Privacy Policy

Sunpower Energy by G&A Ltd.

Last updated: 12th July 2025

1. Introduction

Sunpower Energy by G&A Ltd. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Company Details:

  • Company Name: Sunpower Energy by G&A Ltd.

  • Registration: Cyprus Company Registration Number: HE439632

  • Address: Panagioti Zouvani 1, 5390, Ammochostos, Cyprus

  • Contact: info@sunpowerenergy.com.cy

  • Phone: +357 99523184

2. Information We Collect

2.1 Personal Information You Provide

When you contact us through our website forms, we collect:

  • Contact Information: Name, email address, phone number

  • Property Information: Property type, location/address, roof size, monthly electricity bill range

  • Project Details: Timeline preferences, system type interest, additional comments

  • Communication Preferences: How you prefer to be contacted

2.2 Automatically Collected Information

  • Website Usage: Pages visited, time spent on site, referring websites

  • Technical Information: IP address, browser type, device information, operating system

  • Server Logs: Date and time of visits, error logs for website maintenance

2.3 Information We Do NOT Collect

  • We do not use cookies or tracking technologies

  • We do not collect sensitive personal data (health, financial details, etc.)

  • We do not track users across other websites

3. How We Use Your Information

We use your information for the following purposes:

3.1 Primary Business Purposes

  • Solar Consultations: Providing free solar assessments and quotes

  • Project Management: Managing solar installation projects

  • Customer Service: Responding to inquiries and providing support

  • Communication: Sending project updates and relevant information

3.2 Legal and Business Operations

  • Compliance: Meeting legal and regulatory requirements in Cyprus

  • Record Keeping: Maintaining business records as required by law

  • Quality Assurance: Improving our services and website functionality

3.3 Marketing (With Consent)

  • Solar Information: Sending educational content about solar energy

  • Company Updates: Sharing relevant company news and services

  • Industry Insights: Providing market updates relevant to solar energy

Note: All marketing communications include an opt-out option.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

  • Legitimate Interest: Operating our solar energy business and providing requested services

  • Contract Performance: Fulfilling solar installation contracts and consultations

  • Consent: For marketing communications (explicit consent required)

  • Legal Obligation: Complying with Cyprus business and tax regulations

5. Information Sharing and Disclosure

5.1 We Share Information With:

  • Service Providers: Trusted partners for installation, maintenance, and technical services

  • Legal Compliance: Authorities when required by Cyprus law

  • Business Partners: Certified installers and equipment suppliers (with consent)

5.2 We Do NOT:

  • Sell your personal information to third parties

  • Share information for advertising purposes without consent

  • Transfer data outside the EU without adequate protection

6. Data Security

We implement appropriate security measures to protect your information:

  • Server Security: Hosting with reputable European providers (Hetzner)

  • Access Controls: Limited access to personal information

  • Regular Updates: Keeping software and security measures current

  • Data Minimization: Collecting only necessary information

7. Your Rights Under GDPR

As a data subject, you have the following rights:

7.1 Access and Portability

  • Right to Access: Request copies of your personal information

  • Data Portability: Receive your data in a structured, machine-readable format

7.2 Correction and Deletion

  • Right to Rectification: Correct inaccurate or incomplete information

  • Right to Erasure: Request deletion of your personal information

7.3 Processing Controls

  • Right to Restrict: Limit how we process your information

  • Right to Object: Object to processing based on legitimate interest

  • Withdrawal of Consent: Withdraw consent for marketing communications

7.4 How to Exercise Your Rights

Contact us at:

  • Email: info@sunpowerenergy.com.cy

  • Phone: +357 99523184

  • Mail: Panagioti Zouvani 1, 5390, Ammochostos, Cyprus

We will respond to requests within 30 days.

8. Data Retention

We retain your information for the following periods:

  • Inquiry Data: 3 years from last contact (for follow-up opportunities)

  • Customer Data: 7 years after project completion (legal requirement)

  • Marketing Consent: Until withdrawn or 2 years of inactivity

  • Technical Logs: 12 months for website maintenance

9. International Data Transfers

  • EU Hosting: Our website is hosted within the European Union (Germany)

  • No Third-Country Transfers: We do not transfer data outside the EU

  • Partner Compliance: Any partners must meet EU data protection standards

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • Changes in our business practices

  • Legal or regulatory requirements

  • Improvements to our privacy practices

Notification: We will notify users of significant changes via:

  • Website announcement

  • Email notification (for existing customers)

  • Updated "Last Modified" date

12. Contact Information

For privacy-related questions or concerns:

Data Protection Officer: [Name or "Privacy Team"]

Email: info@sunpowerenergy.com.cy

Phone: +357 +357 99523184

Address: Sunpower Energy by G&A Ltd., Panagioti Zouvani 1, 5390, Ammochostos, Cyprus, Cyprus

Supervisory Authority: Office of the Commissioner for Personal Data Protection

Website: dataprotection.gov.cy

Phone: +357 22 818 456

13. Cyprus-Specific Information

13.1 Local Compliance

  • We comply with Cyprus Data Protection Law (Law 125(I)/2018)

  • Our business is registered with Cyprus Department of Registrar of Companies

  • We follow Cyprus renewable energy industry standards

13.2 Language

This Privacy Policy is available in:

  • English (primary)

  • Greek (upon request)

In case of discrepancies, the English version prevails.


Effective Date: 12/6/2025 Next Review: 12/6/2026

This Privacy Policy is governed by Cyprus law and EU regulations.