Privacy Policy

1. Controller

2. General notes on data processing

We take the protection of your personal data seriously. Personal data on this website is processed only to the extent necessary. All fonts and images are loaded from our own server — no connection is made to external font or image services.

We use one marketing tool, and only if you explicitly agree: the Meta Pixel (see section 5). Without your consent, no tracking or marketing cookies are set and no data is sent to Meta. We currently do not use any analytics tools.

3. Hosting and server log files

This website is served via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When the website is accessed, Cloudflare automatically processes technical access data transmitted by your browser:

• IP address
• Date and time of access
• Requested URL
• HTTP status code
• Data volume transferred
• Browser type and operating system (user agent)
• Referrer URL

If you open our download link getsally.eu/app (for example via a QR code), Cloudflare evaluates your browser's user agent at that moment to send you straight to the right app store (Apple App Store or Google Play). We do not store any data in the process.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the secure, fast and stable provision of this website. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR). More information: cloudflare.com/privacypolicy.

4. Cookies, local storage and your consent

On your first visit, a notice asks whether we may use the Meta Pixel. "Reject" and "Accept" are offered with equal weight. We store your choice in your browser's local storage (localStorage):

• Key: sally_consent
• Content: your choice (yes/no), the time and the version of the request
• Retention: 12 months; after that we ask again
• Type: technically necessary

This entry stays in your browser and is not transmitted to us. The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as storing it is necessary to respect your choice.

You can change your choice or withdraw your consent at any time with effect for the future — via the "Cookie settings" link in the footer of every page, or here: Open cookie settings. When you withdraw consent, we delete the Meta cookies (_fbp, _fbc) in your browser and reload the page without the Meta Pixel.

5. Meta Pixel (only with your consent)

If you agree, we use the Meta Pixel. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). We use it to measure the effectiveness of our ads on Facebook and Instagram and to optimise how these ads are delivered.

After you consent, your browser loads a script from Meta's servers (connect.facebook.net). In particular, the following data is sent to Meta:

• IP address, browser and device information (user agent)
• the page visited, referrer URL and time
• events on our website (currently: page view)
• identifiers from the cookies _fbp (retention 90 days) and — if you reach us via a Meta ad — _fbc (90 days)

We do not send names, email addresses or other contact details to Meta. If you are logged in to Facebook or Instagram, Meta may link the data to your account. We only receive aggregated, statistical reports from Meta and cannot identify individual people from them.

The legal basis is your consent under § 25(1) TDDDG (access to your device) and Art. 6(1)(a) GDPR (processing of the data). Without your consent, the Meta Pixel is not loaded. You can withdraw your consent at any time with effect for the future (see section 4); this does not affect the lawfulness of processing carried out before the withdrawal.

We and Meta are joint controllers for collecting the data on our website and transmitting it to Meta (Art. 26 GDPR). The essence of this arrangement is set out in Meta's Controller Addendum: facebook.com/legal/controller_addendum. You can exercise your rights with us as well as with Meta. Meta is solely responsible for any further processing: facebook.com/privacy/policy.

Meta may transfer data to Meta Platforms, Inc. in the USA. Meta is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission's adequacy decision (Art. 45 GDPR).

6. Links to the App Store and Google Play

Our download buttons link to the Sally page on the Apple App Store or Google Play. The links contain a campaign parameter that only indicates which button or page you came from (e.g. "web-hero"). You leave our website only when you click; from then on, Apple's or Google's privacy policies apply. Apple and Google only give us aggregated statistics, such as how many downloads came through a button.

7. Contact by email

When you contact us by email, the data you provide (email address and message content) is stored to process your enquiry. It is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

8. Retention periods

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations. The retention periods of cookies and local storage entries are listed in sections 4 and 5.

9. Your rights

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please contact: hello@sacredvalleytech.com

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), www.ldi.nrw.de.