Privacy policy
Personal data protection
How SYNVERIQ collects, uses, stores and protects personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and French Law no. 78-17 of 6 January 1978 as amended (Loi Informatique et Libertés).
01Scope
This policy explains how SYNVERIQ processes personal data collected through this website and through business correspondence with prospective and existing clients. It applies to visitors to https://synveriq.agency and to individuals who contact the company by email or through the enquiry form.
It does not cover personal data processed on behalf of a client in the course of a project. In that situation the client is normally the controller and SYNVERIQ acts as a processor under a separate written agreement containing the provisions required by article 28 of the GDPR.
02Controller
| Controller | SYNVERIQ (SASU), SIREN 107 517 864 |
|---|---|
| Registered office | 21 rue Carpeaux, Appartement 7, 75018 Paris, France |
| Legal representative | Viktorija Smolina, President |
| Contact | contact@synveriq.agency |
Given the nature, scope and purposes of the processing carried out, SYNVERIQ is not required to appoint a Data Protection Officer under article 37 of the GDPR. Data protection matters are handled directly by the company's legal representative.
03Data collected
Data you provide
- Enquiry form — name, company, email address, telephone number (optional), project type, message, and optional budget and timeline indications.
- Correspondence — the content of emails and messages exchanged in connection with an enquiry or project.
- Contractual and accounting data — where an engagement proceeds, the identification, contact and billing details necessary to perform and invoice the contract.
Data collected automatically
- Server logs — standard technical data (IP address, date and time of request, resource requested, HTTP status, user-agent) recorded automatically by the web server for security, diagnostics and abuse prevention.
This website uses no analytics, advertising or tracking technology. See the Cookie Policy.
04Special categories of data
SYNVERIQ does not seek, and asks that you do not transmit through the enquiry form, data falling within the special categories referred to in article 9 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning sex life or sexual orientation), nor data relating to criminal convictions and offences within the meaning of article 10 of the GDPR.
Any such data transmitted without being requested will be deleted, unless its retention is necessary for the establishment, exercise or defence of legal claims.
05Purposes and legal bases
| Purpose | Data | Legal basis (art. 6 GDPR) |
|---|---|---|
| Responding to an enquiry | Form data, correspondence | Art. 6(1)(b) — pre-contractual steps taken at your request; art. 6(1)(f) — legitimate interest in responding to business enquiries |
| Preparing a quotation | Enquiry and project data | Art. 6(1)(b) — pre-contractual steps |
| Performing a contract | Contact, contractual and billing data | Art. 6(1)(b) — performance of a contract |
| Invoicing, accounting, tax obligations | Accounting data | Art. 6(1)(c) — compliance with a legal obligation (art. L123-22 French Commercial Code; French Tax Procedure Book) |
| Security and proper operation of the website | Server logs | Art. 6(1)(f) — legitimate interest in the security and availability of the service |
| Establishing, exercising or defending legal claims | Relevant records | Art. 6(1)(f) — legitimate interest in protecting the company's rights |
Legitimate interests
Where processing is based on legitimate interests, SYNVERIQ has assessed whether those interests are overridden by the interests or fundamental rights and freedoms of the persons concerned. The processing described is limited in scope, corresponds to what a person submitting a business enquiry would reasonably expect, involves no profiling and no transfer for marketing purposes, and is accordingly considered proportionate. You may object to it at any time (section 9).
06Consent and commercial communications
The enquiry form includes a consent confirmation covering the processing of the data submitted. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
SYNVERIQ operates no mailing list, sends no unsolicited commercial email, and does not sell, rent or transfer contact details to third parties for marketing purposes. Any future electronic commercial communication would be sent in accordance with article L34-5 of the French Postal and Electronic Communications Code and the CNIL's guidance, and would include an unsubscribe mechanism in every message.
07Recipients and processors
Data is accessed by the company's legal representative and is disclosed only as set out below.
| Recipient | Role | Data |
|---|---|---|
| Namecheap, Inc. | Website hosting | Server logs; data transmitted to the site |
Every processor engaged is bound by a contract meeting the requirements of article 28 of the GDPR, covering confidentiality, security, assistance with data subject rights, sub-processing and the deletion or return of data at the end of the engagement.
Enquiry form delivery
The enquiry form is not currently connected to any third-party form-handling or mail-delivery service. Until such a service is configured, form submissions are not transmitted to or stored by any third-party provider, and the Contact page directs enquiries to email instead. Should a provider be engaged, this policy will be updated to identify it before the service goes live.
Other disclosures
Data may also be disclosed to the company's professional advisers bound by professional secrecy (in particular its accountant or lawyer), to public authorities where disclosure is required by law or by a court order, and, in the event of a transfer of the business, to the transferee, in each case strictly to the extent necessary.
08International transfers
Namecheap, Inc. is established in the United States. Where personal data is transferred outside the European Union, SYNVERIQ relies on the transfer mechanisms provided for in Chapter V of the GDPR — in practice, the Standard Contractual Clauses adopted by the European Commission (implementing decision (EU) 2021/914), supported by a transfer impact assessment, or the adequacy decision applicable to the recipient where one is in force.
Further information about the safeguards applicable to a given transfer may be requested at contact@synveriq.agency.
09Your rights
Subject to the conditions and limits laid down by the GDPR and by Law no. 78-17 of 6 January 1978 as amended, you have the right to:
- be informed about the processing carried out — the purpose of this policy;
- access your data and obtain a copy of it (art. 15 GDPR);
- rectification of inaccurate or incomplete data (art. 16);
- erasure of your data where one of the grounds in article 17 applies;
- restriction of processing in the cases listed in article 18;
- data portability for data you provided, where processing is based on consent or contract and carried out by automated means (art. 20);
- object to processing based on legitimate interests (art. 21);
- withdraw consent at any time where processing is based on consent (art. 7(3));
- not be subject to a decision based solely on automated processing producing legal effects concerning you or similarly significantly affecting you (art. 22).
Exercising your rights
Requests should be sent to the contact details in section 2. A reply will be given as soon as possible and at the latest within one month of receipt, which may be extended by two further months where the request is complex or where several requests have been made; you will be informed of any such extension and of the reasons for it. Proof of identity may be requested where there is reasonable doubt as to the identity of the applicant.
10Automated decision-making
SYNVERIQ carries out no automated decision-making producing legal effects or similarly significantly affecting individuals, and performs no profiling on the basis of data collected through this website.
11Retention periods
| Category | Retention period |
|---|---|
| Enquiries not resulting in a contract | Up to 12 months from the last contact |
| Contractual and project records | 5 years from the end of the contract, reflecting the limitation period under article 2224 of the Civil Code |
| Accounting documents and supporting records | 10 years from the close of the financial year, pursuant to article L123-22 of the Commercial Code |
| Server logs | The hosting provider's standard operational retention period, after which they are deleted or overwritten |
Contact requests and project enquiry data are retained for a maximum of 12 months after the last contact, unless a contractual relationship is established or a longer retention period is required by law. At the end of the applicable period, data is deleted or securely destroyed.
12Security
SYNVERIQ implements technical and organisational measures appropriate to the risk, in accordance with article 32 of the GDPR: encryption of the site in transit (HTTPS/TLS), access control and authentication on the systems holding correspondence, the principle of least privilege, keeping software and dependencies up to date, and minimising the volume of data collected.
No transmission or storage method offers absolute security. Where a personal data breach is likely to result in a risk to the rights and freedoms of individuals, it will be notified to the CNIL without undue delay and, where feasible, within 72 hours of SYNVERIQ becoming aware of it (art. 33 GDPR); the persons concerned will be informed where article 34 so requires.
13Minors
This website is intended for a professional audience and is not directed at minors. SYNVERIQ does not knowingly collect personal data relating to minors through this website.
14Complaints
If you consider that your rights have not been respected, please contact SYNVERIQ first at contact@synveriq.agency so that the matter can be examined directly.
You may also, at any time, lodge a complaint with the supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France
Telephone: +33 1 53 73 22 22 · cnil.fr
15External links
This website may contain links to third-party websites. SYNVERIQ is not responsible for their content or their personal data practices, and this policy does not apply to them.
16Changes
This policy may be amended to reflect changes in the company's practices or in applicable law. The version published on this page is the version in force; the version number and date appear at the top of the page.
Any question concerning this policy may be sent to contact@synveriq.agency.