Privacy Policy

Version 1.0 — 21 September 2026

1. Who we are

Controll is a product of Woon IoT BV, Achterzeedijk 57 unit 40, 2992 SB Barendrecht, the Netherlands. For questions about this policy, write to info@wooniot.nl.

2. What this policy covers

This policy covers the Controll website at controll.it. The Controll Portal, used by installers to manage customer projects, has its own terms which are provided when an account is created.

3. What we collect through this website

The only place where this website asks for personal data is the contact form. When you use it, we receive:

your name;
your email address;
the type of organisation you selected (for example installer, reseller or distributor);
the message you write.

We do not track you. This website uses no analytics, no advertising pixels and no third-party tracking cookies. We do not build a profile of your visit.

4. Why we use it, and on what legal basis

Purpose	Legal basis (GDPR)
Answering your question and contacting you about it	Legitimate interest (Art. 6(1)(f)) — you approached us
Preparing or performing an agreement, if your question leads to one	Performance of a contract (Art. 6(1)(b))
Keeping the website secure and available	Legitimate interest (Art. 6(1)(f))

5. How long we keep it

Data	Retention
Contact form messages	24 months after our last contact
Messages that lead to an agreement	Kept with the customer file; invoicing data 7 years (statutory)
Server logs	30 days

6. Who else sees it

Party	Country	Purpose	Safeguard
Hetzner Online GmbH	Germany	Hosting of this website	Within the EEA
Migadu GmbH	Switzerland	Delivery of the email we send you	Adequacy decision for Switzerland
Cloudflare, Inc.	United States	Security and availability of the website	Standard Contractual Clauses and EU-US Data Privacy Framework

We do not sell your data and we do not use it for advertising.

7. Transfers outside the European Union

Cloudflare is based in the United States. That transfer is covered by the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework. The website itself is hosted in Germany, within the European Economic Area.

8. How we protect your data

Encrypted connection (TLS 1.3) between you and our servers.
Hosting in Germany; server access only with a secured key.
Access limited to the people who need it to answer your message.

9. Cookies

This website only uses cookies that are needed for it to work. There are no analytics or advertising cookies, so no consent banner is required.

10. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to object to it, and to receive your data in a common file format. Write to info@wooniot.nl and we will respond within one month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

11. Changes

We update this policy when the service changes. The version and date are shown at the top.