Hana Studio Design

Legal information · 01

Personal data
and cookies.

Last updated: 5 September 2026

01

Who is the data controller

The controller of data provided through hanastudio.design is Hanas Adrian P.F.A., Romanian tax ID 27145038, operating under the Hana Studio Design brand. For privacy questions or to exercise your rights, contact us at hanastudiodesign@gmail.com.

02

What data we may process

When you contact us, we may process your name, email address, phone number, project type and any information you choose to include in your message.

Technical data such as your IP address, browser or device type, access date and time and requested page may be processed to deliver and protect the website.

Please do not include sensitive data or information that is not necessary for assessing your enquiry.

03

Purpose and legal basis

We use your data to receive and reply to enquiries, discuss a possible project and take steps at your request before entering into a potential collaboration. The legal basis is taking pre-contractual steps requested by you under Article 6(1)(b) GDPR.

Technical data is used for operation, security and abuse prevention on the basis of our legitimate interests under Article 6(1)(f). Where retention is required by law, the legal basis may be a legal obligation.

We do not use information from the form for newsletters or marketing without separate consent, and we do not sell personal data.

04

How the current form works

The form prepares an email in your email application; it does not send information directly to the website server. The information reaches Hana Studio Design only after you actually send the message. If we enable direct submission through a specialist provider, we will update this policy before activation.

05

Who may receive the data

Data may be accessible to the people handling enquiries and to strictly necessary technical providers: hosting and security services, including Cloudflare infrastructure, and the Google/Gmail email service. Providers may process data only to deliver their services and in accordance with applicable contractual and legal obligations.

Some providers may process data outside the European Economic Area. In such cases, available legal safeguards will be used, such as adequacy decisions or standard contractual clauses.

06

How long we retain data

Enquiries that do not lead to a collaboration are kept for no more than 24 months after the last communication and are then deleted, unless a justified legal reason requires longer retention. If a collaboration begins, relevant data is retained for the duration of the relationship and afterwards as required by applicable law.

Technical security data is retained only as long as necessary to protect and operate the website, according to the retention periods applied by our technical providers.

07

Your rights

Subject to the conditions set out in the GDPR, you may request access to your data, its correction or deletion, restriction of processing and data portability, and you may object to processing based on legitimate interests. Contact us at hanastudiodesign@gmail.com.

You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

08

Cookies and similar technologies

The website does not use cookies for analytics, advertising or visitor profiling. Cloudflare security infrastructure may set the strictly necessary __cf_bm cookie to identify and limit automated or malicious traffic. It expires after approximately 30 minutes of inactivity and does not track visitors across websites.

Because this cookie is necessary for security, we do not request consent through a banner. If we introduce non-essential cookies, they will remain disabled until an explicit choice is made and this policy will be updated.

09

Required data and automated decisions

Fields marked as required are necessary to prepare the message and allow us to reply to your enquiry. Without this information, we may not be able to continue the conversation about your project.

We do not use data for solely automated decisions and we do not carry out profiling. This policy may be updated if the website features or providers change; the date of the latest version appears at the top of the page.