This Flormar Privacy Notice (this “Privacy Notice”) is designed to provide transparency into our privacy practices and principles that we put in place when we collect and use the personal data of our website’s visitors and users of our applications, in a format that you can navigate, read, and understand. Flormar Cosmetics GmbH, with its registered office at Schneiderstr. 82, D-40764 Langenfeld, Germany (“Flormar”, “we”, “our” or “us”), is the data controller for the collection and use of the personal data of our website’s visitors (collectively referred to as “you” or “your”) who use our websites.
Details of the Controller:
Identity: Flormar Cosmetics GmbH – Commercial Register: Amtsgericht Köln, HRB 76696 – VAT identification number: DE 271160510
Postal address: Schneiderstr. 82, D-40764 Langenfeld, Germany
Email: [email protected]
Scope
This Privacy Notice describes the processing of your personal data provided to and/or collected by Flormar on our website https://www.flormar.co.uk/ .
Flormar strives to comply with applicable privacy law in the jurisdictions where it operates (collectively referred to as the “Data Protection Law”). These include the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”).
This Privacy Notice addresses the following topics:
Types Of Information We Collect
According to the Data Protection Law personal data is any information that identifies (either directly or indirectly) a particular individual, such as the individual’s name, postal address, email address and telephone number.
We collect the following categories of Personal Data:
When you use the form available on our Contact page, we are currently collecting and processing the following information: Identity Information (Name – Surname), Contact Information (E-mail address), Information Regarding the Request/Complaint/Comment (Request, comment and complaint information), Time and date of contact.
Location information when you visit our website, including location information either provided by a mobile device interacting with our website (including through cookies or web beacon technologies), or associated with your IP address, where we are permitted by law to process this information.
Usage, browsing and technical data, including your device identifier or IP address, when you visit our website.
When you use the form available on our Partner/LATAM Partner page, we are currently collecting and processing the following information: Identity Information (Name – Surname), Contact Information (E-mail and mobile), Information Regarding the Comment Time and date of contact, Stora Adress and Size, Commercial Experience and Current Activity
How We Collect Your Personal Data
We collect Personal Data you provide to us when you request or buy products via our business partners (such as Amazon), services or information from us, contact us directly by phone or through our website’s forms or otherwise interact with us. The Personal Data we collect is covered by this Privacy Notice and the Personal Data the third-party site or platform collects is subject to the third-party site or platform’s privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the Personal Data we have collected directly through our website.
We automatically collect Personal Data about you through technology, such as cookies, when you visit our website, use our website on third-party sites or platforms. Further details are set out in our Cookie Policy.
Purpose of Processing of Your Personal Data by Flormar
Flormar uses your Personal Data for the following purposes:
To provide you with the information and services you request and manage your preferences, based on the performance of an agreement we may have with you or to enter into an agreement with you.
To manage and assess your recruitment process, evaluate your suitability for the position, and contact you regarding your application, based on our legitimate interest in selecting qualified candidates and, where applicable, to take steps prior to entering into an employment agreement.
To process the personal data collected through online or offline forms for the purposes of performing and managing our contractual relationship, fulfilling mutual obligations, and assessing the operational adequacy and efficiency of related processes. Such processing is based on the necessity for the performance of a contract and our legitimate interest in ensuring the proper management of our commercial partnerships.
To communicate with you about your activities with us and send you important information about features on our website or changes to our terms or policies, based on our agreement with you, our legal obligations and as necessary for our legitimate interests to retain a transparent relationship with you.
Consistent with Data Protection Law and choices and controls that may be available to you:
To learn more about how we use your Personal Data for preferences and performance, please visit our Cookie Policy.
To provide you with technical or any kind of support and answer to any of your queries, based on the performance of our agreement with you;
To optimize or improve our website, services and operations based on our legitimate interests of improving such products, services and operations in accordance with our mission and, where applicable, on your consent. We may also anonymize your Personal Data for this purpose;
To administer our website, including troubleshooting, data analysis, testing and system maintenance, and detect, investigate and prevent activities that may violate our policies or be illegal based on our legitimate interests of running our website and ensuring no violations or illegality is occurring within our website; ensuring a safe environment for you, as well as for the purposes of compliance with a legal obligation to which we may be subject.
Where Flormar holds and uses your Personal Data based on our legitimate interests we have carefully considered how your Personal Data is processed to ensure that we carry out such activities balancing your interests and our interests in the most efficient and effective way. Flormar does not use your Personal Data for activities where our interests are overridden by the impact on you.
We will not process your personal data for any purpose other than those described except as required by law or court order.
How We Use Your Information
We may process your personal data based on our legitimate interests where such processing is necessary and proportionate to ensure the proper management of our customer relations. In particular, the personal data you provide in connection with your requests, claims, or complaints may be processed for the purposes of establishing and performing a contract, handling and responding to your queries, or the establishment, exercise, or defence of legal claims.
For our business partners, we may process personal data collected through online or offline forms for the purposes of establishing and performing the contractual relationship, fulfilling mutual obligations, and ensuring the operational suitability and efficiency of related processes. Such processing is based on the necessity for the performance of a contract and, where applicable, on our legitimate interests in maintaining effective commercial partnerships.
For our employees, we process personal data necessary for the performance and management of the employment relationship, including payroll administration, compliance with labor, tax and social security obligations, and the exercise of rights and duties arising from the employment contract. Such processing is based on the necessity for the performance of the employment contract and our legal obligations under applicable employment laws.
For employee candidates, we process the personal data you provide during the recruitment and selection process to evaluate your qualifications, assess your suitability for the position, and communicate with you regarding your application. This processing is based on our legitimate interest in selecting qualified candidates and, where applicable, to take steps prior to entering into an employment agreement.
In assessing our legitimate interests, we carefully balance them against your rights and freedoms, ensuring that your personal data is not processed for purposes that would override your interests or fundamental rights.
For information regarding the legal bases applicable to cookies and similar technologies, please refer to our Cookie Policy, where we describe in detail the purposes and conditions of such processing.
Sharing Your Personal Data With Third Parties
We share your Personal Data with local and/or international third parties in limited circumstances, including:
Authorized public institutions and organizations upon request for the purpose of fulfilling legal obligations.
Our third-party service providers (Aut O’Mattic A8C Ireland Ltd. ,“Woocommerce” , 25 Herbert Place, Grand Canal Dock, Dublin, D02 AY86, Ireland VAT No.: 3255131SH) , from whom we purchase website hosting services to provide you with catalogue services and facilitate communication via the website. Under no circumstances will this data processor subcontract any data processing services to third parties without our prior consent.
The personal data you share with us via the contact form is shared with our group company in Turkey (Kosan Kozmetik Pazarlama Vve Ticaret A.Ş. registered Gebze Organize Sanayi Bolgesi İhsan Dede C. No 133 Gebze Kocaeli – Turkey) for the purposes of evaluating and fulfilling your requests and complaints; and fulfilling our contractual obligations.
When companies need Personal Data to perform services on our behalf; these companies are prohibited from using your Personal Data for purposes other than those requested by us or required by law. For example, we share Personal Data with:
Analytics providers, such as Google Analytics.
IT service providers.
Cookies providers, as indicated in our Cookie Policy.
We may also disclose your Personal Data if permitted or required by law, for example, in response to a court order or a subpoena, or if requested by a law enforcement, data protection or tax authority.
Please note that our website may contain links to other websites not owned or controlled by us. We encourage you to be aware when you leave our website and to read the privacy policies of other websites that may collect your Personal Data.
Your Rights
You may communicate your requests in writing, regarding your rights as a data subject, to our Company at Schneiderstr. 82, D-40764 Langenfeld, Germany, or by email to [email protected] using the personal email address provided on the Contact Form.
You may submit your requests using the relevant forms to exercise your rights listed below:
RIGHTS TO ACCESS: For the right to access, data subjects will be provided a copy of personal data available together with the purpose for which they have been collected, the identity of the recipients of the data, the terms of retention provided and the criteria used to determine these, the existence of the right to request the rectification or erasure of personal data and the limitation of, or opposition to, processing, the right to lodge a complaint with the Information Commissioner’s Office (“ICO”) and if the data of the data subject have not been obtained, any information available regarding their origin. The right to obtain a copy of the data cannot negatively affect the rights and freedoms of the data subjects.
Form for the exercise of the right to access.
RIGHT TO RECTIFICATION: In the right to rectification the data of the data subject that were incorrect or incomplete shall be changed in accordance with the purposes of the processing. The data subject may indicate in the request what data are referred to and the correction to be made, providing, where necessary, supporting documentation of the inaccuracy or incomplete nature of the data processed. If the data have been communicated by the controller to other processors, they must notify them of the rectification unless it is impossible to do so or requires disproportionate effort, providing the data subject with information regarding such recipients upon request.
Form for the exercise of the right to rectification
RIGHT TO ERASURE: In the case of the right to erasure, the data of the data subjects shall be erased where they oppose processing and no legal basis impedes it, where not necessary in relation to the purposes for which they were collected, they withdraw the consent provided and there is no legitimate legal basis for the processing or where it is illegal. If the erasure arises from the exercise of the right to opposition to the processing of their data for marketing purposes on the part of the data subject, the identification data of the data subject may be retained for the purpose of preventing future processing. If the data has been communicated by the controller to other processors, they must notify them of the erasure unless it is impossible to do so or requires disproportionate effort, providing the data subject with information regarding such recipients if they request same.
Form for the exercise of the right to erasure.
RIGHT TO OPPOSITION: In the case of the right to opposition, where the data subjects refuse to provide consent for the processing of their personal data before the controller, the controller shall cease processing them provided that no legal obligation prevents them from doing so. Where the processing is based on a mission of public interest or legitimate interest of the controller, before a request to exercise the right to opposition, the controller must cease processing the data except where overriding reasons prevail above the rights and freedoms of the data subject or are necessary for their formulation, exercise or defense of the claims. If the data subject opposes the processing for the purposes of direct marketing, the personal data shall no longer be processed for these purposes.
Form for the exercise of the right to erasure.
RIGHT TO PORTABILITY: In the case of right to portability, if the processing is carried out by automated means and is based on consent or is carried out within the framework of a contract, the data subject may request a copy of their personal data in a structured, commonly used and electronically readable format. Thus, they have the right to request that they are transmitted directly to a new controller whose identity must be communicated where technically possible.
Form for the exercise of the right to portability of data.
RIGHT TO LIMITATION OF PROCESSING: In the case of the right to limitation of processing, the data subjects may request the suspension of processing of their data to impugn the inaccuracy while the controller carries out the necessary verifications or, in the event that the processing is carried out based on the legitimate interest of the controller or in compliance with a mission of public interest, while it is verified if these reasons prevail over the interests, rights and freedoms of the data subject. The data subject may also request the retention of the data if it is considered that the processing is illegal and, rather than suspension, request the limitation of processing or if the controller no longer needs the data for which they were collected, the data subject needs them for the formulation, exercise or defense of complaints or claims. If the processing of the data subject’s data is limited this must be clearly stated in the controller’s systems. If the data has been communicated by the controller to other processors, they must notify them of the rectification unless it is impossible to do so or requires disproportionate effort, providing the data subject with information regarding such recipients on request.
Form for the processing of the limitation of treatment.
If the data subject’s request is not granted, the controller shall inform them without delay and no later than one month after receipt of same, of the reasons for not granting the request and the possibility of presenting a complaint to the Information Commissioner’s Office (“ICO”) and of taking legal action.
To file a complaint, you can contact the ICO through its website at https://ico.org.uk/make-a-complaint/ or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Data Security, Integrity And Retention
The security, integrity and confidentiality of your Personal Data are extremely important to us. We have implemented technical, administrative and physical security measures that are designed to protect your Personal Data from unauthorized access, disclosure, use and modification, consistent with Data Protection Law and industry practices. From time to time, we review our security procedures to consider appropriate new technology and methods.
We will retain your Personal Data for the length of time needed to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. Your information is securely stored.
We keep information that we collect from our customers under the Contact Form for one year.five years.
For job applicants, we retain your personal data for a period not exceeding two one (12) years after the completion of the recruitment process, unless you provide consent for a longer retention period or a legal obligation requires otherwise. This allows us to manage and assess your application, consider you for future opportunities, and respond to potential claims. Once this period expires, your data will be securely deleted or anonymized.
For employees, personal data processed in the context of the employment relationship is generally retained for three one (13) to four (4) years after the end of the employment, in accordance with applicable labour, tax and social security obligations. Certain records, such as payroll and social security data, may be kept longer where required by legal, contractual or regulatory obligations. After these periods, personal data will be deleted or anonymized in a secure manner.
For our business partners, personal data collected and processed in connection with the contractual relationship will be retained for a period of five one (15) years following the termination of the relationship. This retention period is necessary to comply with applicable commercial and civil law obligations and to enable the establishment, exercise, or defence of potential legal claims. After the expiry of this period, the data will be securely deleted or anonymized unless a longer retention period is required by law or justified by ongoing legal proceedings.
You can find information about the storage period of the data we obtain from cookies in our Cookie Policy. We will then dispose your information by deletion. To determine the appropriate retention period for your Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means.
Changes To This Privacy Notice
From time to time, we may change this Privacy Notice to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by Data Protection Law, we will obtain your consent.
Comments And Questions
If you have any comments or questions about this Privacy Notice, please contact us at [email protected] or via the contact us page of our website.
Alternatively you can write to us at:
Flormar Cosmetics GmbH
Schneiderstr. 82
D-40764 Langenfeld
Germany
Commercial Register: Amtsgericht Köln, HRB 76696
VAT identification number: DE 271160510
Email: [email protected]
This Privacy Notice was last updated on: 23 March 2026
