Privacy Policy

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states is:

Blumenladen Blütenzauber Owner: Jörg Fenske Rudower Str. 50 12351 Berlin Germany Phone: +49 30 601 55 93 Email: [email protected] Website: https://bluetzauber.bizbrew.dev

II. Name and address of the data protection officer

The data protection officer is the same person named under I.:

Jörg Fenske Rudower Str. 50 12351 Berlin Germany Phone: +49 30 601 55 93 Email: [email protected]

III. General information on data processing

1. Scope of processing

As a rule, we process personal data of our users only to the extent necessary to provide a functioning website together with our content and services. Any processing beyond that generally takes place only with your consent.

2. Legal basis

Where we obtain consent for processing, Art. 6(1)(a) GDPR serves as the legal basis. Where processing is necessary to perform a contract or to take pre-contractual steps, Art. 6(1)(b) GDPR applies. Where processing is necessary to protect a legitimate interest, Art. 6(1)(f) GDPR applies.

3. Erasure and storage period

Your personal data is erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond that point only where provided for by European or national law to which we are subject — for example, retention periods under commercial or tax law.

IV. Provision of the website and creation of log files

Each time this website is accessed, our hosting system automatically records data and information from the requesting computer system. The following is collected:

• the IP address of the requesting device
• the date and time of access
• the page or file requested
• the HTTP status code and the volume of data transferred
• the referrer URL, where your browser transmits it
• the browser type and operating system used

IV. (continued) Purpose and storage period of log files

This processing serves to establish the connection, to maintain system security and to ensure technical stability. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and trouble-free operation of the website. Log files are deleted as soon as they are no longer required for these purposes. This data is not combined with other data sources and is not evaluated for advertising purposes.

V. Use of cookies

Our website uses no cookies, no analytics or tracking services, and embeds no third-party content. A cookie banner is therefore not required.

VI. Email contact

You can contact us using the email address provided. In this case, the personal data transmitted with the email is stored. The legal basis is Art. 6(1)(f) GDPR; where the contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis. The data is used solely to process the conversation and is deleted once the conversation has ended and the matter has been conclusively resolved.

VI-a. Contact and order form

Our website provides a form through which you can send us a non-binding flower enquiry. The details you enter (name, phone number, optionally email address, occasion, preferred date, colour preferences, size and your message) are transmitted to us and stored. The legal basis is your consent under Art. 6(1)(a) GDPR and, where the enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR. The data is used solely to handle your enquiry and is not passed to third parties. It is deleted once the enquiry has been dealt with. No payment is processed through the form and no payment data is collected. You may withdraw your consent at any time, informally, by email to [email protected].

VII. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

• right of access to the personal data we process (Art. 15 GDPR)
• right to rectification of inaccurate or incomplete data (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to be informed of any rectification, erasure or restriction notified to recipients (Art. 19 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent at any time; the lawfulness of processing carried out before withdrawal is unaffected (Art. 7(3) GDPR)
• right not to be subject to a decision based solely on automated processing (Art. 22 GDPR)
• right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

VII. (continued) Competent supervisory authority

An informal message to the contact details given under I. is sufficient to exercise your rights.

The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.