GDPR Information
Last updated: August 14, 2026
Your Data Protection Rights
Under the General Data Protection Regulation (GDPR), individuals within the European Union have specific rights regarding their personal data. Mooie Bloemen is committed to upholding these rights.
Data Controller Information
Entity: Mooie Bloemen
Address: Prinsengracht 263, 1016 GV Amsterdam, Netherlands
Email: [email protected]
What Personal Data We Process
We collect and process the following categories of personal data:
- Identity data: Name
- Contact data: Email address, postal address
- Transaction data: Service selections, order details
- Technical data: IP address, browser information, device data
- Usage data: Website interaction patterns
Purpose and Legal Basis
We process your data for the following purposes and legal bases:
- Service delivery - Legal basis: Contract performance
- Communication - Legal basis: Contract performance and consent
- Website improvement - Legal basis: Legitimate interests
- Legal compliance - Legal basis: Legal obligation
Your GDPR Rights Explained
Right to Access
You can request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You can request limitation of processing your personal data in specific situations, such as when you contest the accuracy of the data.
Right to Data Portability
You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where the alleged infringement occurred.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with your request.
Please include the following information in your request:
- Your full name
- The email address associated with your data
- A clear description of which right you wish to exercise
- Any relevant details that will help us locate your data
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of such extension.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
Typical retention periods:
- Order and contact information: 3 years from last interaction
- Technical and usage data: 12 months
- Marketing consent records: Until consent is withdrawn
Data Security
We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay, and in any case within 72 hours of becoming aware of the breach.
International Data Transfers
Your personal data is primarily processed and stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Contact Our Data Protection Officer
For questions about our GDPR compliance or data protection practices, contact us at:
Email: [email protected]
Address: Prinsengracht 263, 1016 GV Amsterdam, Netherlands
Supervisory Authority
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
Website: autoriteitpersoonsgegevens.nl
Address: Postbus 93374, 2509 AJ Den Haag, Netherlands