available for order management and customer service, in particular telephone, email or any other available contact method.

Service providers, data processors or partners involved in the management of orders must process personal data in accordance with the GDPR and the applicable data protection regulations.

Collection and purposes of data processing

Aquarelle.es collects personal data from users who browse, visit or place orders on our website, including the use of cookies, in accordance with Spanish law and current European regulations.

When do we collect your personal data?

What personal information do we collect?

The customer’s personal data detailed below is kept only for as long as necessary to fulfil the purposes for which it was collected and, where applicable, for the legally required retention periods.

Data relating to your order

The information required to process your order is marked with an asterisk in the relevant forms and may include:

1. your first name and surname;
2. your email address;
3. your landline or mobile telephone number;
4. your personal message and, where applicable, the photo you have chosen to attach to the order;
5. the data required to manage payment;
6. the recipient’s details, including first name and surname;
7. the recipient’s postal address and telephone number.

We also collect personal information when you purchase our products. In particular, we may collect information about the quantity and nature of your purchases, information relating to your orders, invoices and other data connected with your customer experience.

The written message and the photo you have chosen to attach to your bouquet may contain personal or confidential information. This data is used exclusively to prepare and deliver the requested order.

How do we use your data?

All personal data is confidential. Access is limited to Aquarelle.es staff, UNIVERSAL FLOWER SAS staff and data processors acting on its behalf, where such access is necessary for the management of your orders, the provision of the service or compliance with legal obligations.

All persons with access to your data are bound by a duty of confidentiality. The details of the bouquet recipient are used exclusively to ensure the correct delivery of the order. The recipient’s data will not be used for commercial purposes.

In accordance with the applicable regulations, we do not collect data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, health data or data concerning a person’s sex life or sexual orientation.

Aquarelle.es does not intentionally collect or process this type of personal data.

The data collected is necessary to carry out the following processes:

Managing our obligations towards our customers: orders and deliveries

In order to fulfil our obligations towards customers, we collect and use the personal information necessary to manage the commercial relationship, including the processing of purchases and orders, product delivery, payment management, invoicing and the handling of queries, complaints or incidents.

Managing the commercial relationship

We use and store your personal information in order to keep our customer records up to date and to offer you tailored and personalised services. We may also offer you the opportunity to join the Club Aquarelle.es loyalty programme, with the aim of offering you deals adapted to your purchasing habits and interests, always in accordance with the applicable regulations.

Communication with you

We collect and store your personal information in order to communicate with you regarding your orders, invoices, deliveries, complaints or enquiries to Customer Service.

Improving your customer experience

We may analyse your personal information to improve your customer experience. Unless you object, these analyses may allow us to offer you products, offers, promotions or content that match, as far as possible, your purchasing habits and interests.

Personalised advertising

Aquarelle.es may collect and analyse certain data for marketing and personalisation purposes, with the assistance of specialised service providers. In this context, your data may be transformed into pseudonymised profiles, meaning profiles that do not directly identify you when advertising content is displayed while you browse the Internet.

These profiles may be used to run online advertising campaigns tailored to your interests and to offer you content or deals that may be relevant to you, always in accordance with the applicable regulations and the consent preferences you have configured.

Legal or regulatory requirements

We may disclose your personal information where necessary to comply with legal obligations, legitimate requests from public authorities, security requirements, fraud prevention or law enforcement.

Prevention and fight against fraud

The data collected may also be used in the context of preventing and combating fraud, especially in relation to card payments. Aquarelle.es reserves the right to verify the personal data provided by the customer during order validation and to take the necessary measures to check that the person whose bank account is used for payment is the person who placed the order, in order to prevent fraudulent payments.

This verification may consist of a request for proof of identity and/or proof of address.

In the absence of a satisfactory response from the customer, Aquarelle.es reserves the right to cancel the order placed.

Managing your personal data

‱ At Aquarelle.es, you remain in control of your personal data

When you provide personal information to Aquarelle.es, you have the right to access your data and, where applicable, to update, modify or request its deletion.

You may send your requests by post to the following address:

Aquarelle.es
Personal Data Protection Department
C/ Bell 17
28906 Getafe, Madrid
Spain

‱ Your data protection rights

In accordance with the GDPR, Regulation (EU) 2016/679 of 27 April 2016, you have the right to:

‱ How can you exercise your rights?

You may exercise your rights through your customer account, in the “My Account” section of our website, where this option is available.

You may also exercise your rights by post, accompanied by a copy of a valid proof of identity, sent to the following address:

Aquarelle.es
Personal Data Protection Department
C/ Bell 17
28906 Getafe, Madrid
Spain

If you would like more information about the content of these rights, you may contact us at the address indicated above.

We will respond to your request as soon as possible and, in any event, within one month from receipt of the request. This period may be extended where necessary, in accordance with the applicable regulations.

Transfer of personal data outside the European Union

The data collected may be processed outside the European Union where this is necessary for the provision of the service or for the operation of certain technical service providers.

In such cases, the necessary safeguards will be adopted to ensure an adequate level of protection for your personal data, in accordance with the applicable regulations. Where the recipient is not located in a country recognised by the European Commission as providing an adequate level of protection, mechanisms recognised by the regulations may be used, such as the standard contractual clauses approved by the European Commission or other appropriate safeguards.

Data retention period

Your personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the legally required periods in order to address any liabilities arising from the processing, the contractual relationship or legal obligations.

Fate of personal data after death

Aquarelle.es informs the user that, under the terms provided by the applicable regulations, they may establish instructions regarding the access, retention or deletion of their personal data after their death.

These instructions may be modified or revoked at any time by sending a request accompanied by a valid proof of identity by post to the following address:

Aquarelle.es
Personal Data Protection Department
C/ Bell 17
28906 Getafe, Madrid
Spain

We will respond to your request as soon as possible and, in any event, within one month from receipt of the request.

Newsletters

When creating an account and managing your preferences through the “My Account” section, you may subscribe to the newsletter and choose to periodically receive offers, news and commercial communications from Aquarelle.es.

You may change your preferences or unsubscribe at any time by clicking on the link provided for this purpose at the bottom of our newsletters.

SMS / MMS

Aquarelle.es may use the customer’s mobile telephone number for the management of orders, deliveries and incidents related to the contracted service. It may also use it for commercial purposes where there is a legal basis for doing so.

At any time, the customer may object to this use easily and free of charge by post, accompanied by a valid proof of identity, sent to the following address:

Aquarelle.es
Personal Data Protection Department
C/ Bell 17
28906 Getafe, Madrid
Spain

We will respond to your request as soon as possible and, in any event, within one month from receipt of the request.

Reviews

Our user experience review process allows the customer to publish a comment on the websites of our providers, such as eKomi or Trustpilot, in order to share their purchasing experience.

Published reviews may be made available to the public on these websites and, where applicable, may also be displayed on our website. The customer authorises Aquarelle.es to publish and communicate their opinion about their purchasing experience, in accordance with the applicable terms.

The review must not contain defamatory, abusive, unlawful, vulgar, offensive, racist, discriminatory, violent, pornographic or illegal content, nor any content that infringes the rights of third parties, whether natural or legal persons.

Updates to our Data Protection Policy

This Data Protection Policy may be updated periodically. Any amendment will take effect from its publication on the website https://www.aquarelle.es.

We will use your personal information in accordance with the Data Protection Policy in force at the time you provide us with your data. Where substantial changes occur that may affect the purposes of the processing or your rights, we will inform you and, where necessary, request your consent.

Our Data Protection Policy is reviewed periodically in order to adapt it to the regulations in force on the protection of personal data.

Glossary

“Anonymisation” refers to the result of processing personal data in such a way as to irreversibly prevent the identification of a natural person.

“Collect” refers to the collection of personal data. This collection may be carried out, among other means, through online forms, account creation, orders or communications with Customer Service.

“Consent” means any freely given, specific, informed and unambiguous indication of your wishes by which you agree, through a statement or clear affirmative action, to the processing of your personal data.

“Personal data” refers to any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

“Rights protecting your personal data” refers to the set of rights recognised by the applicable data protection regulations, including:

“Pseudonymisation” refers to the processing of personal data in such a manner that the data can no longer be attributed to an identified or identifiable natural person without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures intended to ensure that the personal data is not attributed to an identified or identifiable natural person.

“Commercial relationship” refers to the set of relationships between Aquarelle.es and its customers, for example when you purchase products or services, use after-sales service, make a complaint, take part in satisfaction surveys or use the loyalty programme.

“Data controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of your personal data.

“Data processor” means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

“Third parties” refers to any natural or legal person, public authority, agency or body other than the data subject, the data controller, the data processor and persons authorised to process personal data under the direct authority of the controller or processor.

“Processing of personal data” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction.