Last updated: August 2026
Blomster Atelier is committed to complying with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act. This page provides information about how we handle personal data in accordance with these regulations.
Data Controller
Blomster Atelier acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
Blomster Atelier
Vesterbrogade 47
1620 Copenhagen V
Denmark
Email: [email protected]
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data along with information about the processing.
Right to Rectification (Article 16)
You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to Erasure (Article 17)
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restriction of Processing (Article 18)
You may request that we limit how we use your data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object (Article 21)
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent (Article 7)
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
Data Protection Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Website: www.datatilsynet.dk
Data Processing Activities
We process personal data for the following purposes:
- Responding to enquiries submitted through our contact form
- Fulfilling orders and providing services
- Website analytics to improve user experience
- Legal compliance and record-keeping
Legal Basis for Processing
Our processing activities are based on:
- Consent (Article 6(1)(a)) – for marketing communications and cookies
- Contractual necessity (Article 6(1)(b)) – to fulfil service requests
- Legitimate interests (Article 6(1)(f)) – for website improvement and security
- Legal obligation (Article 6(1)(c)) – for compliance with applicable laws
Data Protection Measures
We implement appropriate technical and organisational measures including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
- Data minimisation practices
Changes to This Information
We may update this GDPR information page as needed to reflect changes in our practices or legal requirements. The date of the last update is indicated at the top of this page.