1. Controller
Sunfield (Promtano is a brand of Sunfield), owner: Lukas-Domenik Sonnenfeld; postal address: see imprint; email: sunfieldsupport@gmail.com. No data protection officer is appointed because this is not legally required.
2. In brief
We use no analytics or tracking tools, no advertising cookies and no social media plugins, and we load no fonts, scripts, videos or maps from third-party servers. Some functions store settings and work states only in your browser; we do not receive this data.
3. Hosting
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Workers; delivery via the worldwide Cloudflare network, for requests from the EU usually through data centres in the EU). On each request the hosting service technically processes IP address, date and time, page or file requested, data volume and browser/device information. Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a secure and working website). A data processing agreement under Art. 28 GDPR exists with Cloudflare. Processing outside the EEA, in particular in the USA, is possible; Cloudflare takes part in the EU-US Data Privacy Framework. We ourselves set no cookies on this website. We ourselves do not store log data.
4. Storage in your browser
Some functions store settings or saved results in your browser's local storage. This data stays on your device and is not transmitted to us or to third parties. You can delete it through the function or your browser settings.
5. Links to other websites
Our pages contain links to other websites. Data is transferred to those sites only when you click a link; their privacy notices apply.
6. Contact
If you contact us by email, phone or our contact form, we process your details (such as name, contact data, content of the message) to answer your request (Art. 6 (1) (b) or (f) GDPR). The form works via Google Apps Script (Google Ireland Limited, Dublin, Ireland; parent company Google LLC, USA; transfers based on the EU-US Data Privacy Framework or standard contractual clauses); the data is processed there only to send the two emails and not stored permanently. You immediately receive an automatic confirmation by email. We delete enquiries once they are dealt with, unless statutory retention duties apply (at the latest after 6 months without an order).
7. Orders
For orders we process name, billing address, email address, phone number (only if provided), ordered services, prices, order and payment status, invoices and correspondence, to conclude and perform the contract and to meet accounting and tax duties (Art. 6 (1) (b) and (c) GDPR with § 147 AO and § 14b UStG). Records are kept for the statutory periods (invoices and accounting records eight years, books ten years, other tax-relevant business letters six years, from the end of the calendar year). We do not process payment card data; with online payment you enter it only at Stripe, whose privacy notice applies. Documents you give us for a set-up are used only for the order.
8. Your rights
You have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority. Providing data is only required to the extent needed for the contract; we make no automated decisions.
9. Changes
We update this notice when the offer or the legal situation changes. The German version is authoritative.