Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

Synergie-Services GmbH Carl-Schurz-Str. 12 86156 Augsburg Email: kontakt@synergie-services.de Phone: +49 170 966 88 68

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Supervisory Authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach https://www.lda.bayern.de

3. Hosting

This website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). Netlify is certified under the EU-U.S. Data Privacy Framework. When visiting our website, your data is processed on Netlify servers. Personal data (in particular your IP address) may be transmitted to Netlify.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable and secure website provision).

Further information: Netlify Privacy Policy

4. Data Processors

Supabase

For the provision of the client portal, we use Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992) as a database service provider. Data is stored on servers in the EU (Frankfurt am Main, Germany). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place.

5. Data Collection on This Website

Cookies

Our website uses exclusively technically necessary cookies:

• Supabase Auth Cookies — For logging into the client portal. These cookies are only set when you actively log in. Duration: session or up to 7 days with "Stay logged in".
• Language Setting — Stores your preferred language (DE/EN/FR/NL). Duration: 1 year.
• Theme Setting — Stores your preference for light/dark design. Duration: unlimited (localStorage).

We do not use tracking cookies, advertising cookies, or third-party cookies. A cookie consent banner is therefore not required, as only technically necessary cookies are used (§ 25 para. 2 no. 2 TDDDG).

Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technically correct presentation and optimisation of the website).

Contact Form

When you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide, are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We will not share this data without your consent.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing enquiries).

The data is stored in our Supabase database (EU, Frankfurt) and deleted after processing your enquiry or at the latest after 12 months.

Waiting List

When you sign up for our waiting list, we collect: name, email address, company, role, company size, areas of interest, and optional comments. This data is used to contact you and inform you about our services.

Legal basis: Art. 6(1)(a) GDPR (consent). You may revoke your consent at any time with future effect by sending an email to kontakt@synergie-services.de.

6. Web Analytics

Umami Analytics

This website uses Umami, a privacy-friendly web analytics service by Umami Software Inc. Umami does not set cookies and does not store personal data. Only anonymised, aggregated usage data is collected (e.g., page views, session duration, referral sources, device type). Identifying individual users is not possible.

Data is processed on Umami Cloud servers (EU).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymised analysis of website usage to improve our offering).

Since Umami does not collect personal data and does not set cookies, no consent under § 25 TDDDG is required.

7. Your Rights

You have the right at any time to:

• Access your stored personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent given, with future effect (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular with the Bavarian State Office for Data Protection Supervision (BayLDA)

8. Integrated Services

Fonts

This website uses the fonts DM Sans and DM Serif Display. The fonts are delivered locally from our own server (self-hosting). No connection to external servers (e.g., Google) takes place. Your IP address is not transmitted to third parties.

9. SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons. An encrypted connection is indicated by the browser address bar changing from "http://" to "https://" and the lock icon in your browser bar.

10. Currency and Changes to This Privacy Policy

This privacy policy is currently valid as of April 2026. Due to the further development of our website or changes in legal requirements, it may be necessary to amend this privacy policy.