Privacy Policy

1. Controller

The controller for data processing on this website is:

Seyed Hamidreza EdalatniaSole proprietorship, trading as: heniaRuthsweg 822307 HamburgGermanyPhone: +49 176 6139 7816Email: office@henia.studio

2. Principle

This website is built for data minimisation. It sets no cookies, embeds no third-party advertising or tracking services, builds no profiles, and passes no data to advertising networks. Consent under § 25 TDDDG is therefore not required, and there is no cookie banner.

Fonts are served locally rather than loaded from third-party servers.

3. Hosting

The website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Delivery is served preferentially from servers in Frankfurt am Main; processing on servers in the United States cannot be technically excluded.

A data processing agreement under Art. 28 GDPR is in place with Vercel. Transfers to the United States are based on the European Commission's Standard Contractual Clauses and on certification under the EU-U.S. Data Privacy Framework.

The legal basis is our legitimate interest in secure and performant operation of the website (Art. 6(1)(f) GDPR).

4. Server log files

When the website is accessed, the hosting provider automatically processes access data:

• IP address of the requesting device
• date and time of access
• address requested and volume of data transferred
• referrer address
• browser type, browser version, and operating system
• HTTP status code

4.1 Purpose and retention of log files

Processing serves delivery of the website, operational security, and defence against attacks. The legal basis is Art. 6(1)(f) GDPR. Log data is deleted or anonymised after 30 days at the latest, unless it is needed longer to investigate a specific security incident.

5. Cookie-free usage measurement

To improve the website, use of individual elements is counted by us directly, without third-party services. Only the following is recorded:

• name of the event triggered
• page visited within this website
• origin domain of a referring link (not the full address)
• time of the event

5.1 No recognition

No cookies are set and no identifiers are stored in the browser or on the device. There is no recognition of visitors, no session stitching, no cross-site tracking, and no profiling. IP addresses are not stored in these records.

The legal basis is Art. 6(1)(f) GDPR. The data is stored encrypted and is not publicly accessible.

6. Contacting us

The website contains no contact form. Contact is made by email. When you write to us, we process your details to handle your enquiry and any follow-up.

The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries and otherwise Art. 6(1)(f) GDPR. Enquiries are deleted once resolved, unless statutory retention obligations apply.

7. Downloading documents

An email address is requested in order to supply the documents offered. The address is processed solely to deliver the requested document. The legal basis is Art. 6(1)(b) GDPR.

You will not be added to a newsletter and your address will not be used for marketing without your separate, explicit consent, which you may withdraw at any time with future effect.

8. Research into business contact data (Art. 14 GDPR)

To develop business relationships we maintain an internal research database of companies in architecture, interiors, furniture, and the creative industries. The data comes exclusively from publicly accessible sources, in particular the companies' own official websites.

Only business-related details are processed:

• company name, country, and city
• website, contact page, and publicly listed general business email address (such as office@, studio@, info@)
• publicly linked company profiles on social networks
• the source address at which the detail is published

8.1 Purpose, legal basis, and objection

The purpose is business contact. The legal basis is our legitimate interest in developing business relationships (Art. 6(1)(f) GDPR). Personal data such as the names of individual employees is not deliberately collected; personal or not clearly business-related addresses are filtered out.

You may object to this processing at any time, without giving reasons. An email to office@henia.studio is sufficient. The entry is then added to a suppression list and permanently excluded from any further contact. Data no longer needed is deleted.

9. Recipients

Data is not passed to third parties, other than to the hosting provider named above as a processor and in cases where we are legally obliged to disclose it. Data is never sold or rented.

10. Your rights

Under the GDPR you have the following rights:

• access to the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent with future effect (Art. 7(3) GDPR)

10.1 Right to complain

An email to office@henia.studio is enough to exercise your rights.

You also have the right to complain to a supervisory authority. The competent authority is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

11. Changes to this policy

We update this policy when our processing changes. The version published on this page, bearing the date above, is the applicable one.