Privacy Policy

Information pursuant to the GDPR. Last updated: April 2026.

1. Controller

Saeideh Kiani Harchegani · NOÉVANA ATELIER
Gaffelsteig 4
12527 Berlin, Germany
contact@noevana.com

2. General principles

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing takes place regularly only with the consent of users, or where processing is permitted by law.

3. Hosting and server log files

This website is hosted by Cloudflare Pages (Cloudflare, Inc., USA). Cloudflare is certified under the EU–US Data Privacy Framework; content is delivered via Cloudflare's European edge nodes (including Frankfurt and Amsterdam). When the website is accessed, technically necessary data are processed (IP address, date and time, data volume transferred, browser information). These log files are automatically deleted after a short period. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

4. Fonts

This website uses the typefaces Libre Baskerville (logo) and Cormorant Garamond (body text). These are served locally from our server (self-hosted). No connection to Google servers or other third parties is established.

5. Inquiry form

When you contact us via the inquiry form, your details (type of event, date, location, scale, description of your vision, name, email address, and optionally phone number) are processed solely to handle your inquiry. The data will not be shared with third parties without your consent. Legal basis: Art. 6(1)(b) and (f) GDPR.

The inquiry form is natively integrated into our website. After submission, your inquiry is transmitted as an email to our internal mailbox (contact@noevana.com) and processed as described in section 6. No separate storage of inquiry data with external form providers takes place.

6. Email communication

Incoming emails to contact@noevana.com are forwarded to our private mailbox via Cloudflare Email Routing. No content analysis of messages takes place by Cloudflare. Cloudflare is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(b) and (f) GDPR.

7. Cookies and analytics

This website sets no cookies and uses no analytics or tracking tools. No data is transferred to third parties for analysis or advertising purposes. Consent to data processing via cookies is therefore not required.

8. SSL encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the https:// prefix in your browser's address bar.

9. Your rights

You have the right at any time to access data stored about you (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21). Please send requests informally to contact@noevana.com.

10. Retention period

Personal data are deleted as soon as the purpose of processing no longer applies and no statutory retention obligations exist. Inquiries submitted via the contact form are retained for as long as necessary to process them and, where applicable, to initiate a contractual relationship.

11. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for our business is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI), Friedrichstraße 219, 10969 Berlin, Germany.