Privacy Policy

1. Controller

Christian Gurres (trading as G-Software), Rosentor 2, 09126 Chemnitz, Germany. Email: hello@sustainifytoday.com. See also our Legal Notice.

2. Newsletter (email address)

If you sign up for our free checklist or newsletter, we collect the email address you provide and ask you to confirm it (double opt-in) before sending anything. We use this address to send the checklist and, up to three times a week, announcements of new reels on our YouTube and TikTok channels plus a roundup of the seasonal guides and reviews we published. Along with the address we record the time of the signup and of your confirmation, the wording shown next to the form, and the IP address and browser the signup came from. That record is how we can show your consent was actually given if it is ever questioned (Art. 5(2), Art. 7(1) GDPR).

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent, i.e. unsubscribe, at any time via the link in every email, with no effect on emails already sent. When you do, we stop sending immediately and remove you from our mailing list. We keep the consent record above for a further 90 days, then replace your address in it with a one-way hash, delete the IP address and browser details, and delete your contact record at Brevo, leaving proof of the consent without identifying you in either place. You can ask us to delete it sooner at any time.

If you never confirm a signup, there is no consent to document: the confirmation link stops working after 2 days, and we delete the whole record, including the address, IP address and browser details, 30 days after the form was submitted. The same applies if someone else enters your address without your knowledge. In that case you do receive one email from us, the confirmation request itself, because asking you is the only way to find out whether the signup was yours. Nothing follows it unless you click the link in it: no checklist, no newsletter, and nothing added to our mailing list.

We use Brevo (Sendinblue SAS, France) as our email service provider to store subscriber addresses and send these emails. Brevo acts as our data processor under a data-processing agreement and does not use your address for its own purposes.

3. Hosting and infrastructure

This site is hosted on Vercel Inc. (USA), which handles requests and serves pages on our behalf; our database runs on Neon, physically located in the AWS eu-central-1 region (Frankfurt, Germany). Standard server logs (IP address, timestamp, requested page, browser type) are processed briefly to operate and secure the site, on the basis of our legitimate interest in a working, secure service (Art. 6(1)(f) GDPR).

4. Affiliate links

Product links on this site (including Amazon Associates links) may carry an affiliate tag that credits us if you make a purchase. Clicking a link takes you to the retailer's site, where their own privacy policy applies. We do not receive or see any personal or payment information from your purchase.

5. Local storage (no tracking cookies)

We store your light/dark theme preference in your browser's local storage so it persists between visits. This stays on your device, is never transmitted to us, and isn't used to identify or track you. We do not run any analytics on this site, and no advertising trackers either.

6. Your rights

Under the GDPR you have the right to access, rectify, or erase your personal data, restrict or object to its processing, and receive a copy in a portable format. Contact us at the email above to exercise any of these. You also have the right to lodge a complaint with a data protection supervisory authority. In our case, the Saxon Data Protection Authority (Sächsischer Datenschutzbeauftragter), or the authority in your own country of residence.