Schéma de confidentialité et données personnelles Sunrak

Privacy policy

Last updated: 24 May 2026

Purpose

This policy explains how Sunrak, a brand operated by CGGK, collects and uses personal data submitted on the sunrak.eu website.

Data controller

The data controller is CGGK, operating the Sunrak brand. Contact: info@sunrak.eu.

Data collected

Sunrak may collect the following data when you use the site, request a quotation, create an account or contact the team:

  • identity: first name, last name, role, company where applicable;
  • contact: email, phone, address, postcode, city, country;
  • project information: type of structure (carport, canopy, roof mounting, ground mount), dimensions, roof type, area, target power in kWp, number of modules, tilt angle, site constraints, photos or drawings provided voluntarily, customer type (private, business, farm, installer, local authority), VAT number where applicable;
  • navigation data: pages visited, traffic source, technical information necessary for the site to function;
  • order and invoicing data once a commercial relationship is formalised.

Purposes

Data is processed to:

  • respond to contact and quotation requests;
  • produce an engineering study (Eurocode 1 wind and snow calculation appropriate to the destination country: BS EN 1991, NF EN 1991, DIN EN 1991, CTE, NTC) and a suitable commercial offer;
  • manage orders, invoices, payments, deliveries and warranties;
  • provide after-sales service and documentary follow-up (drawings, bill of materials, assembly manual);
  • improve the site and measure the effectiveness of campaigns;
  • comply with legal, tax, accounting and security obligations.

Legal bases

Processing is based, depending on the case, on the performance of pre-contractual or contractual measures, on Sunrak's legitimate interest in following up prospects and customers, on compliance with legal obligations, or on consent where required (optional newsletter).

Recipients

Data is intended for Sunrak and for suppliers strictly necessary for the processing: hosting, maintenance, CRM tools, carriers, logistics partners, partner manufacturers, consultants, payment providers, bailiff where appropriate, and authorities when required by law.

Technical project information (postcode, roof type, dimensions, constraints) may be transmitted to our manufacturers and partner design offices to establish an engineering calculation, price, feasibility, lead-time or logistics solution. Sunrak limits such transmissions to what is necessary.

Non-EU transfers

Some suppliers, manufacturers or service providers may be located outside the EU, particularly where the project involves international production or supply (Asia, USA, UK). In such cases, Sunrak limits the data transmitted and relies on the European Commission's standard contractual clauses where applicable.

Retention

Prospect data is retained for as long as necessary for commercial follow-up, then archived or deleted. Customer data, orders, invoices and warranty records are retained for applicable legal periods (10 years for accounting, 20 years for the structural warranty). Contractual evidence and delivery records may be retained to protect Sunrak's rights in the event of a dispute.

Cookies and audience measurement

The site may use technical cookies necessary for its operation (storing language preference via lang_preferred), and GDPR-compliant audience measurement tools where enabled. You can configure your browser to limit or block non-essential cookies.

Your rights

You may request access to, rectification, erasure, restriction, objection or portability of your data under the GDPR. To exercise your rights: info@sunrak.eu.

You also have the right to lodge a complaint with the competent supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in France, the CNIL (cnil.fr); in other Member States, the local equivalent.

Security

Sunrak implements reasonable measures to protect data against unauthorised access, loss, alteration or disclosure. No system can be guaranteed as absolutely impenetrable; each user should transmit only the information useful for their project.