Privacy policy

1. Controller

The controller for the processing of personal data on this website is:

Name of the owner
Li Bloom Flowers Studio
Street and house number
Postcode and city
Germany

Phone and WhatsApp: +49 175 3530813
Email: olesiabezukh@gmail.com

We are not required to appoint a data protection officer, because fewer than 20 people here are constantly engaged in processing personal data (§ 38(1) BDSG).

2. Visiting the site and server logs

This website is served by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. On every visit Cloudflare processes technically necessary data: your IP address, the date and time of the request, the address requested, the page you came from, and details of your browser and operating system.

Without that data the page can neither be delivered nor protected against attack. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

A data processing agreement under Art. 28 GDPR is in place with Cloudflare. The log data is deleted once it is no longer needed for security and operation. We do not analyse it and do not combine it with anything else.

3. Encryption

The site is served only over an encrypted connection (TLS). You can see this from the padlock in your browser address bar.

4. Contact by WhatsApp, phone and email

Enquiries reach us by WhatsApp, by phone or by email. This website has no contact form.

The WhatsApp link on this page is an ordinary link. Only when you open it does a connection to WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, arise. Nothing is transferred before that. The WhatsApp privacy policy also applies to the conversation itself.

We process your name, your phone number or email address and the content of your message. The legal basis is entering into or performing a contract (Art. 6(1)(b) GDPR), or, for general questions, our legitimate interest in answering you (Art. 6(1)(f) GDPR).

Enquiries that lead to no order are deleted at the latest six months after the last contact.

5. Orders and delivery

For an order we need your name, your phone number, the delivery address, the date you want and, if the flowers are a gift, the name of the person receiving them. We use these details only to carry out the order (Art. 6(1)(b) GDPR).

The delivery address goes to the person who brings the bouquet. There are no other recipients.

Records that matter for bookkeeping and tax are kept for the statutory periods of six to ten years (§ 147 AO, § 257 HGB). Everything else is deleted once the order is complete and invoiced.

6. Photographs of our work

We show photographs of our bouquets and wedding florals here. People appear in them only where they have given written consent beforehand (Art. 6(1)(a) GDPR, § 22 KUG).

You can withdraw consent at any time, at no disadvantage to you. A short message is enough and we take the picture off the site. Processing that happened before the withdrawal remains lawful.

7. Instagram

We link to our Instagram profile. No Instagram posts, buttons or tracking pixels are embedded on this website. Data goes to Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, only once you open the link. From then on the Meta privacy policy applies.

8. Visitor statistics with Plausible Analytics

To see which pages people visit, we use Plausible Analytics by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible sets no cookies and stores nothing in your browser.

On every page view your browser sends the address requested, the page you came from, your browser, operating system, device type and the country derived from your IP address. The IP address itself is not stored. Plausible combines it with the browser details into an identifier that is deleted every day. We see only totals and cannot identify any individual from them.

The data is kept on servers in the European Union and does not leave it. A data processing agreement under Art. 28 GDPR is in place with Plausible. The legal basis is our legitimate interest in improving the site based on visitor numbers (Art. 6(1)(f) GDPR). You can object at any time, see section 14.

9. Storage in your browser

We use no analytics or advertising cookies.

The only thing stored is your choice from the cookie notice, in your browser’s local storage. That storage is strictly necessary for the function you asked for and therefore needs no consent (§ 25(2) no. 2 TDDDG). It never leaves your device.

The Cookie settings link in the footer lets you change your choice at any time.

10. Fonts

All fonts sit on our own server and are delivered with the page. No connection to Google Fonts or any other provider is made, and your IP address is not sent there.

11. Who receives your data

We sell no data and pass none on for advertising. The only parties with access are Cloudflare as our host, Plausible for the visitor statistics, WhatsApp for the conversation you start yourself, the person who delivers your order, and our tax office to the extent the law requires.

12. Transfers to the USA

Cloudflare, Inc. and Meta Platforms, Inc. are based in the USA. Both are certified under the EU-US Data Privacy Framework, for which the European Commission found an adequate level of protection on 10 July 2023. The European Commission standard contractual clauses apply in addition.

13. Your rights

You have the right at any time to access the data we hold about you (Art. 15 GDPR), to have incorrect data corrected (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to receive your data in a common format (Art. 20).

A short message to olesiabezukh@gmail.com is enough. We answer within one month.

14. Right to object

Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop processing the data unless we can demonstrate compelling legitimate grounds.

15. Complaint to the supervisory authority

If you believe we process your data unlawfully, you can complain to a data protection supervisory authority (Art. 77 GDPR). The one responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart

16. No automated decision-making

We take no decisions based solely on automated processing, and we do no profiling.

17. Changes to this policy

If something changes on this website or in the law, we update this policy. The version published here is always the one that applies. Its date is at the foot of the page.