Draft — reviewed by counsel and completed before launch.
Privacy
This privacy notice explains how personal data is processed when you visit cueliszt.com. It covers the website only; the cueliszt app processes data locally on your devices and in your private iCloud (see the app privacy notice).
1. Controller
The controller for data processing on this website is the operator of cueliszt.com. Name and address: — [to be completed before launch]. Contact: hello@cueliszt.com.
2. Hosting and server logs
This website is hosted by a provider with servers located in Germany (ALL-INKL.COM / Neue Medien Münnich). When you access the site, the server automatically records technical access data (including IP address, date and time, page requested, amount of data transferred, browser type and operating system) in log files.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). A data-processing agreement is in place with the host; no transfer to a third country takes place.
3. Fonts (self-hosted)
The typeface used on this website (Mona Sans) is served exclusively from our own server. There is no connection to third-party servers (no Google Fonts CDN); no IP addresses are transmitted to third parties to load fonts.
4. Consent management
On your first visit, a consent banner asks for your choice for the Statistics and Marketing categories. Your choice, together with a timestamp and version, is stored locally in your browser (localStorage) so it can be honoured on later visits; it is not transmitted to us.
You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. Withdrawal takes effect immediately.
5. Cookies, statistics and marketing
Without your consent, no statistics or marketing services are loaded and no related cookies are set. We use Google Consent Mode v2; the default is “everything denied” until you agree.
Statistics (after consent): Google Analytics 4, loaded via Google Tag Manager (provider: Google Ireland Limited), to measure reach and usage. Legal basis: Art. 6(1)(a) GDPR (consent) and § 25(1) TDDDG. This may involve a transfer of data to the USA (Google, certified under the EU-US Data Privacy Framework).
Marketing (after consent): currently inactive. Google Ads for advertising measurement is planned for a later stage — also only after prior consent.
You can withdraw consent at any time via “Cookie settings” in the footer; the related cookies are then removed and no further data is collected.
6. Newsletter and waitlist
If you join the waitlist or newsletter, we process your email address using a double-opt-in procedure to send you the information you requested. The legal basis is your consent (Art. 6(1)(a) GDPR). — Details of the sending service and retention periods will be added on activation.
7. Contacting us
If you contact us by email (hello@cueliszt.com), we process your details to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR.
8. Support requests
Requests to support@cueliszt.com are processed in a ticketing workflow to handle them. — Recipients (including the services used), purposes and retention periods will be added before this channel goes live.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw any consent given at any time with effect for the future.
10. Right to complain
You have the right to lodge a complaint with a data-protection supervisory authority about the processing of your personal data.