This page was last updated on 2026-01-31
This Data Protection Information explains how Euroflorist UK Ltd (“Eflorist” / “we” / “us”) collects, uses and otherwise processes your personal data when you (the “data subject”) use our services, purchase our products or otherwise interact with us. This Data Protection Information also describes what types of personal data we process, where we obtain this personal data from, which third parties we may share your personal data with, what rights you have and how you can exercise your rights.
Eflorist is the controller for the processing of your personal data, and we process your personal data in accordance with applicable law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”). We encourage you to read this Data Protection Information in full to ensure that you are informed about and understand how we process your personal data when you use our services, shop in our online stores or otherwise interact with us.
Please note that this Data Protection Information applies to and is applied to all websites owned and operated by Eflorist from time to time (together the “Website”), including:
CONTACT DETAILS FOR EFLORIST
We care about your privacy and want you to feel confident about our processing of your personal data when you visit the Website. We work with data protection issues on a daily basis to ensure that we comply with data protection legislation. If you have any questions regarding the processing of your personal data, you are welcome to contact us using the contact details below.
Euroflorist UK Ltd
Corporate ID number: 13486019
Postal address: Suite 1 & 2 Stepnell house, Tollgate, Chandlers Ford, Eastleigh SO53 3LU
To structure the information regarding our personal data processing and to make it easier for you to navigate, we have divided the data subjects whose personal data we process into five (5) categories:
In the links above, you will find information about:
To read more about how we process your personal data, please click on the link above with the heading that is relevant to you.
Please note that you may fall under one or more categories of data subjects, and we therefore encourage you to read all parts of this Data Protection Information that are applicable and relevant for you.
When we process your personal data, you as a data subject have several rights under the GDPR. These rights are briefly described below. If you would like to read more about your rights, please visit the website of the Information Commissioner’s Office (ICO) via the link stated in connection with each right.
To exercise your rights, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You have the right to receive information about how Eflorist processes your personal data. Such information is provided through this Data Protection Information when your personal data is collected and is always available on the Website. You are also entitled to receive specific information if a personal data breach occurs that is likely to result in a high risk to your rights and freedoms.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about your right to information on the Information Commissioner’s Office (ICO) website.
You have the right to obtain access to a copy of the personal data that Eflorist processes about you (a so-called “data subject access request”). Your right of access is not absolute; in some cases, there are provisions in law that prevent us from disclosing certain information to you, e.g. anti money laundering legislation. Under certain circumstances, Eflorist may also refuse your request for access, for example if you request access to your personal data many times within a short period.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about your right of access on the Information Commissioner’s Office (ICO) website.
You have the right to have inaccurate personal data rectified or to have incomplete personal data completed. The right to rectification applies both to personal data collected from you, from third parties or public sources and to personal data created by Eflorist.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist.
You can read more about your right to rectification on the Information Commissioner’s Office (ICO) website.
You have the right to request the erasure of your personal data, for example when it is no longer necessary for the purpose for which it was collected. In some cases, however, there may be circumstances that limit your right to erasure, for example if you have entered into an agreement with us that requires us to process your personal data. There are also legal obligations that prevent us from erasing certain information even after any relationship with us has ended. These obligations arise, among other things, from bookkeeping legislation and consumer protection legislation. In such cases, we ensure that such personal data is not processed for any other purpose than to enable us to comply with these obligations, and we also restrict access to such personal data for Eflorist’s employees where necessary.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about your right to erasure on the Information Commissioner’s Office (ICO) website.
You have the right to request that our processing of your personal data be restricted. A restriction may be made, for example, if you believe that the personal data we process about you is inaccurate and you have requested rectification. During the time we are verifying whether the personal data is correct, you can request that we restrict our processing of your personal data.
Further situations where you have the right to restriction include if you consider our processing of your personal data to be unlawful, when we no longer need the personal data but you need it in order to establish, exercise or defend legal claims, or if you have objected to processing based on a balancing of interests (i.e. our legitimate interest). In the latter case, you can request that we restrict our processing g of your personal data during the time we handle your objection.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about your right to restriction on the Information Commissioner’s Office (ICO) website.
You have the right to object at any time to our processing of your personal data where we base the processing on a balancing of interests as legal basis (i.e. our legitimate interest). Continued processing of your personal data then requires that we demonstrate compelling legitimate grounds for the specific processing.
You always have the right to object at any time to direct marketing without any balancing of interests. Where our direct marketing is carried out digitally, you can always unsubscribe from future mailings by clicking on the “unsubscribe link” in the relevant communication.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about your right to object on the Information Commissioner’s Office (ICO) website.
The right to move personal data is called the right to data portability in the GDPR. If you have consented to providing your personal data to us, or if you have provided the personal data to us in connection with an agreement, you have the right to request the data and receive it in a machine-readable format so that you can transfer your personal data yourself. You may also request that we transfer the personal data to another controller, for example another e-retailer. Eflorist is only obliged to transfer the personal data if it is technically feasible.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about your right to data portability on the Information Commissioner’s Office (ICO) website.
Where you have given your consent, you have the right to withdraw that consent at any time. If you have consented to our use of cookies and other tracking technologies via our cookie banner, you can always withdraw your consent or change your choice in our cookie settings.
To exercise this right, you can always contact us using our contact details, which you will find above under the heading “Contact details for Eflorist”.
You can read more about consent as a legal basis and your right to withdraw your consent on the Information Commissioner’s Office (ICO) website.
If you consider that we process your personal data in breach of the GDPR, you have the right to lodge a complaint with the UK Authority for Privacy Protection using the following contact details:
Information Commissioner’s Office (ICO)
E-mail: [email protected]
Telephone number: +44 1625 545 745
Postal address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK
Web site: https://ico.org.uk/
You can read more about how to lodge a complaint about Eflorist’s personal data processing on the Information Commissioner’s Office (ICO) website.
In order for us to be able to accommodate the exercise of your rights, we also need to process your personal data for this purpose. This means that, in addition to processing your personal data for each original purpose specified in this Data Protection Information, we will also retain the relevant personal data in order to fulfil this purpose. We store your personal data for this purpose, i.e. to fulfil your rights under the GDPR, for as long as we store your personal data for the original purpose. We base this processing on Article 6.1(c) GDPR, i.e. Eflorist’s legal obligation to comply with the provisions of the GDPR.
In certain circumstances, it may be necessary for us to share your personal data with external parties in order for us to conduct our business, for example we may share data with our suppliers where we need access to systems, functions or other services they provide that we cannot develop or supply ourselves. In such cases, we implement all reasonable and appropriate technical, legal and organisational measures to ensure that your personal data is handled securely and with an adequate level of protection.
In most cases, the recipient of your personal data is a company that may only process the personal data on behalf of Eflorist and in accordance with Eflorist’s instructions, so-called “processors”, with whom we have concluded data processing agreements. In the following list, you will find the categories of recipients with whom we may share your personal data.
Affiliate networks and intermediaries of cooperation partners
Part of Eflorist’s marketing and advertising strategy is to cooperate with content creators. We use affiliate networks and other intermediaries of cooperation partners in the context of these collaborations. If you are a content creator with whom we have entered into or intend to enter into a collaboration, we may transfer your personal data to providers of affiliate networks and other intermediaries of cooperation partners in order to establish a collaboration. We base such transfers of your personal data on the performance of the agreement you have entered into with us. You can find more information about your rights under the section “Your rights and how to exercise them”.
Courts and authorities
We are sometimes obliged to provide certain data required by law to various courts and authorities, such as the National Tax Agency and the Police Authority. We may also disclose your personal data to authorities if you have consented to such disclosure. Further, we may share your personal data with relevant authorities if we suspect that a crime has been committed, or in order to assist law enforcement authorities in their investigations if they suspect that a crime has been committed and request information from us. In these cases, we base the transfer on our and the requesting law enforcement authority’s legitimate interest in having the relevant crime investigated. Authorities and courts that receive personal data may then process your personal data as independent controllers. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Insurance companies
Where applicable, if Eflorist has suffered a loss, your personal data may be transferred to Eflorist’s insurance company if necessary to settle the claim and thereby establish, exercise or defend us against legal claims. The transfer of your personal data is based on our legitimate interest in having the loss finally settled. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Debt collection agencies
If Eflorist needs to collect an overdue debt in order to establish, exercise or defend legal claims, your personal data may be transferred to a debt collection agency based on our legitimate interest in collecting overdue debts. When the debt collection agency collects debts, it does so as an independent controller. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Legal advisors
If we for any reason need to establish, defend against or exercise legal claims, we may transfer your personal data to a legal advisor. We base such transfers on our legitimate interest in being able to establish, defend against or exercise legal claims. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Group companies
We may share your personal data with companies within our group in order to streamline our work and provide you with our products and services in the best possible way. We have data sharing agreements and/or data processing agreements in place with all our group companies to ensure compliance with applicable data protection legislation and the integrity of your personal data. We base these transfers on our legitimate interest in cooperating within our group and in making our operations more efficient. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Buyers and sellers in business and company transactions
If Eflorist buys or sells our business or assets, or if Eflorist is acquired in whole or in part by a third party, your personal data may be shared with the potential buyer or seller in each such business transaction. The legal basis for such disclosure is Eflorist’s legitimate interest in being able to carry out the relevant transaction. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Marketing agencies
In order for Eflorist to create and carry out marketing and advertising activities, it is sometimes necessary for us to share your personal data with marketing agencies that manage our campaigns. We base such transfers of your personal data on our legitimate interest in marketing our products and our business to you. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Audit firms
To enable Eflorist to fulfil our legal obligations under corporate and accounting legislation, your personal data may be transferred to audit firms tasked with reviewing, among other things, Eflorist’s accounting and financial reporting. We base such transfers of your personal data on our legal obligations. Audit firms act as separate and independent controllers for their processing of your personal data. You can find more information about your rights under the section “Your rights and how to exercise them”.
Providers of payment services
We will share your personal data with companies that provide us with payment services. This is necessary for us to be able to administer your purchases and enter into purchase agreements with you. Our legal basis for such transfers is the performance of the agreement you have entered into with us when you purchase our products. You can find more information about your rights under the section “Your rights and how to exercise them”.
Providers of digital signature services
To streamline and digitalise our contract processes, we will share your personal data with providers of digital signature services when you sign digital agreements with Eflorist. We base such transfers of your personal data on our legitimate interests in streamlining and digitalising our contract processes. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Providers of IT services
We use several IT and software services in order to conduct our business and improve your customer experience. This may include, for example, analytics systems, business systems, CRM-systems or website development systems. Where applicable, we may transfer your personal data to providers of such systems that we use from time to time, and we base such transfers on our legitimate interest in being able to conduct our business and provide you with our products and services. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Providers of recruitment services
We always strive to have the most competent employees and therefore initiate recruitment campaigns from time to time. Eflorist uses recruitment services for this purpose and will share your personal data with providers of such recruitment services as necessary to administer your job application. We base such transfers of your personal data on our legitimate interests in administering your and other candidates’ job applications. You have the right to object to this processing based on circumstances relating to your particular situation. Such objections will be assessed on a case-by-case basis. You can find more information about your rights under the section “Your rights and how to exercise them”.
Providers of social media
When you choose to interact with us or our material on our social media via our Website, for example by interacting with a video, the companies behind such social media platforms will also collect and process your personal data. This means that a transfer of your personal data to third countries outside the EU/EEA may take place. The transfer is based on the consent you give by accepting the relevant cookies in our cookie banner. You can withdraw your consent at any time by changing your settings in our cookie banner. You can find more information about your rights under the section “Your rights and how to exercise them”.
Transport and logistics companies
As we only conduct e-commerce, we send all our products for delivery; it is therefore necessary for Eflorist to share your personal data with transport and logistics companies in order for your parcels to be delivered. We base such transfers of your personal data on the performance of the agreement you have entered into with us when you purchase our products. You can find more information about your rights under the section “Your rights and how to exercise them”.
We strive to process your personal data within the EU/EEA. In some cases, however, Eflorist or our suppliers may transfer your personal data to a country outside the EU/EEA (a so-called “third country”). In a third country, the GDPR does not apply, which may entail an increased risk from a privacy perspective. To minimise such privacy risks, we only transfer your personal data to a third country provided that an approved transfer mechanism and supplementary safeguards are in place to ensure that your personal data is subject to protection that is at least equivalent to the protection afforded when processed within the EU/EEA.
A transfer mechanism is approved if any of the following circumstances apply:
We always carry out a risk assessment before a transfer to a third country takes place and implement both technical and organisational safeguards to ensure an appropriate level of protection.
Profiling means automated processing of personal data used to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict, for example, that person’s economic situation, personal preferences, interests and location.
Profiling is used by Eflorist for purposes such as market and customer analyses and marketing. The legal basis for profiling is Eflorist’s legitimate interest, performance of a contract or consent.
Where profiling is based on the legal basis of legitimate interest, you have the right to object at any time to the profiling in accordance with what is stated above. In such a case, we may no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defence of legal claims.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. As a data subject, you always have the right to contact us as controller to obtain an explanation of the decision. You also have the right to lodge a complaint and thereby have the possibility to have the decision reviewed.
You can read more about automated decision-making on the Information Commissioner’s Office (ICO) website.
Please note that Eflorist does not currently make any automated decisions. If we begin to make automated decisions in the future, we will inform you of this by updating this Data Protection Information.
Eflorist implements a range of technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction. By combining organisational security measures such as access restrictions and procedures in the event of personal data breaches with technical security measures such as firewalls and encryption, we have created a robust security solution for the protection of your personal data. Eflorist is committed to continuously developing our information security in order to protect your personal data.
We continuously improve and develop our services, products and the Website, and the content of this Data Protection Information may therefore change over time. We therefore encourage you to regularly review this Data Protection Information to ensure that you are up to date on how we process your personal data.
If Eflorist makes significant changes to this Data Protection Information, we may also inform you by, for example, sending an e-mail or posting a notice on our Website before the changes take effect.
This page was last updated on 2026-01-31
This privacy notice explains how Eflorist processes your personal data when you use our Website. On this page you will find information about what personal data we process, the purposes of each processing activity, the legal bases on which we rely, our storage periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data.
We may process personal data that you provide to us yourself. This may concern personal data that you provide directly to us in your communication with Eflorist, personal data that is generated as a direct result of your use of our products and services, or personal data that we have received from you in the course of our relationship and stored in our internal databases.
Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from you”. Below you will find all categories of personal data that we collect directly from you and process when you use our Website.
CATEGORIES OF PERSONAL DATA
Identity data:
For example first and last name, personal identity number, date of birth, gender, customer number, customer type.
Contact details:
For example email address, telephone number and postal address for delivery.
Input data:
For example data generated when you make choices on, or otherwise use, our Website, including information on whether you have accepted our cookies and information that you provide to us or enter on our Website. Also information to be used in flowers cards and similar additions our products and services.
Behavioural data:
For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it.
Device information and network identifiers:
For example information about your computer, phone or other device, such as your IP address, user ID, time zone, language settings or geographical information.
In addition to the personal data that we collect directly from you, we may in some cases also collect your personal data from another company or authority (a “third party”) or from public sources. We do this in order to be able to supplement your personal data where this is necessary, to check that your personal data is up to date or to ensure that your personal data is correct.
Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from others”. Below you will find all categories of personal data that we collect from third parties and public sources and process when you use our Website. The third party or public source from which we have obtained your personal data is also indicated in italics below.
CATEGORIES OF PERSONAL DATA
Identity data:
For example name, date of birth, personal identity number and other necessary identifiers used for authentication via electronic identification schemes.
Your identity data may be obtained from, or compared with, data from electronic identification schemes, and our payment partners.
Contact details:
For example, address.
Your contact details may be obtained from, or compared with, data from electronic identification schemes.
Behavioural data:
For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it.
Your behavioural data may be obtained from, or compared with, data from our data analytics partners. We may receive your behavioural data from external third parties whose websites you have visited and from cookies you have accepted.
PURPOSES, LEGAL BASIS, RIGHTS AND STORAGE PERIOD
When you use our digital services such as our Website, we collect and process your personal data, among other things, in order to be able to respect the choices and preferences you make in the settings of our digital services. We also process your personal data in order to protect our Website from malicious traffic as well as to analyse how these services are used and run tests to improve them.
The processing of your personal data ultimately takes place so that we can provide you with our digital services and optimise your user experience when you use them. We use cookies and similar tracking technologies on our Website for these purposes.
You can find more information about how we use cookies in our cookie policy.
Click here for more information about your rights under the GDPR.
Purpose
In order to be able to display and provide you with access to our Website, we process your personal data by means of so-called “necessary cookies”. We also use necessary cookies to provide you with access to important functions and services that you expressly request, for example when you place a product in your shopping cart or log in to the membership club.
This processing is a technical prerequisite for us to operate and provide you with access to our Website, and you therefore do not have the option of refusing this type of cookies.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to display and provide you with access to our Website and other services that you have expressly requested.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for the duration of the individual online session.
Purpose
We offer users of our digital services the option to make certain choices in order to better tailor these services to your wishes and preferences. In order to be able to respect your choices and preferences and thereby provide you with a better experience on our Website, we process your personal data by means of so-called “functional cookies”. This allows us to offer extended functionality and personalisation, for example to be able to show you embedded videos on our Website and manage your preferences regarding these.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting our functional cookies in our cookie banner. If you have not accepted our functional cookies, we will not process your personal data for this purpose and we cannot guarantee that our Website will function in an optimal way.
You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy, which means that we will no longer be able to process your personal data for this purpose.
Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for the storage period set out in our cookie list.
Purpose
To understand how our users use our Website and thereby improve it over time, we process your personal data by means of so-called “statistics and analytics cookies”. By using statistics and analytics cookies, we can compile statistics on how our Website is used, for example by measuring visits, conversions, behavioural patterns and traffic sources.
We also use your personal data to optimise our Website through so-called “A/B testing”, which means that you may randomly land on a test version of our Website. Information about how you interact with these test versions is then used to develop our business and to improve and streamline our digital services.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting our statistics and analytics cookies in our cookie banner. If you have not accepted our statistics and analytics cookies, we will not process your personal data for this purpose.
You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy, which means that we will no longer be able to process your personal data for this purpose.
Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for the storage period set out in our cookie list.
Targeting direct and personalised digital marketing to you
Purpose
Eflorist’s marketing is today largely conducted in digital form. In order to make our digital marketing personalised and relevant to you, we analyse and track your behaviour on our Website. We do this by means of so-called “marketing cookies”.
These cookies may also be used by us for “retargeting”, which means that through this tracking technology we can identify you on other websites and digital channels in order to show you relevant marketing from us there, and to create customised target groups for advertising via third parties.
We may also combine your personal data with data that we obtain from third parties, which means that this processing may be regarded as profiling.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting our marketing cookies in our cookie banner. If you have not accepted our marketing cookies, we will not process your personal data for this purpose.
You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy, which means that we will no longer be able to process your personal data for this purpose.
Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for the storage period set out in our cookie list.
Conducting gamification campaigns
Purpose
Eflorist’s marketing is today largely conducted in digital form. In order to make our digital marketing relevant to you, we conduct so-called gamified campaigns, for example in the form of a wheel which the user may spin in order for something to happen.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to communicate with you and respond to any questions you may have.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for a time period corresponding to the general prescription time for complaints matters according to applicable consumer law.
Purpose
To enable smooth and easy communication between you and Eflorist, we offer a chat function on our Website where you can ask simple questions regarding your order and our products, services, and payment methods. If you choose to use the chat function, we will process your personal data in order to communicate with you and respond to any questions you may have.
To ensure that we do not process more personal data than necessary, we ask you not to provide other personal data in the chat than your identity data and contact details.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to communicate with you and respond to any questions you may have.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for the duration of the relevant chat session with you and six (6) years thereafter. If the chat session results in a customer service case being opened, we store your personal data until the customer service case has been finally handled and for six (6) years thereafter.
Purpose
We conduct the majority of our operations via our Website and it is therefore important to us to keep it free from malicious traffic, including for the purpose of detecting fraud and protecting your data. We may therefore process your personal data in order to ensure the security of our Website.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to keep our Website free from malicious traffic, including for the purpose of detecting fraud and protecting your data.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for a time period corresponding to the prescription time in consumer matters from the time we received the data.
Purpose
To ensure a smooth user experience when using our Website, we take ongoing technical measures in order to detect and limit technical bugs and errors.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to detect, prevent and limit technical bugs and errors.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for ninety (90) days from the time we received your personal data.
Purpose
To ensure your security and ours, we take ongoing crime-prevention measures in order to detect and limit the use of our business for crime and fraud. To ensure your safety and ours, we therefore process your personal data for this purpose.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to detect, prevent and limit crime and fraud.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for ten (10) years from the time we received your personal data.
Purpose
In some cases, we need to process your personal data in order to cooperate with authorities, for example where such cooperation is required to investigate suspected crime or fraud, or for us to be able to provide you with our products and services.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to cooperate with the relevant authorities.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for ten (10) years from the time we received your personal data.
Purpose
To ensure that Eflorist has adequate evidence if a dispute arises or a legal claim is otherwise made against us, and to be able to demonstrate that we have complied with applicable cookie legislation and data protection rules, we store your personal data so that we can defend, safeguard or exercise legal claims during the general statutory limitation period.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to prove that we have complied with applicable cookie legislation and data protection rules and to defend against, safeguard and exercise legal claims during the general statutory limitation period.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store your personal data for these purposes for ten (10) years from the time we received your personal data.
As part of the personal data processing that we carry out for the purposes set out above, we and/or any recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”.
Eflorist may create a profile about you in order to better understand how you use our products and services and to personalise our marketing directed to you. We base our profiling on the consent that you give by accepting analytics and statistics cookies and/or marketing cookies in our cookie banner. Click here for more information about your rights under the GDPR.
This page was last updated on 2026-01-31
This privacy notice explains how Eflorist processes your personal data when you receive marketing communications or other mailings from us. On this page you will find information about what personal data we process, the purposes of each processing activity, the legal bases on which we rely, our storage periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data.
We may process personal data that you provide to us yourself. This may concern personal data that you provide directly to us in your communication with Eflorist, personal data that is generated as a direct result of your use of our products and services, or personal data that we have received from you in the course of our relationship and stored in our internal databases.
Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from you”. Below you will find all categories of personal data that we collect directly from you and process when you are or become a recipient of marketing communications and other mailings from us.
CATEGORIES OF PERSONAL DATA
Identity data:
For example first and last name.
Contact details:
For example address, email address and telephone number.
Behavioural data:
For example information about how you interact with our marketing or Website, such as information about how you reached our Website or whether you have opened one of our marketing messages.
Generated data:
For example information provided in contact with our customer service that cannot be defined in advance (including the other categories of data listed here), card message for a flower card, and information about how you use our products and services.
Device information and network identifiers:
For example information about your computer, phone or other device, such as your IP address, user ID, time zone, language settings or geographical information.
In addition to the personal data that we collect directly from you, we may in some cases also collect your personal data from another company or authority (a “third party”) or from public sources. We do this in order to be able to supplement your personal data where this is necessary, to check that your personal data is up to date or to ensure that your personal data is correct.
Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from others”. Below you will find all categories of personal data that we collect from third parties and public sources and process when you receive marketing communications and other mailings from us. The third party or public source from which we have obtained your personal data is also indicated in italics below.
CATEGORIES OF PERSONAL DATA
Identity data:
For example name, date of birth and personal identity number.
Your identity data may be obtained from, or compared with, data from our payment partners.
PURPOSES, LEGAL BASIS, RIGHTS AND STORAGE PERIOD
If you have subscribed to our newsletter by, for example, providing your contact details on our Website, or have otherwise accepted that Eflorist sends digital or postal communication to you, we process your personal data in order to be able to send such mailings to you and to optimise and, where applicable, personalise the content of such mailings. We do this to ensure that you only receive relevant information and marketing from us.
We may also send mailings to you if you are our customer and have not previously declined to receive our marketing communications.
Click here for more information about your rights under the GDPR.
Purpose
If you choose to subscribe to our newsletter or other mailings by providing your contact details in a form on our Website, we may process your personal data in order to provide you with the mailing or SMS text that you have chosen to subscribe to.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by subscribing to our mailings.
You may withdraw your consent at any time by contacting us using our contact details. Our contact details and more information about your rights can be found on our Website.
Storage period
We store your personal data for this purpose from the time you start your subscription with us until up to two (2) weeks from the time you withdraw your consent by cancelling the subscription. If you have subscribed to a newsletter by email or SMS, you can unsubscribe by clicking on the “unsubscribe” link at the bottom of each email that you receive from us respectively send a text to the designated telephone number at the bottom of each SMS.
Purpose
If you have made a purchase from us and in connection with this provided your personal data at checkout, we may process this data in order to market our products to you within the framework of our customer relationship.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to market our products to you within the framework of our existing customer relationship.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for twelve (24) months after your most recent purchase, or until you object to our processing of your personal data for this purpose, whichever occurs first.
You can object to this processing by by clicking on the “unsubscribe” link at the bottom of each email or sms that you receive from us or contacting Customer Service at any time at the following link.
Purpose
In certain cases, we need to send you necessary information due to certain legal requirements, for example when we make changes to our terms and conditions or when you request instructions from us on how our Website works. In these cases, we need to process your personal data for the purpose of carrying out the necessary information mailings in order to fulfil our legal obligations.
Personal data that we collect from you
Legal basis and rights
In some cases, we need to send you necessary information due to certain legal requirements, for example when we make changes to our terms and conditions or when you request instructions from us on how our Website works. In these cases, we need to process your personal data in order to send the necessary information and thereby fulfil our legal obligations.
Click here for more information about your rights under the GDPR.
Please note that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(c) GDPR.
Storage period
We store and process your personal data for this purpose until each relevant mailing has been carried out.
Purpose
To ensure that we only send mailings with relevant content, we use your personal data to create a profile about you. This profile is then used to assign you to a specific target group for which we personalise our marketing communications (so-called “target group segmentation”).
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to segment and select recipients in order to ensure that you only receive relevant marketing communications from us.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for up to twenty-four (24) months from the date we made our selection or your last purchase from us, whichever occurs first.
Purpose
If you have added a product to your shopping cart and provided your email address, we may process your personal data to remind you of your abandoned cart, provided that you have not ticked the box “No thanks – I do not want to receive offers by email and SMS” or rejected cokkies.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to remind you of your abandoned cart.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose from the time you abandoned or amended your cart and for a period of twelve (24) months thereafter.
Purpose
To improve and optimise our digital marketing communications, we use tracking technologies to analyse how you interact with our marketing communications, which involves processing of your personal data.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting marketing and advertising cookies in our cookie banner.
You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy.
Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose from the time you consent to our marketing and advertising cookies until you withdraw such consent, or for up to twenty-four (24) months from the time we receive your personal data, whichever occurs first.
Purpose
To ensure your and our security, we continuously take crime prevention measures in order to detect and limit the use of our operations for crime and fraud. To ensure your and our security, we therefore process your personal data for this purpose.
Personal data we collect from you
Personal data we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6.1(f) GDPR, i.e. our legitimate interest. After careful consideration, we have concluded that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest outweighs your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to detect, prevent and limit crime and fraud.
You have the right to object to personal data processing that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for ten (10) years from the time we received your personal data.
Purpose
In certain cases, we need to process your personal data in order to cooperate with public authorities, for example where such cooperation is required to investigate suspicions of crime or fraud, or for us to be able to provide you with our products and services.
Personal data we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6.1(f) GDPR, i.e. our legitimate interest. After careful consideration, we have concluded that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest outweighs your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to cooperate with the relevant public authorities.
You have the right to object to personal data processing that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for ten (10) years from the time we received your personal data.
Purpose
To ensure that Eflorist has adequate evidence should a dispute arise or a legal claim otherwise be brought against us, and in order to demonstrate that we have complied with applicable marketing law rules, we store your personal data so that we can defend against, safeguard or assert legal claims during the general statutory limitation period.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6.1(f) GDPR, i.e. our legitimate interest. After careful consideration, we have concluded that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest outweighs your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to prove that we have complied with applicable marketing law rules and to defend against, safeguard and assert legal claims during the general statutory limitation period.
You have the right to object to personal data processing that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for these purposes for ten (10) years from the time we received your personal data.
In connection with the processing of personal data that we carry out for the purposes stated above, we and/or any of the recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, a so-called “third country”.
Eflorist may create a profile about you in order to better understand how you use our products and services and to be able to personalise our marketing towards you. We base our profiling on the consent you give by accepting statistics and analytics cookies and/or marketing cookies in our cookie banner. Click here for more information about your rights under the GDPR.
This page was last updated on 2026-01-31
This privacy notice explains how Eflorist processes your personal data when you are or become a customer of ours. On this page you will find information about what personal data we process, the purposes of each processing activity, the legal bases on which we rely, our storage periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data.
We may process personal data that you provide to us yourself. This may concern personal data that you provide directly to us in your communication with Eflorist, personal data that is generated as a direct result of your use of our products and services, or personal data that we have received from you in the course of our customer relationship and stored in our internal databases.
Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from you”. Below you will find all categories of personal data that we collect directly from you and process when you are or become a customer of ours.
CATEGORIES OF PERSONAL DATA
Identity data:
For example first and last name, personal identity number, date of birth, gender, customer number, customer type and other necessary identifiers used for logging in with an electronic identification scheme.
Contact details:
For example address, email address and telephone number.
Financial data:
For example credit and debit card details, bank account identifiers, invoice address, invoice number, information about any claim or debt, transaction metadata such as currency and merchant reference.
Generated data:
For example information provided in contact with our customer service that cannot be defined in advance (including the other categories of data listed here), card message for a flower card, and information about how you use our products and services.
Behavioural data:
For example your purchase history and information about how you interact with our Website, including information about how you reached our Website and how you interact with and navigate around our Website.
Device information and network identifiers:
For example information about your computer, phone or other device, such as your IP address, user ID, party ID, time zone, language settings or geographical information.
In addition to the personal data that we collect directly from you, we may in some cases also collect your personal data from another company or authority (a “third party”) or from public sources. We do this in order to be able to supplement your personal data where this is necessary, to check that your personal data is up to date or to ensure that your personal data is correct.
Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the subheading “Personal data that we collect from others”. Below you will find all categories of personal data that we collect from third parties and public sources and process when you are or become a customer of ours. The third party or public source from which we have obtained your personal data is also indicated in italics below..
CATEGORIES OF PERSONAL DATA
Identity data:
For example name, date of birth, personal identity number and other necessary identifiers used for logging in with an electronic verification scheme.
Your identity data may be obtained from, or compared with, data from an electronic verification scheme, official population registers, official personal address registers and our payment partners.
Contact details:
For example email address, telephone number or address.
Your contact details may be obtained from, or compared with, data from telephone and email lists or from official population register and official personal address registers.
Financial data:
For example credit and debit card details, invoice address, invoice number, information about any claim or debt.
We may obtain your financial data from credit reference agencies when we need to assess your creditworthiness.
Behavioural data:
For example information about how you interact with our Website and digital marketing, including information about how you reached our Website and how you interact with and navigate around our Website.
We may receive your behavioural data from external third parties whose websites you have visited and from cookies you have accepted.
PURPOSES, LEGAL BASIS, RIGHTS AND STORAGE PERIOD
When you make a purchase from us via our Website, we process the personal data you have provided to us in order to be able to offer you our products and services, enter into a purchase agreement with you, deliver our products to you, provide you with customer support, optimise our marketing and offers directed to you and manage your payments.
Click here for more information about your rights under the GDPR.
Purpose
When you make a purchase on our Website, we will process your personal data in order to administer and manage your order, enter into a purchase agreement with you and deliver and provide you with the products you have purchased from us.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. taking the preparatory steps required to enter into an agreement with you and the performance thereof.
Click here for more information about your rights under the GDPR.
Please note that the processing is necessary for the performance of the agreement that we have entered into with you. We therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(b) GDPR.
Storage period
In order to perform the agreement to which you are a party, Eflorist stores and processes your personal data for this purpose until we have delivered your products to you and for a time period corresponding to what is required by applicable consumer law in complaint cases.
Purpose
In connection with our carrying out purpose A, i.e. entering into and performing the purchase agreement with you, we also process your personal data in order to prepare our accounting and financial reporting in accordance with applicable accounting legislation.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(c) GDPR, i.e. the performance of our legal obligations under applicable accounting legislation.
Click here for more information about your rights under the GDPR.
Please note that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(c) GDPR.
Storage period
To the extent that your personal data is processed in order to fulfil our legal obligations under applicable accounting law, we store and process your personal data for the time during which we prepare our accounting and for seven (7) years after the end of the financial year in which the data was recorded.
Purpose
When you contact our customer service with questions or complaints by email, chat or telephone, we may process your personal data in order to handle your customer service matter (for example when you exercise your right of withdrawal or submit a complaint) and/or respond to your questions.
Personal data that we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to provide you with our customer service, respond to your questions, accommodate your request and handle your matter. You have the right to object to processing of personal data that we base on our legitimate interest.
If you contact us in order to exercise your consumer rights under applicable consumer law, we base the processing on Article 6(1)(c) GDPR regarding the performance of a legal obligation.
Click here for more information about your rights under the GDPR.
Please note that there are certain limitations on your ability to exercise your rights when we base our processing of personal data on Article 6(1)(c) GDPR.
Storage period
We store and process your personal data for this purpose for as long as we have an ongoing case with you until the case is closed and for a time period corresponding to what is required by applicable consumer law in complaint cases.
Purpose
We may process your personal data in order to improve our conversion rates and optimise our campaigns, offers and marketing. We do this by analysing the profile that we create about you, consisting partly of personal data that you provide to us yourself when making a purchase and partly of personal data that we collect via cookies and other tracking technologies. We may also enrich your profile by collecting your personal data from third parties and public sources. Once we have created your profile, we can use it to place you in different customer and target group categories; we do this to optimise and personalise your customer experience. We may also use your profile as a basis for carrying out different types of segmentation measures and marketing communication measures as described in our privacy notices, which we likewise do in order to optimise and personalise your customer experience.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(a) GDPR, i.e. your consent, which you give by accepting the applicable cookies in our cookie banner. If you have not accepted our cookies, we will not process your personal data for this purpose.
You may withdraw your consent at any time by adjusting your cookie settings in accordance with our cookie policy.
Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for a time period corresponding to the general prescription time for complaints matters according to applicable consumer law.
Purpose
We may anonymise your personal data in order to use this anonymised data in anonymised and/or aggregated customer models and thereafter further analyse this anonymised data. The anonymisation process itself involves processing of your personal data.
Please note that once your personal data has been anonymised by us, it can no longer be linked to you as an individual and is therefore no longer regarded as personal data under the GDPR. The subsequent analysis of your anonymised personal data thus falls outside the scope of application of the GDPR.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to plan, optimise, develop, quality assure and improve our business, products and services based on anonymised data.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose only during the anonymisation process, after which the personal data will no longer be classified as personal data according to the GDPR.
Purpose
To ensure your security and ours, we take ongoing crime-prevention measures in order to detect and limit the use of our business for crime and fraud. To ensure your safety and ours, we therefore process your personal data for this purpose.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to detect, prevent and limit crime and fraud.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for up to ten (10) years after your purchase from us.
Purpose
In some cases, we need to process your personal data in order to cooperate with authorities, for example where such cooperation is required to investigate suspected crime or fraud, or for us to be able to provide you with our products and services.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to cooperate with the relevant authorities.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for this purpose for up to ten (10) years after your purchase from us.
Purpose
To ensure that Eflorist has adequate evidence if a dispute arises or a legal claim is otherwise made against us in connection with legal proceedings, and to be able to demonstrate that we have complied with applicable legislation, we store your personal data so that we can defend, safeguard or exercise legal claims during the general statutory limitation period.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to prove that we have complied with applicable legislation and to defend against, safeguard and exercise legal claims during the general statutory limitation period.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store your personal data for these purposes for ten (10) years from the time we received your personal data.
As part of the personal data processing that we carry out for the purposes set out above, we and/or any recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”.
Eflorist may create a profile about you in order to better understand how you as a customer use our products and services, and to personalise our marketing directed to you. We base our profiling on the consent that you give by accepting statistics and analytics cookies and/or marketing cookies in our cookie banner. Click here for more information about your rights under the GDPR
This page was last updated on 2026-01-31
This privacy notice describes how Eflorist processes your personal data when you apply for a job with us or otherwise take part in one of our recruitment processes. On this page, you will find information about which personal data we process, the purposes of each processing activity, the legal bases on which we rely, our retention periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data.
We may process personal data that you yourself provide to us. This may be personal data that you directly provide to us in your communication with Eflorist, or personal data that we gain access to during the recruitment process.
Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the sub-heading “Personal data we collect from you”. Below you will find all categories of personal data that we collect directly from you which we process when you apply for a job with us or otherwise take part in one of our recruitment processes.
CATEGORIES OF PERSONAL DATA
Identity data:
For example, name, date of birth, personal identity number and photograph.
Contact details:
For example, address, email address and telephone number.
Generated data:
For example, personal data included in your correspondence with Eflorist, including your CV, cover letter, certificates, grades, salary expectations, and meeting notes from your interview with us.
In addition to the personal data that we obtain directly from you, we may in some cases also obtain your personal data from another company or authority (a so-called “third party”) or from public sources. We do this to be able to supplement your personal data where necessary, to check that your personal data is up to date or to ensure that your personal data is correct.
Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the sub-heading “Personal data we obtain from others”. Below you will find all categories of personal data that we obtain from third parties and public sources which we process when you apply for a job with us or otherwise take part in one of our recruitment processes. The third party or public source from which we have obtained your personal data is also indicated in italics below.
CATEGORIES OF PERSONAL DATA
Identity data:
For example, name, date of birth, personal identity number and photograph.
We may obtain your identity data from sources like LinkedIn for applicants to LinkedIn job advertisements.
Contact details:
For example, email address.
We may obtain your contact details from sources like LinkedIn for applicants to LinkedIn job advertisements
Value judgments:
For example, information that arises in our contact with your references, including your references’ opinions and statements, etc.
We may obtain value judgements from the references that you have provided as part of the recruitment process, or from our own employees who have recommended you for a specific position with us.
Publicly available information:
For example, the link to and contents of your LinkedIn profile.
We may obtain publicly available information from websites and databases that are generally accessible on the open web.
PURPOSES, LEGAL BASIS, RIGHTS AND RETENTION PERIODS
When you apply for a job with Eflorist or otherwise participate in or are involved in a recruitment process with us, we need to process your personal data in order to administer your application. There may also be occasions when we are recommended you as a candidate by a third party, in which case we need to process your personal data in order to follow up on the recommendation. We mainly process your personal data in order to be able to receive applications, assess qualifications and select candidates whose profile matches the recruitment needs, as well as to comply with anti-discrimination laws. The processing of your personal data is ultimately carried out so that we can manage our recruitment and, where relevant, potentially offer you a job with us.
Click here for more information about your rights under the GDPR.
Purpose
If you apply for a job with us, we may process the personal data that you provide in your application in order to manage and administer your job application. We may also process your personal data in order to contact any references that you have provided and to invite you to a job interview with us. If you progress in the recruitment process and we wish to offer you a job, we may process your personal data in order to be able to enter into an employment contract with you.
Personal data we collect from you
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to administer and manage your job application, contact any references that you have provided in your application, and arrange a potential job interview with you.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for these purposes during the time for which the recruitment process for which you are part of is ongoing.
Purpose
If one of our employees has recommended you for a position with us, we may process your personal data in order to handle the referral and contact you with an encouragement to submit a job application for the position for which you have been recommended.
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to handle and follow up on the referral and contact you to recommend that you submit a job application to us.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
If we have received your personal data from one of our employees because they have recommended you for a particular position, we store and process your personal data for this purpose for no more than two (2) months from the time we received it.
Purpose
In some cases, we conduct different types of tests as part of our recruitment processes, which involves processing of your personal data. The processing is carried out in order to gain a better understanding of how well you would be suited to the position for which you are being considered.
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to determine how well you would fit the position that you have applied for with us.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for these purposes until the recruitment process in which you are participating has been concluded.
Purpose
If you are participating in an ongoing recruitment process, we may process your personal data in order to contact you regarding matters relating to the recruitment, for example to schedule a date and time for a job interview or to inform you whether you have progressed in the process.
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to contact you as part of an ongoing recruitment process in which you are participating.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for these purposes until the recruitment process in which you are participating has been concluded and for two (2) months thereafter.
Purpose
If you progress in the recruitment process and we wish to offer you a job, we may process your personal data in order to be able to enter into an employment contract with you.
Personal data we collect from you
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. taking steps prior to entering into a contract with you. The processing is necessary in order to enter into, administer and perform our employment contract with you.
Click here for more information about your rights under the GDPR.
Please note that the processing is necessary for us to be able to perform the contract we have entered into with you, and we therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(b) GDPR.
Retention period
If you accept a job offer from us, we store and process your personal data for these purposes for the duration of your employment with us and for two (2) years thereafter. If you decline a job offer from us, we delete your personal data after we have received your response.
Purpose
After a concluded recruitment process, we will store all personal data that we have collected from you, third parties or public sources in order to be able to defend ourselves against any discrimination cases under the applicable discrimination law. We do this in order to ensure that we have evidence that we have complied with applicable rules on the prohibition of discrimination in working life.
Personal data we collect from you
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to prove that we have complied with applicable rules on the prohibition of discrimination in working life and to defend ourselves against any discrimination cases under applicable discrimination law.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for these purposes for two (2) years from the time we received your personal data.
Within the scope of the processing of personal data that we carry out for the purposes set out above, we and/or any of the recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”.
Eflorist does not carry out any profiling or automated decision-making measures as part of our recruitment processes.
This page was last updated on 2026-01-31
We have identified five (5) different categories of data subjects whose personal data we mainly process, namely Website visitors, Newsletter subscribers and recipients of other mailings, Customers, and Job applicants. However, there are situations in which we process personal data relating to you when you have another type of relationship with us. This privacy notice explains how Eflorist processes your personal data when you do not fall under the above categories of data subjects that we have identified, but instead have some other relationship with us.
The following privacy notice may be relevant for you if, for example, you are a representative of one of our business partners, suppliers, resellers, or distributors, or if you are a participant in one of our competitions, or otherwise have a relationship with Eflorist that is not based on any of the other relationships identified in our privacy information. On this page, you will find information about which personal data we process, the purposes of each processing activity, the legal bases on which we rely, our retention periods, whether we transfer your personal data to a country outside the EU/EEA, and whether we use automated decision-making or profiling in relation to your personal data.
We may process personal data that you yourself provide to us. This may be personal data that you directly provide to us in your communication with Eflorist, personal data that is generated within the scope of and as a direct result of our relationship, or personal data that we have gained access to from previous matters and communications with you that we have stored in our internal databases.
Where we process personal data obtained directly from you in the ways described above, this is clearly indicated under the sub-heading “Personal data we collect from you”. Below you will find all categories of personal data that we collect directly from you that we may process for the purposes set out in this privacy notice.
CATEGORIES OF PERSONAL DATA
Identity data:
For example, name, date of birth, username and personal identity number.
Behavioural data:
For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it.
Contact details:
For example, address, email address and telephone number.
Financial data:
For example, bank details, credit information and invoicing details.
Generated data:
For example, information that you provide when you communicate with us, such as information you provide in your communication with us via any of our internal or external channels, and information that you provide in or which is generated when you use our systems and digital services, like order information and product information.
Device information and network identifiers:
For example information about your computer, phone or other device, such as your IP address, connection timestamps, user ID, time zone, language settings or geographical information.
In addition to the personal data that we obtain directly from you, we may in some cases also obtain your personal data from another company or authority (a so-called “third party”) or from public sources. We do this to be able to supplement your personal data where necessary, to check that your personal data is up to date or to ensure that your personal data is correct.
Where we process personal data obtained from third parties or public sources in the ways described above, this is clearly indicated under the sub-heading “Personal data we obtain from others”. Below you will find all categories of personal data that we obtain from third parties and public sources that we may process for the purposes set out in this privacy notice. The third party or public source from which we have obtained your personal data is also indicated in italics below.
CATEGORIES OF PERSONAL DATA
Identity data:
For example, name, date of birth and other necessary identifiers used for logging in with an electronic identification scheme.
Your identity data may be obtained from, or checked against, data held in official population registers, business registers, or, where applicable, the company that you represent.
Contact details:
For example, address, email address and telephone number.
Your contact details may be obtained from, or checked against, data held in official population registers, business registers, or, where applicable, the company that you represent.
Generated data:
For example, information that you provide when you communicate with us, such as information you provide in your communication with us via any of our internal or external channels, and information that you provide in or which is generated when you use our systems and digital services, like order information and product information.
Your generated data may be obtained from data in virtual meeting programs, such as chat logs and audiovisual recordings.
Behavioural data:
For example your purchase history and information about how you interact with our Website, including information collected via cookies and other tracking technologies showing how you reached our Website and how you interact with and navigate around it.
Your behavioural data may be obtained from, or compared with, data from our data analytics partners. We may receive your behavioural data from external third parties whose websites you have visited and from cookies you have accepted.
PURPOSES, LEGAL BASIS, RIGHTS AND RETENTION PERIODS
When, as a data subject, you have a relationship with us that does not fall within any of the categories of data subjects listed above, we may mainly process your personal data in order to pursue the underlying purpose for which the relationship between you and Eflorist has arisen.
Click here for more information about your rights under the GDPR.
Purpose
When you act as a contact person or representative for a company with which we intend to enter into a contract, we may process your personal data in order to enable communication between us and the company you represent and to be able to enter into a contract with that company. We also process your personal data after a contract has been concluded in order to administer the contractual relationship between us and the company you represent, for example by issuing or handling invoices and payments, enabling communication, or handling cases and questions that you address to us on behalf of the company you represent.
Personal data we collect from you
Personal data we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to take the preparatory steps required to enter into a contract with your principal, i.e. the company you represent, and to administer the subsequent contractual relationship that arises as a result of the contract.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for this purpose for as long as we have an ongoing contractual relationship with the company you represent, or until you cease to be a contact person at that company, whichever occurs first. Thereafter, we store your personal data for an additional three (3) years.
Purpose
We collaborate from time to time with influencers and other types of business partners. If you choose to enter into a collaboration with us, we may process your personal data in order to enable communication between you and us and to allow us to enter into a contract with you. We also process your personal data after a contract has been concluded in order to administer the contractual relationship between us, for example by issuing or handling invoices and payments, enabling communication, or handling cases and questions that you address to us within the framework of our collaboration.
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. the performance of the contract that you and Eflorist intend to enter into.
Click here for more information about your rights under the GDPR.
Please note that the processing is necessary for us to be able to perform the contract we have entered into with you, and we therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(b) GDPR.
Retention period
We store and process your personal data for this purpose for as long as we have an ongoing contract with you, and for three (3) years thereafter.
Purpose
In connection with us pursuing Purpose A (Entering into and administering contracts with the company you represent) and Purpose B (Entering into and administering a commercial contract with you), we may also need to process your personal data to the extent required for us to be able to prepare our accounting and financial reporting in accordance with applicable bookkeeping legislation.
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(c) GDPR, i.e. compliance with our legal obligations under applicable accounting law.
Click here for more information about your rights under the GDPR.
Please note that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(c) GDPR.
Retention period
To the extent that your personal data is processed to enable us to comply with our legal obligations under applicable accounting law, we store and process your personal data for the time during which we prepare our accounts and for seven (7) years after the end of the year in which the data was recorded.
Purpose
When you contact us or we contact you via email, telephone or otherwise, we process your personal data in order to be able to communicate and interact with you.
Personal data we collect from you
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to communicate and interact with you when you contact us or when we contact you.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for this purpose for as long as we have an ongoing matter or correspondence with you, until the matter is closed or the correspondence ceases.
Purpose
We sometimes organise various types of competitions, both on our own and in sponsored collaboration with our business partners. If you wish to participate in these competitions, we will process your personal data in order to administer and manage your participation, for example to handle your registration, contact you with relevant information related to the competition you have registered for, and, where applicable, inform you of a potential competition prize.
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(b) GDPR, i.e. the performance of the contract that you and Eflorist have entered into regarding your participation in the competition.
Click here for more information about your rights under the GDPR.
Please note that the processing is necessary for us to be able to perform the contract we have entered into with you, and we therefore wish to draw your attention to the fact that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(b) GDPR.
Retention period
We store and process your personal data for this purpose until the event or competition has been carried out and concluded, and for three (3) months thereafter.
Purpose
We may process your personal data in order to prepare forecasts and to plan, develop and quality assure our business, products and services. We may also process your personal data for assortment optimisation and capacity planning purposes as well as for business reporting and KPI follow-up purposes. The processing of personal data ultimately takes place so that we can improve our business and thereby offer you a better customer experience with us over time.
Personal data that we collect from you
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that our interest in this case outweighs your interest in not having your personal data processed by us.
Our legitimate interest in the processing is to be able to plan, optimise, develop, quality assure and improve our business, products and services.
You have the right to object to processing of personal data that we base on our legitimate interest. Click here for more information about your rights under the GDPR.
Storage period
We store and process your personal data for up to two years (2) from the time we received it.
Purpose
If you work for or represent a trade union, we may process your personal data in order to conduct dialogue and negotiations in accordance with applicable legal requirements, as well as to deal with other trade union-related issues and matters that may arise.
Personal data we collect from you
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(c) GDPR, i.e. compliance with our legal obligations under applicable labour law.
Click here for more information about your rights under the GDPR.
Please note that there are certain limitations on your ability to exercise your rights where we base our processing of personal data on Article 6(1)(c) GDPR.
Retention period
We store and process your personal data for this purpose for as long as you work for or represent the trade union with which we conduct dialogue.
Purpose
If you have been stated as a relative/next of kin of one of our employees, we will process your personal data in order to be able to contact you when necessary and in emergencies, for example if your relative is involved in a workplace accident.
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to contact you when necessary and in emergencies concerning your relative.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for this purpose for as long as the person to whom you are a relative is employed by Eflorist and for three (3) months thereafter, or until our employee removes you from our register of relatives, whichever occurs first.
Purpose
When someone has entered into a purchasing agreement consisting of the deliverance of our products to you, we will process your personal data in order to administer and manage your order and deliver and provide you with the products someone else has purchased from us.
Personal data that we collect from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to be able to deliver flowers to you, through which we will be able to fulfil our agreement with the purchaser of said flowers.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Storage period
In order to perform the agreement to which you are a party, Eflorist stores and processes your personal data for this purpose until we have delivered your products to you.
Purpose
In order to ensure your security and ours, we continuously take crime-prevention measures in order to detect and limit the use of our operations for crime and fraud. To ensure your security and ours, we therefore process your personal data for this purpose.
Personal data we collect from you
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to detect, prevent and limit crime and fraud.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for this purpose for up to ten (10) years from the time we received your personal data.
Purpose
In some cases, we need to process your personal data in order to cooperate with public authorities, for example where such cooperation is required to investigate suspected crime or fraud.
Personal data we collect from you
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to cooperate with the relevant public authorities, in particular where such cooperation is required to investigate suspected crime and fraud.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for this purpose for up to ten (10) years from the time we received your personal data.
Purpose
To ensure that we have adequate evidence in the event that we need to establish a legal claim, or to be able to defend ourselves if a dispute arises or a legal claim is otherwise brought against us, and to demonstrate that we have complied with applicable legislation, we store your personal data for the general statutory limitation period.
Personal data we collect from you
Personal data we obtain from others
Legal basis and rights
When we process your personal data for this purpose, we base the processing on Article 6(1)(f) GDPR, i.e. our legitimate interest. After careful consideration, we have assessed that Eflorist has a legitimate interest in processing your personal data and that, in this case, our interest overrides your interests in not having your personal data processed by us.
Our legitimate interest in the processing of personal data is to be able to demonstrate that we have complied with applicable legislation and to defend, safeguard and establish legal claims during the general statutory limitation period.
You have the right to object to processing of personal data that we base on our legitimate interests. Click here for more information about your rights under the GDPR.
Retention period
We store and process your personal data for this purpose for ten (10) years from the time we received your personal data.
Within the scope of the processing of personal data that we carry out for the purposes set out above, we and/or any of the recipients with whom we share your personal data may transfer your personal data to recipients outside the EU/EEA, i.e. to a “third country”.
Eflorist does not carry out any profiling or automated decision-making measures in relation to you when you have another relationship with us.