Privacy Policy

Sunpower Energy by G&A Ltd.

Last updated: 2nd October 2025

1. Introduction

Sunpower Energy by G&A Ltd. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Company Details

Company Name: Sunpower Energy by G&A Ltd.
Registration: Cyprus Company Registration Number: HE439632
Address: Panagioti Zouvani 1, 5390, Ammochostos, Cyprus
Contact: info@sunpowerenergycy.com
Phone: +357 99523184

2. Information We Collect

2.1 Personal Information You Provide

When you contact us through our website forms, we collect:

Contact Information: Name, email address, phone number
Property Information: Property type, location/address, roof size, monthly electricity bill range
Project Details: Timeline preferences, system type interest, additional comments
Communication Preferences: How you prefer to be contacted

2.2 Automatically Collected Information

Website Usage: Pages visited, time spent on site, referring websites, user interactions
Technical Information: IP address, browser type, device information, operating system
Analytics Data: Collected via Google Analytics to understand visitor behavior and improve our services
Server Logs: Date and time of visits, error logs for website maintenance

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to analyze website traffic and improve user experience. Specifically:

Analytics Cookies: Google Analytics 4 tracks how visitors use our website
Necessary Cookies: Essential cookies for website functionality and security
Consent Management: 68publishers cookie consent tool to manage your preferences

You can control cookies through our cookie consent banner and your browser settings. For detailed information, please see our Cookie Policy below.

2.4 Information We Do NOT Collect

We do not collect sensitive personal data (health information, financial details, racial/ethnic origin, political opinions, religious beliefs)
We do not knowingly collect information from children under 18
We do not use cookies for advertising or cross-site tracking

3. How We Use Your Information

We use your information for the following purposes:

3.1 Primary Business Purposes

Solar Consultations: Providing free solar assessments and quotes
Project Management: Managing solar installation projects
Customer Service: Responding to inquiries and providing support
Communication: Sending project updates and relevant information

3.2 Website Improvement

Analytics: Understanding how visitors use our website to improve functionality
Performance: Monitoring website performance and fixing technical issues
User Experience: Optimizing navigation and content based on usage patterns

3.3 Legal and Business Operations

Compliance: Meeting legal and regulatory requirements in Cyprus
Record Keeping: Maintaining business records as required by law
Quality Assurance: Improving our services and processes

3.4 Marketing (With Consent)

Solar Information: Sending educational content about solar energy
Company Updates: Sharing relevant company news and services
Industry Insights: Providing market updates relevant to solar energy

Note: All marketing communications include an opt-out option. You can withdraw consent at any time.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

Legitimate Interest: Operating our solar energy business, providing requested services, and analyzing website usage
Contract Performance: Fulfilling solar installation contracts and consultations
Consent: For marketing communications and analytics cookies (explicit consent required)
Legal Obligation: Complying with Cyprus business, tax, and regulatory requirements

5. Information Sharing and Disclosure

5.1 We Share Information With:

Service Providers:
- Brevo (Sendinblue): Email service provider for sending inquiry responses and communications
- Google LLC: Analytics services to understand website usage (Google Analytics, Google Tag Manager)
- Hosting Provider: Hetzner (Germany) for website hosting
- Trusted partners for solar installation, maintenance, and technical services
Legal Compliance: Authorities when required by Cyprus law
Business Partners: Certified solar installers and equipment suppliers (with your consent)

5.2 International Data Transfers

Some of our service providers are located outside Cyprus:

Google LLC (USA): We use Google Analytics, which transfers data to the United States. Google is certified under the EU-U.S. Data Privacy Framework and provides adequate data protection safeguards.
Hosting (Germany): Our website is hosted by Hetzner in Germany (within the EU).

All international transfers comply with GDPR requirements through:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Other appropriate safeguards

5.3 We Do NOT:

Sell your personal information to third parties
Share information for advertising purposes without consent
Use your data for automated decision-making or profiling

6. Data Security

We implement appropriate security measures to protect your information:

Encryption: HTTPS encryption for data transmission
Server Security: Hosting with reputable European providers (Hetzner - Germany)
Access Controls: Limited access to personal information on a need-to-know basis
Regular Updates: Keeping software and security measures current
Data Minimization: Collecting only necessary information
Secure Email: Using encrypted email services (Brevo) for communications

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but work diligently to protect your data.

7. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

7.1 Access and Portability

Right to Access: Request copies of your personal information
Data Portability: Receive your data in a structured, machine-readable format (e.g., CSV, JSON)

7.2 Correction and Deletion

Right to Rectification: Correct inaccurate or incomplete information
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to legal retention requirements

7.3 Processing Controls

Right to Restrict: Limit how we process your information
Right to Object: Object to processing based on legitimate interest
Withdrawal of Consent: Withdraw consent for marketing communications or analytics cookies at any time

7.4 Automated Decision-Making

Right to Human Review: We do not use automated decision-making or profiling. All decisions are made by our team.

7.5 How to Exercise Your Rights

Email: info@sunpowerenergycy.com
Phone: +357 99523184
Mail: Panagioti Zouvani 1, 5390, Ammochostos, Cyprus

We will respond to requests within 30 days (may be extended to 90 days for complex requests).

7.6 Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with:

Office of the Commissioner for Personal Data Protection (Cyprus)

Website: dataprotection.gov.cy
Phone: +357 22 818 456
Email: commissioner@dataprotection.gov.cy

8. Data Retention

We retain your information for the following periods:

Inquiry Data: 3 years from last contact (for follow-up opportunities and business development)
Customer Data: 7 years after project completion (Cyprus legal requirement for business records)
Marketing Consent: Until withdrawn or 2 years of inactivity (whichever comes first)
Technical Logs: 12 months for website maintenance and security
Analytics Data: 26 months (Google Analytics 4 default retention period)
Cookie Consent Records: 12 months (proof of consent for compliance)

After retention periods expire, we securely delete or anonymize your data.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They help websites remember your preferences and understand how you use the site.

9.2 Cookies We Use

Cookie Name Purpose Category Duration Set By cc-settings Stores your cookie consent preferences Necessary 6 months 68publishers session Maintains your session on the website Necessary Session Statamic XSRF-TOKEN Security protection (CSRF) Necessary Session Statamic ga Distinguishes users for analytics Analytics 2 years Google Analytics ga_<ID> Stores GA4 session information Analytics 2 years Google Analytics

9.3 Cookie Categories

Necessary Cookies (Always Active) These cookies are essential for the website to function properly. They enable basic features like page navigation, form submission, and security. You cannot opt out of these cookies.

Analytics Cookies (Requires Consent) These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This helps us improve our website and services.

Google Analytics 4: Tracks page views, user interactions, traffic sources, and user behavior
Data Collected: Pages visited, time on site, referring website, device type, browser, general location (city level)
Purpose: Website improvement, understanding customer needs, content optimization

9.4 Managing Cookies

Through Our Cookie Banner: When you first visit our website, you'll see a cookie consent banner powered by 68publishers. You can:

Accept all cookies
Accept only necessary cookies
Manage preferences (choose which categories to accept)
Change your preferences anytime by clicking the cookie settings link in our footer

Through Your Browser: You can also control cookies through your browser settings:

Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Options → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Cookies and site permissions

Google Analytics Opt-Out: You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

9.5 Third-Party Cookies

We use third-party services that may set cookies:

Google Analytics: Analytics and website performance tracking
Google Tag Manager: Manages tracking codes and analytics tags

We do not use cookies for:

Advertising or remarketing
Cross-site tracking
Social media tracking
Profiling or automated decision-making

10. Third-Party Services

10.1 Google Analytics

Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Purpose: Website analytics and performance monitoring

Data Collected:

IP address (anonymized)
Pages visited and user interactions
Device and browser information
Referral sources
General geographic location (city level)

Data Processing: Google processes data on our behalf under a Data Processing Agreement. Data is transferred to the USA under EU-U.S. Data Privacy Framework.

Privacy Policy: policies.google.com/privacy

10.2 Brevo (Sendinblue)

Provider: Sendinblue SAS, 55 rue d'Amsterdam, 75008 Paris, France

Purpose: Email communications, inquiry management, and customer relationship management

Data Collected:

Email addresses
Names
Contact form submissions
Communication preferences

Data Processing: Data remains within the EU (France). Brevo is GDPR compliant.

Privacy Policy: www.brevo.com/legal/privacypolicy

10.3 Hetzner (Website Hosting)

Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Purpose: Website hosting and infrastructure

Data Location: Germany (EU)

Privacy Policy: www.hetzner.com/legal/privacy-policy

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@sunpowerenergycy.com. We will delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

Changes in our business practices
New services or features
Legal or regulatory requirements
Improvements to our privacy practices

Notification of Changes

We will notify users of significant changes via:

Prominent website announcement
Email notification (for existing customers with consent)
Updated "Last updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically.

13. Contact Information

For privacy-related questions, concerns, or to exercise your rights:

Data Protection Contact:

Email: info@sunpowerenergycy.com
Phone: +357 99523184
Address: Sunpower Energy by G&A Ltd., Panagioti Zouvani 1, 5390, Ammochostos, Cyprus

Supervisory Authority:

Office of the Commissioner for Personal Data Protection (Cyprus)

Website: dataprotection.gov.cy
Phone: +357 22 818 456
Email: commissioner@dataprotection.gov.cy
Address: 1 Iasonos Street, 1082 Nicosia, Cyprus

14. Cyprus-Specific Information

14.1 Local Compliance

We comply with Cyprus Data Protection Law (Law 125(I)/2018), which implements the EU GDPR
Our business is registered with Cyprus Department of Registrar of Companies (HE439632)
We follow Cyprus renewable energy industry standards and regulations

14.2 Language

This Privacy Policy is available in:

English (primary language)
Greek (available upon request at info@sunpowerenergycy.com)

In case of discrepancies between translations, the English version prevails.

14.3 Governing Law

This Privacy Policy is governed by the laws of the Republic of Cyprus and the European Union regulations (GDPR).

Effective Date: 2nd October 2025

Next Review: October 2026

Quick Links

Cookie Policy (Section 9 above)
Your Rights (Section 7)
Contact Us (Section 13)
Cookie Settings (Manage your cookie preferences)

This policy was last reviewed and updated on 2nd October 2025 to reflect the implementation of Google Analytics 4 and cookie consent management.