Privacy Policy

This page was last updated on 2026-01-31 

This Data Protection Information explains how Flowers Online Ltd (“Serenata Flowers” / “we” / “us”) collects, uses and otherwise processes your personal data when you (the “data subject”) use our services, purchase our products or otherwise interact with us. This Data Protection Information also describes what types of personal data we process, where we obtain this personal data from, which third parties we may share your personal data with, what rights you have and how you can exercise your rights. 

Serenata Flowers is the controller for the processing of your personal data, and we process your personal data in accordance with applicable law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”). We encourage you to read this Data Protection Information in full to ensure that you are informed about and understand how we process your personal data when you use our services, shop in our online stores or otherwise interact with us. 

Please note that this Data Protection Information applies to and is applied to all websites owned and operated by Serenata Flowers from time to time (together the “Website”), including: 

https://www.serenataflowers.com/

 

CONTACT DETAILS FOR SERENATA FLOWERS

We care about your privacy and want you to feel confident about our processing of your personal data when you visit the Website. We work with data protection issues on a daily basis to ensure that we comply with data protection legislation. If you have any questions regarding the processing of your personal data, you are welcome to contact us using the contact details below. 

Serenata Flowers (Flowers Online Ltd)

Corporate ID number: 07123236
Postal address: Suite 1 & 2 Stepnell house, Tollgate, Chandlers Ford, Eastleigh SO53 3LU

 

HOW DO WE USE YOUR PERSONAL DATA?

To structure the information regarding our personal data processing and to make it easier for you to navigate, we have divided the data subjects whose personal data we process into five (5) categories: 

- Website visitors (processing of personal data of website visitors) 

- Newsletter subscribers and recipients of other mailings (processing of personal data relating to newsletter subscribers and recipients of other mailings) 

- Customers (processing of customers’ personal data) 

- Job applicants (processing of job applicants’ personal data) 

- Other relationships (processing of personal data relating to data subjects with whom we have other relationships) 

In the links above, you will find information about: 

1. the purposes for which we process your personal data, 

2. the categories of personal data we use for each purpose, 

3. the legal basis under the GDPR on which we rely to process your personal data for each purpose, 

4. the storage period, i.e. how long Serenata Flowers will retain the personal data for each purpose, 

5. whether we transfer your personal data to recipients outside the EU/EEA, and 

6. whether we apply automated decision-making or profiling. 

To read more about how we process your personal data, please click on the link above with the heading that is relevant to you. 

Please note that you may fall under one or more categories of data subjects, and we therefore encourage you to read all parts of this Data Protection Information that are applicable and relevant for you. 

 

YOUR RIGHTS AND HOW TO EXERCISE THEM

GENERAL INFORMATION ON HOW TO EXERCISE YOUR RIGHTS

When we process your personal data, you as a data subject have several rights under the GDPR. These rights are briefly described below. If you would like to read more about your rights, please visit the website of the Information Commissioner’s Office (ICO) via the link stated in connection with each right. 

To exercise your rights, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

 

RIGHT TO INFORMATION

You have the right to receive information about how Serenata Flowers processes your personal data. Such information is provided through this Data Protection Information when your personal data is collected and is always available on the Website. You are also entitled to receive specific information if a personal data breach occurs that is likely to result in a high risk to your rights and freedoms. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

You can read more about your right to information on the Information Commissioner’s Office (ICO) website. 

 

RIGHT OF ACCESS

You have the right to obtain access to a copy of the personal data that Serenata Flowers processes about you (a so-called “data subject access request”). Your right of access is not absolute; in some cases, there are provisions in law that prevent us from disclosing certain information to you, e.g. anti money laundering legislation. Under certain circumstances, Serenata Flowers may also refuse your request for access, for example if you request access to your personal data many times within a short period.  

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

You can read more about your right of access on the Information Commissioner’s Office (ICO) website. 

 

RIGHT TO RECTIFICATION

You have the right to have inaccurate personal data rectified or to have incomplete personal data completed. The right to rectification applies both to personal data collected from you, from third parties or public sources and to personal data created by Serenata Flowers. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers. 

You can read more about your right to rectification on the Information Commissioner’s Office (ICO) website.

 

RIGHT TO ERASURE

You have the right to request the erasure of your personal data, for example when it is no longer necessary for the purpose for which it was collected. In some cases, however, there may be circumstances that limit your right to erasure, for example if you have entered into an agreement with us that requires us to process your personal data. There are also legal obligations that prevent us from erasing certain information even after any relationship with us has ended. These obligations arise, among other things, from bookkeeping legislation and consumer protection legislation. In such cases, we ensure that such personal data is not processed for any other purpose than to enable us to comply with these obligations, and we also restrict access to such personal data for Serenata Flowers’s employees where necessary. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

You can read more about your right to erasure on the Information Commissioner’s Office (ICO) website.

 

RIGHT TO RESTRICTION OF PROCESSING

You have the right to request that our processing of your personal data be restricted. A restriction may be made, for example, if you believe that the personal data we process about you is inaccurate and you have requested rectification. During the time we are verifying whether the personal data is correct, you can request that we restrict our processing of your personal data. 

Further situations where you have the right to restriction include if you consider our processing of your personal data to be unlawful, when we no longer need the personal data but you need it in order to establish, exercise or defend legal claims, or if you have objected to processing based on a balancing of interests (i.e. our legitimate interest). In the latter case, you can request that we restrict our processing  g of your personal data during the time we handle your objection. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

You can read more about your right to restriction on the Information Commissioner’s Office (ICO) website.

 

RIGHT TO OBJECT TO CERTAIN PROCESSING

You have the right to object at any time to our processing of your personal data where we base the processing on a balancing of interests as legal basis (i.e. our legitimate interest). Continued processing of your personal data then requires that we demonstrate compelling legitimate grounds for the specific processing. 

You always have the right to object at any time to direct marketing without any balancing of interests. Where our direct marketing is carried out digitally, you can always unsubscribe from future mailings by clicking on the “unsubscribe link” in the relevant communication. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

You can read more about your right to object on the Information Commissioner’s Office (ICO) website.

 

RIGHT TO DATA PORTABILITY (RIGHT TO MOVE YOUR PERSONAL DATA)

The right to move personal data is called the right to data portability in the GDPR. If you have consented to providing your personal data to us, or if you have provided the personal data to us in connection with an agreement, you have the right to request the data and receive it in a machine-readable format so that you can transfer your personal data yourself. You may also request that we transfer the personal data to another controller, for example another e-retailer. Serenata Flowers is only obliged to transfer the personal data if it is technically feasible. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”.  

You can read more about your right to data portability on the Information Commissioner’s Office (ICO) website.

 

RIGHT TO WITHDRAW YOUR CONSENT

Where you have given your consent, you have the right to withdraw that consent at any time. If you have consented to our use of cookies and other tracking technologies via our cookie banner, you can always withdraw your consent or change your choice in our cookie settings. 

To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Serenata Flowers”. 

You can read more about consent as a legal basis and your right to withdraw your consent on the Information Commissioner’s Office (ICO) website.

 

RIGHT TO LODGE A COMPLAINT

If you consider that we process your personal data in breach of the GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) Authority for Privacy Protection using the following contact details: 

Information Commissioner’s Office (ICO)

E-mail: [email protected]  

Telephone number: +44 1625 545 745 

Postal address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK

Web site: https://ico.org.uk/

You can read more about how to lodge a complaint about Serenata Flowers’s personal data processing on the Information Commissioner’s Office (ICO) website.

 

PROCESSING OF PERSONAL DATA TO FULFIL YOUR RIGHTS

In order for us to be able to accommodate the exercise of your rights, we also need to process your personal data for this purpose. This means that, in addition to processing your personal data for each original purpose specified in this Data Protection Information, we will also retain the relevant personal data in order to fulfil this purpose. We store your personal data for this purpose, i.e. to fulfil your rights under the GDPR, for as long as we store your personal data for the original purpose. We base this processing on Article 6.1(c) GDPR, i.e. Serenata Flowers’s legal obligation to comply with the provisions of the GDPR. 

 

TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES

In certain circumstances, it may be necessary for us to share your personal data with external parties in order for us to conduct our business, for example we may share data with our suppliers where we need access to systems, functions or other services they provide that we cannot develop or supply ourselves. In such cases, we implement all reasonable and appropriate technical, legal and organisational measures to ensure that your personal data is handled securely and with an adequate level of protection. 

In most cases, the recipient of your personal data is a company that may only process the personal data on behalf of Serenata Flowers and in accordance with Serenata Flowers’s instructions, so-called “processors”, with whom we have concluded data processing agreements. In the following list, you will find the categories of recipients with whom we may share your personal data. 

Affiliate networks and intermediaries of cooperation partners 

Part of Serenata Flowers’s marketing and advertising strategy is to cooperate with content creators. We use affiliate networks and other intermediaries of cooperation partners in the context of these collaborations. If you are a content creator with whom we have entered into or intend to enter into a collaboration, we may transfer your personal data to providers of affiliate networks and other intermediaries of cooperation partners in order to establish a collaboration. We base such transfers of your personal data on the performance of the agreement you have entered into with us. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Courts and authorities 

We are sometimes obliged to provide certain data required by law to various courts and authorities, such as the National Tax Agency and the Police Authority. We may also disclose your personal data to authorities if you have consented to such disclosure. Further, we may share your personal data with relevant authorities if we suspect that a crime has been committed, or in order to assist law enforcement authorities in their investigations if they suspect that a crime has been committed and request information from us. In these cases, we base the transfer on our and the requesting law enforcement authority’s legitimate interest in having the relevant crime investigated. Authorities and courts that receive personal data may then process your personal data as independent controllers. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Insurance companies 

Where applicable, if Serenata Flowers has suffered a loss, your personal data may be transferred to Serenata Flowers’s insurance company if necessary to settle the claim and thereby establish, exercise or defend us against legal claims. The transfer of your personal data is based on our legitimate interest in having the loss finally settled. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Debt collection agencies 

If Serenata Flowers needs to collect an overdue debt in order to establish, exercise or defend legal claims, your personal data may be transferred to a debt collection agency based on our legitimate interest in collecting overdue debts. When the debt collection agency collects debts, it does so as an independent controller. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Legal advisors 

If we for any reason need to establish, defend against or exercise legal claims, we may transfer your personal data to a legal advisor. We base such transfers on our legitimate interest in being able to establish, defend against or exercise legal claims. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Group companies 

We may share your personal data with companies within our group in order to streamline our work and provide you with our products and services in the best possible way. We have data sharing agreements and/or data processing agreements in place with all our group companies to ensure compliance with applicable data protection legislation and the integrity of your personal data. We base these transfers on our legitimate interest in cooperating within our group and in making our operations more efficient. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Buyers and sellers in business and company transactions 

If Serenata Flowers buys or sells our business or assets, or if Serenata Flowers is acquired in whole or in part by a third party, your personal data may be shared with the potential buyer or seller in each such business transaction. The legal basis for such disclosure is Serenata Flowers’s legitimate interest in being able to carry out the relevant transaction. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Marketing agencies 

In order for Serenata Flowers to create and carry out marketing and advertising activities, it is sometimes necessary for us to share your personal data with marketing agencies that manage our campaigns. We base such transfers of your personal data on our legitimate interest in marketing our products and our business to you. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Audit firms 

To enable Serenata Flowers to fulfil our legal obligations under corporate and accounting legislation, your personal data may be transferred to audit firms tasked with reviewing, among other things, Serenata Flowers’s accounting and financial reporting. We base such transfers of your personal data on our legal obligations. Audit firms act as separate and independent controllers for their processing of your personal data. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Providers of payment services 

We will share your personal data with companies that provide us with payment services. This is necessary for us to be able to administer your purchases and enter into purchase agreements with you. Our legal basis for such transfers is the performance of the agreement you have entered into with us when you purchase our products. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Providers of digital signature services 

To streamline and digitalise our contract processes, we will share your personal data with providers of digital signature services when you sign digital agreements with Serenata Flowers. We base such transfers of your personal data on our legitimate interests in streamlining and digitalising our contract processes. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Providers of IT services 

We use several IT and software services in order to conduct our business and improve your customer experience. This may include, for example, analytics systems, business systems, CRM-systems or website development systems. Where applicable, we may transfer your personal data to providers of such systems that we use from time to time, and we base such transfers on our legitimate interest in being able to conduct our business and provide you with our products and services. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Providers of recruitment services 

We always strive to have the most competent employees and therefore initiate recruitment campaigns from time to time. Serenata Flowers uses recruitment services for this purpose and will share your personal data with providers of such recruitment services as necessary to administer your job application. We base such transfers of your personal data on our legitimate interests in administering your and other candidates’ job applications. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Providers of social media 

When you choose to interact with us or our material on our social media via our Website, for example by interacting with a video, the companies behind such social media platforms will also collect and process your personal data. This means that a transfer of your personal data to third countries outside the EU/EEA may take place. The transfer is based on the consent you give by accepting the relevant cookies in our cookie banner. You can withdraw your consent at any time by changing your settings in our cookie banner. You can find more information about your rights under the section “Your rights and how to exercise them”. 

Transport and logistics companies 

As we only conduct e-commerce, we send all our products for delivery; it is therefore necessary for Serenata Flowers to share your personal data with transport and logistics companies in order for your parcels to be delivered. We base such transfers of your personal data on the performance of the agreement you have entered into with us when you purchase our products. You can find more information about your rights under the section “Your rights and how to exercise them”. 

We strive to process your personal data within the EU/EEA. In some cases, however, Serenata Flowers or our suppliers may transfer your personal data to a country outside the EU/EEA (a so-called “third country”). In a third country, the GDPR does not apply, which may entail an increased risk from a privacy perspective. To minimise such privacy risks, we only transfer your personal data to a third country provided that an approved transfer mechanism and supplementary safeguards are in place to ensure that your personal data is subject to protection that is at least equivalent to the protection afforded when processed within the EU/EEA. 

A transfer mechanism is approved if any of the following circumstances apply: 

- the European Commission has decided that the relevant third country ensures an adequate level of protection, i.e. that the third country has privacy legislation corresponding to the protection provided under the GDPR, 

- the recipient is bound by contracts adopted by the European Commission, so-called standard contractual clauses, 

- there are approved binding corporate rules,

- there is a specific authorisation from the supervisory authority, or 

- the transfer is otherwise permitted under applicable data protection legislation. 

You can read more about which countries are considered to ensure an adequate level of protection on the European Commission’s website. 

You can read more about the standard contractual clauses and what they mean on the European Commission’s website. 

We always carry out a risk assessment before a transfer to a third country takes place and implement both technical and organisational safeguards to ensure an appropriate level of protection. 

SPECIAL INFORMATION ON PROFILING AND AUTOMATED DECISIONS

PROFILING

Profiling means automated processing of personal data used to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict, for example, that person’s economic situation, personal preferences, interests and location. 

Profiling is used by Serenata Flowers for purposes such as market and customer analyses and marketing. The legal basis for profiling is Serenata Flowers’s legitimate interest, performance of a contract or consent. 

Where profiling is based on the legal basis of legitimate interest, you have the right to object at any time to the profiling in accordance with what is stated above. In such a case, we may no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defence of legal claims. 

AUTOMATED DECISIONS

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. As a data subject, you always have the right to contact us as controller to obtain an explanation of the decision. You also have the right to lodge a complaint and thereby have the possibility to have the decision reviewed. 

You can read more about automated decision-making on the Information Commissioner’s Office (ICO) 

for Privacy Protection’s website. 

Please note that Serenata Flowers does not currently make any automated decisions. If we begin to make automated decisions in the future, we will inform you of this by updating this Data Protection Information. 

HOW DO WE PROTECT YOUR PERSONAL DATA?

Serenata Flowers implements a range of technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction. By combining organisational security measures such as access restrictions and procedures in the event of personal data breaches with technical security measures such as firewalls and encryption, we have created a robust security solution for the protection of your personal data. Serenata Flowers is committed to continuously developing our information security in order to protect your personal data. 

UPDATES TO OUR DATA PROTECTION INFORMATION

We continuously improve and develop our services, products and the Website, and the content of this Data Protection Information may therefore change over time. We therefore encourage you to regularly review this Data Protection Information to ensure that you are up to date on how we process your personal data. 

If Serenata Flowers makes significant changes to this Data Protection Information, we may also inform you by, for example, sending an e-mail or posting a notice on our Website before the changes take effect. 

This page was last updated on 2026-01-31 

This privacy notice explains how Serenata Flowers processes your personal data when you use our Website. On this page you will find information about what personal data we process, the purposes of each processing activity, the legal bases on which we rely, our storage periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data. 

 

WHAT INFORMATION DO WE COLLECT? 

PERSONAL DATA THAT WE COLLECT FROM YOU 

We may process personal data that you provide to us yourself. This may concern personal data that you provide directly to us in your communication with Serenata Flowers, personal data that is generated as a direct result of your use of our products and services, or personal data that we have received from you in the course of our relationship and stored in our internal databases. 

Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from you”. Below you will find all categories of personal data that we collect directly from you and process when you use our Website. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example first and last name, personal identity number, date of birth, gender, customer number, customer type. 

Contact details: 

For example email address, telephone number and postal address for delivery. 

Input data: 

For example data generated when you make choices on, or otherwise use, our Website, including information on whether you have accepted our cookies and information that you provide to us or enter on our Website. Also information to be used in flowers cards and similar additions our products and services.  

Behavioural data:  

For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it. 

Device information and network identifiers: 

For example information about your computer, phone or other device, such as your IP address, user ID, time zone, language settings or geographical information. 

 

PERSONAL DATA THAT WE COLLECT FROM THIRD PARTIES OR PUBLIC SOURCES 

In addition to the personal data that we collect directly from you, we may in some cases also collect your personal data from another company or authority (a “third party”) or from public sources. We do this in order to be able to supplement your personal data where this is necessary, to check that your personal data is up to date or to ensure that your personal data is correct. 

Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from others”. Below you will find all categories of personal data that we collect from third parties and public sources and process when you use our Website. The third party or public source from which we have obtained your personal data is also indicated in italics below. 

CATEGORIES OF PERSONAL DATA 

Identity data:  

For example name, date of birth, personal identity number and other necessary identifiers used for authentication via electronic identification schemes. 

Your identity data may be obtained from, or compared with, data from electronic identification schemes, and our payment partners. 

Contact details: 

For example, address. 

Your contact details may be obtained from, or compared with, data from electronic identification schemes.  

Behavioural data:  

For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it. 

Your behavioural data may be obtained from, or compared with, data from our data analytics partners. We may receive your behavioural data from external third parties whose websites you have visited and from cookies you have accepted. 

 

PURPOSES, LEGAL BASIS, RIGHTS AND STORAGE PERIOD 

When you use our digital services such as our Website, we collect and process your personal data, among other things, in order to be able to respect the choices and preferences you make in the settings of our digital services. We also process your personal data in order to protect our Website from malicious traffic as well as to analyse how these services are used and run tests to improve them. 

The processing of your personal data ultimately takes place so that we can provide you with our digital services and optimise your user experience when you use them. We use cookies and similar tracking technologies on our Website for these purposes. 

You can find more information about how we use cookies in our cookie policy.

Click here for more information about your rights under the GDPR.

 

A. Providing you with access to our website and other services you request 

Purpose 

In order to be able to display and provide you with access to our Website, we process your personal data by means of so-called “necessary cookies”. We also use necessary cookies to provide you with access to important functions and services that you expressly request, for example when you place a product in your shopping cart or log in to the membership club. 

This processing is a technical prerequisite for us to operate and provide you with access to our Website, and you therefore do not have the option of refusing this type of cookies. 

Personal data that we collect from you 

• Input data 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Euroflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to display and provide you with access to our Website and other services that you have expressly requested. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for the duration of the individual online session. 

 

B. Respecting your choices and preferences 

Purpose 

We offer users of our digital services the option to make certain choices in order to better tailor these services to your wishes and preferences. In order to be able to respect your choices and preferences and thereby provide you with a better experience on our Website, we process your personal data by means of so-called “functional cookies”. This allows us to offer extended functionality and personalisation, for example to be able to show you embedded videos on our Website and manage your preferences regarding these. 

Personal data that we collect from you 

• Input data 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting our functional cookies in our cookie banner. If you have not accepted our functional cookies, we will not process your personal data for this purpose and we cannot guarantee that our Website will function in an optimal way. 

You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy, which means that we will no longer be able to process your personal data for this purpose.  

Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for the storage period set out in our cookie list.

 

C. Analysing how our website is used 

Purpose 

To understand how our users use our Website and thereby improve it over time, we process your personal data by means of so-called “statistics and analytics cookies”. By using statistics and analytics cookies, we can compile statistics on how our Website is used, for example by measuring visits, conversions, behavioural patterns and traffic sources. 

We also use your personal data to optimise our Website through so-called “A/B testing”, which means that you may randomly land on a test version of our Website. Information about how you interact with these test versions is then used to develop our business and to improve and streamline our digital services. 

Personal data that we collect from you 

• Input data 

• Behavioural data 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting our statistics and analytics cookies in our cookie banner. If you have not accepted our statistics and analytics cookies, we will not process your personal data for this purpose. 

You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy, which means that we will no longer be able to process your personal data for this purpose.  

Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for the storage period set out in our cookie list.

 

D. Targeting direct and personalised digital marketing to you 

Purpose 
Serenata Flowers’ marketing is today largely conducted in digital form. In order to make our digital marketing personalised and relevant to you, we analyse and track your behaviour on our Website. We do this by means of so-called “marketing cookies”. 

These cookies may also be used by us for “retargeting”, which means that through this tracking technology we can identify you on other websites and digital channels in order to show you relevant marketing from us there, and to create customised target groups for advertising via third parties. 

We may also combine your personal data with data that we obtain from third parties, which means that this processing may be regarded as profiling. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Input data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting our marketing cookies in our cookie banner. If you have not accepted our marketing cookies, we will not process your personal data for this purpose. 

You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy, which means that we will no longer be able to process your personal data for this purpose. 

Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for the storage period set out in our cookie list.

 

E. Conducting gamification campaigns 

Purpose 

Serenata Flowers' marketing is today largely conducted in digital form. In order to make our digital marketing relevant to you, we conduct so-called gamified campaigns, for example in the form of a wheel which the user may spin in order for something to happen. 

Personal data that we collect from you 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Euroflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to communicate with you and respond to any questions you may have. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

 

F. Communicating with you via our chat function 

Purpose 

To enable smooth and easy communication between you and Serenata Flowers, we offer a chat function on our Website where you can ask simple questions regarding your order and our products, services, and payment methods. If you choose to use the chat function, we will process your personal data in order to communicate with you and respond to any questions you may have. 

To ensure that we do not process more personal data than necessary, we ask you not to provide other personal data in the chat than your identity data and contact details. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Device information and network identifiers 

• Input data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Euroflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to communicate with you and respond to any questions you may have. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period  

We store and process your personal data for this purpose for the duration of the relevant chat session with you and six (6) years thereafter. If the chat session results in a customer service case being opened, we store your personal data until the customer service case has been finally handled and for six (6) years thereafter. 

 

G. Protecting our website 

Purpose 

We conduct the majority of our operations via our Website and it is therefore important to us to keep it free from malicious traffic, including for the purpose of detecting fraud and protecting your data. We may therefore process your personal data in order to ensure the security of our Website. 

Personal data that we collect from you 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Euroflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to keep our Website free from malicious traffic, including for the purpose of detecting fraud and protecting your data. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for a time period corresponding to the prescription time in consumer matters from the time we received the data. 

 

H. Detecting, preventing and limiting technical bugs and errors 

Purpose 

To ensure a smooth user experience when using our Website, we take ongoing technical measures in order to detect and limit technical bugs and errors.  

Personal data that we collect from you 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to detect, prevent and limit technical bugs and errors.  

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for ninety (90) days from the time we received your personal data. 

 

I. Detecting, preventing and limiting crime and fraud 

Purpose 

To ensure your security and ours, we take ongoing crime-prevention measures in order to detect and limit the use of our business for crime and fraud. To ensure your safety and ours, we therefore process your personal data for this purpose. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Input data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to detect, prevent and limit crime and fraud. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

J. Cooperation with authorities 

Purpose 

In some cases, we need to process your personal data in order to cooperate with authorities, for example where such cooperation is required to investigate suspected crime or fraud, or for us to be able to provide you with our products and services. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Input data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to cooperate with the relevant authorities. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

K. Defending, safeguarding and exercising legal claims

Purpose 

To ensure that Serenata Flowers has adequate evidence if a dispute arises or a legal claim is otherwise made against us, and to be able to demonstrate that we have complied with applicable cookie legislation and data protection rules, we store your personal data so that we can defend, safeguard or exercise legal claims during the general statutory limitation period. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Input data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to prove that we have complied with applicable cookie legislation and data protection rules and to defend against, safeguard and exercise legal claims during the general statutory limitation period. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

THIRD-COUNTRY TRANSFERS 

As part of the personal data processing that we carry out for the purposes set out above, we and/or any recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”. 

Click here to read more about how we handle your personal data in connection with third-country transfers. 

 

AUTOMATED DECISION-MAKING AND PROFILING 

Serenata Flowers may create a profile about you in order to better understand how you use our products and services and to personalise our marketing directed to you. We base our profiling on the consent that you give by accepting analytics and statistics cookies and/or marketing cookies in our cookie banner. Click here for more information about your rights under the GDPR.

This page was last updated on 2026-01-31 

This privacy notice explains how Serenata Flowers processes your personal data when you receive marketing communications or other mailings from us. On this page you will find information about what personal data we process, the purposes of each processing activity, the legal bases on which we rely, our storage periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data. 

WHAT INFORMATION DO WE COLLECT? 

PERSONAL DATA THAT WE COLLECT FROM YOU 

We may process personal data that you provide to us yourself. This may concern personal data that you provide directly to us in your communication with Serenata Flowers, personal data that is generated as a direct result of your use of our products and services, or personal data that we have received from you in the course of our relationship and stored in our internal databases. 

Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from you”. Below you will find all categories of personal data that we collect directly from you and process when you are or become a recipient of marketing communications and other mailings from us. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example first and last name. 

Contact details: 

For example address, email address and telephone number. 

Behavioural data: 

For example information about how you interact with our marketing or Website, such as information about how you reached our Website or whether you have opened one of our marketing messages. 

Generated data: 

For example information provided in contact with our customer service that cannot be defined in advance (including the other categories of data listed here), card message for a flower card, and information about how you use our products and services. 

Device information and network identifiers: 

For example information about your computer, phone or other device, such as your IP address, user ID, time zone, language settings or geographical information. 

 

PERSONAL DATA THAT WE COLLECT FROM THIRD PARTIES OR PUBLIC SOURCES 

In addition to the personal data that we collect directly from you, we may in some cases also collect your personal data from another company or authority (a “third party”) or from public sources. We do this in order to be able to supplement your personal data where this is necessary, to check that your personal data is up to date or to ensure that your personal data is correct. 

Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from others”. Below you will find all categories of personal data that we collect from third parties and public sources and process when you receive marketing communications and other mailings from us. The third party or public source from which we have obtained your personal data is also indicated in italics below. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example name, date of birth and personal identity number. 

Your identity data may be obtained from, or compared with, data from our payment partners. 

 

PURPOSES, LEGAL BASIS, RIGHTS AND STORAGE PERIOD 

If you have subscribed to our newsletter by, for example, providing your contact details on our Website, or have otherwise accepted that Serenata Flowers sends digital or postal communication to you, we process your personal data in order to be able to send such mailings to you and to optimise and, where applicable, personalise the content of such mailings. We do this to ensure that you only receive relevant information and marketing from us. 

We may also send mailings to you if you are our customer and have not previously declined to receive our marketing communications. 

Click here for more information about your rights under the GDPR. 

 

A. Sending marketing communications to our subscribers 

Purpose 

If you choose to subscribe to our newsletter or other mailings by providing your contact details in a form on our Website, we may process your personal data in order to provide you with the mailing or SMS text that you have chosen to subscribe to. 

Personal data that we collect from you 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by subscribing to our mailings. 

You may withdraw your consent at any time by contacting us using our contact details. Our contact details and more information about your rights can be found on our Website.

Storage period 

We store your personal data for this purpose from the time you start your subscription with us until up to two (2) weeks from the time you withdraw your consent by cancelling the subscription. If you have subscribed to a newsletter by email or SMS, you can unsubscribe by clicking on the “unsubscribe” link at the bottom of each email that you receive from us respectively send a text to the designated telephone number at the bottom of each SMS. 

 

B. Carry out marketing communication mailings to our customers 

Purpose 

If you have made a purchase from us and in connection with this provided your personal data at checkout, we may process this data in order to market our products to you within the framework of our customer relationship.  

Personal data that we collect from you 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to market our products to you within the framework of our existing customer relationship. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for twelve (24) months after your most recent purchase, or until you object to our processing of your personal data for this purpose, whichever occurs first. 

You can object to this processing by by clicking on the “unsubscribe” link at the bottom of each email or sms that you receive from us or contacting Customer Service at any time at the following link. 

 

C. Sending necessary information mailings 

Purpose 

In certain cases, we need to send you necessary information due to certain legal requirements, for example when we make changes to our terms and conditions or when you request instructions from us on how our Website works. In these cases, we need to process your personal data for the purpose of carrying out the necessary information mailings in order to fulfil our legal obligations. 

Personal data that we collect from you 

• Contact details 

Legal basis and rights 

In some cases, we need to send you necessary information due to certain legal requirements, for example when we make changes to our terms and conditions or when you request instructions from us on how our Website works. In these cases, we need to process your personal data in order to send the necessary information and thereby fulfil our legal obligations. 

Click here for more information about your rights under the GDPR.

Please note that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(c) GDPR. 

Storage period 

We store and process your personal data for this purpose until each relevant mailing has been carried out. 

 

D. Segmentation and selection of recipients 

Purpose 

To ensure that we only send mailings with relevant content, we use your personal data to create a profile about you. This profile is then used to assign you to a specific target group for which we personalise our marketing communications (so-called “target group segmentation”). 

Personal data that we collect from you 

• Contact details 

• Identity data 

• Behavioural data 

• Generated data 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to segment and select recipients in order to ensure that you only receive relevant marketing communications from us. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for up to twenty-four (24) months from the date we made our selection or your last purchase from us, whichever occurs first. 

 

E. Abandoned cart reminders 

Purpose 

If you have added a product to your shopping cart and provided your email address, we may process your personal data to remind you of your abandoned cart, provided that you have not ticked the box “No thanks – I do not want to receive offers by email and SMS” or rejected cookies. 

Personal data that we collect from you 

• Contact data 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to remind you of your abandoned cart. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose from the time you abandoned or amended your cart and for a period of twelve (24) months thereafter. 

 

F. Analysing the performance of our digital marketing communications 

Purpose 

To improve and optimise our digital marketing communications, we use tracking technologies to analyse how you interact with our marketing communications, which involves processing of your personal data. 

Personal data that we collect from you 

• Behavioural data 

• Device information and network identifiers 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting marketing and advertising cookies in our cookie banner. 

You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy.

Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose from the time you consent to our marketing and advertising cookies until you withdraw such consent, or for up to twenty-four (24) months from the time we receive your personal data, whichever occurs first. 

 

G. Detect, prevent and limit crime and fraud 

Purpose 

To ensure your and our security, we continuously take crime prevention measures in order to detect and limit the use of our operations for crime and fraud. To ensure your and our security, we therefore process your personal data for this purpose. 

Personal data we collect from you 

• Contact details 

• Behavioural data 

• Device information and online identifiers 

Personal data we collect from others 

• Identity data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6.1(f) GDPR, i.e. our legitimate interest. After careful consideration, we have concluded that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest outweighs your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to detect, prevent and limit crime and fraud. 

You have the right to object to personal data processing that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

H. Cooperation with public authorities 

Purpose 

In certain cases, we need to process your personal data in order to cooperate with public authorities, for example where such cooperation is required to investigate suspicions of crime or fraud, or for us to be able to provide you with our products and services. 

Personal data we collect from you 

• Contact details 

• Behavioural data 

• Device information and online identifiers 

Personal data that we collect from others 

• Identity data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6.1(f) GDPR, i.e. our legitimate interest. After careful consideration, we have concluded that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest outweighs your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to cooperate with the relevant public authorities. 

You have the right to object to personal data processing that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

I. Defend, safeguard and assert legal claims

Purpose 

To ensure that Serenata Flowers has adequate evidence should a dispute arise or a legal claim otherwise be brought against us, and in order to demonstrate that we have complied with applicable marketing law rules, we store your personal data so that we can defend against, safeguard or assert legal claims during the general statutory limitation period. 

Personal data that we collect from you 

• Contact details 

• Behavioural data 

• Device information and online identifiers  

Personal data that we collect from others 

• Identity data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6.1(f) GDPR, i.e. our legitimate interest. After careful consideration, we have concluded that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest outweighs your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to prove that we have complied with applicable marketing law rules and to defend against, safeguard and assert legal claims during the general statutory limitation period. 

You have the right to object to personal data processing that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

THIRD-COUNTRY TRANSFERS 

In connection with the processing of personal data that we carry out for the purposes stated above, we and/or any of the recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, a so-called “third country”. 

Click here to read more about how we handle your personal data in connection with third-country transfers. 

 

AUTOMATED DECISION-MAKING AND PROFILING 

Serenata Flowers may create a profile about you in order to better understand how you use our products and services and to be able to personalise our marketing towards you. We base our profiling on the consent you give by accepting statistics and analytics cookies and/or marketing cookies in our cookie banner. Click here for more information about your rights under the GDPR.

This page was last updated on 2026-01-31 

This privacy notice explains how Serenata Flowers processes your personal data when you are or become a customer of ours. On this page you will find information about what personal data we process, the purposes of each processing activity, the legal bases on which we rely, our storage periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data. 

WHAT INFORMATION DO WE COLLECT? 

PERSONAL DATA THAT WE COLLECT FROM YOU 

We may process personal data that you provide to us yourself. This may concern personal data that you provide directly to us in your communication with Serenata Flowers, personal data that is generated as a direct result of your use of our products and services, or personal data that we have received from you in the course of our customer relationship and stored in our internal databases. 

Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from you”. Below you will find all categories of personal data that we collect directly from you and process when you are or become a customer of ours. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example first and last name, personal identity number, date of birth, gender, customer number, customer type and other necessary identifiers used for logging in with an electronic identification scheme. 

Contact details: 

For example address, email address and telephone number. 

Financial data: 

For example credit and debit card details, bank account identifiers, invoice address, invoice number, information about any claim or debt, transaction metadata such as currency and merchant reference.  

Generated data: 

For example information provided in contact with our customer service that cannot be defined in advance (including the other categories of data listed here), card message for a flower card, and information about how you use our products and services. 

Behavioural data: 

For example your purchase history and information about how you interact with our Website, including information about how you reached our Website and how you interact with and navigate around our Website. 

Device information and network identifiers: 

For example information about your computer, phone or other device, such as your IP address, user ID, party ID, time zone, language settings or geographical information. 

 

PERSONAL DATA THAT WE COLLECT FROM THIRD PARTIES OR PUBLIC SOURCES 

In addition to the personal data that we collect directly from you, we may in some cases also collect your personal data from another company or authority (a “third party”) or from public sources. We do this in order to be able to supplement your personal data where this is necessary, to check that your personal data is up to date or to ensure that your personal data is correct. 

Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from others”. Below you will find all categories of personal data that we collect from third parties and public sources and process when you are or become a customer of ours. The third party or public source from which we have obtained your personal data is also indicated in italics below.. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example name, date of birth, personal identity number and other necessary identifiers used for logging in with an electronic verification scheme. 

Your identity data may be obtained from, or compared with, data from an electronic verification scheme, official population registers, official personal address registers and our payment partners. 

Contact details: 

For example email address, telephone number or address. 

Your contact details may be obtained from, or compared with, data from telephone and email lists or from official population register and official personal address registers. 

Financial data: 

For example credit and debit card details, invoice address, invoice number, information about any claim or debt. 

We may obtain your financial data from credit reference agencies when we need to assess your creditworthiness.  

Behavioural data: 

For example information about how you interact with our Website and digital marketing, including information about how you reached our Website and how you interact with and navigate around our Website. 

We may receive your behavioural data from external third parties whose websites you have visited and from cookies you have accepted. 

 

PURPOSES, LEGAL BASIS, RIGHTS AND STORAGE PERIOD 

When you make a purchase from us via our Website, we process the personal data you have provided to us in order to be able to offer you our products and services, enter into a purchase agreement with you, deliver our products to you, provide you with customer support, optimise our marketing and offers directed to you and manage your payments. 

Click here for more information about your rights under the GDPR.

 

A. ENTERING INTO AND PERFORMING THE PURCHASE AGREEMENT WITH YOU 

Purpose 

When you make a purchase on our Website, we will process your personal data in order to administer and manage your order, enter into a purchase agreement with you and deliver and provide you with the products you have purchased from us. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Financial data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. taking the preparatory steps required to enter into an agreement with you and the performance thereof. 

Click here for more information about your rights under the GDPR.

Please note that the processing is necessary for the performance of the agreement that we have entered into with you. We therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(b) GDPR. 

Storage period 

In order to perform the agreement to which you are a party, Serenata Flowers stores and processes your personal data for this purpose until we have delivered your products to you and for a time period corresponding to what is required by applicable consumer law in complaint cases. 

 

B. PREPARING ACCOUNTING AND FINANCIAL REPORTING 

Purpose 

In connection with our carrying out purpose A, i.e. entering into and performing the purchase agreement with you, we also process your personal data in order to prepare our accounting and financial reporting in accordance with applicable accounting legislation. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

Personal data that we collect from others 

• Identity data 

• Financial data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(c) GDPR, i.e. the performance of our legal obligations under applicable accounting legislation. 

Click here for more information about your rights under the GDPR.

Please note that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(c) GDPR. 

Storage period 

To the extent that your personal data is processed in order to fulfil our legal obligations under applicable accounting law, we store and process your personal data for the time during which we prepare our accounting and for seven (7) years after the end of the financial year in which the data was recorded. 

 

C. CUSTOMER SERVICE AND CUSTOMER CONTACT 

Purpose 

When you contact our customer service with questions or complaints by email, chat or telephone, we may process your personal data in order to handle your customer service matter (for example when you exercise your right of withdrawal or submit a complaint) and/or respond to your questions. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to provide you with our customer service, respond to your questions, accommodate your request and handle your matter. You have the right to object to processing of personal data that we base on our legitimate interest. 

If you contact us in order to exercise your consumer rights under applicable consumer law, we base the processing on Article 6(1)(c) GDPR regarding the performance of a legal obligation. 

Click here for more information about your rights under the GDPR.

Please note that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(c) GDPR. 

Storage period 

We store and process your personal data for this purpose for as long as we have an ongoing case with you until the case is closed and for a time period corresponding to what is required by applicable consumer law in complaint cases. 

 

D. CUSTOMER ANALYSIS AND PROFILING 

Purpose 

We may process your personal data in order to improve our conversion rates and optimise our campaigns, offers and marketing. We do this by analysing the profile that we create about you, consisting partly of personal data that you provide to us yourself when making a purchase and partly of personal data that we collect via cookies and other tracking technologies. We may also enrich your profile by collecting your personal data from third parties and public sources. Once we have created your profile, we can use it to place you in different customer and target group categories; we do this to optimise and personalise your customer experience. We may also use your profile as a basis for carrying out different types of segmentation measures and marketing communication measures as described in our privacy notices, which we likewise do in order to optimise and personalise your customer experience.  

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Financial data 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting the applicable cookies in our cookie banner. If you have not accepted our cookies, we will not process your personal data for this purpose. 

You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy. 

Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for a time period corresponding to the general prescription time for complaints matters according to applicable consumer law.   

 

E. ANONYMISATION OF PERSONAL DATA FOR FURTHER ANALYSIS

Purpose 

We may anonymise your personal data in order to use this anonymised data in anonymised and/or aggregated customer models and thereafter further analyse this anonymised data. The anonymisation process itself involves processing of your personal data. 

Please note that once your personal data has been anonymised by us, it can no longer be linked to you as an individual and is therefore no longer regarded as personal data under the GDPR. The subsequent analysis of your anonymised personal data thus falls outside the scope of application of the GDPR. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Financial data 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to plan, optimise, develop, quality assure and improve our business, products and services based on anonymised data. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose only during the anonymisation process, after which the personal data will no longer be classified as personal data according to the GDPR. 

 

F. DETECTING, PREVENTING AND LIMITING CRIME AND FRAUD 

Purpose 

To ensure your security and ours, we take ongoing crime-prevention measures in order to detect and limit the use of our business for crime and fraud. To ensure your safety and ours, we therefore process your personal data for this purpose. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Financial data 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to detect, prevent and limit crime and fraud. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for up to ten (10) years after your purchase from us. 

 

G. COOPERATION WITH AUTHORITIES 

Purpose 

In some cases, we need to process your personal data in order to cooperate with authorities, for example where such cooperation is required to investigate suspected crime or fraud, or for us to be able to provide you with our products and services. 

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Financial data 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to cooperate with the relevant authorities. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store and process your personal data for this purpose for up to ten (10) years after your purchase from us. 

 

H. DEFENDING, SAFEGUARDING AND EXERCISING LEGAL CLAIMS 

Purpose 

To ensure that Serenata Flowers has adequate evidence if a dispute arises or a legal claim is otherwise made against us in connection with legal proceedings, and to be able to demonstrate that we have complied with applicable legislation, we store your personal data so that we can defend, safeguard or exercise legal claims during the general statutory limitation period.  

Personal data that we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Financial data 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to prove that we have complied with applicable legislation and to defend against, safeguard and exercise legal claims during the general statutory limitation period. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.

Storage period 

We store your personal data for these purposes for ten (10) years from the time we received your personal data. 

 

THIRD-COUNTRY TRANSFERS 

As part of the personal data processing that we carry out for the purposes set out above, we and/or any recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”.  

Click here to read more about how we handle your personal data in connection with third-country transfers.

 

AUTOMATED DECISION-MAKING AND PROFILING 

Serenata Flowers may create a profile about you in order to better understand how you as a customer use our products and services, and to personalise our marketing directed to you. We base our profiling on the consent that you give by accepting statistics and analytics cookies and/or marketing cookies in our cookie banner. Click here for more information about your rights under the GDPR.

This page was last updated on 2026-01-31 

This privacy notice describes how Serenata Flowers processes your personal data when you apply for a job with us or otherwise take part in one of our recruitment processes. On this page, you will find information about which personal data we process, the purposes of each processing activity, the legal bases on which we rely, our retention periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data. 

WHAT INFORMATION DO WE COLLECT? 

PERSONAL DATA WE COLLECT FROM YOU 

We may process personal data that you yourself provide to us. This may be personal data that you directly provide to us in your communication with Serenata Flowers, or personal data that we gain access to during the recruitment process. 

Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the sub-heading “Personal data we collect from you”. Below you will find all categories of personal data that we collect directly from you which we process when you apply for a job with us or otherwise take part in one of our recruitment processes. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example, name, date of birth, personal identity number and photograph. 

Contact details: 

For example, address, email address and telephone number. 

Generated data: 

For example, personal data included in your correspondence with Serenata Flowers, including your CV, cover letter, certificates, grades, salary expectations, and meeting notes from your interview with us. 

 

PERSONAL DATA WE OBTAIN FROM THIRD PARTIES OR PUBLIC SOURCES 

In addition to the personal data that we obtain directly from you, we may in some cases also obtain your personal data from another company or authority (a so-called “third party”) or from public sources. We do this to be able to supplement your personal data where necessary, to check that your personal data is up to date or to ensure that your personal data is correct. 

Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the sub-heading “Personal data we obtain from others”. Below you will find all categories of personal data that we obtain from third parties and public sources which we process when you apply for a job with us or otherwise take part in one of our recruitment processes. The third party or public source from which we have obtained your personal data is also indicated in italics below. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example, name, date of birth, personal identity number and photograph. 

We may obtain your identity data from sources like LinkedIn for applicants to LinkedIn job advertisements.  

Contact details: 

For example, email address. 

We may obtain your contact details from sources like LinkedIn for applicants to LinkedIn job advertisements 

Value judgments: 

For example, information that arises in our contact with your references, including your references’ opinions and statements, etc. 

We may obtain value judgements from the references that you have provided as part of the recruitment process, or from our own employees who have recommended you for a specific position with us. 

Publicly available information: 

For example, the link to and contents of your LinkedIn profile. 

We may obtain publicly available information from websites and databases that are generally accessible on the open web. 

 

PURPOSES, LEGAL BASIS, RIGHTS AND RETENTION PERIODS 

When you apply for a job with Serenata Flowers or otherwise participate in or are involved in a recruitment process with us, we need to process your personal data in order to administer your application. There may also be occasions when we are recommended you as a candidate by a third party, in which case we need to process your personal data in order to follow up on the recommendation. We mainly process your personal data in order to be able to receive applications, assess qualifications and select candidates whose profile matches the recruitment needs, as well as to comply with anti-discrimination laws. The processing of your personal data is ultimately carried out so that we can manage our recruitment and, where relevant, potentially offer you a job with us. 

Click here for more information about your rights under the GDPR. 

 

A. MANAGING YOUR JOB APPLICATION AND PARTICIPATION IN A RECRUITMENT PROCESS 

Purpose 

If you apply for a job with us, we may process the personal data that you provide in your application in order to manage and administer your job application. We may also process your personal data in order to contact any references that you have provided and to invite you to a job interview with us. If you progress in the recruitment process and we wish to offer you a job, we may process your personal data in order to be able to enter into an employment contract with you. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Personal data we obtain from others 

• Identity data 

• Contact details 

• Publicly available information 

• Value judgments 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to administer and manage your job application, contact any references that you have provided in your application, and arrange a potential job interview with you. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for these purposes during the time for which the recruitment process for which you are part of is ongoing.  

 

B. HANDLING REFERRALS 

Purpose 

If one of our employees has recommended you for a position with us, we may process your personal data in order to handle the referral and contact you with an encouragement to submit a job application for the position for which you have been recommended. 

Personal data we obtain from others 

• Identity data 

• Contact details 

• Value judgments 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to handle and follow up on the referral and contact you to recommend that you submit a job application to us. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

If we have received your personal data from one of our employees because they have recommended you for a particular position, we store and process your personal data for this purpose for no more than two (2) months from the time we received it. 

 

C. CONDUCTING TESTS 

Purpose 

In some cases, we conduct different types of tests as part of our recruitment processes, which involves processing of your personal data. The processing is carried out in order to gain a better understanding of how well you would be suited to the position for which you are being considered.  

Personal data we collect from you 

• Identity data 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to determine how well you would fit the position that you have applied for with us. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for these purposes until the recruitment process in which you are participating has been concluded. 

 

D. CONTACTING YOU AS PART OF AN ONGOING RECRUITMENT PROCESS 

Purpose 

If you are participating in an ongoing recruitment process, we may process your personal data in order to contact you regarding matters relating to the recruitment, for example to schedule a date and time for a job interview or to inform you whether you have progressed in the process. 

Personal data we collect from you 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to contact you as part of an ongoing recruitment process in which you are participating. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for these purposes until the recruitment process in which you are participating has been concluded and for two (2) months thereafter. 

 

E. OFFERING YOU A JOB WITH US 

Purpose 

If you progress in the recruitment process and we wish to offer you a job, we may process your personal data in order to be able to enter into an employment contract with you. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Personal data we obtain from others 

• Identity data 

• Contact details 

• Publicly available information 

• Financial data 

• Value judgements 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. taking steps prior to entering into a contract with you. The processing is necessary in order to enter into, administer and perform our employment contract with you. 

Click here for more information about your rights under the GDPR.  

Please note that the processing is necessary for us to be able to perform the contract we have entered into with you, and we therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(b) GDPR. 

Retention period 

If you accept a job offer from us, we store and process your personal data for these purposes for the duration of your employment with us and for two (2) years thereafter. If you decline a job offer from us, we delete your personal data after we have received your response. 

 

F. ESTABLISHING, EXERCISING AND DEFENDING LEGAL CLAIMS 

Purpose 

After a concluded recruitment process, we will store all personal data that we have collected from you, third parties or public sources in order to be able to defend ourselves against any discrimination cases under the applicable discrimination law. We do this in order to ensure that we have evidence that we have complied with applicable rules on the prohibition of discrimination in working life. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Personal data we obtain from others 

• Identity data 

• Contact details 

• Publicly available information 

• Financial data 

• Value judgements 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to prove that we have complied with applicable rules on the prohibition of discrimination in working life and to defend ourselves against any discrimination cases under applicable discrimination law.  

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.  

Retention period 

We store and process your personal data for these purposes for two (2) years from the time we received your personal data. 

 

THIRD-COUNTRY TRANSFERS 

Within the scope of the processing of personal data that we carry out for the purposes set out above, we and/or any of the recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”. 

Click here to read more about how we handle your personal data in connection with third-country transfers. 

 

AUTOMATED DECISION-MAKING AND PROFILING 

Serenata Flowers does not carry out any profiling or automated decision-making measures as part of our recruitment processes. 

This page was last updated on 2026-01-31 

We have identified five (5) different categories of data subjects whose personal data we mainly process, namely Website visitors, Newsletter subscribers and recipients of other mailings, Customers, and Job applicants. However, there are situations in which we process personal data relating to you when you have another type of relationship with us. This privacy notice explains how Serenata Flowers processes your personal data when you do not fall under the above categories of data subjects that we have identified, but instead have some other relationship with us. 

The following privacy notice may be relevant for you if, for example, you are a representative of one of our business partners, suppliers, resellers, or distributors, or if you are a participant in one of our competitions, or otherwise have a relationship with Serenata Flowers that is not based on any of the other relationships identified in our privacy information. On this page, you will find information about which personal data we process, the purposes of each processing activity, the legal bases on which we rely, our retention periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data. 

 

WHAT INFORMATION DO WE COLLECT? 

PERSONAL DATA WE COLLECT FROM YOU 

 

We may process personal data that you yourself provide to us. This may be personal data that you directly provide to us in your communication with Serenata Flowers, personal data that is generated within the scope of and as a direct result of our relationship, or personal data that we have gained access to from previous matters and communications with you that we have stored in our internal databases.  

Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the sub-heading “Personal data we collect from you”. Below you will find all categories of personal data that we collect directly from you that we may process for the purposes set out in this privacy notice. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example, name, date of birth, username and personal identity number. 

Behavioural data:  

For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it. 

Contact details: 

For example, address, email address and telephone number. 

Financial data: 

For example, bank details, credit information and invoicing details. 

Generated data: 

For example, information that you provide when you communicate with us, such as information you provide in your communication with us via any of our internal or external channels, and information that you provide in or which is generated when you use our systems and digital services, like order information and product information. 

Device information and network identifiers: 

For example information about your computer, phone or other device, such as your IP address, connection timestamps, user ID, time zone, language settings or geographical information. 

 

PERSONAL DATA WE OBTAIN FROM THIRD PARTIES OR PUBLIC SOURCES 

 

In addition to the personal data that we obtain directly from you, we may in some cases also obtain your personal data from another company or authority (a so-called “third party”) or from public sources. We do this to be able to supplement your personal data where necessary, to check that your personal data is up to date or to ensure that your personal data is correct.  

Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the sub-heading “Personal data we obtain from others”. Below you will find all categories of personal data that we obtain from third parties and public sources that we may process for the purposes set out in this privacy notice. The third party or public source from which we have obtained your personal data is also indicated in italics below. 

CATEGORIES OF PERSONAL DATA 

Identity data: 

For example, name, date of birth and other necessary identifiers used for logging in with an electronic identification scheme. 

Your identity data may be obtained from, or checked against, data held in official population registers, business registers, or, where applicable, the company that you represent. 

Contact details: 

For example, address, email address and telephone number. 

Your contact details may be obtained from, or checked against, data held in official population registers, business registers, or, where applicable, the company that you represent. 

Generated data: 

For example, information that you provide when you communicate with us, such as information you provide in your communication with us via any of our internal or external channels, and information that you provide in or which is generated when you use our systems and digital services, like order information and product information. 

Your generated data may be obtained from data in virtual meeting programs, such as chat logs and audiovisual recordings.  

Behavioural data:  

For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it. 

Your behavioural data may be obtained from, or compared with, data from our data analytics partners. We may receive your behavioural data from external third parties whose websites you have visited and from cookies you have accepted. 

 

PURPOSES, LEGAL BASIS, RIGHTS AND RETENTION PERIODS 

 

When, as a data subject, you have a relationship with us that does not fall within any of the categories of data subjects listed above, we may mainly process your personal data in order to pursue the underlying purpose for which the relationship between you and Serenata Flowers has arisen. 

Click here for more information about your rights under the GDPR.

 

A. ENTERING INTO AND ADMINISTERING CONTRACTS WITH THE COMPANY YOU REPRESENT 

Purpose 

When you act as a contact person or representative for a company with which we intend to enter into a contract, we may process your personal data in order to enable communication between us and the company you represent and to be able to enter into a contract with that company. We also process your personal data after a contract has been concluded in order to administer the contractual relationship between us and the company you represent, for example by issuing or handling invoices and payments, enabling communication, or handling cases and questions that you address to us on behalf of the company you represent.  

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Personal data we collect from others 

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to take the preparatory steps required to enter into a contract with your principal, i.e. the company you represent, and to administer the subsequent contractual relationship that arises as a result of the contract. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for this purpose for as long as we have an ongoing contractual relationship with the company you represent, or until you cease to be a contact person at that company, whichever occurs first. Thereafter, we store your personal data for an additional three (3) years. 

 

B. ENTERING INTO AND ADMINISTERING A COMMERCIAL CONTRACT WITH YOU 

Purpose 

We collaborate from time to time with influencers and other types of business partners. If you choose to enter into a collaboration with us, we may process your personal data in order to enable communication between you and us and to allow us to enter into a contract with you. We also process your personal data after a contract has been concluded in order to administer the contractual relationship between us, for example by issuing or handling invoices and payments, enabling communication, or handling cases and questions that you address to us within the framework of our collaboration. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. the performance of the contract that you and Serenata Flowers intend to enter into. 

Click here for more information about your rights under the GDPR. 

Please note that the processing is necessary for us to be able to perform the contract we have entered into with you, and we therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(b) GDPR. 

Retention period 

We store and process your personal data for this purpose for as long as we have an ongoing contract with you, and for three (3) years thereafter. 

 

C. PREPARING ACCOUNTING AND FINANCIAL REPORTING 

Purpose 

In connection with us pursuing Purpose A (Entering into and administering contracts with the company you represent) and Purpose B (Entering into and administering a commercial contract with you), we may also need to process your personal data to the extent required for us to be able to prepare our accounting and financial reporting in accordance with applicable bookkeeping legislation. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Financial data (only within the scope of Purpose B)  

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(c) GDPR, i.e. compliance with our legal obligations under applicable accounting law.  

Click here for more information about your rights under the GDPR. 

Please note that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(c) GDPR. 

Retention period 

To the extent that your personal data is processed to enable us to comply with our legal obligations under applicable accounting law, we store and process your personal data for the time during which we prepare our accounts and for seven (7) years after the end of the year in which the data was recorded. 

 

D. GENERAL CONTACT AND COMMUNICATION 

Purpose 

When you contact us or we contact you via email, telephone or otherwise, we process your personal data in order to be able to communicate and interact with you.  

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Personal data we collect from you 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to communicate and interact with you when you contact us or when we contact you. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for this purpose for as long as we have an ongoing matter or correspondence with you, until the matter is closed or the correspondence ceases. 

 

E. ORGANISING COMPETITIONS 

 

Purpose 

We sometimes organise various types of competitions, both on our own and in sponsored collaboration with our business partners. If you wish to participate in these competitions, we will process your personal data in order to administer and manage your participation, for example to handle your registration, contact you with relevant information related to the competition you have registered for, and, where applicable, inform you of a potential competition prize.  

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. the performance of the contract that you and Serenata Flowers have entered into regarding your participation in the competition. 

Click here for more information about your rights under the GDPR. 

Please note that the processing is necessary for us to be able to perform the contract we have entered into with you, and we therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(b) GDPR. 

Retention period 

We store and process your personal data for this purpose until the event or competition has been carried out and concluded, and for three (3) months thereafter. 

 

F. ANALYTICS AND STATISTICS FOR BUSINESS DEVELOPMENT PURPOSES 

Purpose 

We may process your personal data in order to prepare forecasts and to plan, develop and quality assure our business, products and services. We may also process your personal data for assortment optimisation and capacity planning purposes as well as for business reporting and KPI follow-up purposes. The processing of personal data ultimately takes place so that we can improve our business and thereby offer you a better customer experience with us over time.  

Personal data that we collect from you 

• Identity data 

• Financial data 

• Contact details 

• Generated data 

• Behavioural data 

• Device information and network identifiers 

Personal data that we collect from others 

• Behavioural data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us. 

Our legitimate interest in the processing is to be able to plan, optimise, develop, quality assure and improve our business, products and services. 

You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR. 

Storage period 

We store and process your personal data for up to two years (2) from the time we received it.  

 

G. TRADE UNION DIALOGUE 

Purpose 

If you work for or represent a trade union, we may process your personal data in order to conduct dialogue and negotiations in accordance with applicable legal requirements, as well as to deal with other trade union-related issues and matters that may arise. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(c) GDPR, i.e. compliance with our legal obligations under applicable labour law.  

Click here for more information about your rights under the GDPR. 

Please note that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(c) GDPR. 

Retention period 

We store and process your personal data for this purpose for as long as you work for or represent the trade union with which we conduct dialogue. 

 

H. RELATIVES OF EMPLOYEES 

Purpose 

If you have been stated as a relative/next of kin of one of our employees, we will process your personal data in order to be able to contact you when necessary and in emergencies, for example if your relative is involved in a workplace accident. 

Personal data we obtain from others  

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to contact you when necessary and in emergencies concerning your relative. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for this purpose for as long as the person to whom you are a relative is employed by Serenata Flowers and for three (3) months thereafter, or until our employee removes you from our register of relatives, whichever occurs first. 

 

I. DELIVERING PRODUCTS TO YOU AS A GIFT RECEIVER

Purpose 

When someone has entered into a purchasing agreement consisting of the deliverance of our products to you, we will process your personal data in order to administer and manage your order and deliver and provide you with the products someone else has purchased from us. 

Personal data that we collect from others 

• Identity data 

• Contact details 

• Generated data 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to be able to deliver flowers to you, through which we will be able to fulfil our agreement with the purchaser of said flowers. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Storage period 

In order to perform the agreement to which you are a party, Serenata Flowers stores and processes your personal data for this purpose until we have delivered your products to you. 

 

J. DETECTING, PREVENTING AND LIMITING CRIME AND FRAUD 

Purpose 

In order to ensure your security and ours, we continuously take crime-prevention measures in order to detect and limit the use of our operations for crime and fraud. To ensure your security and ours, we therefore process your personal data for this purpose. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

Personal data we obtain from others  

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to detect, prevent and limit crime and fraud. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for this purpose for up to ten (10) years from the time we received your personal data. 

 

K. COOPERATION WITH AUTHORITIES 

Purpose 

In some cases, we need to process your personal data in order to cooperate with public authorities, for example where such cooperation is required to investigate suspected crime or fraud. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

Personal data we obtain from others  

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to cooperate with the relevant public authorities, in particular where such cooperation is required to investigate suspected crime and fraud. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for this purpose for up to ten (10) years from the time we received your personal data. 

 

L. ESTABLISHING, EXERCISING AND DEFENDING LEGAL CLAIMS 

Purpose 

To ensure that we have adequate evidence in the event that we need to establish a legal claim, or to be able to defend ourselves if a dispute arises or a legal claim is otherwise brought against us, and to demonstrate that we have complied with applicable legislation, we store your personal data for the general statutory limitation period. 

Personal data we collect from you 

• Identity data 

• Contact details 

• Financial data 

• Generated data 

Personal data we obtain from others  

• Identity data 

• Contact details 

Legal basis and rights 

When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Serenata Flowers has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us. 

Our legitimate interest in the processing of personal data is to be able to demonstrate that we have complied with applicable legislation and to defend, safeguard and establish legal claims during the general statutory limitation period. 

You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR. 

Retention period 

We store and process your personal data for this purpose for ten (10) years from the time we received your personal data. 

 

THIRD-COUNTRY TRANSFERS 

Within the scope of the processing of personal data that we carry out for the purposes set out above, we and/or any of the recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”. 

Click here to read more about how we handle your personal data in connection with third-country transfers. 

 

AUTOMATED DECISION-MAKING AND PROFILING 

Serenata Flowers does not carry out any profiling or automated decision-making measures in relation to you when you have another relationship with us.