Privacy Policy | A. E. Florat

Last edited on: November 8, 2024.

1. Introduction

This Privacy Policy explains how A. E. Florat Website (“we,” “our,” or “us”) collects, uses, and shares your information, and your choices regarding it. “Personal information” refers to data that identifies or can identify you, excluding aggregate data.

This policy applies to information collected through our websites, emails, and other online services linked to this Privacy Policy (the “Service”). It does not cover third-party data collection or information related to your employment with us.

Please note that your use of the Service is subject to our Terms of Use.

For our contact details, see the Contact section of this Website.

2. Information We Collect:

When you use our Service, we may ask for information, such as when signing up for newsletters, loyalty programs, promotions, surveys, or contacting support.

We collect the following types of information:

Contact Identifiers: Your name and email address.
User-Provided Information: Any information you share via email or contact form.
Device and Browser Information:
- Device identifiers (e.g., IP address).
- Device details (e.g., operating system, browser type, and language settings).
- Internet activity (e.g., browsing history, interactions, purchases, and time spent on pages).
- Non-precise location (e.g., city or postal code level from IP address).

This data is collected automatically using cookies and tracking technologies like:

Cookies: Small text files placed in your browser to track activity. These can be session (temporary) or persistent (long-term).
Pixels: Embedded code (e.g., one-pixel images or JavaScript) that collects data or sets cookies when you interact with our site.

We use these technologies to improve our Service, personalize your experience, enhance security, measure performance, and deliver targeted ads.

For details on your cookie preferences, see the "Your Privacy Choices" section.

Information from Other Sources:

We also collect information from various external sources, including:

Business Partners: Companies offering co-branded services, selling our products, or engaging in joint marketing.
Third-Party Vendors: Providers of analytics, advertising, security, and fraud prevention services.
Social Media: Information from platforms you interact with, including contact details and comments. We may also receive authorized data shared by these platforms.
Data Providers: Licensors of private and public databases.
Public Sources: Information available in the public domain.

Sensitive Information.

To the extent any of categories of information we collect are sensitive categories of information under applicable law, we process such information only for the limited purposes permitted by applicable law.

3. How We Use Information.

We collect and use information for the following purposes:

Providing Services: To operate the Service and provide support.
Personalizing Your Experience: To tailor content and recommendations.
Communications: To send updates, security alerts, policy changes, and marketing messages via email.
Analytics & Improvement: To analyze trends, improve services, and make business decisions, using tools like Google Analytics.
Advertising: To display ads about our products through networks like Google and Facebook, both on their platforms and others.
Promotions: To manage promotions you enter, in accordance with the official rules and for legal requirements.
Security & Enforcement: To prevent and address fraud, policy breaches, and security threats.
Recruitment: For recruitment decisions and employment contract purposes.
At Your Direction: As directed or consented to by you for specific purposes.

We may aggregate or de-identify data, which is no longer considered personal information, and use non-personal data as permitted by law. For details on your privacy choices, see the "Your Privacy Choices" section below.

4. How We Disclose Information.

We disclose information as described in this Privacy Policy to the following categories of recipients:

Service Providers: Third parties that process information on our behalf for services like payment processing, analytics, marketing, and technical support. We contractually limit their use of this data.
Business Partners: Partners offering co-branded services, selling our products, or engaging in joint marketing activities.
Affiliates: Entities within our organization, who may use the information in line with their own privacy policies or as service providers.
Mergers & Acquisitions: During negotiations or in connection with any merger, sale, or transfer of our assets or business.
Security & Enforcement: To comply with legal processes or protect the rights, property, or safety of the Service and others.
At Your Direction or Consent: When you direct us or consent to share information with specific recipients.

We may aggregate or de-identify information, which is no longer considered personal data, and disclose non-personal data as permitted by law. For details on your disclosure choices, see the "Your Privacy Choices" section below.

5. Third Parties:

Our Service may link to third-party websites or incorporate third-party technologies. Except for service providers, third parties control how they process the information they collect from you. We recommend reviewing their privacy policies and terms of use, as their practices, including data collection, choices, and storage locations, are governed by their own policies.

6. Your Privacy Choices:

We provide several ways for you to manage your privacy, including:

Region-Specific Rights: Depending on your location, you may have additional rights, such as access, correction, or deletion of your information. To exercise these rights, email us at aeflorat.info@gmail.com. Verification may be required, and certain exceptions may apply.
Authorized Agent: In some regions, you may designate an authorized agent to exercise privacy rights on your behalf. We may request written permission and verify your identity.
Appeals: If we deny your request, you may have the right to appeal. Please email us to initiate an appeal, and we will review it according to applicable laws. If denied, you may contact your regulatory authority.
Emails: To opt-out of marketing emails, email us with “UNSUBSCRIBE” in the subject line. Please note, you cannot opt-out of transactional messages.

Browser and Device Controls:

Cookies and Pixels: You can manage cookies through your browser settings, which may also impact related pixels. This applies only to our website, and settings must be configured separately for each browser. Deleting cookies will reset your preferences.
Preference Signals: Your browser may send Do Not Track signals, but we do not respond to these signals unless required by law.
Third-Party Opt-Out: Some third parties offer opt-out tools for cookies and pixels. To opt out of Google Analytics, visit Google Analytics Opt-Out (https://tools.google.com/dlpage/gaoptout). We are not responsible for the effectiveness of third-party tools.

7. Children:

Our Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe we have collected such data, contact us, and we will delete it in accordance with COPPA.

8. Data Security:

We implement reasonable security measures to protect your information from loss, theft, or unauthorized access. However, we cannot guarantee full security over internet transmissions.

9. Retention:

We retain information as long as necessary for the purposes it was collected and to comply with legal obligations, resolve disputes, and enforce agreements.

10. International Transfer:

If you are outside Germany, please note that your information may be transferred and processed in the U.S. or other countries where we operate.

11. Changes to this Privacy Policy.

We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of our Service indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide additional notice to you, such as through email or prominent notice on the Service.

12. Contact Us.

If you have any questions about or trouble accessing this Privacy Policy, please contact us:

By email: aeflorat.info@gmail.com

To exercise choice, use the methods described in the Your Privacy Choices section above or your region-specific terms below.

13. California Privacy Rights

These additional rights apply to California residents under the California Privacy Rights Act (“CPRA”).

Notice at Collection:
- We provide notice of our data practices at or before the time of collection. This includes details on the categories of personal information we collect, sources, purposes, third-party disclosures, and retention practices (see sections "How We Collect Information," "How We Use Information," "How We Disclose Information," and "Retention").
- We do not “sell” or “share” personal information as defined by CPRA and do not knowingly sell or share the personal information of minors under 16.
- Sensitive personal information (such as payment details) is collected only for permissible business purposes under CPRA, and we do not sell or share this information.
Right to Know, Correct, and Delete:
- You have the right to request:
  - The personal information we’ve collected about you, including sources, purposes, and third-party disclosures.
  - Correction of inaccurate information.
  - Deletion of your personal information.
- To exercise these rights, see the "Data Subject Requests" section above.
Right to an Authorized Agent:
- You may designate an authorized agent to exercise your rights (see "Authorized Agent" section above).
Right to Non-Discrimination:
- You have the right not to face discrimination for exercising your privacy rights.
Shine the Light:
- California residents may request a list of the categories of personal information disclosed to third parties for direct marketing purposes in the past year. To make a request, contact us as outlined in the "Contact Us" section, specifying “California Shine the Light Request.” We may ask for additional verification information.

14. Colorado, Connecticut, Utah, and Virginia.

14. Colorado, Connecticut, Utah, and Virginia Residents

These rights and disclosures apply to residents of Colorado, Connecticut, Utah, and Virginia under their respective data protection laws.

Data Subject Requests: You have the right to:
- Confirm whether we are processing your personal data.
- Access, correct, delete, or obtain a copy of your personal data.
- For details, refer to the “Data Subject Requests” section above.
Profiling: We do not process personal data for profiling purposes that lead to legal or similarly significant decisions.
Right to an Authorized Agent: You can designate an authorized agent to exercise your rights (see the “Authorized Agent” section above).
Right to Non-Discrimination: You have the right to not face discrimination for exercising your privacy rights.
Right to Appeal: You may appeal our response to your request (see the "Appeals" section). If your appeal is denied, you can submit a complaint to:
- For Colorado residents, to the Colorado AG at https://coag.gov/file-complaint/
- For Connecticut residents, to the Connecticut AG at https://www.dir.ct.gov/ag/complaint/
- For Utah residents, to the AG at https://attorneygeneral.utah.gov/contact/complaint-form/
- For Virginia residents, to the AG at https://www.oag.state.va.us/consumercomplaintform

15. Nevada Residents

Nevada consumers may opt out of the sale of their personal information. To exercise this right, follow the instructions in the “Data Subject Requests” section above.

16. European Economic Area, Switzerland, and United Kingdom

These rights apply to individuals in the European Economic Area (EEA), Switzerland, and the United Kingdom (UK) under the GDPR.

Roles: Adriana Enriquez Florat is the controller of your personal data when you interact with our Service.
Lawful Basis for Processing: Our lawful bases for processing your personal data include:
- Your consent.
- Performance of a contract.
- Compliance with a legal obligation.
- Legitimate interests pursued by us or a third party, where your rights do not override those interests.
Where necessary, we may transfer your personal data to third countries with appropriate safeguards in place, such as standard contractual clauses.

Data Subject Requests.

You have the right to access, correct, or delete any personal data we have collected about you. You also have the right to request data portability, and to restrict or object to certain processing activities. Additionally, you can request that we refrain from processing your personal data for marketing purposes or for purposes that differ from those for which it was originally collected or later authorized. You can withdraw your consent at any time for any data processing based on consent you have given us.

For details on exercising these rights, see the “Data Subject Requests” section above.

For information on our data retention practices, see the "Retention" section above.

You also have the right to file a complaint with your local data protection authority.