Privacy policy

Last updated: 7 October 2026. This policy explains which personal data we process through this website, why, and what your rights are.

1. Who we are

This website belongs to Waxed Roses Sensation, a trading name of VE Bloemengroothandel B.V. The controller is:

VE Bloemengroothandel B.V.
Trading as Waxed Roses Sensation
Laan van Verhof 3, BOX D0.01
2231 BZ Rijnsburg
The Netherlands
Chamber of Commerce (KvK): 28042041

Questions about privacy? Please contact:
John van der Meer: +31 6 26 31 60 77 · [email protected]
Erik van Egmond: +31 6 22 92 92 35 · [email protected]

2. Enquiry and contact form

When you fill in the form, we process the details you provide: name, email address and, if you enter them, company name, phone number, product(s), quantity, occasion and your message.

• Purpose: to answer your enquiry and send you a quote.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering questions (Art. 6(1)(f) GDPR).
• How: the server forwards your enquiry by email to our sales contacts John van der Meer and Erik van Egmond. Enquiries are not stored in a database on the website.
• Retention: as long as needed to handle your enquiry. If an enquiry does not lead to an order, we delete the email no later than two years after our last contact. Data relating to an order is kept for as long as statutory (tax) retention obligations require.

Spam protection. To prevent abuse, the server checks that the form was not filled in automatically and how many enquiries come from one IP address. For this it temporarily stores a pseudonymised (hashed) version of your IP address with a timestamp, for no longer than one hour. We do not use reCAPTCHA or any other third-party service.

3. Visiting the website (server logs)

For every visit, the web server processes technical data: IP address, date and time, the page requested, the referring page and the type of browser and operating system. This is necessary to keep the website secure and stable and to detect faults and abuse (legitimate interest, Art. 6(1)(f) GDPR). Log files are deleted automatically after 30 days at the latest.

4. Cloudflare

The website is delivered through the network of Cloudflare, Inc. (USA), which provides speed and security, such as protection against attacks. Your requests, including your IP address, therefore pass through Cloudflare’s servers. Cloudflare may also process data outside the EU; such transfers are based on the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. Legal basis: our legitimate interest in a secure, fast website (Art. 6(1)(f) GDPR). We do not use Cloudflare analytics or any other measurement service. Cloudflare may set a strictly necessary security cookie to recognise automated traffic.

5. YouTube videos

Videos only load when you click the play button. Until then, no data is sent to YouTube. After your click, the video loads via youtube-nocookie.com, YouTube’s privacy-enhanced mode (Google Ireland Ltd., Ireland). Google then receives, among other things, your IP address and may store or read information on your device; data may also be transferred to Google LLC in the USA (EU-US Data Privacy Framework). Legal basis: your consent by clicking the video (Art. 6(1)(a) GDPR). See Google’s privacy policy for more information.

6. No cookies, tracking or external fonts

We do not set any cookies ourselves and do not use analytics, advertising or social media pixels. Fonts and images are hosted on our own server. The links to Facebook and Instagram are ordinary links: only when you click them do you leave our website, and the terms of those services apply.

7. Who receives your data?

Only parties needed to run the website and handle your enquiry: our hosting provider, Cloudflare and our email provider. They process the data on our behalf. If your enquiry leads to a delivery, we may share the necessary details within VE Bloemengroothandel B.V., for example for logistics. We never sell your data.

8. Security

The website uses an encrypted connection (HTTPS) and strict security settings. Form data is only sent to the recipients named above.

9. Your rights

You have the right to access, rectify and erase your data, to restrict and object to processing, and to data portability. You can withdraw your consent at any time. Send your request to one of the contacts above; we will respond within one month. You also have the right to lodge a complaint with a supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

10. Changes

We update this policy when the website or the law changes. The date at the top shows when it was last updated.