Last updated: July 2026
The controller responsible for data processing on this website is:
Bloom Creators
Im Mediapark
50670 Cologne
Germany
Email: hello@bloom-creators.com
We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The legal bases are in particular Art. 6 (1) lit. b GDPR (contract performance), Art. 6 (1) lit. c GDPR (legal obligations) and Art. 6 (1) lit. f GDPR (legitimate interests).
When placing an order, we process the following data for contract performance (Art. 6 (1) lit. b GDPR):
Invoice and tax-related data are retained for up to 10 years in accordance with commercial and tax law requirements (Art. 6 (1) lit. c GDPR in conjunction with § 257 HGB, § 147 AO).
This website is provided via Lovable; the backend (database, authentication) runs via a GDPR-compliant service within the EU. A data processing agreement pursuant to Art. 28 GDPR exists with the provider.
When accessing the website, technically necessary data (IP address, date/time, accessed URL, referrer, user agent) is processed to ensure the delivery and security of the site (Art. 6 (1) lit. f GDPR).
We use only technically necessary cookies or local storage to the extent required for the operation of the website and the login area (legal basis: § 25 (2) No. 2 TTDSG). Tracking or marketing cookies are not set without your prior consent.
If you contact us by email, we process your information to handle the request (Art. 6 (1) lit. b and f GDPR). The data is deleted as soon as it is no longer required for the purpose of processing and no statutory retention obligations apply.
Your data is transmitted to third parties only to the extent necessary for contract performance (e.g. payment/banking providers) or if you have consented. A transfer to third countries outside the EU/EEA only takes place if appropriate safeguards pursuant to Art. 44 ff. GDPR exist.
You have the right at any time to:
To exercise your rights, an informal message to hello@bloom-creators.com is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements.