Skip to main content

Privacy Policy

Last updated: February 2026

1. Data Controller

sunopsi ("we", "us", "our") operates the website at https://sunopsi.com. We are the data controller responsible for your personal data under EU General Data Protection Regulation (GDPR) 2016/679 and the Cyprus Processing of Personal Data (Protection of the Individual) Law 125(I)/2018.

2. Data We Collect

We collect the following categories of personal data:

  • Lead submissions: Name, email address, phone number (optional), district, energy usage details, and any additional notes you provide.
  • Calculator usage: Location (district), roof specifications, energy consumption data, and calculation results. No personal identifiers are required for the calculator.
  • Installer accounts: Business name, contact person name, email, phone, company details, service areas, and subscription information.
  • Website usage: When you consent to analytics cookies, we collect anonymized browsing data via Google Analytics (pages visited, session duration, device type).

3. Legal Basis for Processing

We process your data based on the following legal grounds (GDPR Article 6):

  • Consent (Art. 6(1)(a)): Lead submissions, marketing communications, and analytics cookies.
  • Contract performance (Art. 6(1)(b)): Installer account management and subscription services.
  • Legitimate interest (Art. 6(1)(f)): Platform security, fraud prevention, and service improvement.

4. How We Use Your Data

  • Matching homeowners with verified local installers based on location and requirements.
  • Providing personalised solar energy calculations and savings estimates.
  • Sending lead notifications to matched installers.
  • Processing installer subscriptions and billing.
  • Sending transactional emails (quote confirmations, lead assignments).
  • Sending marketing communications (only with explicit consent).
  • Improving our platform through anonymised analytics.

5. Data Sharing

We share your data only with the following categories of recipients:

  • Matched installers: When you submit a lead, your contact details and project requirements are shared with 3-5 verified installers in your area to provide you with quotes.
  • Stripe: Payment processing for installer subscriptions. Stripe acts as an independent data controller. See Stripe's privacy policy.
  • Resend: Transactional email delivery. See Resend's privacy policy.
  • Google Analytics: Anonymised website analytics (only with your consent). See Google's privacy policy.
  • Hetzner: Server infrastructure hosting (EU-based). See Hetzner's privacy policy.
  • Typesense: Self-hosted search engine on our EU servers. No data is shared with third parties.
  • Listmonk: Self-hosted newsletter platform on our EU servers. No data is shared with third parties.
  • PVGIS (European Commission): Solar irradiance data API. Only location coordinates are sent; no personal data is transmitted.

We do not sell your personal data to third parties.

6. Data Retention

  • Lead data: Retained for 24 months from submission, then anonymised or deleted.
  • Calculator sessions: Retained for 12 months, then deleted.
  • Installer accounts: Retained for the duration of the account plus 12 months after closure.
  • Analytics data: Retained for 14 months (Google Analytics default).

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15): Request a copy of your personal data.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to restrict processing (Art. 18): Request limitation of how we process your data.
  • Right to object (Art. 21): Object to processing based on legitimate interest.
  • Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a request via our Data Request Form. We will respond within 30 days as required by GDPR Article 12(3).

8. Cookies & Consent Mode

We use cookies categorised as follows:

  • Necessary cookies: Required for the website to function (session management, security). These cannot be disabled.
  • Analytics cookies: Used to understand how visitors interact with our site (Google Analytics). Require your explicit consent.
  • Marketing cookies: Used for advertising purposes. Require your explicit consent.

We implement Google Consent Mode V2, which ensures no tracking data is collected until you grant consent. You can manage your preferences at any time via the cookie settings button on our website.

9. International Transfers

Some of our service providers (Stripe, Resend, Google) may process data outside the European Economic Area (EEA). These transfers are protected by EU Standard Contractual Clauses (SCCs) or adequacy decisions as applicable. Our database, search engine (Typesense), newsletter platform (Listmonk), and server infrastructure (Hetzner) are hosted within the EU.

10. Supervisory Authority

You have the right to lodge a complaint with the Cyprus Commissioner for the Protection of Personal Data:

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a banner on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

For privacy-related inquiries, contact us at privacy@sunopsi.com.