Privacy policy

Controller

The controller for the processing of personal data on this website is:

We are based in the United Kingdom. The processing of personal data is governed by the UK GDPR and the Data Protection Act 2018. For users in the European Union, the General Data Protection Regulation (GDPR) also applies.

Phone: +44 7451 252831
Email: hello@sayyes.ltd

Features of this website

The following applies to this website:

• There are no user accounts, no registration and no sign-in
• We do not use any analytics, tracking or advertising technologies and do not measure how you use the website
• No content is loaded from third-party servers when you open the pages; we deliver fonts and images ourselves (the Cal.com calendar is only loaded in the intro-call flow, see “Appointment booking via Cal.com”)
• Traffic to this website is encrypted throughout via HTTPS (TLS)

Provision of this website

This website is delivered via bunny.net, a content delivery service of BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. Bunny.net processes personal data on our behalf as a processor within the meaning of Art. 28 GDPR, on the basis of a data processing agreement.

When you visit the website, our hosting provider bunny.net processes connection data as a technical necessity, in particular your IP address, the date and time, and the file requested. This serves only to deliver the website and to operate it securely. The legal basis is Art. 6(1)(f) GDPR (reliable and secure provision of the website).

Contact by email or phone

A link on this website opens a prepared message to our address in your email program. The message is only sent when you press "Send" yourself. Until then, no data leaves your device.

If you write to us, we process your email address, the content of your message and the details you give us in it in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete your message once your enquiry is settled and no statutory retention duty applies. If an order is placed, we process the data we need to carry it out on the basis of Art. 6(1)(b) GDPR and the data we are required to retain on the basis of Art. 6(1)(c) GDPR (statutory retention duties).

The email passes through your own email provider and the provider of our mailbox; we have no influence on this transmission.

If you call us, we process your phone number and the content of the call for the same purpose and on the same basis.

Links to our apps

On this website we link our apps GratefulLife and Journal Platinum: the entries in Apple's App Store and in the Google Play Store as well as the websites gratefullife.b-cdn.net and journalplatinum.com. These are plain links; we do not embed these pages. As long as you do not click a link, no data is transmitted to these providers. If you click a link, the page opens and its operator may process data in accordance with its own privacy policy. We recommend reading it.

Appointment booking via Cal.com

On this website you can book an introductory conversation by video call. For this, the calendar of Cal.com (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, United States) is embedded on the “Call” page. It is only loaded once you reach the appointment proposal in the flow; before that, nothing is transmitted to Cal.com.

The data you enter on the booking page (usually name, email address, the chosen time and, where applicable, a message) is collected by Cal.com itself, in the calendar. The purpose is to arrange and hold the introductory conversation with us (contact see “Controller” above); the conversation takes place via Cal Video, the video service of Cal.com. When the calendar loads, Cal.com also processes technical connection data such as your IP address and may use cookies or similar technologies; its own privacy policy applies to that.

The legal basis for processing the booking data is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and, as far as Cal.com operates the booking platform, Art. 6(1)(f) GDPR (legitimate interest in reliable appointment scheduling). Giving your data on the booking page is voluntary; without it the appointment cannot be booked. You can reach us by email instead.

Cal.com is a company based in the United States; your booking data may be processed there. According to the provider, the transfer to the United States relies on standard contractual clauses or the EU-US Data Privacy Framework. Details are in the privacy policy of Cal.com.

The booking data is stored by the provider in our account for as long as it is needed for the appointment and the follow-up communication. The intention is to delete it no later than twelve months after the conversation; at your request this happens earlier.

You can assert your rights to access, rectification, erasure, restriction, objection and data portability (see “Your rights” below) against us at the address above and against Cal.com. You can find the privacy policy of Cal.com here:

• Cal.com: https://cal.com/privacy

Recipients of the data

The recipients of your personal data are: bunny.net (BunnyWay d.o.o.) as processor for delivering the website, the providers of the email mailboxes through which we and you communicate and, if you book a call, Cal.com (Cal.com, Inc., United States) as recipient of the booking data (see “Appointment booking via Cal.com”). Your data is not passed on to any other third parties unless we are legally obliged to do so.

Storage period

The technically necessary connection data that arises when this website is accessed is processed by our hosting provider bunny.net only as far as necessary to deliver and securely operate the website; details are set out in the data processing agreement. The entry of your language choice stays on your device until you delete it. The entry of the page sequence of your visit is deleted when you close the browser tab. Emails are stored as described under "Contact by email or phone". Beyond that, this website does not accept any content from you.

Legal bases of the processing

Where technically necessary connection data is processed to provide the website, this is based on our legitimate interest in the reliable and secure provision of the service (Art. 6(1)(f) GDPR). For contact, the section "Contact by email or phone" applies. The entries on your device (see "Cookies and storage on your device" below) are based on Section 25(2) no. 2 TDDDG (German law).

Types of data collected

When using this website, the following data is processed:

• Technically necessary connection data when accessing this website (in particular IP address, timestamp, file requested, browser and system information)
• Your language choice and the page sequence of your visit, stored locally in your browser (see "Cookies and storage on your device" below). These entries do not reach us.
• If you write to us: your email address or phone number and the content of your message

No obligation to provide data, no automated decision-making

You are under no statutory or contractual obligation to provide personal data to us. Without your message, however, we cannot answer an enquiry. There is no automated decision-making including profiling within the meaning of Art. 22 GDPR.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18) of your data, as well as the right to data portability (Art. 20) and to object (Art. 21). You can delete the entries on your device yourself at any time. For any queries, you can reach us at the email address given above under “Controller”.

Insofar as any processing is based on your consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal.

Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes applicable data protection law. Our competent supervisory authority in the United Kingdom is the Information Commissioner's Office (ICO, ico.org.uk). Users from the EU may also contact the data protection supervisory authority of their country of residence, of their place of work or of the place of the alleged infringement (Art. 77 GDPR).

International data transfers

If you send us data from the European Union, it is transferred to us in the United Kingdom. An adequacy decision of the European Commission under Art. 45 GDPR covers this (Implementing Decision (EU) 2021/1772, renewed until 27 December 2031).

Bunny.net delivers this website via a worldwide server network; connection data may also be processed outside the EU/EEA, on the basis of adequacy decisions or appropriate safeguards under Art. 44 et seq. GDPR in the data processing agreement with BunnyWay d.o.o.

After you click a link to a third party (app stores, websites of our apps), that provider may process data outside the EU/EEA; for this we refer to its privacy policy.

Cookies and storage on your device

This website itself does not set any cookies. No analytics tools, no audience measurement and no advertising networks run, and neither fonts nor maps are loaded from third-party servers. As soon as you reach the appointment proposal in the intro-call flow, the Cal.com calendar embedded there sets three cookies of its own: one to protect against automated access (lifetime 30 minutes) and two that protect the booking form against abuse (for the duration of your browser session only). They serve the security and operation of the calendar and are not meant to recognise you across websites. None of them is set before the calendar loads.

In addition, this website only stores the following two entries in your browser. They contain no identifier that would let you be recognised across websites and are not sent to us or to third parties:

• "sayyes.lang.v1" (local storage): your language choice. It is only stored when you actively change the language via the language switcher, so that the website is shown in that language on your next visit.
• "sayyes.histPaths" (session storage): the pages of this website you have opened one after the other in this browser tab, so that the back arrow takes you to the previous page of this website. The entry is deleted when you close the tab.

Legal basis for the storage on your device

These storage operations are strictly necessary to enable you to use the functions you have expressly requested (language choice, back navigation within the website) and are therefore exempt from consent under Section 25(2) no. 2 TDDDG (German law). You can delete these entries at any time via your browser's settings or with the button at the end of this page.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy as needed. You will always find the current version on this page.