Privacy Policy

Introduction

This Privacy Policy describes how nexoovia (nexoovia s.r.o.) collects, uses, and protects your personal information when you visit our website and purchase our handmade dried flower arrangements and nexoovia wreaths. We are committed to protecting your privacy and handling your data responsibly and transparently.

Who We Are

We operate an online shop specializing in nexoovia dried flower arrangements, Český Krumlov bouquets, and handmade nexoovia wreaths. We serve customers both locally and internationally, delivering beautiful floral creations to enhance homes and special occasions. As the data controller, we are responsible for ensuring your personal information is processed in compliance with applicable privacy laws.

Information We Collect

We collect various types of information to provide our services effectively:

• Contact Information: Your name, email address, phone number, and physical address when you place an order or contact us.
• Payment Information: We collect payment details necessary to process your orders securely. Payment processing is handled by certified payment providers.
• Order Information: Details about your purchases, delivery preferences, and special requests for custom arrangements.
• Usage Data: Information about how you interact with our website, including pages visited, time spent, and browser information through analytics tools.
• Communication Records: Messages you send through contact forms, email, or phone inquiries.
• Cookies: We use cookies and similar tracking technologies to enhance your browsing experience and remember your preferences.

Legal Basis for Processing

We process your personal information based on several legal grounds. When you place an order or subscribe to our services, we process data based on your consent and to fulfill our contractual obligations to you. We also rely on our legitimate business interests to improve our services, maintain security, and provide better customer experiences. Additionally, we may process data to comply with legal obligations, such as tax laws and consumer protection regulations. For marketing communications, we only send these materials when you have explicitly consented to receive them.

How We Use Your Information

Your information enables us to:

• Process and fulfill your orders accurately and promptly.
• Send order confirmations, shipping updates, and delivery notifications.
• Respond to your inquiries and provide customer support.
• Improve our website functionality and user experience based on usage patterns.
• Send marketing communications about new products and nexoovia collections (with your consent).
• Prevent fraud and maintain the security of our platform.
• Comply with legal requirements and tax obligations.
• Analyze trends to better understand customer preferences for dried flowers and arrangements.

Data Retention

We retain your personal information for specific periods depending on the type of data and purpose:

• Order and Transaction Data: Retained for 7 years to comply with accounting and tax regulations.
• Contact Form Messages: Retained for up to 24 months after your last interaction with us, unless required longer by law.
• Email Communications: Retained for 36 months for record-keeping and customer service purposes.
• Analytics and Cookies: Retained for up to 13 months, after which older data is automatically deleted.
• Server Logs: Retained for up to 12 months for security and technical troubleshooting purposes.
• Marketing Preferences: Retained until you unsubscribe or withdraw consent.

After the retention period expires, we securely delete or anonymize your data. If you request deletion, we will remove your information within 30 days, except where legal obligations require us to retain it.

Your Rights

You have important rights regarding your personal information. You can request access to your data at any time to see what information we hold about you. You have the right to correct any inaccurate or incomplete information. You can request deletion of your personal data, and we will comply within 30 days unless legal requirements mandate retention. You may request restriction of processing or object to specific uses of your data. You have the right to data portability, meaning we can provide your information in a structured, portable format. Additionally, you can withdraw consent for marketing communications at any time by unsubscribing or contacting us directly.

Cookies and Tracking

We use cookies to enhance your browsing experience and gather analytics about how you interact with our website. Essential cookies are necessary for site functionality and security. Performance cookies help us understand which pages are popular and identify technical issues. Marketing cookies track your activity to show you relevant product recommendations. You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling cookies may affect your ability to use certain features of our site.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, and loss. Our website uses SSL encryption for all data transmission, particularly for payment and login information. We maintain secure servers with restricted access and regularly update our security protocols. However, no system is completely secure, and we cannot guarantee absolute protection. We encourage you to use strong passwords and report any suspicious activity immediately. If we discover a data breach affecting your information, we will notify you promptly as required by law.

Third-Party Services

We work with trusted third-party providers to deliver our services effectively. Payment processors handle your financial information securely according to PCI compliance standards. Shipping partners receive your address to deliver your dried flower arrangements. Email service providers help us send order confirmations and marketing materials. Analytics providers help us understand website usage patterns. We ensure all third parties maintain strict confidentiality agreements and process data only as necessary to provide their services. We do not sell or rent your personal information to unrelated third parties for marketing purposes.

International Data Transfers

Your information may be processed and stored in different locations, including outside the European Economic Area. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses to ensure your information receives adequate protection. By using our services, you consent to such transfers. If you are located outside the European Union, your information will be transferred to and processed in the Czech Republic according to this Privacy Policy.

Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will delete it immediately and notify the child's parent or guardian. Parents who believe their child has provided us with personal information should contact us right away.

Supervisory Authority

You have the right to lodge a complaint with the data protection authority in the Czech Republic if you believe your rights have been violated. The Office for Personal Data Protection (ÚOOÚ) is responsible for enforcing privacy laws in the Czech Republic and can investigate your complaint. You may contact the ÚOOÚ if you have concerns about how we process your information or believe we have violated your privacy rights.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our website following any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.