Privacy policy

This policy describes how we process personal data on the Florista Café website and when handling bookings, orders and inquiries, in accordance with Regulation (EU) 2016/679 (GDPR). The controller of your personal data is:

Name

Olena Vakij

Legal form

Natural person conducting business under the Trade Licensing Act

Company ID (IČO)

07417799

Registered address

Milotická 458/12, 155 21 Praha – Zličín

Registration

Trade Licensing Register

For questions about personal data and to exercise your rights, contact us by email at olenavakij@seznam.cz or by phone at +420 775 529 929.

• Workshop bookings and orders: name, email, phone, any note, the chosen date or the contents of the order, the number of people and the booking number. We also store when a booking was made and, if so, cancelled.
• Catering inquiries: name, email and the event details you fill in on the form (type of event, number of guests, date, venue, note). We do not store the inquiry in a database; it only reaches us by email.
• Payments: amount, payment status, the payment identifier at the payment gateway and the time of payment. We do not process payment card details – you enter them directly on the GoPay payment gateway's page.
• Inquiries: the data you send us by email or tell us by phone, typically your name, contact details and the content of the inquiry.
• Technical data when you visit the website: the hosting provider (Vercel) processes technical data needed to deliver the website, for example the IP address and browser details.
• Visitor statistics: on the homepage we use Vercel Web Analytics. It does not use cookies; a visitor is distinguished only by a fingerprint of the request, which is discarded after 24 hours. It stores the time, the page address (without parameters), the referring page, approximate location, device type, operating system and browser. It is used only for aggregate statistics.

• Handling a booking or order and its payment – performance of a contract and steps taken before entering into it (Art. 6(1)(b) GDPR).
• Accounting and tax obligations and handling complaints – compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Replying to an inquiry – performance of a contract or steps taken before entering into it, if the inquiry concerns a booking or order; otherwise our legitimate interest in being able to reply to you (Art. 6(1)(b) or (f) GDPR).
• Operating and securing the website and visitor statistics – our legitimate interest in reliable and secure operation of the website and in aggregate statistics on its use (Art. 6(1)(f) GDPR).

Name, email and phone are necessary to make a workshop booking – we need to be able to contact you and confirm your booking. The note is optional. For orders, the data marked as required in the order form is necessary. Without the required data, a booking or order cannot be completed.

We make your data available only to the extent necessary.

Our processors:

• Vercel – website hosting and visitor statistics. It processes the relevant data as our processor.
• Neon – the database in which we store bookings and payment records. It processes the data in the database as our processor.
• Resend – sending emails (booking confirmations and cancellations, notifications to us, inquiries from the website). It processes names, email addresses and message content as our processor.

Other recipients:

• GoPay Czech, odštěpný závod zahraniční právnické osoby Worldline NV, Company ID (IČ) 22177469 – payment service provider. It is not our processor: it processes the personal data it handles within the GoPay payment system as an independent controller.
• Public authorities, where required by law.

Vercel, Neon and Resend are based in the USA, so data may also be processed or made accessible outside the European Economic Area. The data processing agreements (DPAs) of these providers include safeguards for transfers to third countries, including the EU Standard Contractual Clauses where applicable.

• Workshop booking data for 3 years after the workshop, after which we delete or anonymise it.
• Data on orders and payments for as long as necessary to handle them and to exercise the rights and obligations arising from them, for example from a complaint.
• Data in accounting and tax documents for the period set by law.
• Inquiries for as long as necessary to handle them.

Under the GDPR, you have the right:

• of access to your personal data,
• to rectification of inaccurate data,
• to erasure, if we no longer need the data or process it unlawfully,
• to restriction of processing,
• to portability of data we process on the basis of a contract,
• to object to processing based on our legitimate interest.

Just write to us at olenavakij@seznam.cz.

We do not use your data for automated decision-making or profiling.

You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz (opens in a new window).