Privacy Statement

Plants & Flowers Foundation Holland respects the privacy of all visitors to our Website. We only collect personal data where necessary to display the Website and the services offered on it. We also offer a number of services that require the processing of personal data, including a contact form and an option to subscribe to our newsletter and specific messaging services.

Personal data collected through this Website will be processed in accordance with the GDPR. Through this Privacy Statement, Plants & Flowers Foundation Holland aims to inform you about how your personal data is processed via our Website. If you have any questions, please do not hesitate to contact us using the contact information provided above.

What data do we collect?

Plants & Flowers Foundation Holland does not, in principle, collect personal data unless you provide it to us through the contact form on this website, or when you sign up for a newsletter or a specific message service. In these cases, we collect only the following personal data:

If you submit a contact request we collect the following personal data:

• Name
• Organisation
• Email address
• Telephone number

We use this information solely to provide your contact request with an appropriate response.

If you subscribe to our newsletter we collect the following personal data:

• Name
• Organisation
• Email address

If you subscribe to specific services, we collect the following personal data:

• Name
• Email address
• Mobile phone number

Cookies

This Website uses cookies. In certain cases, the law considers the use of cookies to constitute the processing of personal data . Personal data collected through cookies on our Websites are used only for analytical purposes.

How do we use your personal data?

We will only use your personal data for the purpose for which you provided it to us. For example:

• If you fill in the contact form, we will use the personal data solely to contact you, answer your questions or make available the information you have requested.
• If you have signed up for the newsletter, we will use your personal data solely to send you this newsletter.
• If you have signed up for one of our specific messaging services, we will use your personal data solely for the purpose of sending the relevant messages.

The legal bases for processing your personal data are:

• Consent (Article 6(1)(a) GDPR), where you have proactively provided your data to us via, for example, the contact form, newsletter subscription or a message service.
• In some cases, processing may also be based on our legitimate interest (Article 6(1)(f) GDPR), for example, when you contact us and we use your data to respond to your message.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to the time of withdrawal.

How long will my personal data be kept?

When your personal data has been received through the contact form, is retained as long as necessary to provide the service or to maintain the service relationship with you. After the end of this service relationship, your personal data will be kept for a maximum of 1 year. Contact information we obtain when registering for a demo will be kept for a maximum of 6 months. Contact information we obtain for specific messaging services will be retained for as long as necessary to provide those services.

Will my personal data be secured?

Plants & Flowers Foundation Holland values your privacy. We therefore take security measures to prevent theft, loss or other unauthorized use of your personal data. These measures include the use of secure connections and, where appropriate, encrypted communication. We also take measures with regard to physical and logical access controls.

Will my personal data be provided to third parties?

The Plants & Flowers Foundation Holland will never sell your personal information to third parties. Plants & Flowers Foundation Holland does not provide your personal data to third parties unless we are required to do so by law (e.g. pursuant to a lawful demand by competent authorities) or where we use processors or third-party service providers.

Third-party service providers

1. Right of Access
   What does this mean: Under certain conditions, you have the right to access the personal data we hold about you (commonly known as a "data subject request").
   Limitations and conditions of your right: Where possible, we kindly ask you to specify the type of information you wish to access so that we can tailor our response. We must be able to verify your identity as your request should not adversely affect the rights and freedoms of others.
2. Right to data portability
   What does this mean: Under certain conditions, you have the right to receive your personal data that you have provided to us, which we process by automated means, in a structured commonly used and machine-readable format.
   Limitations and conditions of your right: If you wish to exercise this right, please specify the type of data you wish to receive and (if applicable) the preferred destination for the data. This right applies only when the processing is based on your consent or a contract with you, and when the processing is carried out by automated means (not paper records). It only covers the personal data you have directly provided to us.
3. Right to object to or request restriction of data processing
   What does this mean: Under certain conditions, you have the right to object to the processing of your personal data or request that such processing is restricted.
   Limitations and conditions of your right: This right applies where the processing is based on our legitimate interests. You also have the right to object to the processing of your personal data for direct marketing purposes.
4. Right of erasure
   What does this mean: Under certain conditions, you have the right to have your personal data deleted (also known as the "right to be forgotten"), for example if the data is no longer necessary for the purpose for which it was collected or if the processing is unlawful.
   Limitations and conditions of your right: We may not always be able to comply with such a request, for example if we need the data to (i) comply with a legal obligation, or (ii) pursue or defend legal claims.
5. Right to withdraw consent
   What does this mean: As previously mentioned, you have the right to withdraw your consent to processing of your personal data, if such processing is based on your consent.
   Limitations and conditions of your right: If you withdraw your consent, it will only apply to future processing.
6. Right to rectification
   What does this mean: If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
   Limitations and conditions of your right: We must be able to verify your identity and assess, where applicable, whether the data is indeed inaccurate or incomplete. In some cases, we may retain the original record, for example where it is required for legal purposes.

You can submit a data subject request by sending an e-mail to: info@plantsandflowersfoundationholland.org

Filing a complaint with the Data Protection Authority

If you believe that we are processing your Personal Data incorrectly or unlawfully, or if you are dissatisfied with the way we handle your privacy rights, you have the right to file a complaint with the Dutch Data Protection Authority.

More information on how to file a complaint can be found on the AP's website: www.autoriteitpersoonsgegevens.nl

This policy was created in April 2018 and last modified in April 2025. If Plants & Flowers Foundation Holland makes any changes to the way it processes personal data collected through this Website, this will be reflected in an updated version of this privacy statement. In the event of significant changes, we will notify you via email.

This privacy statement was last modified on April 25, 2025.