GDPR Notice (EEA / UK / Switzerland)
This notice supplements our Privacy Policy with information required by the EU and UK General Data Protection Regulation (GDPR) for individuals in the EEA, UK, and Switzerland.
1. Data controller
Mass Technologies, located in Florida, United States, is the controller of your personal data when you use Sales.You. Contact our privacy team at privacy@sales.you or our data protection contact at dpo@sales.you.
2. EU / UK representative
Where required by Article 27 GDPR, our representatives are:
- EU representative: [EU representative name & address — appoint if required]
- UK representative: [UK representative name & address — appoint if required]
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing and securing the Services and your account | Contract (Art. 6(1)(b)) |
| Non-essential cookies, first-party analytics, and marketing | Consent (Art. 6(1)(a)) |
| Improving the Services, preventing fraud and abuse | Legitimate interests (Art. 6(1)(f)) |
| Billing, tax, and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we balance them against your rights. Where we rely on consent, you may withdraw it at any time without affecting prior processing.
4. Your rights
Subject to conditions in the GDPR, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten") in certain circumstances.
- Restrict or object to processing, including profiling based on legitimate interests.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local supervisory authority.
To exercise these rights, email privacy@sales.you. We will respond within the time limits required by law (generally one month).
5. International data transfers
We are based in the United States, so your personal data is transferred to and processed outside the EEA/UK/Switzerland. Where we do so, we implement appropriate safeguards, including the European Commission's Standard Contractual Clauses (and the UK Addendum / Swiss equivalents), together with supplementary technical and organizational measures. You may request a copy of the relevant safeguards by contacting us.
6. Retention
We retain personal data only as long as necessary for the purposes described in our Privacy Policy, after which it is deleted or anonymized, unless a longer period is required by law.
7. Automated decision-making
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing without a lawful basis and appropriate safeguards.
8. Complaints
Supervisory authority
If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority. We would, however, appreciate the chance to address your concerns first — please contact dpo@sales.you.