Privacy at a glance
For: Venues · Professionals · Private individuals
The database and files are stored in Frankfurt, uploaded documents are never public, and an email is all it takes for any request about your data.
At a glance
- Who is responsible: Sunworkers Ltd., based in Cyprus. There is no data protection officer because the legal requirements for one are not met; your questions are answered by the management at kontakt@sunworker.eu.
- Where your data is stored: the database, sign-in and files in Frankfurt am Main, the server for the interface in Offenbach am Main.
- What is binding: This page summarises the current privacy policy. Only the privacy policy itself is binding.
Where your data is stored
| What for | Provider | Location |
|---|---|---|
| Database, sign-in and files | Supabase | Amazon Web Services data centres in Frankfurt am Main. Access from outside the EU only happens in individual cases and is covered by standard contractual clauses. |
| Interface used by the website and apps | Prepaid-Hoster.de | Data centre in Offenbach am Main, no transfer to countries outside the EU. |
| Website | Vercel | Delivered via a worldwide network of data centres; transfer to the USA on the basis of the EU-US Data Privacy Framework, supplemented by standard contractual clauses. |
| Payment and payout account | Stripe | Based in Dublin; responsible in its own right for identity checks and fraud prevention. |
Who else receives data
- Google – for maps, AI services, push notifications, calendar and videos; statistics and advertising only with your consent.
- Providers you use to sign in – only if you choose that option.
- The OpenStreetMap Foundation in the United Kingdom, for which an adequacy decision applies, and Iconify for icons, which receives your IP address in the process. Fonts are served from Sunworker's own domain.
- Other users, as far as needed for a shift. Authorities and courts only receive data where there is a legal obligation or where it is needed to enforce or defend legal claims.
What others see about you
- As a professional: display name, photo, roles, hourly rate, city and postcode, experience, languages, reviews and the type of your credentials with their validity. Your location appears on the map rounded to about 1 kilometre; your calendar only shows “available”, “blocked” or “booked” – never with whom or why.
- As a venue: Before a shift together, your profile shows the street without the house number.
- As a private individual: You have no public profile. Before accepting, the professional sees your first name with initial, the town and the number of your completed bookings; your address only after confirmation and only as far as needed for travel and the invoice.
- Contact details: The other side's phone number and email are only available once you have a shift together that is confirmed, in progress or completed. In chat, contact details are hidden (Contact and payment outside the platform).
- Documents: Uploaded documents are never public. Others only see which type of credential is available and until when it is valid.
How your data is protected
- All connections are encrypted with TLS.
- Files are kept in non-public storage and can only be retrieved via short-lived, signed addresses.
- Only Sunworker's own server accesses the database, never your browser.
- Every access to verification documents is logged.
- Sign-in and request attempts are limited; administrative accounts require a second factor.
- You enter card details directly with Stripe; of your IBAN, Sunworker only stores the last four digits and the name of the bank (Escrow and secure payment).
There are no decisions with legal effect that are made solely by automated means. The order of search results follows a fixed sorting rule, and a person decides on approval. The only exception: a review that is, with high certainty, clearly insulting, threatening or extortionate is not accepted – you are told straight away and can revise it.
Cookies and consent
- Necessary: always active, because the site does not work without them – for example for signing in.
- Statistics: Google Analytics 4, only with your consent.
- Marketing: Google Ads, only with your consent.
- External content: maps from Google Maps and videos from YouTube. Without consent, no map or video loads by itself; each map and each video asks separately.
“Reject all” is shown on an equal footing with “Accept all”, and Google code only loads after your consent. Your choice applies for 6 months; after that, and after every new version of the privacy policy, Sunworker asks again. You can change it at any time in the cookie settings, which are also linked in the footer of every page.
Your rights
- access to the data stored about you,
- rectification of inaccurate data,
- erasure,
- restriction of processing,
- receiving your data in a common, machine-readable format,
- objecting to processing based on legitimate interests,
- and withdrawing consent for the future.
For any request, an email to kontakt@sunworker.eu is enough. You receive a reply within one month, in difficult cases within three months at most – Sunworker lets you know in advance if so. Access and a copy are free of charge. If there are reasonable doubts that the request comes from you, Sunworker asks for confirmation, for example via the email address in your account.
You can also lodge a complaint with a data protection supervisory authority: with the data protection authority competent for Sunworker in Nicosia (Cyprus) or with the authority where you live or work – in Germany, for example, the data protection authority of your federal state. The address is given in the privacy policy.
Important: How long individual data is kept – for example invoices, which are subject to statutory retention periods – is set out in the privacy policy. It is the binding version.
Frequently asked questions
Does Sunworker store my card details?
No. You enter them directly with Stripe. Sunworker only receives the card brand, the last four digits and the result of the payment.
Can anyone see my exact location?
No. On the map, a professional's location appears rounded to about 1 kilometre. If the device sends a location at check-in, only the professional sees it; the client only learns the time.
How do I delete my account?
Write to kontakt@sunworker.eu. Reviews you have written then remain anonymised as “former account”; private notes are deleted.
Was this article helpful?
This page explains; it is not legal or tax advice. Our Terms are what counts.