Controller of the Treatment According to the Terms of the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) of the United Mexican States: 

Estilismo para Eventos y Planeación MDW SA de CV (hereinafter “Petals in Paradise”), located at Av. Huayacán, SM 313, Benito Juarez, Quintana Roo, 77533. 

 

1. Data Protection 

We are pleased that you have decided to visit our web pages, and we appreciate your interest in our offers. We take the protection of your personal data very seriously. In these data protection guidelines, we explain how we obtain your personal data, what use we make of this data, for what purpose and on what legal basis we process it, and what rights and titles derive from this for you. Our data protection guidelines for the use of our web pages and the Petals in Paradise data protection directive do not apply to activities you carry out on social network pages or other providers' websites, which you can access through the links contained on our web pages. On the pages of such providers, you can inform yourself about their data protection guidelines. 

2. Collection and Processing of Your Personal Data 

a. When you visit our web pages, we store certain information about the browser and the operating system you use on your device, the date and time of your visit, the result of the access attempt (e.g., if you were able to open a web page or received an error message), the use of the web page functions, the search terms you entered if applicable, the frequency with which you open certain web pages, the names of the requested files, the data volume transmitted, the web page from which you accessed our web pages, and the web page you visit from our web pages, either by clicking on links contained on our web pages or by directly specifying the domain in the input field of the same tab (or window) of your browser in which you opened our web pages. Additionally, for security reasons, especially to prevent and recognize attacks on our web pages or fraud attempts, we store your IP address and the name of your Internet provider for seven days. We also process your IP address in an anonymized form to personalize advertising; i.e., we deduce your approximate location from the anonymized IP address and use it for advertising purposes, provided you consent to it (see section 3c). 

b. We store other personal data only if you communicate such data to us; for example, within the framework of a registration, when filling out a contact form, a chat, in relation to a survey or contest, or for the conclusion and execution of a contract, and, in these cases, we store the data only if you give your consent or if required by current legal provisions. 

c. You are not legally or contractually obligated to provide us with your personal data. On the other hand, certain functions of our web pages may depend on the provision of personal data. In these cases, if you do not wish to provide us with your personal data, you may not be able to use certain functions, or they may only be available to you with certain restrictions. 

3. Intended Use 

a. We use the personal data obtained during a visit to our web pages to operate these pages in a way that is comfortable for visitors and to protect our computer systems from attacks and other illegal actions. 

b. To the extent that you communicate other personal data to us, for example, within the framework of a registration, a chat, when filling out a contact form, in relation to a survey or contest, or for the conclusion and execution of a contract, we use this data for the mentioned purpose, for customer administration tasks, and, if necessary, for the processing and settlement of commercial transactions, and only to the extent necessary. 

c. In relation to other purposes (e.g., displaying personalized content or advertising based on your user behavior), we use your data and, if necessary, certain third parties also use it, provided you have given your consent (= authorization) within the framework of our Consent Management System. 

For the display of personalized advertising or content in accordance with the consent(s) you have given, analysis procedures may apply, including profiling and scoring. Profiling and scoring allow us, for example, to provide you with personalized and interest-based information, as well as individual recommendations on certain products. 

d. Additionally, data may be processed for product development, product monitoring and safety, product defense, and quality assurance, as well as risk and cost management: 

The collected data is used for analysis purposes in the context of improving and developing products, as well as internal processes and systems, processed for risk and cost management purposes, and for product and delivery operations and quality monitoring. 

Furthermore, we use the data to conduct typical post-sale evaluations and business analysis. 

To carry out the analyses and evaluations described above, this information may be supplemented with other data we are aware of. 

The transmitted data may also be used in an anonymized form for other processing purposes. In this case, it is no longer possible to refer to a specific person. 

We reserve the right to use this data to defend against claims that you or third parties may make against Petals in Paradise or one of our affiliated companies arising from a warranty, guarantee rights, or other reasons due to a (supposed) defect in our products or services. 

f. Additionally, we use personal data to the extent we are obliged to do so (e.g., data storage if necessary to comply with commercial or tax retention obligations, communication in compliance with administrative or judicial provisions, e.g., if required by state security authorities). 

g. Moreover, we process your personal data to the extent necessary to preserve our legitimate interests. Consequently, we continually adapt the functions and offerings of our web pages to the requirements derived from your user behavior and use your personal data for internal settlement purposes. Maintaining the functionality of our computer systems, the (direct) marketing of our own and third-party products and services (provided it is not done with your consent), and the documentation of legally provided commercial contacts are such legitimate interests. Within the framework of the corresponding and necessary balancing of interests, we particularly consider the type of personal data, the purpose and circumstances of its processing, as well as your interest in the confidentiality of your personal data. 

4. Disclosure of Personal Data to Third Parties; Social Plug-ins; Use of Service Providers 

a. Our web pages may also contain third-party offers. If you click on such an offer, we will transfer data to the corresponding provider to the extent necessary (e.g., the indication that you found this offer on our pages and, if applicable, other information you have communicated for this purpose on our web pages). 

b. If we use so-called "Social Plug-ins" from social networks such as Facebook, Instagram, YouTube on our web pages, we will integrate them as explained below: Social Plug-ins are deactivated by default during your visit to our web pages; that is, no data of any kind is sent to the operators of these social networks. If you wish to use one of the social networks, click on the corresponding Social Plug-in to establish a direct connection with the social network server. If you have a user account on the social network and are logged in to this network at the time of activating the Social Plug-in, the social network can link your visit to our web page with your user account. If you want to prevent this link from being established, log out of the social network before activating the Social Plug-in. A social network cannot link your visit to other Petals in Paradise web pages unless you have also activated the corresponding Social Plug-in on those pages. If you activate a Social Plug-in, the network transfers the available content directly to your browser, which links it to our web pages. In this situation, data transfers, initiated and controlled by the corresponding social network, may occur. Regarding your connection with a social network, the data transmission between the social network and your system and the interactions on this platform, the data protection provisions of the corresponding social network exclusively apply. The Social Plug-in remains active until you deactivate it or delete your cookies (see section 5.d). 

c. If you click on the link to an offer or activate a Social Plug-in, your personal data may be transmitted to providers located in countries outside the United Mexican States, where, from a Mexican legal perspective, an "adequate level of protection" comparable to LFPDPPP standards may not be ensured in the processing of personal data. Please consider this circumstance before clicking on a link or activating a Social Plug-in, initiating with that action a transmission of your data. 

d. We also use qualified providers for the operation, optimization, and protection of our web pages (e.g., IT technology providers, marketing agencies). We only transfer personal data to such providers to the extent necessary for the provision and use of the web pages and their functions, to satisfy legitimate interests, to comply with legal obligations, or to the extent you have given your consent. 

e. For the better operation of our web pages and achievement of the intended uses, we transfer your data partially or entirely to other Petals in Paradise entities either inside or outside the national territory. Every entity of the group is committed to safeguarding personal data with the highest protection standards and compliance with applicable law, using it only to the extent you have given your consent. 

5. Cookies 

a. It is possible that during your visit to our web pages, cookies are used. From a technical point of view, these are the so-called HTML cookies and similar software tools such as Web/DOM Storage or Local Shared Objects (the so-called "flash cookies"). Hereafter, we refer to all these tools as cookies. 

b. Cookies are small files created on your desktop computer, laptop, or mobile device when you visit a web page. From these files, we can detect if there is already a connection between the device and our web pages, consider your preferred language or other settings, offer you specific functions (e.g., the online store, the vehicle configurator), or detect your interests based on your use of the pages. Cookies may also contain personal data. 

c. The use of cookies during your visit to our web pages, and the cookies used, depends on the areas and functions of our web pages you visit and whether you have authorized the use of non-technically necessary cookies in our Consent Management System. 

d. The use of cookies also depends on the settings of the web browser you use (e.g., Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most web browsers are preconfigured to accept certain types of cookies automatically; in most cases, you can change this setting. You can delete cookies already stored on your device at any time. You can delete Web/DOM-Storage and Local Shared Objects separately. In the instructions provided by your browser or device manufacturer, you will find specific information on how to change the settings. 

e. The consent (= authorization) and the rejection or deletion of cookies are effective for the specific device and, in addition, for the web browser used. If you use multiple devices or web browsers, you can make different decisions and adjust different settings for each one. 

f. If you decide to reject the use of cookies or delete them, you may not be able to use all the functions of our web pages, or some functions may only be available to you in a restricted manner. 

6. Security 

We adopt technical and organizational security measures to protect the data we manage and to prevent its manipulation, loss, destruction, and access by unauthorized persons. We continuously update our security measures in accordance with technological developments. 

7. Rights of Data Subjects 

a. As a data subject affected by data processing, you have the right to access, rectify, cancel, or oppose (ARCO Rights) your personal data. In the event of opposition, if you object to this processing, your personal data will only be processed if we can prove reasons that justify the processing and that prevail over your interests, rights, and freedoms, or if the data processing aims to assert, exercise, or defend legal rights. To the extent that we process your personal data to manage direct advertising with the goal of satisfying legitimate interests based on the balancing of interests, you also have the right to object to it without providing reasons. 

b. Additionally, you have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the legitimacy of the processing of your personal data up to the date of withdrawal. It also does not affect the processing of this data on a different legal basis, such as compliance with legal obligations. 

c. Likewise, you can limit the use or disclosure of your personal data. Your IP address and the name of the Internet service provider are stored only for security reasons and are deleted after seven days. We delete your personal data when the purpose for which we obtained and processed your data expires. Once this period has elapsed, we only store data if required by the LFPDPPP and its regulations or the legal provisions of third states, provided that an adequate level of data protection can be ensured in these states. If, in a specific case, it is not possible to delete personal data, such data will be marked to restrict its future processing. 

d. To exercise any of the aforementioned rights over your personal data, you must send a request to the email address hello@petalsinparadise.com. This request, in the case of ARCO Rights, must comply with the provisions of Articles 29 and 31 of the LFPDPPP. For the rights mentioned in sections b. and c., the data subject must detail the right they wish to exercise and on which specific data. If you want more information about procedures, deadlines, and requirements of the request, you can request this information at the mentioned email. This request will be addressed by the Privacy Officer of Petals In Paradise. 

e. If you consider that the processing of your personal data constitutes a violation of legal provisions, you have the right to file a complaint with an authority responsible for data protection. 

8. Newsletter 

If you subscribe to a newsletter offered on our web page, the data provided during the subscription to the newsletter will be used solely for its delivery unless you have accepted a different use of this data. You can cancel your subscription at any time through the unsubscribe option offered in the newsletter itself. 

9. Changes to the Privacy Notice 

This Privacy Notice may undergo modifications, changes, or updates arising from new legal requirements, Petals in Paradise’s own needs, and its personal data protection practices. In this case, the Privacy Notice will be immediately updated on the Petals in Paradise website https://www.petalsinparadise.com.