Privacy policy

Translation: This English text is provided for convenience. Only the German version is legally binding; in case of differences the German version prevails. Mandatory consumer protection rules of your country of residence remain unaffected.

1. Controller

Sunfield – owner: Lukas-Domenik Sonnenfeld, address see Imprint, email: sunfieldsupport@gmail.com

2. Overview

This website sets no cookies, uses no analytics or advertising tools and loads no fonts, scripts or images from third-party servers. We process data only to deliver the website, handle your enquiry or order, and process withdrawals or cancellations. The EU General Data Protection Regulation (GDPR) applies.

3. Hosting

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes technically necessary data (IP address, date and time, page requested, browser and system data, referrer) to deliver the site and fend off attacks. Legal basis: Art. 6 (1) (f) GDPR. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

4. Forms (enquiry, order, withdrawal, cancellation)

Data you enter in a form (e.g. name, email, company, VAT ID, country, package, message) is sent to our form service on Cloudflare Workers and stored there (Cloudflare Workers KV) until we retrieve it; it is deleted there automatically after 90 days at the latest. Legal bases: Art. 6 (1) (b) GDPR (enquiry, contract) and Art. 6 (1) (c) GDPR (withdrawal, cancellation). Enquiries that do not lead to an order are deleted after 6 months.

5. Email

Our mailbox is hosted by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

6. Online payment via Stripe

When you pay online you are forwarded to Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe processes the data you enter there (name, company if applicable, email, billing address, payment data), amount and product to process the payment, prevent fraud and meet legal obligations. We receive name, company, email, billing address, country, amount, product and payment status – never full card data. We use the billing country to check that we may supply your country (see Terms). Legal bases: Art. 6 (1) (b) and (c) GDPR. Stripe may transfer data to Stripe, Inc. (USA) under the Data Privacy Framework or Standard Contractual Clauses. Privacy policy: stripe.com/privacy.

If you choose PayPal on the payment page, the payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, as an independent controller. We receive from Stripe only name, email, billing address, amount, product and payment status. Legal bases: Art. 6 (1) (b) and (c) GDPR. PayPal privacy statement: paypal.com/webapps/mpp/ua/privacy-full.

7. Retention

Order and invoice data are kept as long as German commercial and tax law requires (usually 6 to 10 years). Other data is deleted once no longer needed.

8. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and the right to lodge a complaint with a supervisory authority, in particular in your country of residence. Contact: sunfieldsupport@gmail.com.

Customer account

For your account we store email, a password only as an encrypted hash, plan and payment status. To keep you logged in we set only a strictly necessary session cookie (deleted on logout or after 30 days at the latest). No other cookies.

Last updated: November 2026