Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you could be personally identified.

Data Controller

The data processing on this website is carried out by the website operator:

BLOOM Outdoor Möbel GmbH
Industriestr. 112
D-75417 Mühlacker, Germany
Phone: +49 7041 986 9020
Email: service@bloom-outdoor.com

2. Hosting

Vercel

We host our website with Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (hereinafter referred to as Vercel). When you visit our website, Vercel collects various log files including your IP address. The use of Vercel is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Data transfer to the US is based on the standard contractual clauses of the EU Commission. We have concluded a Data Processing Agreement (DPA) with Vercel.

3. Data Collection on our Website

Contact Form, Email, and Telephone

If you send us inquiries via the contact form, email, or telephone, your details, including the contact details you provided, will be stored by us for the purpose of processing the inquiry. The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR) in the effective processing of requests.

Live Chat

To process customer inquiries, we offer a live chat on our website. The provider of the chat system is HighLevel Inc., 400 N. St. Paul St., Suite 920, Dallas, TX 75201, USA (GoHighLevel). When you use the chat, the data you enter and your IP address are transmitted to the provider's servers in the US. We have concluded a Data Processing Agreement (DPA) with the provider. Data transfer to the US is based on the standard contractual clauses of the EU Commission. The use is based on Art. 6 (1) lit. f GDPR (or Art. 6 (1) lit. b GDPR for contract initiation) and, if cookies/local storage are set, on your consent according to Art. 6 (1) lit. a GDPR.

4. Online Shop & Payment Processing

Customer and Contract Data

We do not offer permanent customer accounts. Your data is collected and processed in the context of a guest order, insofar as this is necessary for the provision of the online shop and for the fulfillment of the contract (Art. 6 (1) lit. b GDPR).

Data Transfer to Shipping Service Providers

The delivery of our goods is predominantly carried out by our own vehicles. If an external forwarding agent is commissioned, we will only pass on your email address and telephone number to the transport company for the purpose of arranging a delivery appointment if you have given us your express consent (Art. 6 (1) lit. a GDPR) during the ordering process. Without consent, we only transmit the name and delivery address.

Payment Service Providers (PayPal and Stripe)

We integrate payment services from third-party companies. If you make a purchase, your payment data will be processed by the payment service provider for payment processing (Art. 6 (1) lit. b GDPR).

PayPal: The provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Stripe: We use Stripe for international payments. The provider for customers in the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

5. Custom Consent Management System (Cookie Banner)

We use a custom-built consent management system to obtain and manage your consent for the use of technically non-essential cookies and external scripts (e.g., for analysis and marketing). When you visit our website, a local cookie is stored in your browser to document your granted or withdrawn consents. No data is transferred to external consent management providers; BLOOM Outdoor Möbel GmbH processes this data as the sole data controller. This processing is carried out to fulfill our legal obligation (proof of consent) pursuant to Art. 6 (1) lit. c GDPR in conjunction with Art. 7 (1) GDPR. You can withdraw or adjust your consent at any time for the future by accessing the cookie settings via the link in the footer of our website.

6. Newsletter Distribution

GoHighLevel

This website uses GoHighLevel to send newsletters. The provider is HighLevel Inc., 400 N. St. Paul St., Suite 920, Dallas, TX 75201, USA. We use GoHighLevel to organize and analyze our newsletter campaigns. Data transfer to the US is based on the standard contractual clauses of the EU Commission. The processing takes place exclusively on the basis of your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time via the unsubscribe link in the newsletter.

7. Analysis, Tracking, and Advertising

The following tools are only used if you have given us your express consent via our consent management tool (Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG).

Google Analytics 4: Web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. IP anonymization is activated.

Google Ads & Tracking Pixels: To optimize our advertising campaigns, we use Google Ads Conversion Tracking and tracking pixels (e.g., from Meta).

8. Plugins and Embedded External Content

The use only takes place after your express consent via our consent management tool (Art. 6 (1) lit. a GDPR).

YouTube: We embed videos from Google Ireland Limited.

Google Maps: We use the map service provided by Google Ireland Limited.

9. Your Rights

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time (Art. 15 GDPR). You also have a right to request the correction (Art. 16 GDPR), restriction of processing (Art. 18 GDPR), or deletion (Art. 17 GDPR) of this data. Furthermore, you have the right to data portability (Art. 20 GDPR) and the revocation of granted consents (Art. 7 (3) GDPR). For this purpose, you can contact us at any time at the address given above. You also have the right to lodge a complaint with the competent supervisory authority.