Privacy policy
Last updated: 22 October 2026
This policy describes how Sunsurf Energy processes personal data when you visit the website, fill in our forms or contact us.
Data controller
Sunsurf Solar AB, company registration number 559272-2168, Vasagatan 7, SE-411 24 Gothenburg, Sweden, is the controller for the processing described here. Send questions about personal data to info@sunsurf.se.
What we collect
We only collect what we need to respond to you:
- The price form: first name, last name, e-mail address, price area and approximate electricity consumption. If you want us to contact you about a lower price, also phone number and company name.
- The contact form: name, e-mail address, phone number, company name, your message and, if you choose to tell us, where you heard about us.
- The form on the on-site solar page: name, e-mail address, approximate electricity consumption, type of area and, if you choose to tell us, its approximate size and additional information.
- Usage statistics, only if you have accepted them: how the website is used, for example which pages are viewed and which buttons are used, linked to a random ID. See the cookie page for details.
Questions you type in the chat under frequently asked questions are not sent to us and are not stored.
Why we process the data and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Prepare a price proposal and contact you about it | The data in the price form | Steps prior to a possible contract, and our legitimate interest in responding to business enquiries |
| Answer enquiries sent through the contact form and the on-site solar form | The data in the forms | Our legitimate interest in responding to enquiries |
| Understand how the website is used and improve it | Usage statistics | Your consent, which you can withdraw at any time |
How long we keep the data
- Enquiries from the forms are kept for 12 months after our last contact, unless you become a customer. If you do, the data is kept for as long as the agreement applies and thereafter as long as required by law.
- Usage statistics are kept for 12 months at PostHog and then deleted.
Who receives the data
We never sell personal data. The data is handled by us and by the suppliers who help us run the website, as processors under agreement:
- Resend: sends the data from the forms to us as e-mail. Resend stores the data in the United States. The transfer is protected by the European Commission’s standard contractual clauses, and Resend also participates in the EU–US Data Privacy Framework.
- PostHog: usage statistics, stored on servers within the EU. Only used if you have accepted it.
- Vercel: hosts the website. Vercel is a US company certified under the EU–US Data Privacy Framework and uses standard contractual clauses.
If data is transferred to a country outside the EU/EEA, this only happens on the basis of the European Commission's standard contractual clauses or another safeguard approved under the GDPR.
Your rights
You have the right to:
- know what data we hold about you and receive a copy of it
- have inaccurate data corrected
- have data erased when it is no longer needed
- request that processing is restricted
- object to processing based on our legitimate interest
- receive data you have provided in a machine-readable format
- withdraw consent at any time, for example to usage statistics
Contact us at info@sunsurf.se to exercise any of these rights. If you believe we process your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
How we use cookies and similar technologies, and how you change your choice, is described on the cookie page.
Changes
We update this policy when our processing changes. The date at the top shows when it was last changed.