Privacy Policy

Privacy Policy

Last updated: February 13, 2026

1. Data Controller

CTRL Studio UG (haftungsbeschränkt)

Bremer Straße 31

48155 Münster, Germany

Email: info@ctrl-app.studio

2. What Data We Collect

We collect only data necessary for communication and service operation:

  • Contact form submissions (name, email, message)
  • Email correspondence
  • Server log files (IP address, timestamp, request path, browser user-agent)

    • 3. Purpose and Legal Basis

    We process personal data for the following purposes:

  • Responding to inquiries — Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest)
  • Providing our services — Art. 6(1)(b) GDPR (contract performance)
  • Website security and performance — Art. 6(1)(f) GDPR (legitimate interest)
  • Legal compliance — Art. 6(1)(c) GDPR

    • 4. Hosting and Log Files

    This website is hosted by Hetzner Online GmbH. When you visit, the server automatically collects and stores information in log files: IP address, date and time, page requested, HTTP status code, referrer URL, and browser type. This data is used solely for security and performance monitoring and is not merged with other data sources.

    5. Cookies and Local Storage

    This website uses minimal local storage to save your language preference. We do not use tracking cookies. No data is shared with third parties through cookies.

    6. Contact and Email Communication

    When you contact us via email or a contact form, we store your message and associated data (name, email address) to process your request. This data is deleted once the request is fully resolved, unless retention is required by law.

    7. Analytics (Optional)

    If analytics are implemented, we use privacy-friendly, cookieless solutions. No personal data is transmitted to third parties. This section will be updated if analytics tools are added.

    8. Third-Party Services

    We may use third-party services for:

  • Hosting — Hetzner Online GmbH, servers located in [EU/Germany]
  • Email — Strato

    • Data shared with these services is limited to what is strictly necessary for operation.

    9. Data Retention

    We retain personal data only as long as necessary for the stated purpose or as required by law. Log files are deleted after 30 days. Contact data is deleted after the inquiry is resolved.

    10. Your Rights

    Under GDPR you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Delete your data (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time (Art. 7(3))

    • To exercise any of these rights, contact us at info@ctrl-app.studio.

    11. Right to Lodge a Complaint

    You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

    12. Security Measures

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (TLS), access controls, and regular security reviews.

    13. Changes to This Policy

    We may update this privacy policy from time to time. Material changes will be communicated on this page. We encourage you to review this page periodically.

    14. Contact for Privacy Requests

    CTRL Studio UG (haftungsbeschränkt)

    Email: info@ctrl-app.studio