Last updated: September 2026
Nikolas Haniotes
Lenaustr. 25,
12047 Berlin
Germany
Email: hi@nikolashaniotes.com
Phone: +49 176 21494949
This website is a design portfolio. It has no contact form, no user accounts, no newsletter and no search function. I do not use analytics, advertising, profiling or other tracking technology on this site, and no third-party content, such as maps, social media widgets, CAPTCHAs or videos from video platforms, is embedded in its pages. Personal data is therefore processed in three situations: when a page is delivered to your browser (section 3), when the screen recordings on the Qadris page load (section 5) and when you write to me by email (section 7).
This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit it, Webflow processes technical information about your visit, such as your IP address, the date and time of access, the user-agent string that identifies your browser and operating system, HTTP headers and related technical information about the request and your device. This is necessary to deliver the website to you and to operate it securely and reliably. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the secure and stable technical operation of the site. Where Webflow processes personal data on my behalf, it does so as a processor under its Data Processing Addendum, which applies through its contractual framework with customers. According to its privacy policy, Webflow also uses this technical information for its own purposes, such as monitoring the volume of its customers’ website traffic, security and analytics. Webflow retains personal data for as long as necessary to provide its platform or as required by law.
Images and typefaces are delivered via Webflow’s hosting and CDN infrastructure (cdn.prod.website-files.com). Apart from the infrastructure required to host and deliver this website through Webflow, and the delivery of the screen recordings described in section 5, no additional third-party analytics, advertising, tracking or embedded-media services are intentionally loaded when you visit this website. Webflow is established in the United States and stores data there. Transfers to the United States may rely on Webflow’s certification under the EU–U.S. Data Privacy Framework; the Data Processing Addendum additionally incorporates the EU Standard Contractual Clauses as a further transfer safeguard. You can request a copy of these clauses from me.
The typefaces used on this site, Newsreader and Instrument Sans, are delivered together with the site’s other files via Webflow’s hosting and CDN infrastructure. They are not loaded from Google Fonts or from any other external font service.
The Qadris case study contains two short screen recordings, which your browser plays as video files in its own video player. The files are stored in my web space with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, and delivered from media.nikolashaniotes.com. Hetzner processes the related data on my behalf as a processor under a data processing agreement (Art. 28 GDPR). When a recording loads, your browser sends a request to Hetzner’s server that includes your IP address and technical request information, such as the file requested and your browser’s user-agent string. In its web server log files, Hetzner stores IP addresses only in anonymised form, with the last part of the address replaced. Web server log files are configured for automatic deletion after 7 days. According to Hetzner, the data is processed exclusively within the EU.
The first recording loads when the page opens, unless your browser signals a preference for reduced motion or reduced data usage; in that case it loads only when you start it. For the second recording, basic file information loads when it comes into view, unless your browser signals reduced data usage, and the video itself loads when you start it. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is showing how the project behaves on screen.
This website sets no cookies for analytics, advertising, profiling or any comparable purpose. Its own code stores nothing on your device: it uses no local storage, no session storage and no comparable technique. It reads two settings in your browser, whether you prefer reduced motion and whether you prefer reduced data usage, and uses them only to adapt animations and the loading of the screen recordings to your preferences. These settings are read locally in your browser; the site’s code does not store or transmit them and does not use them for analytics, profiling or tracking. Storage that is strictly necessary in order to deliver the website may be set by the hosting platform; storage of that kind is permitted without consent under § 25(2) No. 2 TDDDG. Webflow’s hosting infrastructure may set technically necessary cookies for security and traffic management. This can include Cloudflare’s _cfuvid cookie, which is used for rate limiting and to distinguish visitors sharing the same IP address. It is not used by this website for analytics, advertising or tracking. As no technology requiring consent is used, the site does not ask you for consent and displays no consent banner. Should any technology requiring consent be added at a later date, this policy will be updated and consent obtained beforehand.
This site offers a direct email link; there is no contact form. If you write to me, the information contained in your message (your email address, your name if you give it and the content of your enquiry) is processed for the sole purpose of dealing with your enquiry and any follow-up to it. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in responding to enquiries addressed to me. Where your enquiry concerns a contract or steps taken prior to entering into one, the legal basis is Art. 6(1)(b) GDPR. Providing personal data by email is voluntary. Without the information necessary to understand and respond to your enquiry, I may not be able to respond or take the requested pre-contractual steps. Your message is deleted once it is no longer required for that purpose and no statutory retention obligation requires it to be kept.
Emails to this address are handled by Google as part of Google Workspace, which processes them on my behalf as a processor. No customer relationship management, ticketing or marketing system is used, and your address is never added to a mailing list. Google may process data outside the EU, including in the United States. Such transfers may rely on the certification of Google LLC under the EU–U.S. Data Privacy Framework; Google’s data processing terms additionally incorporate the EU Standard Contractual Clauses. You can request a copy of these clauses from me.
This site links to my profile on LinkedIn and, in the Qadris case study, to the Qadris website. These are ordinary links: no content, script or pixel from those sites is embedded in these pages, and no data is transmitted to them unless and until you click a link yourself. Once you do, you leave this site and the privacy policy of the operator concerned applies. I have no influence over how those operators process data.
Under the GDPR you have the right to obtain confirmation as to whether personal data concerning you is being processed and, if so, to access that data (Art. 15), to have inaccurate data corrected (Art. 16), to have your data erased (Art. 17), to have processing restricted (Art. 18) and, where processing is based on a contract and carried out by automated means, to receive the data you have provided in a structured, commonly used, machine-readable format (Art. 20). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), in particular in the Member State of your habitual residence or place of work. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit). To exercise any of these rights, write to hi@nikolashaniotes.com.
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to it at any time on grounds relating to your particular situation (Art. 21(1) GDPR). I will then stop processing your data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. To object, write to hi@nikolashaniotes.com.
← Back to home