Privacy

In short: as little data as possible. No cookies, no tracking, no fonts, scripts or images from third-party servers. The site stores nothing in your browser.

Controller

Sam Luka Sonntag, Tal 14, 88368 Bergatreute, Germany
Email: sam@sonntag.works

Hosting and visiting the site

The site runs on Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data: IP address, time, requested address, referrer, browser and operating system. This is needed to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). A data processing agreement with Cloudflare is in place. Cloudflare is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply as well.

I keep no access logs myself and do not analyse visits. Cloudflare may ask your browser to report connection errors to Cloudflare (Network Error Logging). This only serves to run the network.

Requests via “Discuss a project”

In the “Discuss a project” window you choose a few details: the type of your business, what I should help with, the systems you use, the number of properties and a preferred time. These details stay in your browser and are not sent to my server. At the end the site opens your own email app with a pre-filled email to me. Whether you send it is up to you. The section “Email” applies to that email.

The free times in the calendar come from my server. Loading them stores no data about you.

The call

I confirm the time by email. For video calls I use Google Meet (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the data needed for the call, such as name, video, audio and IP address (Art. 6(1)(b) GDPR). We can also talk by phone.

Email

If you write to me, your message is stored in my mailbox at Apple (iCloud Mail, Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). I only use it to reply (Art. 6(1)(b) GDPR).

Links to other sites

The work section links to the websites of those businesses. Your browser only connects to them when you click a link. Their privacy notice applies there.

Retention

I keep emails as long as needed to reply. If a project follows, statutory retention periods apply.

Your rights

• Access (Art. 15 GDPR)
• Rectification, erasure, restriction (Art. 16–18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) (Art. 21 GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

Just write to sam@sonntag.works.

The German version of this page is the legally binding one.

As of October 2026