IMPRINT

FLOWERS & THINGS

Sabine Mulhall

Lindauerstrasse 34

8309 Nürensdorf

Switzerland

+41 79 663 73 52 (via WhatsApp)

www.flowersandthings.ch

info@flowersandthings.ch

PRIVACY POLICY

In this privacy policy, I, Flowers & Things - Sabine Mulhall, (hereinafter referred to as “I”), explain how I collect and otherwise process personal data. This is not an exhaustive description; other specific circumstances may apply. Personal data refers to all information relating to an identified or identifiable person.

If you provide me with the personal data of other persons (e.g. family members, data of work colleagues), please ensure that these persons are aware of this privacy policy and only provide me with their personal data if you are permitted to do so and if this personal data is correct.

This Privacy Policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“DSG”) and the revised Swiss Data Protection Act (“revDSG”). However, whether and to what extent these laws are applicable depends on the individual case.

1. Controller / data protection officer / representative

I myself am responsible for the data processing described here, unless otherwise stated in individual cases. If you have any data protection concerns, you can send them to me at the following contact address:

Flowers & Things, Sabine Mulhall, Lindauerstrasse 34, 8309 Nürensdorf, Switzerland

2. Collection and processing of personal data

I primarily process the personal data that I receive from my customers and other persons involved in my business relationship with them or that I collect from their users when operating my website.

Insofar as this is permitted, I also take certain data from publicly accessible sources (e.g. debt collection registers, Internet) or receive such data from authorities and other third parties (such as credit agencies). In addition to the data that you provide to me directly, the categories of personal data that I receive about you from third parties include, in particular, information from public registers, information that I obtain in connection with official and court proceedings, information about you in correspondence and meetings with third parties, creditworthiness information (insofar as I conduct business with you personally), data in connection with the use of the website (e.g. IP address, MAC address of your smartphone, etc.). e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location data).

3. Purposes of data processing and legal basis

I use the personal data I collect primarily to conclude and process my contracts with my customers, in particular in the context of orders, deliveries and invoices with/to my customers. If you work for such a customer or business partner, your personal data may of course also be affected in this function.

- Assertion of legal claims and defence in connection with legal disputes and official proceedings;

- Ensuring my operations, in particular the IT of my website.

If you have given me your consent to process your personal data for specific purposes, I will process your personal data within the scope of and based on this consent, unless I have another legal basis and require one. Consent that has been given can be revoked at any time, but this has no effect on data processing that has already taken place.

4. Cookies / tracking and other technologies in connection with the use of my website

I typically use ‘cookies’ and similar technologies on my website to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you use when you visit my website. This enables me to recognise you when you return to this website, even if I do not know who you are. In addition to cookies that are only used during a session and are deleted after your visit to the website (‘session cookies’), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) (‘permanent cookies’). However, you can set your browser so that it rejects cookies, only saves them for one session or otherwise deletes them prematurely. Most browsers are preset to accept cookies. If you block cookies, certain functions (e.g. shopping basket, ordering processes) may no longer work.

5. Data transfer

Your data will not be passed on in any form.

6. Duration of the storage of personal data

I process and store your personal data for as long as it is necessary for the fulfilment of my contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e. for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data will be stored for the period in which claims can be asserted against my shop and insofar as I am otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes).

7. Data security

I take appropriate technical and organisational security precautions to protect your personal data from unauthorised access and misuse.

8. Obligation to provide personal data

As part of our business relationship, you must provide the personal data that is necessary for the establishment and implementation of a business relationship and the fulfilment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide me with data). Without this data, however, I will generally not be able to conclude or fulfil a contract with you (or the entity or person you represent). The website can also not be used if certain information to secure data traffic (such as IP address) is not disclosed.

9. Rights of the data subject

You have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to my data processing within the scope of the data protection law applicable to you and insofar as provided therein (such as in the case of the GDPR). Please note, however, that I reserve the right to assert the restrictions provided for by law, for example if I am obliged to store or process certain data, have an overriding interest in doing so (insofar as I may invoke this) or need it to assert claims. If you incur costs, I will inform you in advance. I have already informed you about the possibility of withdrawing your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and may have consequences such as premature cancellation of the contract or cost consequences. I will inform you in advance if this is not already contractually regulated.

The exercise of such rights generally requires that you clearly prove your identity (e.g. by means of a copy of your identity card, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact me at the address given in section 1.

Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

10. Changes

I may amend this privacy policy at any time without prior notice. The current version published on my website applies.

Nürensdorf, 1.10.2024