Privacy Policy

Bloom
Banas & Muhuri GbR
represented by Adrian Banas and David Muhuri
Thorwaldsenstraße 9
80335 München
Germany
Contact: data@bloomhosts.com
Website: https://bloomhosts.com

("Bloom" or "Controller")

1. General Information

This privacy policy informs you about the processing of your personal data when you visit our website or use our mediation service.

2. Controller

The controller for the data processing within the meaning of the GDPR is:

Banas & Muhuri GbR
Thorwaldsenstraße 9, 80335 München, Germany
Email: data@bloomhosts.com

3. Data Processing when Visiting the Website

When you access our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file.

Collected Data: IP address, date and time of access, browser type and version, operating system.

Purpose: Ensuring a smooth connection setup and comfortable use of the website, as well as evaluating system security and stability.

Legal Basis: Art. 6 (1) lit. f GDPR (legitimate interest in the technical functionality and security of the website).

4. Hosting (Hetzner)

We host our website at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Purpose: Providing the infrastructure and data security for our platform.

Legal Basis: Art. 6 (1) lit. f GDPR (legitimate interest in a secure and efficient provision of our online offer).

We have concluded a data processing agreement (DPA) with Hetzner.

Hetzner's Privacy Policy: https://www.hetzner.com/de/rechtliches/datenschutz

5. Contact and Onboarding (Matching)

When you register for dinner events via our onboarding form, we collect personal data.

Collected Data: First name, phone number, age, district (Munich), availability (weekdays), food preferences (e.g., vegetarian – we do not collect health data), and answers to matching questions.

Purpose: Initiation and fulfillment of the mediation contract, specifically matching Hosts and Guests.

Legal Basis: Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures).

6. Integration of Videos (Kinescope)

We use the Kinescope service to embed videos. The provider is Kinescope B.V., Emmen, Netherlands.

Note on Data Transfer: The technical infrastructure of Kinescope is partially registered in Russia. It cannot be ruled out that data (e.g., IP address) may be transferred to a third country.

Purpose: Appealing presentation of our offer through video content.

Legal Basis: Art. 6 (1) lit. f GDPR (legitimate interest).

7. Cookies

We only use technically necessary cookies that are required for the operation of the website (e.g., by our hoster or the video player). We do not use tracking or analysis cookies.

8. Storage Period

We store your personal data only as long as necessary to fulfill the stated purposes or as required by statutory retention periods. Data from the onboarding process will be deleted if you withdraw your participation or no longer wish to use the service.

9. Your Rights

You have the right to information, rectification, erasure, restriction of processing, data portability, and the right to object to the processing of your personal data. Please contact data@bloomhosts.com for these purposes.

10. Data Security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.