Privacy policy

1. Who processes your data

The data controller is PR Chistiakov Aleksandr, Takovska 13, 11000 Belgrade, registration number (matični broj) 68390621, tax number (PIB) 115469688 (Kyoto Flowers below). We process data under Serbia’s Law on Personal Data Protection (“Sl. glasnik RS”, no. 87/2018).

For any question about your data, write to kyotoflowers.belgrade@gmail.com.

2. What data we collect

• When you order: your phone number.
• About the recipient: name, phone number and delivery address.
• About the order: the bouquet you chose, the delivery date and window, and the card message and comment if you add them.
• About your visit: the pages and bouquets you viewed, what you added to the cart, device and browser type, IP address.

We do not collect payment card details on the site.

3. Why we process it and on what basis

• To take, prepare and deliver your order and to call you to confirm it. Basis: the consent you give when sending the order, and the steps needed to conclude and perform the sales contract.
• To hand the bouquet to the recipient. We receive the recipient’s details from you; the basis is our legitimate interest in delivering the gift you ordered.
• To meet legal duties such as keeping accounting records. Basis: legal obligation.
• To measure how well our adverts work (Meta Pixel and Conversions API). Basis: your consent, which you can withdraw at any time.

Without a phone number and the recipient’s details we cannot take and deliver an order. We do not make automated decisions that have legal effects for you.

4. The recipient’s data

If you order a bouquet for someone else, we use their details only to call them and hand over the bouquet. Please give us only details you are allowed to share.

5. Who we share data with

• Flowerfy, the system where we keep orders (a processor acting on our instructions).
• The courier who hands over the bouquet: the recipient’s name, phone and address.
• Telegram, the messaging service through which our staff are notified of a new order.
• Meta Platforms Ireland Ltd., with your consent: visit data and your phone number in hashed form, to measure adverts.
• The site’s hosting provider.
• Public authorities, when the law requires it.

We do not sell data. Flowerfy’s servers and the site’s hosting are located in Russia, and Meta and Telegram may process data outside Serbia, including in the USA. In those cases we transfer data in line with the Law on Personal Data Protection.

6. How long we keep data

We keep order data for as long as the rules on business and accounting records require, and then delete it. We keep advert-measurement data until you withdraw your consent.

7. Your rights

You can ask for access to your data and a copy of it, for correction, deletion, restriction of processing and data portability, and you can object to processing. You can withdraw consent at any time; this does not affect processing done before the withdrawal. Write to kyotoflowers.belgrade@gmail.com and we will answer within the period set by law.

If you believe the processing breaks the law, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik, poverenik.rs).

8. Cookies and the pixel

The site remembers the contents of your cart, an order form you have started (until you close the browser tab) and your cookie choice in your browser, so you can pick up where you left off. We switch Meta Pixel on only with your consent; you can change your choice in the cookie settings at the bottom of every page.

9. Changes to this policy

If we change this policy, the new version appears on this page with the date it takes effect.