Privacy Policy

This Privacy Policy describes how H-Studio OÜ ("we", "us") collects, processes, and protects personal data when you use our website h-studio.io or engage our services. We comply with the EU General Data Protection Regulation (GDPR) and relevant Estonian data protection laws.

We collect personal data you voluntarily provide — such as your name, email address, phone number, or company details — when you contact us or request services. We do not collect or store payment card details; all transactions are handled through secure third-party payment providers or bank transfers.

When you visit our website, we automatically collect non-personal information (e.g. IP address, browser type, device model, operating system, and referring URLs) for security, analytics, and performance optimization. This data is processed in aggregated or pseudonymized form and cannot directly identify you.

Our website uses cookies and similar technologies in compliance with EU and Estonian regulations to improve functionality, security, and analytics. Non-essential cookies are only activated after consent through the cookie banner. More details are available in our Cookie Policy. You can manage or disable cookies through your browser settings.

We process collected data to: • Communicate with clients and respond to inquiries; • Provide and improve our digital services; • Ensure website functionality and security; • Comply with legal obligations and accounting requirements. Our processing is based on the following legal grounds under Art. 6 GDPR: • Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b)); • Compliance with legal obligations (Art. 6(1)(c)); • Legitimate interests in operating, securing, and improving our services (Art. 6(1)(f)); • Consent for analytics and marketing cookies (Art. 6(1)(a)). We never sell or rent your personal data to third parties.

Your data is stored and processed within the European Union. If data is transferred to a third country, we ensure appropriate safeguards under Art. 46 GDPR (e.g. Standard Contractual Clauses).

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal and accounting obligations. Contact inquiries are typically deleted within 12 months unless a business relationship continues.

You have the right to: • Access and receive a copy of your personal data; • Request rectification or deletion; • Restrict or object to processing; • Request data portability. To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local EU supervisory authority.

We do not knowingly collect information from children under 16 years of age. If you believe a minor has submitted personal data, please contact us and we will delete it immediately.

We implement appropriate technical and organizational measures — including encryption, access controls, and secure hosting — to protect your data from unauthorized access or loss. Where external service providers process personal data on our behalf (e.g. hosting, email, or analytics), they act as Data Processors under Art. 28 GDPR and are bound by contractual data protection obligations. However, no online service is completely risk-free.

We may update this Privacy Policy to reflect legal or operational changes. If material changes affect your rights or our processing practices, we will notify users by email or a prominent notice on this website. The latest version is always available on this page, with the revision date shown at the top. Continued use of our website constitutes acceptance of the updated policy.

H-Studio OÜ Pärnu mnt 18, 10141 Tallinn, Estonia Phone: +49 157 54892281 Email: [email protected]