EU General Data Protection Regulation (GDPR)
Sadapp respects the privacy rights of individuals in the European Union and other jurisdictions with similar data protection regulations. This page outlines your GDPR rights and how to exercise them.
Your GDPR Rights
1. Right of Access
You have the right to request a copy of the personal data we hold about you in a clear and portable format. We will provide this within 30 days of your request.
2. Right to Rectification
If your personal data is inaccurate or incomplete, you may request that we correct or update it promptly.
3. Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data under certain circumstances, such as when it is no longer necessary for its original purpose or if processing is based solely on your consent which you have withdrawn.
Note: We may retain data as required by law or for legitimate business purposes.
4. Right to Restrict Processing
You may request that we limit how we process your personal data while we investigate your concerns or if you dispute the accuracy of the data.
5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly-used, machine-readable format and transmit it to another controller.
6. Right to Object
You may object to processing of your personal data for direct marketing, profiling, or other legitimate interests.
7. Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects concerning you.
8. Right to Withdraw Consent
Where we process your data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to Exercise Your Rights
Signed-in users can download their personal data and request account deletion themselves under Settings → Account security. Deletion takes effect after a 30-day grace period during which it can be cancelled.
To exercise any other right, or if you cannot sign in:
- Send a written request to [email protected]
- Include sufficient information to identify you (e.g., email address, account ID)
- Clearly state which right you are exercising
- Provide any supporting documentation
We will respond to your request within 30 days (extendable by up to 60 days for complex requests) and inform you of any fees or actions required.
Our Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Fulfillment: To provide the services you have requested
- Your Consent: Where you have explicitly consented, for example optional analytics cookies or an alpha/beta access request
- Legitimate Interest: To improve our services and prevent fraud
- Legal Obligation: To comply with applicable laws
Data Retention
We retain personal data only as long as necessary to provide our services or as required by law. Typical retention periods are listed in our Privacy Policy; you can request details for specific data types.
Complaints and Supervisory Authorities
If you believe we have violated your GDPR rights, you have the right to lodge a complaint with your local data protection authority (supervisory authority). Find your authority:
European Commission - Data Protection AuthoritiesAs Sadapp is operated from Switzerland, you can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).
International Data Transfers
Sadapp is operated from Switzerland, which the EU recognises as providing adequate data protection. If data is transferred to other countries (for example optional Google Analytics to the USA), we rely on appropriate safeguards in accordance with GDPR Article 46, such as Standard Contractual Clauses.
Questions? Please contact our Data Protection Officer or privacy team
Email: [email protected]
For more information, see our full Privacy Policy