We always use strictly necessary storage (e.g. sign-in, language) – the site does not work without it. With your consent we also count which pages are used: with Umami on our own server in Germany, without cookies and without sharing data with third parties. You can change your choice at any time under “Cookie settings”.
We always use strictly necessary storage (e.g. language, theme) – the site does not work without it. With your consent we also count which pages are used (Umami, our own server in Germany) and measure the success of our ads (); data may be transferred to the USA. You can change your choice at any time under “Cookie settings”.
How we handle requests from authorities, courts and security agencies for personal data of users – including data Sendalo receives through the interfaces of platforms such as Meta (Facebook, Instagram, Threads, WhatsApp). In effect since 3 November 2026. The operator of Sendalo is responsible (details in the legal notice). The German version prevails.
1. Review of lawfulness
Before responding, we review every request: the requesting body, the legal basis, jurisdiction and – where required – whether a court order exists.
We verify the authenticity of a request through an independent, official contact channel of the authority.
We do not respond to oral or informal requests; we ask for a written request.
Where anything is unclear, we seek legal advice.
2. Challenging unlawful requests
We reject requests without a sufficient legal basis, overly broad requests or requests from bodies without jurisdiction, or we narrow their scope.
Where legal remedies are available, we consider them and use them where appropriate.
We inform affected customers where the law permits.
3. Data minimisation
We disclose only the data that is strictly necessary and legally covered by the request – for as few people and as short a period as possible.
No disclosure in advance, no complete database extracts, no access keys or access tokens.
For data we process on behalf of our customers (Art. 28 GDPR), we first refer the authority to the respective controller where possible.
4. Documentation
Every request is documented internally: date received, requesting body, legal basis and reference number, scope, outcome of our review, our response with reasons, any data disclosed and everyone involved. We keep this documentation for at least three years and review it annually.
5. Review and contact
We review these principles annually and after every request. Please send questions to hallo@sendalo.de.