Who is the data controller
The controller of data provided through haisa.design is Hanas Adrian P.F.A., Romanian tax ID 27145038, operating under the HAISA DESIGN brand. For privacy questions or to exercise your rights, contact us at hanastudiodesign@gmail.com.
What data we may process
When you contact us, we may process your name, email address, phone number, project type, location, area, visual preferences, estimated fit-out budget, construction team and coordination details, information in your message and any plans or images you choose to upload.
Technical data such as your IP address, browser or device type, access date and time and requested page may be processed to deliver and protect the website.
Please do not include sensitive data or information that is not necessary for assessing your enquiry.
Purpose and legal basis
We use your data to receive and reply to enquiries, discuss a possible project and take steps at your request before entering into a potential collaboration. The legal basis is taking pre-contractual steps requested by you under Article 6(1)(b) GDPR.
Technical data is used for operation, security and abuse prevention on the basis of our legitimate interests under Article 6(1)(f). Where retention is required by law, the legal basis may be a legal obligation.
We do not use information from the form for newsletters or marketing without separate consent, and we do not sell personal data.
How the current form works
When you select “Send enquiry”, your details and selected files are sent directly from your browser to FormSubmit for sending to HAISA DESIGN’s Gmail address. The form does not open your email application. The on-page confirmation indicates acceptance by the sending service, not confirmation of inbox delivery. FormSubmit states that it retains submissions for 30 days; uploaded files are not retained in its archive.
Who may receive the data
Data may be accessible to the people handling enquiries and to strictly necessary technical providers: hosting and security services, including Cloudflare infrastructure, the FormSubmit (Devro LABS) form delivery service and the Google/Gmail email service. FormSubmit’s privacy policy is available at https://formsubmit.co/privacy.pdf. Providers may process data only to deliver their services and in accordance with applicable contractual and legal obligations.
Some providers may process data outside the European Economic Area. In such cases, available legal safeguards will be used, such as adequacy decisions or standard contractual clauses.
How long we retain data
Enquiries that do not lead to a collaboration are kept for no more than 24 months after the last communication and are then deleted, unless a justified legal reason requires longer retention. If a collaboration begins, relevant data is retained for the duration of the relationship and afterwards as required by applicable law.
Technical security data is retained only as long as necessary to protect and operate the website, according to the retention periods applied by our technical providers.
Your rights
Subject to the conditions set out in the GDPR, you may request access to your data, its correction or deletion, restriction of processing and data portability, and you may object to processing based on legitimate interests. Contact us at hanastudiodesign@gmail.com.
You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).
Cookies and similar technologies
To limit repeated submissions, we store only the time of the last accepted enquiry in your browser, without form contents or files. We also use a honeypot and filters for phrases associated with spam. The website does not use cookies for analytics, advertising or visitor profiling. Cloudflare security infrastructure may set the strictly necessary __cf_bm cookie to identify and limit automated or malicious traffic. It expires after approximately 30 minutes of inactivity and does not track visitors across websites.
Because this cookie is necessary for security, we do not request consent through a banner. If we introduce non-essential cookies, they will remain disabled until an explicit choice is made and this policy will be updated.
Required data and automated decisions
Fields marked as required are necessary to prepare the message and allow us to reply to your enquiry. Without this information, we may not be able to continue the conversation about your project.
We do not use data for solely automated decisions and we do not carry out profiling. This policy may be updated if the website features or providers change; the date of the latest version appears at the top of the page.