← Back to CrisLan

Updated 30 October 2026.

Privacy Policy

1. Controller and scope

CONSANDREI SERVICES SRL, Romanian tax ID RO42138921, Romania, is the controller for website administration and its own correspondence. Privacy contact: [email protected]. Registered address: Drumul Pădurea Neagră 62B, Bucharest, Sector 3, postal code 014044, Romania. Company registration number: J2020000680406. Telephone: +40741146193. This policy describes the website, purchasing through Paddle, licence delivery and email contact. It does not exhaustively describe all processing in the Host and Viewer applications. For information about data related to activation and application use, contact [email protected].

2. Website visits

The website is hosted through Cloudflare. Delivering pages and protecting the service may involve IP addresses, browser and device details, requested pages, timestamps and technical error or security information. The purpose is website operation and protection, based on our legitimate interest in a functional and secure website (GDPR Article 6(1)(f)). The presentation pages do not include our own traffic analytics or advertising. The purchase page loads Paddle, which processes payment data and may use its own technical mechanisms under its privacy policy. Technical mechanisms used by the hosting provider are described in the Cloudflare policy linked below.

3. Correspondence and support

If you email us, we process your email address, the name you provide and message content to respond. The basis is steps you request before a contract or contract performance (Article 6(1)(b)), where applicable, or our legitimate interest in handling general enquiries and defending rights (Article 6(1)(f)). Do not send passwords, complete licence keys, card details or unnecessary files concerning other people. Without necessary contact details we may be unable to reply.

4. Paddle, orders and licence delivery

Payments are processed through Paddle. Paddle processes information needed for purchasing, invoicing, taxes, fraud prevention and refunds in its Merchant of Record role, under its Privacy Policy. CrisLan processes the delivery email address, order reference, purchased package and payment confirmation to issue and automatically email licences and provide order support. These data are associated with licence records. The basis is contract performance (GDPR Article 6(1)(b)); legally required records are processed under a legal obligation (Article 6(1)(c)). We do not request full card details by email.

5. Recipients and transfers

Cloudflare hosts the website. Zoho Mail provides [email protected] and processes correspondence to provide the email service. See also the Zoho Privacy Policy. Data may be disclosed to authorities when required by law or to advisers to defend legal rights. Cloudflare, Zoho and Paddle may involve processing outside the European Economic Area. Relevant safeguards may include adequacy decisions or standard contractual clauses, depending on the actual service and transfer. See Cloudflare and Paddle. Contact [email protected] for details of the providers used and safeguards applicable to your data.

6. Retention

The approved policy for data managed by CrisLan provides: general enquiries without a purchase — 12 months after the conversation closes; routine support correspondence — 24 months after resolution; technical and security logs managed by us — 30 days. Minimal licence records (order identifier, licence, PC association and necessary contact details) are retained as needed to administer the perpetual licence, with periodic necessity reviews. Accounting documents are retained for the applicable statutory period, depending on the document category. For incidents, complaints or disputes, only necessary evidence is retained separately until resolution and expiry of applicable periods. On expiry, data no longer needed will be deleted or irreversibly anonymised. Our periods do not override providers’ independent obligations. These periods set out our retention policy; they do not imply automated deletion. Providers manage backup copies under their respective service terms.

7. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction or portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting prior lawful processing. Contact [email protected]. We normally respond within one month; any lawful extension will be explained. You may complain to ANSPDCP or your competent supervisory authority.

8. Automated decisions and updates

The presentation website does not profile visitors or make automated decisions with legal effects on them. This statement does not describe Paddle’s independent fraud prevention systems. We will update this notice before introducing new processing, such as additional forms or analytics.