Privacy Policy

Privacy Policy

This Privacy Policy explains how Graz Bloom Studio processes personal data in connection with its florist workshop services, including wedding bouquets and event decoration, through the website and related communications.

Data collected only as described in this policy
Your rights and options are detailed below
Questions handled via our contact channel
GDPR

GDPR Basis

Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken at your request before entering a contract, compliance with legal obligations, legitimate interests, or consent where required. The exact basis depends on the context of the interaction.

If you are located in the European Economic Area, the GDPR may apply to our processing of your personal data.

This section is intended for individuals whose data is protected by the GDPR.
GDPR aware

GDPR Rights

Where applicable, you may request access, rectification, erasure, restriction of processing, data portability, or objection to processing. You may also withdraw consent where processing relies on consent, without affecting prior lawful processing.

GDPR rights are available only to the extent provided by law.
Data category

Data We Collect

We may process contact details, event and order information, consultation notes, delivery and setup details, payment-related records, and website usage data. Where relevant, we also process communication content and preferences shared during the planning of floral services.

The data we collect depends on the inquiry, booking, or service request.
Collection source

Data Sources

We receive data from contact forms, phone calls, consultation appointments, and other direct communications. We may also generate limited technical data when the website is used, such as device or browser information and basic interaction records.

Most information is provided directly by the person making the inquiry or booking.
Cookie usage

Cookie Types

The website may use essential cookies to support basic functions, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose.

We use only standard categories of cookies for site operation and measurement.
User control

Cookie Controls

You may block or delete cookies through your browser settings. If the website offers a cookie preference tool, you may use it to manage non-essential cookies. Some features may not function properly if certain cookies are disabled.

Cookie choices can be adjusted through browser settings and, where available, site controls.
Contact Information

Contact Information

Email contact
Telephone contact
+43 663 176932
Postal address
Widowitzgasse 11, 8010 Graz
Privacy contact
01

How We Use Data

Personal data is used to respond to inquiries, arrange consultations, prepare quotes, confirm dates and deposits, plan floral designs, coordinate delivery and on-site setup, process payments, maintain records, improve website performance, and comply with legal obligations.

We limit processing to purposes that are relevant to the service relationship.
02

Service Providers

We may disclose personal data to trusted service providers that support website operation, communication handling, record keeping, payment processing, or delivery and setup coordination. These parties may process data only for the services they perform for us and under appropriate confidentiality and data protection terms.

Service providers receive only the information needed for their assigned tasks.
03

Legal Disclosure

We may share personal data with public authorities, courts, or other parties when disclosure is necessary to comply with legal obligations, respond to lawful requests, protect rights, or address security and fraud concerns.

Disclosure may occur where law, regulation, or a binding order requires it.
User Rights

Your Rights

Depending on your location and the applicable law, you may have rights relating to your personal data, including the right to know how it is used and to challenge certain processing activities. We assess each request in light of the legal requirements that apply.

Available rights may vary depending on the legal basis and the nature of the request.
Requests

Submitting Requests

To exercise a privacy right, please send a clear request using the contact details in this policy and describe the data or processing activity concerned. We may ask for information needed to verify your identity and to respond accurately.

Requests are handled after reasonable verification of identity and scope.
Data Retention

Data Retention

We keep personal data only for as long as needed to handle inquiries, manage consultations and bookings, complete services, maintain business records, or meet legal obligations. When data is no longer required, it is deleted or anonymized in line with our retention practices.

Retention depends on the purpose for which the data was collected and any legal duty to keep it.
Policy Updates

Policy Changes

When changes are material, we will update the policy on the website and may provide additional notice where appropriate. The version in effect is the one published at the time of your visit or interaction.

We may revise this policy to reflect legal, technical, or operational changes.