Data Protection Policy (GDPR)

Our commitment to protecting your personal data

Data controller's identity
We are the FAMOUS ROSES SRL, a company with headquarters în

Bulevardul BANU MANTA 18
Sector 1, BUCURESTI
Postal Code: 011226,

registered in the Trade and Companies Register under number J40/17155/2023, and the unique code of registration RO 48782220, and our legal representative is the administrator BUHNA VIACESLAV, Tel: +40 742 033 977, Email: viaceslav.buhna@famousroses.eu

GDPR Roles and Employees
FAMOUS ROSES SRL have designated Buhna Viaceslav as our Data Protection Officer (DPO) and have appointed a data privacy team to develop and implement our roadmap for complying with the new data protection Regulation. The team are responsible for promoting awareness of the GDPR across the organisation, assessing our GDPR compliance, identifying any gap areas and implementing the new policies, procedures and measures.
FAMOUS ROSES SRL understands that continuous employee awareness and understanding is vital to the continued compliance of the GDPR and have involved our employees in our preparation plans.

If you have any questions about our GDPR compliance policies, please contact

Buhna Viaceslav
T: +40742033977
E: viaceslav.buhna@famousroses.eu

A partnership of trust between FAMOUS ROSES SRL and its customers.

FAMOUS ROSES SRL (hereinafter FAMOUS ROSES) takes great care to protect the personal data of its customers. To this end, we undertake to comply with European Regulation 2016/679 of 27 April 2016 on the protection of personal data, or “GDPR”.
By using the website famousroses.eu, you agree to the collection and use of your personal data as set out in this data protection policy.

Scope of application
This data protection policy describes how FAMOUS ROSES processes your personal data when you use our website. Our policy also covers other personal data collection channels when you contact our Customer Service, including by telephone. Any subcontracting necessary to complete your order on our website or data processing service may, under their own general terms and conditions of use, have confidentiality rules that supplement this policy, in accordance with the GDPR.


Data collection and the purposes of data processing
FAMOUS ROSES collects personal data on all users who browse, view and place orders on the website through the use of cookies, in accordance with applicable Romanian legislation and European regulations.
When do we collect your personal data?
•When you create an FAMOUS ROSES account
•When you visit our website, which uses cookies
•When you subscribe to our newsletter
•When you place an order
•When you contact our Customer Service by any of the available means of communication, such as our contact form or by telephone
•When you browse our web site and view our products
•When you write a review of your order

What personal information do we collect?
The customer's personal data as indicated below is only held for as long as strictly necessary for the above purposes.

Data concerning your order
The details strictly necessary to complete your orderare indicated by an asterisk and include:
1. Your full name
2. Your email address
3. Your landline or mobile telephone number
4. Your message if it is a gift
5. Your bank details
The following information is also required:
6. Details and full name of the recipient
7. Postal address and telephone number
We also collect personal information when you purchase our products, including the amount and nature of your purchases, your orders, your invoices and your customer path.

How do we use your data?
All personal data is confidential and access is restricted to FAMOUS ROSES employees or subcontractors acting on behalf of FAMOUS ROSES who need the information to carry out their tasks. Everyone with access to your data is bound by a duty of confidentiality. The details of the recipient of your bouquet of flowers are used solely to deliver your order on time. FAMOUS ROSES is bound by professional secrecy and will not pass this information on to third parties or use it for marketing purposes.

By law, we do not collect data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union, personal genetic data, personal biometric data for the purposes of identifying specific individuals, personal data concerning health, or personal data concerning the sex life or sexual orientation of individuals.
These specific types of personal data are never collected or processed by FAMOUS ROSES.

The data collected is processed for the following purposes:
•Managing and monitoring business relationships between FAMOUS ROSES and the customer (particularly operations relating to orders, deliveries, transactions, payments and invoices, complaints, etc.);
•Sending newsletters (see “Newsletters” paragraph);
•Customising site content and improving your customer experience;
•Producing statistics for measuring site usage and for marketing studies;
•Preventing and combating fraud when paying for orders;

Managing obligations towards our customers and managing orders and deliveries.
In order to meet our obligations to our customers, we collect and use your personal data to manage our business relationship, especially your purchases and orders, to deliver your products and to offer our services and promotions that might interest you. This information helps us improve your online purchasing experience, as explained below.

Managing our customer relationship
We use and retain your personal data to update our customer files and offer you tailored and personalised services. We give you the option to join our FAMOUS ROSES Club loyalty programme to send you offers that fit your purchasing habits and interests as closely as possible.

Communicating with you
We collect and retain your personal information to communicate with you concerning your orders, invoices or Customer Service complaints.

Targeted partner advertising
FAMOUS ROSES collects and analyses your data for marketing (profiling) purposes, with the assistance of specialist providers. To this end, your data is converted into detailed pseudonymised profiles (i.e. the profiles can no longer personally identify you when sending out advertising content when you browse the Internet), which are used by FAMOUS ROSES to conduct targeted Internet (display) advertising campaigns focused around your centres of interest and to send you offers that match your consumption habits.

Legal or regulatory requirements
We may be required to disclose your personal data if we receive legitimate requests from public authorities, for example to meet to national security, fraud prevention or law enforcement requirements.

Preventing and combating fraud
The personal data collected is also used to prevent and combat fraud, especially with bank cards. To prevent any fraudulent payments, FAMOUS ROSES reserves the right to verify the personal details disclosed by the customer when placing orders and to adopt all measures considered necessary to ensure that the owner of the payment account is the person placing the order.
If the customer refuses, FAMOUS ROSES reserves the right to cancel the order placed by the customer.

Managing your personal data
• With FAMOUS ROSES, you have full control over your personal data.
When you provide personal information to FAMOUS ROSES, you have access to your data and you can update, change or delete it at any time by writing to the following address:

FAMOUS ROSES SRL
Bulevardul BANU MANTA 18
Sector 1, BUCURESTI
COD POSTAL: 011226
ROMANIA

Your rights concerning the protection of your data
In accordance with European Regulation 2016/679 of 27 April 2016, as amended by the GDPR, you have a number of rights over the management of your data:
•The right to object to the processing of your personal data;
•The right to access any personal data that we process;
•The right of rectification;
•The right of data portability;
•The right of erasure;
•The right to restrict processing;
•The right to give instructions concerning the retention, erasure and disclosure of your personal data after your death;
•The right to file a claim with the Romanian supervisory authority (ANSPDCP).

How to exercise your rights
•By post, enclosing a copy of a valid identity document, at the following address:

FAMOUS ROSES SRL
Bulevardul BANU MANTA 18
Sector 1, BUCURESTI
Cod postal: 011226
ROMANIA

If you require further information on these rights, please contact us at the above address. We will respond to your requests as soon as possible, and within one month of receipt in all cases.

Transfer of personal data outside the European Union
The data collected may be processed outside the European Union. If this is the case, FAMOUS ROSES makes the necessary arrangements with its subcontractors to guarantee an appropriate level of protection for your personal data fully in accordance with applicable regulations.

If the subcontractors concerned are not party to the Privacy Shield agreement for transfers to the United States of America, or Canad, or are not located in a country seen as having adequate protection, they will have signed the European Commission’s “standard contractual clauses” or shall be subject to binding internal rules approved by the authorities.

Data retention period
Your personal data is retained for the time necessary to serve the purpose for which they were collected.
Future of personal data after your death

FAMOUS ROSES informs users that they may, during their lifetime, give instructions on the retention, deletion and disclosure of their personal data after their death. These instructions may be general or specific. Users may change or revoke their instructions at any time by submitting a request together with valid proof of identity to the following address:

FAMOUS ROSES SRL
Bulevardul BANU MANTA 18
Sector 1, BUCURESTI
Cod postal: 011226
ROMANIA

We will respond to your duly completed requests as soon as possible, and within one month of receipt in all cases

Newsletters
When creating an account and when choosing their preferences in the “My account” section, users can subscribe to the newsletter and choose to receive regular information on new and exclusive.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as outlined below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses outlined below, we may use the information we collect about you to communicate with you, to provide or improve the Services, to comply with any applicable legal obligations, to enforce applicable terms and conditions, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Website and how you use our Services. When we use the term “personal information,” we refer to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

The information you provide to us directly through our Services may include:

  • Contact details, including your name, address, phone number, and email.

  • Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.

  • Account information, including username, password, security questions, and other information used for account security purposes.

  • Shopping information, including items you view, add to your cart, save to your account (such as loyalty points, reviews, recommendations, or gift cards), or purchase.

  • Loyalty points/product reviews/recommendations/saved gift cards.

  • Customer support information, including any details you choose to include in communications with us, for example when you send a message through the Services.

Some features of the Services may require you to provide certain personal information directly. You may choose not to provide this information, but doing so may prevent you from using or accessing those features.

Information We Collect About Your Use

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Website and your account, including device information, browser information, network connection details, your IP address, and other information related to your interaction with the Services.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:

  • Companies that support our Website and Services, such as Shopify.

  • Our payment processors, who collect payment information (e.g., bank account details, credit or debit card information, billing address) to process your payment, fulfill your orders, and provide the products or services you requested, in order to perform our contract with you.

  • When you visit our Website, open or click on emails we send you, or interact with our services or advertisements, we—or the third parties we work with—may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Please also refer to the section below titled Third-Party Websites and Links.

How We Use Your Personal Information

  • Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you. This includes processing your payments, fulfilling your orders, sending you notifications related to your account, purchases, returns, exchanges, or other transactions; creating, maintaining, and otherwise managing your account; arranging for shipping; facilitating any returns and exchanges; and other features and functionalities related to your account.

  • Marketing and Advertising. We may use your personal information for marketing and promotional purposes, such as sending you marketing, advertising, and promotional communications via email, text message, or postal mail, and displaying advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Website and on other websites. If you are a resident of the EEA, the legal basis for this data processing is our legitimate interest in promoting our products, in accordance with Article 6(1)(f) of the GDPR.

  • Security and Fraud Prevention. We use your personal information to detect, investigate, or take action regarding potential fraudulent, illegal, or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials secure. We strongly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately. If you are a resident of the EEA, the legal basis for this data processing is our legitimate interest in keeping our website secure for you and other customers, in accordance with Article 6(1)(f) of the GDPR.

  • Communicating with You and Improving the Services. We use your personal information to provide customer support and improve our Services. This is in our legitimate interest to be responsive to you, deliver effective services, and maintain our business relationship with you, in accordance with Article 6(1)(f) of the GDPR.

COOKIES

Like many websites, we use cookies on our Website. For specific information about the cookies we use in connection with our online store hosted on the Shopify platform, please refer to https://www.shopify.com/legal/cookies. We use cookies to power and improve our Website and Services (including remembering your actions and preferences), to perform analytics, and to better understand user interaction with the Services (as part of our legitimate interest in managing, improving, and optimizing the Services). We may also allow third parties and service providers to use cookies on our Website to better tailor services, products, and advertising on our Website and across other websites.

The most relevant third parties placing cookies on our platform include. Learn more about how these third parties process your information:

• Google Business Safety
• Microsoft
• Meta
• Pinterest
• Shopify

Most browsers accept cookies by default, but you can choose to set your browser to delete or reject cookies through your browser settings. Please note that deleting or blocking cookies may negatively affect your user experience and may cause some of the Services, including certain general features and functionalities, to function improperly or become unavailable. Additionally, blocking cookies may not completely prevent how we share information with third parties, such as our advertising partners.

All modern browsers offer the ability to change cookie settings. These settings are usually found in the “options” or “preferences” menu of your browser.
To understand these settings, the following links may be helpful—otherwise, you can use your browser’s “help” feature for more details.

Cookie settings în Internet Explorer
Cookie settings în Firefox
Cookie settings în Chrome
Cookie settings în Safari

As an additional step regarding third-party cookies that are intended to deliver interest-based advertising, please note that certain third parties may be members of any of the following online advertising self-regulatory programs, with corresponding opt-out options:

How We Disclose Personal Information

In certain situations, we may disclose your personal information to third parties for contract performance, legitimate purposes, and other reasons covered by this Privacy Policy. Such situations may include:

  • With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
  • With business and marketing partners to provide services and deliver advertising to you. Our business and marketing partners use your information in accordance with their own privacy notices.
  • When you instruct, request, or otherwise consent to us disclosing certain information to third parties, such as to ship products to you or through the use of social media widgets or login integrations, with your consent.
  • With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
  • In connection with a business transaction, such as a merger or bankruptcy proceeding, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms and conditions, and to protect or defend the Services, our rights and the rights of our users or others.

We disclose the following categories of personal information and sensitive personal information about users for the purposes set out above in “How We Collect and Use Your Personal Information” and “How We Disclose Personal Information”

We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

With your consent, we share personal information for the purpose of engaging in advertising and marketing activities as follows.

Third-Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information found on such sites. Information that you provide in public or semi-public locations, including information that you share on third-party social media platforms, may also be viewed by other users of the Services and/or users of such third-party platforms, without limitation as to their use by us or by a third party. Our inclusion of such links does not, in itself, imply any endorsement of the content on such platforms or their owners or operators, except as disclosed in the Services.


SMS / MMS
FAMOUS ROSES may use customers’ mobile numbers to manage orders and for marketing purposes. Customers may object at any time and free of charge by simply writing to the following address, enclosing valid proof of identity:

FAMOUS ROSES SRL
Bulevardul BANU MANTA 18
Sector 1, BUCURESTI
Cod postal: 011226
ROMANIA

We will respond to your requests as soon as possible, and within one month of receipt in all cases.

Reviews
This service allows customers to post a review on the websites of our partners Yotpo to share their purchasing experience. The reviews are published anonymously and are publicly accessible and available on the websites at all times. Customers authorise FAMOUS ROSES to publish its review of the purchasing experience on the website. Reviews must not contain defamatory, abusive, illegal, vulgar or slanderous messages concerning third parties or natural or legal persons. They must not be racist, violent or pornographic, incite discrimination, harm the honour or reputation of others or, more generally, violate applicable law.

Updates to our personal data policy
This policy may be periodically updated without prior notice. Any amendments enter into force immediately from the time of publication of the new policy on famousroses.eu. We use your personal data in accordance with the policy in force when you submit the data to us. We will inform you of any significant change to our policy and we will request your consent where necessary and when it affects the purpose of the collecting your personal data. In order to remain compliant with current personal data protection regulations, this policy is reviewed every year by our services.

Glossary
“Anonymisation” means the result of processing personal data in order to irreversibly prevent identification;
“Collect” means the gathering of personal data, through the use of questionnaires or online forms, for example;
“Consent” is defined as any free, specific, informed and unequivocal declaration of will whereby you agree, via a declaration or a clear positive act, to the processing of your personal data;
“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Rights protecting your personal data” means all fundamental rights as described in European legislation concerning:
•The right to information;
•The right of access;
•The right of rectification;
•The right of erasure or the right to be forgotten;
•The right to data portability;
•The rights of objection;
•The right to restrict processing;
•The right to give instructions concerning the retention, erasure and disclosure of personal data after death;
•The right to file a claim with the Romanian supervisory authority (ANSPDCP).

“Pseudonymisation” means any technical and organisational measures that involve replacing an identifier to ensure that the personal data is not attributed to an identified or identifiable natural person;
“Business relationship” refers to all relationships between FAMOUS ROSES and its customers including, for example, when you purchase products or services, use the after-sales service, take part in online games, return your products, submit complaints and take part in satisfaction surveys, or as part of your loyalty programme;

“Controller” means the person or body which, alone or jointly with others, determines the purposes and means of the processing of your personal data;
“Subcontractor” means the person who processes personal data on behalf of the person, organisation or body responsible for processing;
“Third party” refers to any person other than FAMOUS ROSESand yourself;
“Processing of personal data” means any operation or set of operations applied to your data, regardless of the type of online service and the procedure used.