1. Data Controller
The data controller responsible for the processing of your personal data collected through this website is:
2. Personal data collected
We only collect personal information that you voluntarily submit through our forms:
- Quotation and contact forms: Full name, company name, corporate email address, contact phone number, facility location, module quantity, structural parameters, and optional facility photographs.
- Technical loss calculator & report: Business email address, phone number, and input parameters necessary to generate the requested simulation report.
- Browsing telemetry: IP address, device metadata, and cookie telemetry where explicit consent has been granted.
3. Purposes and legal basis
- Service quotation and pre-contractual processing: To evaluate your facility specifications and deliver an itemized commercial proposal (Legal basis: Art. 6.1.b GDPR, performance of a pre-contractual relationship).
- Technical support and general inquiries: To respond to your direct queries (Legal basis: Art. 6.1.f GDPR, legitimate business interest).
- Spam prevention and site security: Automated Cloudflare Turnstile token verification to prevent fraudulent automated bot submissions (Legal basis: Art. 6.1.f GDPR).
- Web analytics and conversion tracking: Measuring campaign performance subject to prior consent (Legal basis: Art. 6.1.a GDPR).
4. Data retention periods
Data submitted for commercial proposals that do not materialize into an active contract are retained for a maximum of 12 months following the last technical interaction. Invoiced client data are maintained during statutory tax and commercial limitation periods (typically 5 to 6 years).
5. Data recipients
Clean Sunny does not sell or lease your personal data. Data are processed solely by authorized technical providers acting as data processors under binding GDPR contracts, including hosting infrastructure (Vercel), spam protection (Cloudflare), and secure email gateways.
6. International data transfers
Where service providers process data outside the European Economic Area (such as Cloudflare or Vercel), transfers are safeguarded under European Commission Standard Contractual Clauses (SCCs) and Data Privacy Framework certifications.
7. Your GDPR rights
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. You can exercise these rights at any time by sending a written notice accompanied by proof of identity to comercial@cleansunny.solar. You also hold the right to lodge a complaint with your supervisory data protection authority (AEPD in Spain, CNPD in Portugal).
8. Technical security
We deploy end-to-end SSL/TLS encryption for all communications between your browser and our servers, alongside strict access controls and encrypted backups.
9. Minors
Our industrial and commercial services are strictly aimed at businesses and professionals. We do not knowingly collect personal data from individuals under 18 years of age.
10. Policy updates
Clean Sunny reserves the right to modify this Privacy Policy to adapt it to regulatory developments or technical upgrades. The current effective date will always appear at the top of this document.