Crafting Beauty, Cultivating Community
Join Our WorkshopsWelcome to the privacy policy for our online platform, provided by La Fioritura. This policy explains how we collect, use, disclose, and safeguard your information when you visit our site or use our services. We are committed to protecting your privacy and handling your data transparently, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
The data controller responsible for your personal data is:
La Fioritura
24 Via dei Fiori,
Florence, Tuscany,
50123, Italy
We may collect various types of information in connection with your use of our site and services. This may include:
Personal identification information: Such as your name, shipping address, billing address, and other contact details you provide when placing an order, creating an account, or contacting us.
Order details: Information related to your purchases, including the products ordered, order date, and transaction details.
Payment information: Details necessary to process your payments, such as credit card numbers or other payment account information. Please note that payment processing is handled by secure third-party providers, and we do not store full payment card details on our servers.
Communication data: Information you provide when communicating with us, such as content of emails or messages sent through our site.
Usage data: Information automatically collected when you access our site, such as your IP address, browser type, operating system, pages viewed, and referring URLs. This helps us understand how users interact with our service.
We collect information directly from you when you provide it to us, and automatically as you navigate through the site.
We use the information we collect for various purposes, based on legal grounds such as fulfilling contractual obligations, pursuing legitimate interests, or with your consent:
To provide and fulfill our services: Processing your orders, managing your account, delivering products, and providing customer support.
To process payments: Handling transactions securely through trusted payment processors.
To communicate with you: Responding to your inquiries, sending service updates, and providing information related to your orders.
To improve our service: Analyzing usage data to understand user behavior, troubleshoot issues, and enhance the functionality and content of our site.
For marketing purposes: With your explicit consent where required, we may send you promotional communications about our products, services, or special offers. You can opt out of marketing communications at any time.
To comply with legal obligations: Meeting legal or regulatory requirements, resolving disputes, and enforcing our agreements.
For security and fraud prevention: Protecting our site, services, and users from fraudulent or malicious activity.
Our processing of your personal data is based on the following legal grounds under the GDPR:
Performance of a contract: When processing is necessary to fulfill a contract with you, such as processing and delivering your orders.
Legal obligation: When processing is necessary to comply with a legal obligation to which we are subject.
Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your fundamental rights and freedoms. Examples include improving our service, preventing fraud, and marketing (where consent is not required).
Consent: When you have given clear consent for us to process your personal data for a specific purpose, such as sending you marketing emails. You have the right to withdraw consent at any time.
We may share your personal data with third parties only in the following circumstances and always ensuring appropriate safeguards are in place:
Service providers: We engage trusted third-party companies to perform services on our behalf, such as payment processing, order fulfillment, delivery, data hosting, and analytics. These providers are given access to the information necessary to perform their functions but are prohibited from using it for other purposes.
Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business transfers: In the event of a merger, sale of assets, or other business transaction, your personal data may be transferred as part of that transaction. We will notify you of any such change.
We do not sell your personal data to third parties.
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period will depend on the type of data and the purpose of processing.
Under the GDPR, you have certain rights regarding your personal data. These rights include:
The right to access: You have the right to request copies of your personal data.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions (particularly where processing is based on legitimate interests or for direct marketing).
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the physical address provided in the "Contact Us" section below. We may need to verify your identity before fulfilling your request.
You also have the right to lodge a complaint with a supervisory authority responsible for data protection in your relevant jurisdiction if you believe our processing of your personal data infringes applicable law.
We implement appropriate technical and organizational measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. However, please be aware that no security measures are entirely foolproof.
Our site may contain links to external websites or services that are not operated by us. Please be aware that we are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy or our data practices, please contact us by mail at:
La Fioritura
24 Via dei Fiori,
Florence, Tuscany,
50123, Italy