How this website handles personal data
Privacy policy
Controller
[TODO: name and address of the business owner], e-mail: hello@petalsbyzen.com
Hosting
This website is hosted on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; EU representative: Cloudflare Portugal, Unipessoal Lda.). When you visit the site, Cloudflare processes technical connection data (IP address, browser type, date and time, requested page) in server logs to deliver the site securely and reliably. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and fast website). Cloudflare is certified under the EU–US Data Privacy Framework and standard contractual clauses are in place.
Cookies and local storage
The public website sets no tracking cookies. A single technical cookie may store your light/dark theme preference. The content-management area (/_emdash) uses session cookies for logged-in editors only.
Contact requests
If you contact us by e-mail or via the enquiry form, we process the details you provide (name, e-mail address, message and, for quotes, event details) to answer your request and prepare an offer. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Enquiries are stored for as long as needed to handle them and in line with statutory retention periods.
Spam protection
The enquiry form is protected by Cloudflare Turnstile, which evaluates technical signals of your browser to tell humans from bots. Legal basis: Art. 6(1)(f) GDPR.
Web analytics
We use Cloudflare Web Analytics, a cookieless, privacy-friendly service that does not track individual visitors across sites. Legal basis: Art. 6(1)(f) GDPR.
Links to Instagram lead to the platform of Meta Platforms Ireland Ltd. Meta’s privacy policy applies there; no data is transferred by simply viewing this website.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object, as well as the right to lodge a complaint with a supervisory authority (in Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Status: August 2026. [TODO: have this policy reviewed before going live]