PRIVACY POLICY

The sole proprietorship under the name “Shumkova Albina” and the trade name “Velour Flower Lab”, based in Athens, 36 Kondylaki Street, postal code 11141, phone number +30 2102914754, and email address velourflowerlab@gmail.com, is the legal owner and operator of the online store www.velourflowerlab.com, which is active in the retail sale of flowers.

Our company is committed to protecting your personal data and takes every reasonable measure to ensure the highest level of security in collecting and processing the data you provide.

The management and protection of personal data belonging to customers and suppliers of this website are governed by this privacy policy, as well as the relevant provisions of national, European, and international law regarding data protection, as applicable at any given time.

Any future legislative changes will be incorporated into this privacy policy. The company reserves the right to amend the terms of data protection to remain compliant with the applicable legal framework.

As a result, the terms may be reviewed and updated. We recommend checking this policy regularly, as continued use of the website implies acceptance of any changes made.

By using the website www.velourflowerlab.com and providing your personal data, and by explicitly consenting during registration as a user, you confirm that you have been fully informed about this policy, are aware of your legal rights, and consent to the processing of your data by the company.

What is personal data?

Personal data refers to any information that can identify you directly (e.g. your full name) or indirectly (e.g. your phone number). This includes email addresses, home addresses, usernames, personal preferences, and shopping habits.

The person (natural individual) to whom the data refers is known as the data subject.

What is data processing?

Data processing refers to any operation or series of operations performed on personal data, whether automated or not. This includes collecting, recording, organizing, structuring, storing, modifying, retrieving, using, disclosing, transmitting, aligning, restricting, erasing, or destroying personal data.

Any individual or legal entity (public or private) that processes personal data is known as a data controller. If the processing is delegated, the responsible party is known as the data processor.

What data do we process?

The website www.velourflowerlab.com is designed so that you can browse it without needing to provide personal data unless you wish to do so. Velour Flower Lab, as the data controller, collects personal data only when voluntarily provided by users and only for the purposes listed below.

We may collect the following information:

Information you provide when registering and creating an account.
Information you submit when subscribing to our newsletter.
Information required to process and fulfill your order.
Data collected via cookies while browsing our website.

The personal data we may collect includes:

Full name
Address (city, region, street, number)
Postal code
Email address
Credit/debit card details
Contact phone number
Delivery/shipping information
Billing information
IP address

How we use your data

The information we collect is essential for completing your orders and transactions. You may access and correct your personal data at any time by contacting us with your name and email address.

We use your personal data only for the following purposes:

To ensure safe and efficient communication during order processing.
To update you on our store’s news and activities.

Some of your data may be shared with third-party partners as part of order fulfillment. For example, delivery companies may receive your details to complete the delivery and may contact you for clarification or updates.

We manage your data in accordance with applicable data protection laws, including:

Greek Law 2472/1997 on the protection of individuals with regard to personal data processing
Greek Law 2774/1999
Decisions and guidelines from the Hellenic Data Protection Authority
General Data Protection Regulation (GDPR) (EU Regulation 2016/679)

Your rights

You have the right to request, at any time and free of charge, the confirmation, correction, limitation, or deletion of your personal data, in accordance with Law 2472/1997 and the GDPR. For any such request, you may contact us at: velourflowerlab@gmail.com.

Cookies Policy

The website www.velourflowerlab.com uses cookies to improve the services we provide to you and to offer certain features you may find useful.

What are Cookies?

Cookies are small text files that are stored on your computer or device when you visit our website. Cookies do not access files or documents on your computer. They are used to facilitate your access to certain services on the website and for statistical purposes, to understand which parts of the website are most useful or popular. Cookies may also record information about the type of browser, the operating system, and other technical information of your device.

Categories of Cookies We Use:

Strictly Necessary Cookies
These cookies are essential for the proper functioning of the website and to improve its security. You cannot disable these cookies.

Statistical Cookies
We use cookies to collect statistical data in order to improve the services we offer. These cookies allow us to anonymously monitor user interaction with our pages and improve website performance. These cookies are optional, and you can opt out via the “cookie settings”.

Preference Cookies
These cookies store your preferences, such as your language or region, to personalize your experience. For example, they remember your login details and settings for future visits. These cookies are optional, and you can opt out via the “cookie settings”.

Marketing Cookies
Cookies in this category are used to optimize your experience and display targeted ads, both on our website and on other external websites. These cookies also assist with sharing content on social media. These cookies are optional, and you can opt out via the “cookie settings”.

Third-Party Content:

Our website may display content from third parties, such as YouTube, Facebook, Instagram, etc. To view third-party content, you must first accept the terms and conditions set by the third-party providers, which include their own cookie policies. If you do not display the content, no third-party cookies will be placed on your device.

How Can You Control Cookies?

If you do not wish information to be collected through cookies, you can control or delete cookies via your browser settings. You can choose to reject specific cookies or delete all cookies from your device. However, please note that disabling cookies may result in some website features not functioning correctly or being limited.

We never use cookies without your consent.

Changes to the Cookies Policy

This Cookies Policy may be amended from time to time to reflect changes in legislation or technology. We recommend checking this policy regularly for any updates.

Purposes of Data Processing

Our company collects and processes your personal data solely for the following purposes:

Execution of Transactions
The data you provide is used to establish, manage, and execute transactions between us. This includes sending receipts, customer identification when necessary, payment management, and other actions related to the services we offer.

Product Promotion and Advertising
With your consent, your personal data may be used to send you targeted advertising or general promotional messages about new products, special offers, or discounts via mail, email, SMS, or other communication channels.

Statistical Research
With your consent, your personal data is used to monitor traffic to our store, customer purchasing habits, and product demand in order to improve our services.

Compliance with Legislation
Our company processes the personal data you provide in order to comply with applicable legal requirements (such as issuing receipts, keeping records for the minimum required period, etc.) and to ensure that our legal obligations are met.

Legal Basis for Data Processing

The collection and processing of your personal data is done to support and monitor transactional relationships with our company, to establish and execute the contract between us, and to provide the best service possible. The legal basis for processing your data is:

Your explicit consent regarding the type of data and purposes of processing, provided during registration or use of our services.
Contract performance, meaning the necessity of processing to complete your order and fulfill the agreed contractual terms.
Legal obligation, arising from applicable law or court ruling.

Recipients of Your Data

Recipients of your personal data are:

The company "VELOUR FLOWER LAB", which is responsible for processing your data.
Partner businesses that process your data on our behalf as processors according to our instructions. These businesses may include transport companies, payment providers, and other partners involved in fulfilling your order.
Public or judicial authorities (e.g. prosecutors, courts, tax authorities) when required by law or based on a prosecutorial order, court decision, or other legal obligation.

How Do We Ensure Data Processors Respect Your Data?

Our company has taken all appropriate measures to ensure that processors of your personal data fully comply with personal data protection regulations. In particular:

Contractual Obligation: All processors have agreed and are contractually bound to meet the necessary data protection requirements.
Confidentiality: They are required to maintain full confidentiality and protect your data from any unauthorized disclosure.
No Transfer to Third Parties: They are not allowed to disseminate or share your data with third parties without our prior approval, unless required for service execution or mandated by law.
Security Measures: They are required to implement appropriate and effective security measures to protect your data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
Regulatory Compliance: Data processing is conducted in full compliance with the regulatory framework for personal data protection.
Processing Limitation: Processing of personal data is limited only to what is strictly necessary to fulfill the agreed purposes and is not performed beyond the boundaries set by our company.

How Long Is Your Data Retained?

Our company retains your personal data for as long as necessary to fulfill the purposes described in this policy. Afterwards, your data is deleted or anonymized, unless otherwise required for legal obligations or to protect our legal interests.

The duration of data retention is determined by applicable legal frameworks and our compliance obligations. Specifically:

Contract Duration: Data is retained at least for the duration of the contract between us or for fulfilling your order.
Legal Claims: Data may be retained longer if required to demonstrate compliance with contractual obligations or to support legal claims in case of disputes.
Compliance with Public Authorities: The retention period may be extended for reasons of compliance with directives or requirements from public or independent authorities.

What Are Your Legal Rights?

Regarding the protection of your personal data, you have the following rights:

Right of Access
You have the right to request information about the personal data we hold about you. Specifically, you can find out what categories of data we have, for what purpose they are used, where they were collected (if not directly from you), and whether they have been disclosed to third parties. You may receive a free copy of the personal data we have about you. If you request additional copies, a reasonable fee may apply.
Right to Rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.
Right to Erasure
You have the right to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected. You may also request their deletion if you withdraw your consent for processing, unless another legal basis permits continued processing.
Right to Restrict Processing
You may request that we restrict the processing of your personal data when the accuracy of the data is contested or if the processing is unlawful. If you object to processing, we will stop processing your data unless there are legal reasons requiring continued processing.
Right to Data Portability
You have the right to receive your data in a structured, commonly used, and machine-readable format. You may also request that it be transferred to another data controller.
Right to Object
You can object to the processing of your personal data or withdraw your consent for their processing. In such case, we will cease processing, unless there are legal or compelling reasons that override your right.
Right to File a Complaint
If you believe your data protection rights have been violated, you may file a complaint with the Hellenic Data Protection Authority. The Authority is based in Athens (Kifisias 1-3, Postal Code 115 23) and can be contacted by phone at 2106475600, fax at 2106475628, or by email at complaints@dpa.gr.

How Can You Exercise Your Rights?

To exercise your rights, please send us an email at velourflowerlab@gmail.com with the subject line/request “EXERCISE OF RIGHT TO ACCESS/RECTIFICATION/ERASURE/RESTRICTION/OBJECTION”. In your message, please describe the right you wish to exercise and state your specific request.

Once we receive your request, we will review it and respond as soon as possible.