Privacy Policy

1. Controller

The controller within the meaning of the GDPR is: Ramune Lekamaviciute (SUSTINIA Labs), Steiweg 7, 63073 Offenbach am Main, Germany. Contact: info@sustinialabs.com.

2. Data we collect

• Contact requests (email and contact form). When you contact us by email or use the contact form, we process your name, email address and the content of your message to respond to your inquiry (Art. 6(1)(b) GDPR). The contact form opens your email program pre-addressed to us; nothing you enter in the form is stored on this website.
• Appointment booking (Calendly). If you book a discovery call via Calendly, Calendly processes your name, email and scheduling details as a processor/controller under its own privacy policy. We receive the details needed to hold the call.
• Server log data. Our hosting provider automatically processes technical access data (IP address, timestamp, requested page, browser) to operate and secure the website (Art. 6(1)(f) GDPR — legitimate interest in secure operation).
• Platform statistics. Our hosting platform provides aggregated usage statistics (e.g. page views). These are non-identifying, are not based on tracking cookies, and do not allow us to identify individual visitors.

3. Cookies

This website does not set marketing or tracking cookies.

4. Recipients and transfers

Personal data is processed by our website platform provider Lovable Labs AB (Stockholm, Sweden), which operates in SOC 2- and ISO 27001-certified data centers. Our backend database is hosted on Supabase infrastructure in the European Union (AWS region eu-west-1, Ireland). Where transfers to the United States occur, they rely on standard contractual clauses under Art. 46 GDPR. When you book a call, Calendly (US-based) processes your name, email and scheduling details under its own privacy policy.

5. Retention

We retain personal data only as long as necessary for the purpose it was collected for, or as required by statutory retention obligations. Emails related to business inquiries may be subject to commercial and tax retention periods of up to 10 years under German law.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority, e.g. the data protection authority of your federal state.

To exercise your rights, contact us at info@sustinialabs.com.

7. Changes

We may update this policy when our services change. The current version is always available on this page.