data security
Privacy Policy
1. Context
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data means any data that can be used to personally identify you. This Privacy Policy explains which data we collect and for what purposes we use it. It also explains how and for what purpose this is done.
We note that data transmission over the internet, for example when communicating by e-mail, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
In this Privacy Policy, we explain what types of data syncara GmbH, hereinafter referred to as “syncara”, collects about you, hereinafter referred to as “personal data”, for what purposes such data is collected and to whom it may be disclosed. We also inform you about your rights with regard to the processing of your personal data.
This Privacy Policy applies when you visit one of our websites, social media pages, or business premises, when you use one of our applications or platforms, when you register for or participate in virtual or in-person events that we host or attend, when your employer works with us, when you contact our customer support or complete a form on one of our websites, when you participate in one of our studies, or when you otherwise interact or communicate with us.
These activities are collectively referred to below as the “Services”.
Our Services are directed exclusively at entrepreneurs within the meaning of Section 14 of the German Civil Code (BGB) and their authorized users. Use by consumers within the meaning of Section 13 BGB is not intended.
2. About Us
When we refer to “syncara”, “we”, or “us” in this Privacy Policy, we mean syncara GmbH, Georg-Friedrich-Händel-Str. 8, 96247 Michelau, Germany.
If you have any questions regarding data protection, you may contact us at mphilipp@syncara.io.
3. Categories of Personal Data Processed
Contact and business data
This category includes, among other things, first name, last name, e-mail address, postal address, professional position, telephone number, country of origin, and, where applicable, usernames and passwords.
Communication and interaction data
This category includes data arising from your interaction with us, such as e-mails, chat messages, attended webinars, downloaded files, search terms used, and information about product interests. It also includes registration data in connection with your participation in our events, such as travel information, scheduling information, dietary preferences or allergies, and accessibility requirements. During our events, participants may be photographed or recorded on image or audio media. Where applicable, recordings from surveillance cameras in our premises may also fall into this category.
Application-related usage data
This category includes information about how and whether certain functions of our Services are used. This includes, for example, applications used, versions, pages visited, files downloaded, online trainings used, queried data sources, created analyses, system configuration information, number of steps within a workflow, types of operations used, submitted queries, as well as hardware characteristics such as CPU type and memory size. Log file data and date and time stamps related to the use of the Services are also included.
Device and browser data
This includes data from your computer or mobile device used to access our websites or applications, such as device type, location, browser type and version, operating system and version, internet or mobile service provider, IP address or proxy server, geographic information derived from the IP address, date and time of access, duration of access, referring URL where applicable, and identifiers required to recognize you as a licensed user.
4. How We Collect Your Personal Data
You provide personal data to us directly when you use one of our Services, for example by accessing one of our websites or applications, participating in or registering for one of our events, or taking part in one of our studies. In addition, we may receive personal data from your employer or obtain information about you from public databases, websites, marketing or business partners, security and fraud detection providers, or social media platforms.
5. Purposes of Processing Personal Data
Provision of requested services
We process personal data in order to provide the requested Services and to ensure that we fulfill our contractual obligations toward you or your organization. This includes, among other things, resolving technical issues, responding to support requests, providing training related to our Services, and responding to inquiries received via our website, e-mail, or other channels.
Improvement and expansion of our Services
To improve our processes, systems, products, and services, we analyze aggregated, anonymized, or statistical usage and system data and conduct surveys relating to our Services. Training of AI systems using personal data is carried out exclusively in anonymized form or on the basis of the customer’s explicit consent, where legally required.
Information security and compliance
We process personal data to protect our Services from fraudulent, unauthorized, or unlawful activities, to investigate and prevent such activities, and to detect and prevent attacks on our applications or misuse of our Services. This also serves to ensure appropriate security of our business premises and compliance with legal and regulatory obligations.
Sales and marketing activities
We process personal data to inform you about our events, products, and Services, including direct marketing, and to process registrations for our events and provide related materials.
Other permissible purposes
Other permissible purposes include conducting customer surveys, evaluating marketing campaigns, and analyzing and improving customer relationships.
6. Processing of Personal Data
We process your personal data only if one of the following applies: (i) Processing is necessary to fulfill our contractual obligations or to provide requested Services. (ii) We have a legitimate interest in processing your personal data that is not overridden by your rights. (iii) You have given your consent to the processing of your personal data. (iv) Processing is required to comply with a legal or regulatory obligation.
Where you have given consent to data processing, such processing is based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of personal data are processed. In the case of explicit consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your end device, for example via device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.
Where personal data is required for the performance of a contract or for pre-contractual measures, processing is based on Article 6(1)(b) GDPR. Where processing is required to comply with a legal obligation, it is based on Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR. The applicable legal basis is specified in the relevant sections of this Privacy Policy.
Data Processing on Behalf of Customers
Where we process personal data on behalf of a customer, we act as a processor within the meaning of Article 28 GDPR, while the respective customer acts as the controller within the meaning of the GDPR. The details of such processing, in particular the nature and purpose of the processing, categories of data subjects, technical and organizational measures, and the rights and obligations of the parties, are governed by a data processing agreement concluded between syncara and the customer. The data processing agreement forms an integral part of the contractual relationship between us and the customer.
7. Disclosure of Personal Data
Depending on the purpose and necessity, we may disclose your personal data to the following categories of recipients: (i) to any subsidiaries of syncara GmbH, for example for internal data sharing within our organization, provided that and to the extent such subsidiaries exist and such disclosure is required for internal administrative or operational purposes. (ii) to third parties with whom we have entered into a written agreement. Examples include providers or service partners who support us in the areas of marketing, invoicing, credit card payment processing, data analytics, fraud prevention, network and information security, technical support, and customer service. (iii) to auditors, attorneys, or other advisors who are subject to confidentiality obligations. (iv) if you register for one of our events, including webinars and trainings, and we engage third parties to coordinate, sponsor, or present such events, we may transfer your contact details to the respective third party so that they can grant you access to the event, invite you to event-related activities, or contact you for marketing purposes related to the event, provided that this is necessary for the organization of the respective event or you have expressly consented thereto. (v) to law enforcement authorities, governmental bodies, and supervisory authorities in order to comply with legal or regulatory obligations, for example in response to a court order or subpoena.
A list of recipients can be provided upon request.
If you are located in the European Union, the United Kingdom, or Switzerland, your personal data may be transferred to countries outside the European Economic Area, the United Kingdom, or Switzerland. In such cases, we ensure the lawfulness of the transfer and implement appropriate safeguards to ensure an adequate level of data protection.
8. Data Retention
Personal data will be deleted upon your request or once it is no longer necessary for the purposes for which it was collected. Where statutory retention obligations apply or where personal data is required for the establishment, exercise, or defense of legal claims, such data will be retained until the applicable retention period expires or the claims have been resolved.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, use, alteration, and against unauthorized disclosure or access.
10. Your Rights
In accordance with applicable laws and regulations, you have the right to request access to, correction, deletion, restriction of processing, portability of, or to object to the processing of your personal data.
You also have the right to withdraw your consent to future processing at any time, for example by unsubscribing from marketing e-mails.
You have the right to lodge a complaint with a competent data protection supervisory authority. In the event of violations of the GDPR, this includes in particular the supervisory authority of your habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.
Depending on applicable local laws, you may have additional rights. Exercising your rights will not result in any disadvantage to you.
You may exercise your rights by contacting us at mphilipp@syncara.io.
11. Google API Services
The use and transfer of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use Requirements. The use of such integrations takes place exclusively where they have been activated or commissioned by the customer.
12. Updates
This Privacy Policy is updated on an ongoing basis. This version is dated January 23, 2026.