Privacy policy

This privacy policy explains which personal data we process when you visit this website, for what purpose and on which legal basis. Use of the Synthexa platform at app.synthexa.de is governed by separate privacy information and by the agreements concluded with your company.

Controller

Email: info@synthexa.de

Summary

• We do not use cookies for analytics or advertising, so there is no cookie banner.
• Audience measurement works without cookies and without profiling.
• We serve fonts, images and scripts ourselves. The only exceptions are the services for audience measurement and spam protection described below. We do not embed third-party videos, maps or social media plugins.
• Requests sent through the contact form reach us only as an email. We do not store them in a database and use them solely to answer your request.

Hosting and delivery of the website

The website is delivered only over encrypted connections, through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Each time a page is requested, Cloudflare processes technically necessary data:

• IP address
• date and time of the request
• requested page and amount of data transferred
• previously visited page (referrer)
• browser and operating system (user agent)

This processing serves to deliver the website, keep it secure, defend against attacks and analyse errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing our website securely and reliably. Log data that we can access for error analysis is deleted after seven days at the latest.

We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. As Cloudflare operates a global network, processing outside the EU, in particular in the USA, cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition.

Cookies and browser storage

Apart from the spam protection on the contact page, the website stores only the following information in your browser:

• To protect against attacks, Cloudflare may set a cookie, for example “__cf_bm”. It is deleted after half an hour of inactivity.
• For the transitions between pages, your browser keeps the address of the last page you visited on this website in its session storage. The entry is not sent to us and is deleted when you close the tab.

The legal basis is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as both are necessary for the website you requested. Where personal data is processed, Art. 6(1)(f) GDPR applies; our legitimate interest lies in a secure and easy-to-use website.

Audience measurement with Cloudflare Web Analytics

To understand which content is read, we use Cloudflare Web Analytics. The service does not set cookies, does not store information on your device and does not build user profiles. It records page views, referrers, load times, browser and device type and the country derived from the IP address. The IP address itself is not stored. We only see aggregated statistics.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in designing and improving our website according to demand. For transfers to the USA, the information in the section “Hosting and delivery of the website” applies.

Contact form and demo requests

When you write to us using the contact form, we process the information you provide there. Only your name, your company and your business email address are required; phone number and message are optional. We also receive the topic you chose and the language of the page.

When you submit the form, our server at Cloudflare receives your details, checks them and forwards them straight away as an email to our mailbox. We do not store your request in a database; it exists only in our email mailbox. Email delivery and the mailbox are provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The transfer to STRATO is encrypted. We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.

To prevent abuse, we limit the number of requests per IP address. For this purpose the IP address is processed only briefly and is not passed on to us with your request.

The legal basis is Art. 6(1)(b) GDPR where your request aims at concluding a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering your request. We delete your request once it has been fully handled, at the latest twelve months after the last contact. If a business relationship arises, the statutory retention periods under commercial and tax law apply.

Spam protection with Cloudflare Turnstile

To protect the contact form against automated submissions, we use Cloudflare Turnstile. Turnstile is loaded on the contact page only. The service checks technical characteristics of your browser and connection, such as IP address and browser information, to determine whether the request comes from a human, and only passes the result of this check to us. The data is not used for advertising.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against spam and abuse. Where Turnstile reads or stores information in your browser for this purpose, the legal basis is Section 25(2) No. 2 TDDDG, as the check is necessary for sending the form. For transfers to the USA, the information in the section “Hosting and delivery of the website” applies.

Contact by email

When you email us, we process your information to handle your request. The legal basis and retention period are the same as for the contact form. Our mailbox is operated by STRATO GmbH.

Links to other services

This website contains links to other services, such as LinkedIn profiles. Data is only transferred to these services once you follow a link. From then on, the privacy information of the respective provider applies.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). An informal message to the email address above is sufficient.

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Obligation to provide data, automated decisions

You are not obliged to provide us with personal data. Without your contact details, however, we cannot answer your request. No automated decision-making, including profiling, takes place.

Changes to this privacy policy

We update this privacy policy when our website or the legal requirements change. The version published here applies.

Last updated: October 2026