GDPR and Your Rights
Who we are
The website florariaazalee.ro and the online shop azalee.ro (together, the "Site") are operated by: Floraria azalee.ro SRL Registered office: Calea Cristești 117, Camera 3, Holboca, județul Iași, Romania Shop and workshop: Strada Ion Creangă 7, 700320 Iași, Romania Trade Register number: J22/3139/2019 Sole registration code (CUI): 41731440 Email: contact@florariaazalee.ro Phone: +40 757 908 508 Website: https://florariaazalee.ro Our opening hours are published in the contact panel of the Site.
What this page is
This page explains, in one place, the rights you have over your personal data under Regulation (EU) 2016/679 (GDPR) and how to exercise them with us. What data we collect and why is described in the Privacy Policy. The cookies used by the site are described in the Cookie Policy. This page is about you and what you can ask us to do.
Who is responsible for your data
The controller of the personal data processed through florariaazalee.ro is the company named above. We have not appointed a data protection officer, because the scale and the nature of our processing do not require one. All requests are handled directly at contact@florariaazalee.ro.
The principles we work by
- We collect only what we need in order to take, deliver and invoice your order and to run your account. - We tell you what we collect and why, in plain language. - We keep the data accurate and let you correct it. - We keep it only as long as we need it, or as long as the law requires. - We protect it with encryption in transit, encrypted session data, restricted administrative access and infrastructure hosted in the European Union. - We do not sell it and we do not share it for advertising by third parties.
Right of access
You can ask us to confirm whether we process data about you and to give you a copy of it, together with the purposes, the categories of data, the recipients, the storage period and the origin of the data. In practice this covers your account, your addresses, your orders and invoices, your loyalty balance, your reminders, your video greetings and your correspondence with us. You do not have to ask us for it. In the "My data" tab of your account there is a Download button that gives you a file with your profile, your orders, your points, your reminders and your video greetings. The first copy is free.
Right to rectification
You can ask us to correct data that is inaccurate, or to complete data that is incomplete. Most of it you can correct yourself: your name, your phone number, your addresses and your preferences are editable in your account. An invoice that has already been issued cannot be edited. When billing data is wrong, we issue a corrective document, as tax law requires.
Right to erasure
You can ask us to delete your data when it is no longer needed, when you withdraw the consent it was based on, or when you object successfully to processing based on our legitimate interests. You can do it yourself. In the "My data" tab of your account there is a Delete account button, and it runs the same erasure we would run: the account, your saved addresses, your preferences, your loyalty balance, your reminders and your video greetings all go with it. You can still write to us instead, if you prefer. What we cannot delete on request: the data contained in invoices and accounting records. Romanian accounting law requires us to keep those documents for a period counted from the date the invoice was issued, and that obligation outlives your request. What we do instead is remove your identity from such an order and keep only its financial content. During that period this data is kept only for that legal purpose and is not used for anything else.
Right to restriction of processing
You can ask us to suspend the use of your data, while keeping it stored, if: - you contest its accuracy, for the time we need to verify it - the processing is unlawful and you prefer restriction to erasure - we no longer need the data but you need it in order to establish or defend a legal claim - you objected to processing, for the time we need to examine the objection
Right to data portability
For the data you gave us and which we process on the basis of the contract or of your consent, you can ask to receive it in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible. This covers your account details, your saved addresses, your order history and your reminders. The file you download from the "My data" tab of your account is exactly that: structured, machine-readable and yours to take anywhere.
Right to object
You can object at any time to processing based on our legitimate interests, on grounds relating to your particular situation. We stop, unless we can show compelling legitimate grounds that override your interests, or unless the processing is needed to establish or defend a legal claim. The processing based on legitimate interests is listed in the Privacy Policy: site security and abuse prevention, records for legal claims, aggregated internal statistics, and the report our server sends to Google when an order is paid, which does not depend on your cookie answer.
Right to withdraw consent
Where processing is based on your consent, you can withdraw it at any time, and it is as easy to withdraw as it was to give. - Cookies: use the "Cookie settings" button at the bottom of any page and answer again. Deleting the cookies your browser has kept for the Site does the same thing, one visit later. - Date reminders: switch a reminder off, delete it, or turn the feature off from your account. Withdrawing consent does not make what was done before unlawful.
Rights in relation to automated decisions
We do not take decisions about you solely by automated means that produce legal effects or similarly significantly affect you, and we do not carry out profiling of that kind. The AI assistant only suggests products, and the automatic protection against abusive traffic only limits requests from an IP address. If either affects you and you want a person to look at it, write to us.
How to make a request
Write to contact@florariaazalee.ro, or to Floraria azalee.ro SRL, Strada Ion Creangă 7, 700320 Iași, Romania. Please tell us: - which right you are exercising - the email address or the phone number used for your orders or your account, so we can find the data - any detail that narrows the request, for example a specific order Identity check: we may ask for additional information if we cannot reasonably identify you from the request. We ask for the minimum needed, and we never ask you to send a copy of your identity document by email unless there is no other way. Timing: we answer within one month of receiving the request. If the request is complex, or if there are several, we may extend the term by two more months, and we tell you within the first month. Cost: requests are free. If a request is manifestly unfounded or excessive, in particular because it is repetitive, we may charge a reasonable fee or refuse it, explaining why. If we do not act on your request, we tell you why within one month, and we tell you that you can complain to the supervisory authority and seek a judicial remedy.
Security and personal data breaches
We protect your data with technical and organisational measures: encrypted transport, an encrypted session cookie that only our servers can read, passwords held by Google Firebase Authentication and never visible to us, administrative access limited to authorised accounts, and infrastructure hosted in the European Union. If a personal data breach occurs, we notify the supervisory authority within 72 hours of becoming aware of it, where the breach is likely to result in a risk to your rights. If the risk is high, we also inform you directly and without undue delay.
Anonymisation and aggregated data
Wherever we can do our work without knowing who you are, we work with anonymous or aggregated data. - Our internal statistics about the shop, such as turnover, the number of orders and the best-selling products, are aggregate figures. They contain no personal data and cannot be traced back to you. - Audience measurement, when you accept it, reports visits in aggregate. It is used to improve the shop, never to identify you. - The IP addresses used to stop automated abuse are never kept in our database. A block lasts at most 7 days, on the server that handled the request. What reaches our technical logs is a shortened address, kept for 30 days, which points to a network rather than to a household. - For a date reminder we keep only the day and the month, never the year, so the date cannot tell anyone an age or the year of an event. - An order placed without an account is linked to an anonymous identifier, not to a personal profile. Anonymous data is no longer personal data, so the rights described here do not apply to it: once data can no longer be linked to you, we can no longer find it for you either.
Suppliers and transfers
We work with a small number of suppliers who process data on our behalf: hosting and infrastructure, transactional email and SMS, card payments, invoicing, address geocoding, advertising measurement and the AI assistant. Our infrastructure and our files are in the European Union. Some suppliers process data in the United States, under the Standard Contractual Clauses adopted by the European Commission and, where applicable, the EU-US Data Privacy Framework. The AI assistant is the exception. What you type into it reaches a provider in the United States without one of those instruments in place today, which is why the assistant asks you to write about flowers only, and not about health or about other people. We say so here rather than let the sentence above cover it. The complete list is in the Privacy Policy, and you can ask us for details of the safeguards that apply to any of them.
Complaints
If you are not satisfied with how we handled your request, or if you consider that we process your data unlawfully, you can complain to the supervisory authority: National Supervisory Authority for Personal Data Processing (ANSPDCP) B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucuresti, Romania www.dataprotection.ro anspdcp@dataprotection.ro You also have the right to an effective judicial remedy before the competent courts. For matters concerning consumer rights rather than personal data, the competent authority is the National Authority for Consumer Protection (ANPC), www.anpc.ro, and the European online dispute resolution platform is available at ec.europa.eu/consumers/odr.
Contact
For anything concerning your personal data: Email: contact@florariaazalee.ro Phone: +40 757 908 508 Address: Strada Ion Creangă 7, 700320 Iași, Romania Last updated: 25 August 2026