Privacy policy

Controller

The controller for the processing of personal data on this website is:

We are based in the United Kingdom. The processing of personal data is governed by the UK GDPR and the Data Protection Act 2018. For users in the European Union, the General Data Protection Regulation (GDPR) also applies.

Phone: +44 7451 252831
Email: hello@sayyes.ltd

Features of this website

The following applies to this website:

• There are no user accounts, no registration and no sign-in
• We do not use any analytics, tracking or advertising technologies and do not measure how you use the website
• No content is loaded from third-party servers when you open the site; we deliver fonts and images ourselves
• Traffic to this website is encrypted throughout via HTTPS (TLS)

Provision of this website

This website is delivered via bunny.net, a content delivery service of BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. Bunny.net processes personal data on our behalf as a processor within the meaning of Art. 28 GDPR, on the basis of a data processing agreement.

When you visit the website, our hosting provider bunny.net processes connection data as a technical necessity, in particular your IP address, the date and time, and the file requested. This serves only to deliver the website and to operate it securely. The legal basis is Art. 6(1)(f) GDPR (reliable and secure provision of the website).

Contact by email or phone

A button on this website opens a prepared message to our address in your email program. The message is only sent when you press "Send" yourself. Until then, no data leaves your device.

If you write to us, we process your email address, the content of your message and the details you give us in it in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete your message once your enquiry is settled and no statutory retention duty applies. If an order is placed, we process the data we need to carry it out on the basis of Art. 6(1)(b) GDPR and the data we are required to retain on the basis of Art. 6(1)(c) GDPR (statutory retention duties).

The email passes through your own email provider and the provider of our mailbox; we have no influence on this transmission.

If you call us, we process your phone number and the content of the call for the same purpose and on the same basis.

Contact via WhatsApp

At the bottom of every page there is a WhatsApp button. It is a simple link; we do not embed WhatsApp in the website. As long as you do not click it, no data is transferred to WhatsApp. If you click it, you leave our website and open WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, a Meta company) with a prepared message that is only sent when you press "Send" yourself. WhatsApp itself is responsible for the processing by WhatsApp.

If you write to us on WhatsApp, we process your phone number, your WhatsApp name and the content of your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). WhatsApp processes data under its own privacy policy; data may be transferred to third countries, in particular the USA. According to WhatsApp, the transfer to the USA relies on the EU-US Data Privacy Framework (adequacy decision of the European Commission) or on standard contractual clauses.

• WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea

Links to references

On the "References" page we link to three websites we built: journalplatinum.com, gratefullife.b-cdn.net and upcyprushomes.com. These are plain links; we do not embed these websites. As long as you do not click a link, no data is transmitted to these providers. If you click a link, the website opens and its operator may process data in accordance with its own privacy policy. We recommend reading it.

Recipients of the data

The recipients of your personal data are: bunny.net (BunnyWay d.o.o.) as processor for delivering the website, the providers of the email mailboxes through which we and you communicate and, if you write to us via the WhatsApp link, WhatsApp as an independent controller. Your data is not passed on to any other third parties unless we are legally obliged to do so.

Storage period

The technically necessary connection data that arises when this website is accessed is processed by our hosting provider bunny.net only as far as necessary to deliver and securely operate the website; details are set out in the data processing agreement. The entry of your language choice stays on your device until you delete it. The entry of the page sequence of your visit is deleted when you close the browser tab. Emails and WhatsApp messages are stored as described under "Contact by email or phone". Beyond that, this website does not accept any content from you.

Legal bases of the processing

Where technically necessary connection data is processed to provide the website, this is based on our legitimate interest in the reliable and secure provision of the service (Art. 6(1)(f) GDPR). For contact, the sections "Contact by email" and "Contact via WhatsApp" apply. The entries on your device (see "Cookies and storage on your device" below) are based on Section 25(2) no. 2 TDDDG (German law).

Types of data collected

When using this website, the following data is processed:

• Technically necessary connection data when accessing this website (in particular IP address, timestamp, file requested, browser and system information)
• Your language choice and the page sequence of your visit, stored locally in your browser (see "Cookies and storage on your device" below). These entries do not reach us.
• If you write to us: your email address or phone number and the content of your message

No obligation to provide data, no automated decision-making

You are under no statutory or contractual obligation to provide personal data to us. Without your message, however, we cannot answer an enquiry. There is no automated decision-making including profiling within the meaning of Art. 22 GDPR.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18) of your data, as well as the right to data portability (Art. 20) and to object (Art. 21). You can delete the entries on your device yourself at any time. For any queries, you can reach us at the email address given above under “Controller”.

Insofar as any processing is based on your consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal.

Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes applicable data protection law. Our competent supervisory authority in the United Kingdom is the Information Commissioner's Office (ICO, ico.org.uk). Users from the EU may also contact the data protection supervisory authority of their country of residence, of their place of work or of the place of the alleged infringement (Art. 77 GDPR).

International data transfers

If you send us data from the European Union, it is transferred to us in the United Kingdom. An adequacy decision of the European Commission under Art. 45 GDPR covers this (Implementing Decision (EU) 2021/1772, renewed until 27 December 2031).

Bunny.net delivers this website via a worldwide server network; connection data may also be processed outside the EU/EEA, on the basis of adequacy decisions or appropriate safeguards under Art. 44 et seq. GDPR in the data processing agreement with BunnyWay d.o.o.

After you click a link to a third party (WhatsApp, references), that provider may process data outside the EU/EEA; for this we refer to its privacy policy.

Cookies and storage on your device

This website does not set any cookies. It only stores the following two entries in your browser. They contain no identifier that would let you be recognised across websites and are not sent to us or to third parties:

• "sayyes.lang.v1" (local storage): your language choice. It is only stored when you actively change the language via the language switcher, so that the website is shown in that language on your next visit.
• "sayyes.histPaths" (session storage): the pages of this website you have opened one after the other in this browser tab, so that the back arrow takes you to the previous page of this website. The entry is deleted when you close the tab.

Legal basis for the storage on your device

These storage operations are strictly necessary to enable you to use the functions you have expressly requested (language choice, back navigation within the website) and are therefore exempt from consent under Section 25(2) no. 2 TDDDG (German law). You can delete these entries at any time via your browser's settings or with the button at the end of this page.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy as needed. You will always find the current version on this page.