Privacy Policy

The data controller is PARFUM FLOWER COMPANY PFC S.R.L., Str. Neptun nr. 151B, Sector 5, 051442, București, România, reg. no. J2019016980404, VAT RO42010131, email contact@beyondtheflower.ro.

Order data: first and last name, email address, phone number, country and city, attendee names printed on the tickets and, if you request a company invoice, company name, VAT number, billing address and postcode.

Account data: email address and an encrypted password, if you choose to create an account.

Payment data: payment is processed by Stripe. We never receive or store your full card number; we only receive the payment status and a transaction reference.

Usage data: page visited, date and time, approximate location derived from the IP address (country/city), referring website, search term where the search engine provides one, language and a random session identifier. Analytics are only recorded after you accept analytics cookies.

To conclude and perform the ticket purchase contract, issue tickets and QR codes, and manage check-in at the event (Art. 6(1)(b) GDPR).

To issue invoices and keep accounting records (Art. 6(1)(c) GDPR).

To measure website traffic and improve the site, based on your consent (Art. 6(1)(a) GDPR).

To send you information about the event you purchased and to secure our systems, based on our legitimate interest (Art. 6(1)(f) GDPR).

Service providers acting on our behalf: our hosting and database provider, Stripe (payments), and our email delivery provider. Each processes data only on our instructions.

Accounting and tax authorities where the law requires it. We do not sell personal data.

Where a provider stores data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses.

Invoicing and order data: 10 years, as required by accounting law.

Account data: until you ask us to delete the account.

Website analytics: at most 24 months.

You have the right of access, rectification, erasure, restriction, data portability, objection, and the right to withdraw consent at any time without affecting prior processing.

To exercise any of these rights, write to contact@beyondtheflower.ro. We answer within 30 days.

You may also lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro).

Data is transmitted over encrypted connections, access is restricted to authorised persons and passwords are stored hashed.

The site is not intended for children under 16 and we do not knowingly collect their data.