In compliance with the obligations established in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights and Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, you are provided with the information regarding the processing of your personal data:

Who is responsible for the processing of your data?

Title: RAQUEL ARANA CUAIRAN – 16036553X
Address: Joaquin Achucarro 10, 48940 Leioa
Phone: 652 728 690
Mail: floretadecoracion@gmail.com
Web: https://www.floretadecoracionfloral.com

For any questions, you can contact RAQUEL ARANA CUAIRAN through: floretadecoracion@gmail.com

Our customer service hours are from 9:00 – 21:00 Monday to Friday, 10:00 – 14:00 on Saturdays. You can contact us in any way to get in touch with us.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of any changes.

If you are one of the following groups, please consult the information:

WEB OR EMAIL CONTACTS

What data do we collect through the Web?

We may process your IP, the operating system or browser you use, and even the duration of your visit, anonymously. If you provide us with data in the contact form, you will identify yourself so that we can contact you, if necessary.

For what purposes will we process your personal data?

• Respond to your queries, requests or petitions.
• Manage the requested service, respond to your request, or process your petition.
• Information by electronic means, relating to your request.
• Commercial or event information by electronic means, provided that express authorization exists.
• Conduct analysis and improvements to the Web, our products and services.  Improve our business strategy.

What is the legitimacy for the processing of your data?

Acceptance and consent of the interested party: In those cases where, in order to make a request, it is necessary to fill out a form and click on the send button, doing so will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy. All our forms have the symbol * in the mandatory data. If you do not fill in these fields, or do not check the checkbox for acceptance of the privacy policy, the information will not be sent. Normally it has the following formula: “□ I am over 14 and I have read and accept the Privacy Policy.”

CUSTOMERS

For what purposes will we process your personal data?

• Budget preparation and monitoring through communications between both parties.
• Information by electronic means, relating to your request.
• Commercial or event information by electronic means, provided that express authorization exists.
• Manage the administrative, communications and logistics services performed by the Controller.
• Billing and declaration of appropriate taxes.
• Carry out the corresponding transactions.
• Control and recovery procedures.

SUPPLIERS

For what purposes will we process your personal data?

• Information by electronic means, relating to your request.
• Commercial or event information by electronic means, provided that express authorization exists.
• Manage the administrative, communications and logistics services performed by the Controller.
• Billing.
• Carry out the corresponding transactions.
• Billing and declaration of appropriate taxes.
• Control and recovery procedures.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products in any way.

CONTACTS SOCIAL NETWORKS

For what purposes will we process your personal data?

• Answer your questions and requests  or requests.
• Manage the requested service, respond to your request, or process your petition.
• Engage with you and create a community of followers.

What is the legitimacy for the processing of your data?

Acceptance of a contractual relationship in the corresponding social network environment, and in accordance with its Privacy policies:

• Facebook http://www.facebook.com/policy.php?ref=pf
• Instagram https://help.instagram.com/155833707900388
• Twitter http://twitter.com/privacy
• Pinterest https://about.pinterest.com/es/privacy-policy
• Google* http://www.google.com/intl/es/policies/privacy/ *(Google+ and Youtube)

How long will we keep personal data?

We can only consult or delete your data in a restricted manner by having a specific profile. We will process your data for as long as you allow us to follow you, be friends or click on “like”, “follow” or similar buttons. Any correction of your data or restriction of information or publications must be made through the settings of your profile or user on the social network itself.

Do we include personal data of third parties?

No, as a general rule we only process the data provided to us by the owners. Yes If you provide us with data from third parties, you must first inform and request consent from said persons, otherwise you exempt us from any liability for failure to comply with this requirement.

And data on minors?

We do not process data of minors under 14 years of age. Therefore, please refrain from providing such data if you are not of that age or, where applicable, from providing data of third parties who are not of that age. RAQUEL ARANA CUAIRAN is exempt from any liability for failure to comply with this provision.

Will we communicate electronically?

• They will only be used to manage your request, if it is one of the means of contact that you have provided us.
• If we carry out commercial communications, they will have been previously and expressly  authorized by you.

What security measures do we apply?

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data.

To which recipients will your data be communicated?

Your data will not be transferred to third parties, except under legal obligation. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the data processors necessary for the execution of the agreement. In the event of a purchase or payment, if you choose an application, website, platform, bank card, or any other online service, your data will be transferred to that platform or will be processed in its environment, always with the utmost security. When we order it, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a service provision contract that obliges them to maintain the same level of privacy as us.

Any international transfer of data when using American applications will be subject to the appropriate guarantees required by the GDPR, which guarantees that American software companies comply with European data protection policies regarding privacy.

What Rights Do You Have?

• To know whether we are processing your data or not.
• To access your personal data.
• To request rectification of your data if they are inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted.
• To request the limitation of the processing of your data, in some cases, in which case we will only retain them in accordance with current regulations.
• To transfer your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new controller that you designate for us. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not served you correctly.
• To revoke consent for any processing to which you have given your consent, at any time.

If you change any of your information, please let us know so we can keep it up to date.

Do you want a form to exercise your rights?

• We have forms for the exercise of your rights, ask us for them  email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed electronically or accompanied by a photocopy of the ID.
• If you are represented by someone, you must attach a copy of their ID, or have them sign it with their electronic signature.
• The forms can be submitted in person, sent by letter or by email to the address of the Controller at the beginning of this text.

How long does it take us to respond to your Exercise of Rights?

It depends on the law, but at most within one month from your request, and two months if the issue is very complex and we notify you that we need more time.

Do we use cookies?

If we use cookies other than those that are necessary, you can consult the cookie policy in the corresponding link at the top of our website.

How long will we keep your personal data?

• Personal data will be retained as long as you remain connected to us.
• Once you are disconnected, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a judge or court may request them in accordance with the statute of limitations for legal actions.
• The data processed will be kept until the legal deadlines mentioned above expire, if there is a legal obligation to maintain them, or if there is no such legal deadline, until the interested party requests their deletion or revokes the consent granted.
• We will keep all information and communications relating to your purchase or the provision of our service for the duration of the product or service warranties, in order to address any potential claims.