1. Controller
The persons responsible during the technical test phase are Sven Gabler and Miranda Braddy, SYGNEXA. Final data-controller information and the complete business address will be added before the public market launch in accordance with the chosen legal form. Privacy requests may be sent to privacy@sygnexa.com.
2. Technical delivery and hosting
When this website is requested, technically necessary connection data is processed. It may include the IP address, time, requested URL, transferred data volume, browser and operating-system information, and referrer. Processing is necessary to deliver content, defend against attacks and maintain stable operation.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable and economical operation of the website. The reverse proxy is currently not configured to retain a permanent visitor access log. Security and system logs are retained only for as long as required for operation, error analysis and abuse prevention.
The website runs on a VPS in Oregon, United States, provided by OVH US LLC dba OVHcloud, 11950 Democracy Drive, Suite 300, Reston, VA 20190, USA. Where personal data is transferred to the United States, the transfer relies on the Standard Contractual Clauses agreed with OVHcloud under Article 46(2)(c) GDPR and the provider’s supplementary safeguards.
3. Local browser functions
SYGNEXA does not use advertising, analytics or profiling cookies on this website. Fonts, images and videos are self-hosted.
For the duration of a browser session, Session Storage records whether the intro has already finished or been skipped (key: sygnexa-intro-complete) and whether the public visit counter has already been increased for that session (key: sygnexa-visit-counted). This prevents unnecessary repeats. Both values remain on the device and are removed when the browser session ends. The server stores only an aggregate total for the counter, with no IP address, identifier or visitor profile. The local storage is required to provide the expressly requested interface functions.
4. Contact by email
When you contact us by email, we process the sender address, message content, time and any other information submitted voluntarily. Processing is used to answer the request and prevent misuse.
The legal basis is Article 6(1)(b) GDPR where communication concerns steps before or performance of a contract, and Article 6(1)(f) GDPR otherwise. Emails are processed using services from IONOS SE and deleted once the request is complete unless statutory retention or evidentiary duties apply.
5. Downloads
No public installer download is available during technical and field testing. Once released, downloads will be delivered through downloads.sygnexa.com on the same OVHcloud infrastructure. The connection data described under “Technical delivery and hosting” will be processed. SYGNEXA does not perform personal download analytics or create user profiles.
6. Licensing and Stripe
No information is sent to Stripe unless an external payment link is deliberately opened. When opening a Stripe payment link, users leave this website. Stripe Payments Europe, Limited, Dublin, Ireland, is generally responsible for collection and payment processing there under its own privacy notice. Payment and billing data required for a contract may subsequently be processed under Articles 6(1)(b) and 6(1)(c) GDPR.
7. Recipients and international transfers
Recipients are limited to providers needed for hosting, email communication or a deliberately initiated payment. Data is not disclosed for advertising. International transfers take place only where a lawful basis and the safeguards required by Chapter V GDPR are in place.
8. Retention
Data is deleted or anonymised once its purpose ends. Statutory commercial and tax retention periods and the time required to establish, exercise or defend legal claims remain unaffected.
9. Your rights
To exercise these rights, email privacy@sygnexa.com.
- Access to personal data (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure or restriction of processing (Articles 17 and 18 GDPR)
- Data portability where applicable (Article 20 GDPR)
- Objection to processing based on legitimate interests (Article 21 GDPR)
- Withdrawal of consent with future effect (Article 7(3) GDPR)
- Complaint to a data protection supervisory authority (Article 77 GDPR)
10. Automated decisions and required data
No automated decision-making, including profiling, takes place when visiting this website. Visitors are not required to provide personal data. The website cannot be delivered without technical connection data, and an enquiry cannot be answered without contact details.
11. Updates
This notice will be updated whenever features, providers or legal bases change. The version published on this page applies.
