Privacy statement
This privacy statement explains which personal data we process when you visit our website, request an AI scan, book a call or are a client of ours, why we do so and what rights you have.
This is a translation. In case of differences, the Dutch version prevails.
1. Who we are
The controller is Syndric, part of Brandigator, Volmerlaan 5, 2288 GC Rijswijk, the Netherlands, Chamber of Commerce (KvK) 94369488, VAT NL005079240B06. For privacy questions, contact us at sheraz@syndric.io.
2. What data we process and why
AI scan requests through the form
- Data: your answer to where your company loses the most time, company name, name, job title, business email address and, if you fill them in, phone number and number of employees.
- Purpose: handling your request, contacting you and preparing and scheduling the AI scan.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to business requests (Article 6(1)(f) GDPR).
Contact by email
- Data: your name, email address and what you write to us.
- Purpose: answering your message.
- Legal basis: our legitimate interest in responding to messages, or steps before entering into a contract.
Booking a call
- Data: your name, email address, the time you choose and anything you add when booking. Booking runs through Calendly; the call itself takes place on Google Meet.
- Purpose: scheduling and holding the call.
- Legal basis: steps before entering into a contract and our legitimate interest.
Clients
- Data: contact and billing details of your organisation and of the contact persons we work with.
- Purpose: carrying out the assignment, invoicing and keeping our records.
- Legal basis: performance of the contract (Article 6(1)(b) GDPR) and legal obligations such as the statutory tax retention period (Article 6(1)(c) GDPR).
Visiting the website
- Data: technical data needed to show the website, such as your IP address, browser type and the time of your visit. These end up in our hosting provider's server logs.
- Purpose: delivering and securing the website and solving problems.
- Legal basis: our legitimate interest in a secure, working website.
We do not use analytics or advertising services and we do not build visitor profiles.
Data we process for clients
When an assignment involves a client's systems or data, we work on behalf of that client under a data processing agreement. In that case the client is responsible for that data and this statement does not cover that processing.
3. Cookies and local storage
Our website does not place tracking or analytics cookies and shows no advertising. Fonts and other files load from our own website, so your browser does not connect to third parties for them.
If you switch language yourself, we remember that choice in your browser's local storage. This is functional, no data is sent to us or anyone else, and you can clear it in your browser settings.
If you open the window to book a call, the website only then loads Calendly's scheduling page. Calendly may use its own cookies and asks for consent itself. Calendly's privacy policy applies to that.
4. Who we share data with
We do not sell your data. We only use service providers needed to deliver our services, and they may only use your data on our behalf:
- Netlify: website hosting and processing of the request form.
- Hostinger: email.
- Calendly: scheduling calls.
- Google: calendar and video calls via Google Meet.
We may also share data with our accountant or other advisers where needed for our records, and with authorities where the law requires us to.
5. Data outside the European Economic Area
Netlify, Calendly and Google are US companies, so data may be processed in the United States. This happens on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, so your data keeps an adequate level of protection.
6. How long we keep data
- Requests and contact that do not lead to an assignment: up to 12 months after the last contact.
- Client data: for as long as we work together, and data we must keep for tax purposes for 7 years after that.
- Server logs: for as long as our hosting provider keeps them by default for security and troubleshooting.
7. Security
We take appropriate technical and organisational measures to protect your data, such as an encrypted connection (HTTPS) and limited access to data.
8. Automated decisions
We do not make decisions about you based solely on automated processing.
9. Your rights
You have the right to access your data, have it corrected or erased, restrict its processing, object to processing based on our legitimate interest and receive your data in a portable format. Send your request to sheraz@syndric.io. We respond within one month and may ask you to confirm your identity.
If you disagree with how we handle your data, please tell us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
10. Changes
We may update this privacy statement when our services or the law change. The date at the top shows when the text was last updated.