Privacy Policy
Note: This English version is provided for convenience. The German version is legally binding.
This privacy policy covers the website saya-sleep.com and the early-access waitlist. The SAYA app has its own App Privacy Policy.
1. Controller
Name and address: Lukas Bröll Bodmanstr. 23 87439 Kempten Germany
Contact: Email: l.broell@freenet.de
2. The short version
This website processes your personal data minimally and privacy-first:
- No cookies. We do not set any cookies.
- No tracking. We use no tracking or analytics tools.
- Self-hosted resources. Fonts and other assets are served from our own hosting — no connection to Google Fonts or similar services.
- Minimal collection. Beyond technically required server logs, data only flows when you actively join the waitlist.
- Stored in the EU. Waitlist data is stored in a data center in Frankfurt, Germany.
3. Hosting and server logs
This website is hosted by:
IONOS SE Elgendorfer Str. 57 56410 Montabaur, Germany
Server log files
On every visit, the hosting provider automatically records the following in server log files:
- IP address of the requesting device
- Date and time of access
- File name and URL of the requested page
- User agent (browser information)
- Referrer (the page that linked you here)
Purpose: operation, stability and security of the hosting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure and stable website).
Retention: Log files are retained by the hosting provider according to its deletion policy and deleted afterwards. Details are available in IONOS's privacy policy.
Data processing agreement: A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with IONOS.
4. Waitlist (early access)
Data processed
When you join the waitlist, we process:
- Email address
- Selected language (German/English)
- Time of sign-up
- Technical transmission data (e.g. IP address, user agent — during transfer only)
Purpose and legal basis
Purpose: notifying you about availability and early access to the SAYA app, plus occasional product updates.
Legal basis: Art. 6(1)(a) GDPR (consent). By joining the waitlist you consent to the processing of your email address for these purposes.
Withdrawal and unsubscribing
You can withdraw your consent and leave the waitlist at any time with effect for the future — by emailing l.broell@freenet.de or via the unsubscribe link included in every email we send. Processing carried out before withdrawal remains lawful.
Storage system and location
Your waitlist data is stored in Google Cloud Firestore. Our contracting party is:
Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland
Storage location: The database runs in the Google Cloud region europe-west3 (Frankfurt, Germany).
Third-country access: Even with EU storage, access by US-based Google group companies (e.g. for support or maintenance) cannot be fully excluded. Appropriate safeguards are in place for such cases: Google LLC is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply as part of the Google Cloud Data Processing Addendum (a data processing agreement pursuant to Art. 28 GDPR).
Retention
Your data is stored until you withdraw your consent or unsubscribe, and at the latest until the waitlist is discontinued. It is then deleted.
5. Your privacy rights
Regarding your personal data, you have the right to:
- Access (Art. 15 GDPR): ask whether and which data we process about you.
- Rectification (Art. 16 GDPR): have inaccurate data corrected.
- Erasure (Art. 17 GDPR): have your data deleted under the statutory conditions.
- Restriction (Art. 18 GDPR): have processing restricted.
- Data portability (Art. 20 GDPR): receive your data in a common, machine-readable format.
- Objection (Art. 21 GDPR): object to processing based on legitimate interests.
- Withdrawal of consent (Art. 7(3) GDPR): at any time with effect for the future.
- Complaint: lodge a complaint with a data protection supervisory authority, e.g. the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
To exercise these rights or for any privacy questions, contact us at l.broell@freenet.de.
6. Information for users outside the EU
This website is operated from Germany and follows the EU General Data Protection Regulation (GDPR) — one of the strictest privacy standards in the world. If you visit from outside the EU (including the United States), the same protections apply to you: minimal data collection, no advertising trackers, no sale of personal data, EU-based storage. We honor requests to access or delete your data regardless of where you live — just contact the address above.
7. Status of this privacy policy
This privacy policy was last updated in July 2026. We will update it whenever the data processing on this website changes.