Implementation-aligned draft: August 2026
This draft explains the data flows currently visible in the website code and the existing Netlify form workflow.
1. Controller
- Sunft GmbH
- Münchener Straße 18, 85774 Unterföhring, Germany
- Email: bd@sunft.de
2. Website delivery and server logs
The planned hosting environment is Netlify. When a page is requested, technically necessary connection data such as IP address, timestamp, requested resource, referrer, browser, and operating-system information may be processed to deliver and secure the website.
3. Project inquiry form
If you submit the project inquiry form, Sunft processes the information you enter to assess and respond to the inquiry. The form is handled by Netlify Forms and can trigger an email notification to Sunft's business-development mailbox.
- Requested support and project stage
- Name, company, role, and work email
- Project location, optional capacity and target COD
- Message, NDA indication, consent state, and page language
4. Purpose and legal basis
The purpose is to respond to business and project inquiries and, where requested, to take steps before entering a contract. The final allocation between consent, pre-contractual measures, and legitimate interests has not yet been approved and must be confirmed in the final legal review.
5. Recipients and international processing
Access may be available to authorized Sunft personnel and to Netlify as the hosting and form infrastructure provider. Netlify states that customer data may be processed outside the EEA and describes contractual and other safeguards in its privacy and data-processing materials. Sunft's contractual setup and transfer assessment must be confirmed before launch.
6. Retention and deletion
No binding public retention period has yet been approved. Netlify provides submission-deletion controls and recommends active deletion management for form data containing personal information. Sunft must define and implement a documented deletion schedule before launch.
7. Analytics, cookies, and external media
The current application code contains no analytics or advertising tracker and uses local website media. If analytics, embedded services, or non-essential cookies are added, this section and any consent mechanism must be updated before activation.
8. Your rights
Subject to the applicable conditions, data subjects may request access, rectification, erasure, restriction, data portability, or object to processing. Consent may be withdrawn for the future. Complaints can be submitted to the competent data-protection supervisory authority. Contact Sunft using the controller email above.