This notice explains what happens to personal data when you visit sunshinefert.com. It describes what the site actually does, not what a generic template says it might do.
Who is responsible
Sunshinefert
Hadjikyriakio Building No.2, Nikis 1
CY-1087 Nicosia, Cyprus
Contact: sun@sunshinefert.com
What is collected when you simply read the site
Browsing the catalogue sets no cookies and runs no analytics, advertising or behavioural tracking of any kind. There is no Google Analytics, no advertising pixel, no session recording and no consent banner, because there is nothing to consent to.
What is unavoidable is that our server and our content delivery network record technical connection data — IP address, time of request, the address requested, the referring page and the browser identification string. These records exist to deliver pages, to detect attacks and to diagnose faults. They are not used to build a profile of you.
Third parties your browser contacts
Some elements of a page are fetched by your browser directly from other providers. Those providers necessarily see your IP address and browser identification. On this site they are:
- Cloudflare, Inc. — delivers and protects every page of this site. All traffic passes through it.
- Google Fonts — supplies the typefaces used by the site theme.
- jsDelivr and cdnjs — supply the JavaScript libraries used by the interactive molecule viewer.
- PubChem (US National Institutes of Health) — supplies molecular structure data on product pages, fetched by your browser as the page loads.
None of these receive an order, an e-mail address or any information you type into the site. They receive only what any web server receives when a file is requested from it.
What is collected when you do something
If you place an item in the basket, WooCommerce sets functional cookies so the basket survives from page to page. If you place an order or create an account, the data you enter — name, e-mail address, delivery and billing address, telephone number if given — is stored to process that order. If you submit a product review, the name, e-mail address and text you enter are stored with the review. If you use the search box, the search term reaches the server as part of the request.
Legal basis and retention
Order data is processed to perform a contract, under Article 6(1)(b) GDPR, and kept for as long as commercial and tax law requires. Technical connection and security records are processed under the legitimate interest of keeping the site available and secure, Article 6(1)(f), and are kept for a short period only. Reviews are published with your consent, Article 6(1)(a), and are removed on request.
Your rights
You may ask what data concerning you is held, ask for it to be corrected, ask for it to be deleted, ask for processing to be restricted, ask to receive it in a portable form, and object to processing based on legitimate interest. Write to sun@sunshinefert.com.
You also have the right to complain to a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection.
Changes
If the site starts doing something that this notice does not describe, this notice will be changed first.
Page last updated .