Privacy policy

For your orders, their payments and any job application you send it: [Missing: legal name] (Floristería LE), tax ID (NIF) [Missing: tax ID (NIF)], registered at C/ de Rioja, 4, 50017 Zaragoza. Data protection contact: info@floristeriale.com.

For your sign-in account: takeit, the technology platform this website runs on. That account belongs to takeit and is the same one you use to sign in on any other shop that runs on its platform. Contact: hi@hectortoral.com.

• Account (controller: takeit): your email address and, if you sign in with Google, the name and email Google provides. If you order without signing in, the email you enter in the order: the order is saved to that email's account, and takeit creates it (with that email and your name) if it didn't exist. Nobody can sign in to it until the email is confirmed with the link in the order confirmation.
• Orders (controller: Floristería LE): your name, your phone number and the email we send updates to; if someone else receives it, their name and phone number; the products and options chosen, the note for the shop, the fulfilment method, the requested time, the amount and, for home delivery, the delivery address.
• Payments (controller: Floristería LE): the payment identifier in Floristería LE's Stripe account and its status. Your card details are processed by Stripe directly; neither Floristería LE nor takeit receives or stores them.
• Job applications (controller: Floristería LE): your name, your email, your phone if you give it, the message you write and the CV you attach, when you apply from this website.
• Technical: the strictly necessary cookies (session, cart and order confirmation; see the cookie policy) and request data, such as the IP address, to protect the service.

• Managing your account (takeit) — performance of the platform's terms of use.
• Stopping abusive orders placed without signing in (takeit) — legitimate interest in protecting the service and those who receive its emails.
• Preparing and delivering your orders (Floristería LE) — performance of the sales contract.
• Charging online orders (Floristería LE) — performance of the contract. The charge is made by [Missing: legal name] in its own Stripe account.
• Considering your job application (Floristería LE) — your consent and the steps before a possible contract, at your request.
• Meeting tax and accounting obligations — legal obligation.

No automated decisions are taken and no profiles are built with your data.

• takeit, as Floristería LE's processor: it stores and processes orders, payments and job applications on the shop's behalf and uses them for nothing else.
• Stripe Payments Europe Ltd. — the payment gateway Floristería LE uses to charge, in its own Stripe account. For that charge, Floristería LE and Stripe process your payment data on their own account; takeit is not involved.
• Vercel Inc. (hosting) and Neon Inc. (database), as sub-processors through takeit.
• Resend, the email provider takeit uses to send you the sign-in link and your order updates.
• Google (Google Maps Platform, Places API), as a sub-processor through takeit: suggestions for the delivery address. What you type in that field is sent to Google through takeit (not from your browser), only to look up addresses in Spain and without your name, email, phone number or IP address. Only the address you choose or type is saved, with the order.

Other than that, your data is not disclosed to third parties, except where required by law.

Vercel, Neon, Resend and Google (for address suggestions) are companies based in the United States, so your data may be processed outside the European Economic Area. Those transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it and, otherwise, on the standard contractual clauses approved by the European Commission.

• Account: for as long as you keep it open, including one created when ordering without signing in.
• Orders and their invoices: for the required tax and accounting periods (6 years).
• Job applications and CVs: 6 months from when they are sent; after that they are deleted on their own, attachment included.
• Abuse prevention data: only for as long as needed for that purpose.

You can access your data, rectify it, erase it, object to its processing or ask for it to be restricted, take it to another service (portability) and withdraw your consent at any time.

You can do almost all of this yourself from My account: view and correct your data, download it as a file (access and portability), close your sessions and delete the account.

To object to or restrict the processing of your orders or your job application, or for any other request about that data, write to Floristería LE at info@floristeriale.com. About your sign-in account, write to takeit at hi@hectortoral.com.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).