Privacy statement
FloraSpark processes personal data when you visit this website, request a demo or a quote, and when your company works with the FloraSpark Suite. Below you can read which data that is, why we process it, how long we keep it and what rights you have.
Who is responsible?
For the data that reaches us through this website and in our contact with you, FloraSpark B.V. is the data controller. FloraSpark B.V. is part of SparkBI Group.
- Data controller
- FloraSpark B.V.
- Chamber of Commerce number
- 42143808
- VAT number
- NL869912343B01
- info@floraspark.nl
- Phone
- +31 6 15 29 85 04
Which personal data do we process?
Demo request
If you fill in the demo form, we process:
- your name
- the name of your company
- your email address
- your phone number
- the content of your message and anything you include in it yourself
The request arrives as an email in our own mailbox. No request travels through a form service outside the EU.
Quote request
If you put a subscription together in the configurator, we process:
- the name of your company and your own name as the contact person
- your email address and, if you fill it in, your phone number
- the package, the number of users and the modules you select
- your company's Chamber of Commerce number and registered address, plus the name of the person signing on behalf of the company
We need that last set of details to draw up the quote and the data processing agreement in your company's name. You first receive a confirmation email; the quote is only drawn up after you click the link in that email.
Use of the website
When you visit the website, technical data may be processed:
- your IP address, in the web server logs
- data about your browser and device
- which pages were requested and which errors occurred
When a form is submitted we briefly hold your IP address in memory, so that the same address cannot send hundreds of requests in a row.
Data inside the FloraSpark Suite
If your company works with the platform, it holds company data (auction, growing and sales data) and data about the employees who have an account. For that data your employer is the controller and we are the processor. See the section about the platform.
What do we use your data for?
- Getting in touch and handling your question or request.
- Scheduling and preparing a demo.
- Drawing up a quote and an agreement, and carrying it out.
- Our administration and invoicing.
- Keeping the website working and secure, and preventing abuse of the forms.
- Knowing how many visitors view which page, without profiling the visitor.
We do not sell data, and we do not use your details to send you unsolicited commercial email.
On what legal basis?
We only process your data when there is a legal basis for it:
- Legitimate interest: handling requests, and keeping the website secure and working.
- Performance of the agreement: drawing up a quote and, if you become a customer, meeting the agreements we made.
- Legal obligation: administration and the statutory retention period, for invoices for instance.
Data inside the platform
The FloraSpark Suite runs on your company's own data. That data stays your company's: your company is the controller for it and we only process it on instruction. What we may do with it, which sub-processors we engage and what happens to the data when the agreement ends is set out in the data processing agreement that comes with the subscription. That text takes precedence over this statement.
Processing and storage take place within the European Union. Access to a customer's data is limited to the people who need it for their work.
If you are an employee of a customer and want to know what the platform holds about you, such a request goes through your employer. We are not allowed to hand over or delete that data on our own initiative.
How long do we keep data?
- Requests that do not lead to a customer relationship: no longer than twelve months after the last contact.
- Customer and invoice data: seven years, because of the statutory retention period.
- Technical logs: usually no longer than six months, unless we need them longer to investigate an incident.
- Data inside the platform: for as long as the agreement lasts, and after that according to the period in the data processing agreement.
Do we share data with third parties?
We only share data when it is needed to deliver our service or when the law requires us to. That comes down to:
- Hosting and email: the website, the forms and the platform run on Microsoft Azure and our email runs through Microsoft 365, in data centres within the EU.
- Website statistics: Cloudflare Web Analytics, which counts pageviews without cookies and without a visitor profile.
- Administration: the parties that handle our bookkeeping and invoicing.
With parties that process personal data on our behalf we conclude a data processing agreement.
Security
We take appropriate measures to secure data: encrypted connections, access only for those who need it, two-factor authentication on our accounts, and timely updates of the systems we run on. If you notice something that does not look right, let us know at info@floraspark.nl.
Your rights
You have the right to:
- access the data we hold about you
- have incorrect data corrected
- have data deleted, as far as we are not required to keep it
- restrict the processing
- object to the processing
- have your data transferred, in the cases where that applies
- withdraw consent, where the processing is based on it
Send your request to info@floraspark.nl. We reply within one month. If your request concerns data held in your employer's platform, we refer you to that employer: they are the controller there.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can sort it out together. If we cannot resolve it, you can file a complaint with the Dutch Data Protection Authority.
Changes
We may amend this statement, for instance when we add a module that processes different data. The current version is always on this page, with the date on which it was last updated at the top.