Privacy notice

Ousmane Sawo

Sawona

Homberger Str. 418

47443 Moers

Germany

Data-protection contact: datenschutz@sawona.de

The website is hosted using OpenAI Sites. OpenAI Ireland Ltd acts as a processor for hosted website data. Technical delivery and server-side storage use infrastructure and subprocessors made available through that service, including Cloudflare infrastructure.

When the website is requested, technical connection and security data may be processed, such as IP address, date and time, requested resource, referrer where transmitted, browser and device information, and error or security events. This is used to deliver the website, maintain stability, prevent misuse and troubleshoot faults.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are secure, reliable and efficient website operation. SAWONA does not write access logs to the application database. Infrastructure providers may retain technical logs for as long as they are required for service operation, security and legal obligations under their applicable policies.

Recipients are OpenAI and the infrastructure subprocessors used to provide the service. Where hosted data is transferred outside the EEA, OpenAI states that appropriate safeguards are used, including an adequacy decision or the EU Standard Contractual Clauses, as applicable.

The form collects full name, email address, profile username, main platform, creator profile URL, niche, audience-size range, a description of the content and audience, and optional information about possible product or monetization interests. The selected language, submission time, a technical record ID and the current email-delivery status are also stored. The hidden anti-spam field is not stored with accepted applications.

The data is used to review the requested partnership, assess whether collaboration may be suitable and respond to the applicant. It is stored in the website’s server-side D1 database. After a successful database save, the same application information is sent to SAWONA by email through Resend as described below.

The legal basis is Art. 6(1)(b) GDPR for steps taken at the applicant’s request before a possible agreement. Where an enquiry is not directly pre-contractual, Art. 6(1)(f) GDPR applies based on our legitimate interest in reviewing and answering genuine business enquiries.

Recipients are the controller, OpenAI as the hosting processor and the infrastructure subprocessors required to operate the database. Resend also receives the application information solely to deliver the notification described in section 4.

If no collaboration results, the application is deleted six months after the last contact. This period is currently monitored through an internal retention process rather than an automatic database deletion. If a collaboration begins, data is retained for the duration of the business relationship and subsequently only for applicable statutory commercial, accounting or tax retention periods.

After an application has been stored, the website sends a notification to hello@sawona.de through the Resend email-delivery service. The provider is Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA.

The notification contains the submitted full name, email address, profile username, main platform, creator profile URL, niche, audience-size range, description of content and audience, any optional product or monetization information, and the selected website language. Resend also processes sender, recipient and reply-to addresses, the message content and delivery metadata. The applicant’s address is used as the reply-to address so SAWONA can answer directly.

The purpose is to notify SAWONA reliably of a stored partnership enquiry and enable its prompt review. The legal basis follows the application: Art. 6(1)(b) GDPR for pre-contractual steps and otherwise Art. 6(1)(f) GDPR based on the legitimate interest in receiving and handling genuine business enquiries.

Resend acts as a processor under its Data Processing Addendum. Its primary processing operations take place in the United States. Resend states that transfers are safeguarded by the EU Standard Contractual Clauses and its participation in the EU–US Data Privacy Framework. Current information is available at https://resend.com/security/gdpr and https://resend.com/legal/dpa.

Resend states that email data is retained for 30 days on its standard service. Its DPA additionally provides for deletion of customer data within 90 days after termination of the service. SAWONA’s own database and mailbox retention periods are governed by the six-month rule described in section 3 and any applicable statutory duties.

The sawona.de email mailboxes are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS provides the mailbox infrastructure and processes email data on SAWONA’s behalf as a processor under the applicable data-processing agreement.

If you contact us by email, the sender and recipient addresses, technical header and delivery data, message content, attachments where applicable, and mailbox identifiers are processed. This is necessary to transmit, receive, store and protect the communication, including spam and abuse prevention, and to answer the enquiry and manage any resulting business communication.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Art. 6(1)(f) GDPR based on our legitimate interests in handling genuine enquiries and operating secure, reliable business email. Recipients are the controller and IONOS as the email-hosting processor, including subprocessors used by IONOS in accordance with the contractual data-protection terms.

If the communication does not lead to collaboration, it is deleted six months after the last contact unless a legal claim or statutory retention duty requires longer storage. This period is monitored through SAWONA’s current organisational retention process and is not an automatic mailbox deletion. If collaboration begins, the applicable business and statutory retention rules apply. Technical backup or security data held by IONOS may be retained for the periods required under the applicable service and data-processing terms.

The public website code does not set analytics, advertising or marketing cookies and does not use local storage or session storage. No analytics, advertising pixels or user-profiling tools are integrated.

The owner-only private preview may use technically necessary authentication cookies provided by the hosting platform. These are required to make the requested protected preview available. No consent-based tracking is used, so the current website does not display a cookie banner.

The website uses local system fonts, locally hosted SAWONA logo files and locally hosted images. Platform icons are delivered as inline vector paths with the website. The page does not load social-media feeds, external font services, videos or other third-party marketing embeds.

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.

To exercise your rights, contact datenschutz@sawona.de. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible at the controller’s location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).