Data Protection Policy

Our commitment to protecting your personal data

Data Controller Identity

Aquarelle.com SAS with a share capital of €600,846, registered with the RCS of Nanterre under number B 419 998 257, with its registered office at 39 rue Anatole France, 92300 Levallois-Perret, France.

A Trusted Partnership Between Aquarelle.com SAS and Its Customers

Aquarelle.com SAS (hereinafter referred to as "Aquarelle") places great importance on protecting its customers' personal data. We are therefore committed to complying with Law No. 78-17 of January 6, 1978, on Information Technology, Data Files and Civil Liberties, as amended by European Regulation 2016/679 of April 27, 2016, known as the General Data Protection Regulation (GDPR).

By using the aquarelle.com website, you agree to the collection and use of your personal data as described in this Data Protection Policy.

Scope

This Data Protection Policy explains how Aquarelle processes your personal data when you use our website. Our policy also covers other channels through which your personal data may be collected, such as phone calls when you contact our Customer Service. Any subcontractor necessary to fulfill your order on our website or service that processes your personal data may have additional privacy terms, in accordance with the GDPR.

Data Collection and Processing Purposes

Aquarelle collects personal data from any User browsing, viewing, or placing an order on its website, notably through the use of cookies in accordance with French and European legislation.

When do we collect your personal data?


What personal information do we collect?

The Client’s personal data, as detailed below, is retained only for as long as is strictly necessary for the purposes outlined above.

Order-related data

The information required to process your order is marked with an asterisk and includes:

1. your first and last name,
2. your email address,
3. your landline or mobile phone number,
4. your message and any photo to be printed,
5. your banking details.
Additionally required:
6. recipient’s first and last name,
7. postal address, phone number.

We also collect personal data when you purchase our products, including purchase amounts and types, order details, invoices, and your customer journey information.

The written message and photo you choose to include with your flower bouquet are considered confidential data.

How do we use your data?

All personal data is confidential and access is limited to Aquarelle employees or subcontractors acting on behalf of Aquarelle who need it to perform their duties. All persons with access to your data are bound by confidentiality obligations. Recipient data is used exclusively to ensure timely delivery of your order. Aquarelle.com is bound by professional secrecy and will never share this information with third parties nor use it for commercial purposes.

In accordance with regulations, we do not collect data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for uniquely identifying an individual, health data, or data concerning a person's sex life or sexual orientation.

Such categories of personal data are never collected or processed by Aquarelle.

The collected data is necessary for the following purposes:

Legal Basis for Processing:

In accordance with Article 6 of the General Data Protection Regulation (GDPR), the processing of your personal data is based on different legal grounds, depending on its purpose:

Managing Our Customer Obligations – Order and Delivery Management

To fulfill our obligations to our customers, we collect and use your personal information to manage our commercial relationship with you, including managing your purchases and orders, delivering your products, and offering promotions and services that may interest you. This information helps us enhance your online shopping experience as described below.

Customer Relationship Management

We use and retain your personal data to update our customer database and provide tailored and personalized services. You may choose to join our Club Aquarelle loyalty program to receive offers aligned with your buying habits and interests.

Communication With You

We collect and retain your personal data so that we can communicate with you regarding your orders, invoices, or any inquiries with Customer Service.

Targeted Partner Advertising

Aquarelle collects and analyzes your data for marketing purposes (profiling), with the support of specialized service providers. In this context, your data is transformed into pseudonymized profiles (meaning profiles that no longer personally identify you during the display of online advertisements), which are used by Aquarelle to run targeted online advertising campaigns (display ads) aligned with your interests and shopping habits.

Legal or Regulatory Requirements

We may be required to disclose your personal data to public authorities in response to legitimate requests, especially for national security, fraud prevention, or law enforcement purposes.

Fraud Prevention and Detection

The data we collect is also used to prevent and combat fraud, particularly credit card fraud. Aquarelle reserves the right to verify personal data provided by the customer during the ordering process and to take any necessary measures to ensure that the person whose bank account is charged is the person who placed the order. This may include requesting proof of identity and/or residence.

In the absence of a positive response from the customer, Aquarelle reserves the right to cancel the order.

Managing Your Personal Data

• At Aquarelle, you control your personal data

When you provide personal data to Aquarelle, you can access, update, modify, or delete it at any time by writing to us at:

Aquarelle.com
Personal Data Protection Department
39 rue Anatole France
92300 Levallois-Perret
France
• Your Rights Regarding Data Protection

In accordance with Law No. 78-17 of January 6, 1978, as amended by the GDPR, you have several rights regarding the management of your data:

• How to Exercise Your Rights
Aquarelle.com
Personal Data Protection Department
39 rue Anatole France
92300 Levallois-Perret
France

We will respond to your requests as quickly as possible and in any case within one month from receipt of your complete request.

Data Retention Period

Your personal data is retained for a limited period, determined by the purpose of the processing and legal requirements.

Handling of Personal Data After Death

Aquarelle informs Users that they may define, during their lifetime, guidelines for the storage, erasure, and communication of their personal data after death. These guidelines may be general or specific. Users may amend or revoke their guidelines at any time by submitting a written request with valid identification to the following address:

Aquarelle.com
Personal Data Protection Department
39 rue Anatole France
92300 Levallois-Perret
France

We will respond to your requests as quickly as possible and in any case within one month from receipt of your complete request.

Newsletters

When creating an account and later via the "My Account" section, Users can subscribe to the newsletter and choose to receive regular updates about exclusive offers and early access to promotions. They may update their preferences or unsubscribe at any time by clicking the unsubscribe link in each newsletter.

SMS / MMS

Aquarelle may use the customer’s mobile phone number for order management and for commercial marketing purposes. Customers may object to this use at any time by sending a written request with valid identification to the following address:

Aquarelle.com
Personal Data Protection Department
39 rue Anatole France
92300 Levallois-Perret
France

We will respond to your requests as quickly as possible and in any case within one month from receipt of your complete request.

Reviews

This service allows customers to leave a review on our partner sites eKomi and Trustpilot to share their shopping experience. Published reviews are publicly accessible at any time and are anonymous. The customer authorizes Aquarelle to publish and share their review on the website. The review must not contain defamatory, offensive, illegal, vulgar, slanderous, racist, discriminatory, or otherwise unlawful content.

Transfer of Personal Data Outside the European Union

The collected data may be processed outside the European Union. In such cases, Aquarelle takes necessary steps with its subcontractors to ensure adequate data protection in full compliance with applicable regulations. If transfers are made to countries without an adequacy decision from the European Commission, we ensure that appropriate safeguards, such as standard contractual clauses adopted by the European Commission, are in place. Our subcontractors may also rely on Binding Corporate Rules (BCRs) recognized by relevant authorities.

Updating Our Data Protection Policy

This policy may be updated periodically without notice. Any changes will take effect immediately upon publication on aquarelle.com. We use your personal data in accordance with the policy in effect at the time you submit your data. We will notify you of any significant changes and obtain your consent if necessary when such changes affect the purpose of data collection. To remain compliant with data protection regulations, this policy is reviewed annually by our team.

Glossary

“Anonymization” is defined as "the result of processing personal data to irreversibly prevent any identification.";

“To collect” means to gather personal data, including through online forms or questionnaires.

“Consent” means any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of your personal data.

“Personal data” means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more elements specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

“Data protection rights” refers to the fundamental rights provided by European regulations, including:

“Pseudonymization” means any technical and organizational security measure that replaces an identifier to ensure that personal data cannot be attributed to an identified or identifiable natural person.

“Commercial relationship” encompasses all interactions between Aquarelle and its customers, such as purchases, after-sales service, participation in online games, product returns, complaints, satisfaction surveys, and loyalty programs.

“Data controller” means the person or entity that determines the purposes and means of processing your personal data.

“Processor” means the person or entity that processes personal data on behalf of the data controller.

“Third party” refers to any person other than Aquarelle or the data subject.

“Personal data processing” means any operation or set of operations performed on personal data, regardless of the service or method used.