Privacy policy

This English version is provided for convenience. The German version is legally binding.

1. Controller
   Lama Mtit — ctrlCheese, Hopfgartenstr. 14, 01307 Dresden, Germany · Email: info@ctrlcheese.de
2. Overview
   This policy explains how we process personal data on ctrlcheese.de and ctrlfield.ctrlcheese.de and in the associated customer area.
3. Hosting and server log files
   This website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). When you access the site, the server automatically collects log files: IP address, date and time of access, name and URL of the requested file, amount of data transferred, browser type and version, operating system, and referrer URL. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Log files are deleted automatically after 30 days. A data processing agreement under Art. 28 GDPR is in place with IONOS.
4. Contact form and email
   If you contact us via the form or by email, we process the data you provide (name, email address, your message) to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). Data is deleted once no longer needed and no retention obligations apply.
5. Customer account and licence management
   To purchase and manage paid licences (e.g. CtrlField Pro) we create a customer account. We process data such as name, email address, licence key and the website domains you activate, in order to provide licences, manage activations and deliver updates. Legal basis: Art. 6(1)(b) GDPR (performance of contract). Data is retained for the duration of the contract and any statutory retention periods.
6. Payment processing via Lemon Squeezy (Merchant of Record)
   Purchases of paid products are processed through our reseller Lemon Squeezy, which acts as the Merchant of Record and is therefore the legal seller, handling payment, tax and invoicing. When you buy, Lemon Squeezy processes the required data (e.g. name, email, billing address, payment data). We receive only the order data needed to provide the licence (e.g. name, email, product purchased). Legal basis: Art. 6(1)(b) GDPR. Provider: Lemon Squeezy, LLC (USA; part of Stripe since 2024). This may involve a transfer of personal data to the USA, based on the EU Standard Contractual Clauses or an applicable adequacy decision. See: https://www.lemonsqueezy.com/privacy
7. Fonts (self-hosted)
   This website uses the “Inter” typeface. The font files are hosted locally on our server; no connection is made to third-party servers (e.g. Google Fonts).
8. Cookies
   This website uses only technically necessary cookies required to operate the site and the login area (e.g. session and login cookies). No tracking, analytics or advertising cookies are used. Legal basis: § 25(2) TDDDG together with Art. 6(1)(f) GDPR.
9. No analytics or tracking tools
   We do not use analytics tools (e.g. Google Analytics, Matomo) or tracking services.
10. SSL/TLS encryption
    For security, this website uses SSL/TLS encryption (HTTPS), shown by the padlock icon in your browser’s address bar.
11. Your rights
    Under the GDPR you have the rights to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection to processing based on Art. 6(1)(f) (Art. 21). To exercise them, email info@ctrlcheese.de.
12. Right to lodge a complaint
    You have the right to lodge a complaint with a data protection supervisory authority, usually the one at your place of residence or our place of business Hopfgartenstr. 14, 01307 Dresden, Germany
13. Retention
    We keep personal data only as long as necessary for the stated purposes or as required by statutory retention periods, after which it is deleted.
14. Changes
    We may update this policy to reflect legal changes or changes to our services. The current version is always available on this page.

Last updated: November 2026