Privacy Policy

This Privacy Policy explains how SynerTech Labs SNC collects, uses, stores, and protects personal data when you visit our website, contact us, or interact with our services.

We process personal data in accordance with the Swiss Federal Act on Data Protection and, where applicable, the EU General Data Protection Regulation.

The controller responsible for the processing of personal data is:

SynerTech Labs SNC
c/o Thomas Lerch
Rue Saint-Maurice 5
2852 Courtételle
Switzerland

UID: CHE-453.189.926

Email: info@synertech-labs.ch
Phone: +41 79 886 91 31

For privacy-related requests, contact us at:

info@synertech-labs.ch

We may collect and process the following categories of personal data.

3.1 Data you provide through the contact form

When you use the contact form on our website, we may collect:

• name;
• email address;
• company name;
• inquiry type;
• message content;
• any other information you choose to include in your message.

Please do not include sensitive personal data, confidential third-party information, health information, payment card data, passwords, or other highly sensitive information in the contact form.

3.2 Data you provide when contacting us directly

If you contact us by email, phone, LinkedIn, or another communication channel, we may process:

• name;
• email address;
• phone number;
• company or organisation;
• role or professional context;
• communication content;
• attachments or documents you send to us;
• metadata related to the communication.

3.3 Technical data

When you visit our website, technical data may be collected automatically by our website, hosting provider, security systems, or server logs. This may include:

• IP address;
• date and time of access;
• visited pages;
• browser type and version;
• operating system;
• device type;
• referrer URL;
• language preferences;
• error logs;
• security and access logs.

This data is used to operate, secure, maintain, and improve the website.

3.4 Business and project data

If you discuss a project, service, product, partnership, or business relationship with us, we may process:

• business contact details;
• project descriptions;
• technical requirements;
• meeting notes;
• commercial correspondence;
• proposals, offers, invoices, and contract-related information.

3.5 Cookies and similar technologies

Our website uses essential technical storage required for operation and functionality, including a preference cookie that records whether you accepted or rejected optional analytics.

Where offered in Analytics settings, we use Google Analytics 4 and/or Microsoft Clarity only with your explicit consent. You can consent to each available service independently, and each script remains blocked unless you enable that service. You can withdraw or change your choices at any time through the Analytics settings link in the website footer. A newly added analytics service always requires a fresh consent choice.

We do not enable advertising storage, advertising personalization, or marketing cookies through this implementation.

Apart from any consent-controlled analytics service currently offered in Analytics settings and described below, we do not embed third-party tracking content. External websites are responsible for their own privacy practices.

Current cookie and analytics setup:

• Essential technical storage: Yes, including the analytics consent preference.
• Analytics: the services currently listed in Analytics settings, only after consent.
• Marketing or advertising storage: Disabled.
• Session recordings and heatmaps: Microsoft Clarity, when listed in Analytics settings and only after consent.

We process personal data for the following purposes:

• to respond to inquiries;
• to communicate with potential clients, clients, partners, and users;
• to evaluate project requests and business opportunities;
• to provide consulting, software, AI, data, infrastructure, and related services;
• to operate, maintain, secure, and improve our website;
• to manage business relationships;
• to prepare offers, proposals, contracts, and invoices;
• to comply with legal, accounting, tax, and regulatory obligations;
• to protect our rights, security, systems, users, and business interests.

Where Swiss data protection law applies, we process personal data in accordance with the Swiss Federal Act on Data Protection.

Where the EU General Data Protection Regulation applies, the legal basis may include:

• your consent;
• the performance of a contract or pre-contractual steps;
• compliance with legal obligations;
• our legitimate interests, including communication, website security, business development, service delivery, and improvement of our website and services.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that took place before withdrawal.

When you submit the contact form, the data you provide is used to review and respond to your inquiry.

Your message may be reviewed by members of SynerTech Labs SNC who are responsible for business, technical, consulting, product, or administrative matters.

Contact form submissions are processed through Formspree, which provides the technical infrastructure used to receive and transmit contact form messages. When you submit the contact form, Formspree may process the information entered in the form as well as technical metadata such as IP address, browser type, domain name, access time, and referring website address, where necessary to provide, secure, and maintain the service.

Our website is hosted by Hostinger.

Hostinger may process technical data such as IP addresses, server logs, request metadata, and security logs in order to deliver the website, maintain technical stability, and protect the website against misuse, attacks, and technical errors.

When Google Analytics 4 is offered in Analytics settings and you consent, we use the standard service supplied under our account terms by Google Ireland Limited. Google receives page URLs and referrers, timestamps, language and screen information, browser and device details, interaction events, approximate location derived from the connection IP address, and pseudonymous client and session identifiers. The raw IP address is used during collection and discarded before Analytics logs the measurement data. Google Analytics may set first-party identifiers such as the `_ga` cookie. We do not use User-ID, and we disable Google Signals and advertising-personalization signals in the website configuration.

When Microsoft Clarity is offered in Analytics settings and you consent, we use the service supplied by Microsoft Corporation and, for customers in Europe, Microsoft Ireland Operations Limited. Clarity receives page and referrer URLs, timestamps, browser, operating-system and device details, IP-based approximate location, pseudonymous user, session and page identifiers, interaction and performance events, and DOM and layout information used to reconstruct sessions. Input fields and dropdown values are explicitly masked on our contact form and are also masked by Clarity by default. We do not send custom user identifiers through Clarity's Identify API.

Analytics is used to improve website content, navigation, accessibility, performance, and the effectiveness of our contact paths. We do not send names, email addresses, phone numbers, or contact-form messages to these analytics services as event parameters.

Recipients of analytics data are Google Ireland Limited and its authorised affiliates and processors, including Google LLC in the United States, and Microsoft Ireland Operations Limited, Microsoft Corporation in the United States, and their authorised processors. Data may be processed in Ireland, Switzerland, the European Economic Area, the United Kingdom, the United States, and other countries in which the providers or their processors operate. Depending on the destination, transfers rely on an applicable adequacy decision or recognised data-privacy framework, or on contractual safeguards including the European Commission's Standard Contractual Clauses and corresponding Swiss safeguards. Further information is available in the Google Privacy Policy and the Microsoft Privacy Statement.

For the standard Google Analytics property, user- and event-level data is retained for no more than 14 months; aggregate reports may remain available for longer. Microsoft Clarity retains playback data for 30 days and click, heatmap, labelled, or favourited session data for no more than 9 months. Our consent-preference cookie is retained for 180 days. Provider retention may change where required for security, legal compliance, or service operation; we periodically verify these settings and disclosures.

Analytics is optional. The default state is denied, no analytics script is downloaded before consent, and advertising storage remains denied. You can revoke consent through Analytics settings in the footer; this removes accessible first-party analytics cookies and reloads the page to stop active analytics scripts.

Our website may link to external websites or services, including product websites, social media pages, partner websites, or third-party tools.

Third-party websites are responsible for their own privacy practices. We recommend reviewing their privacy policies before using them.

External links currently shown on or from the website may include:

• LinkedIn;
• GoGym;
• IconFlowLabs;
• KitchenWhizz;
• other product, partner, or project websites.

We may disclose personal data to the following categories of recipients where necessary:

• hosting and infrastructure providers, including Hostinger;
• contact-form service providers, including Formspree;
• analytics providers, where enabled with consent, including Google Ireland Limited, Google LLC, Microsoft Ireland Operations Limited, and Microsoft Corporation;
• email and communication providers;
• IT, security, and maintenance providers;
• accounting, tax, legal, or administrative service providers;
• banks and payment providers, where relevant;
• public authorities, courts, or regulators where legally required;
• business partners or contractors where needed for a project and legally permitted.

We do not sell personal data.

Personal data may be processed in Switzerland, the European Economic Area, the United Kingdom, the United States, or other countries depending on the service providers used.

In particular, contact form submissions are processed through Formspree and may be processed outside Switzerland. Website hosting and technical infrastructure are provided by Hostinger, whose available server locations may include Switzerland-adjacent or international locations depending on the selected hosting plan and configuration.

If personal data is transferred to a country that does not provide an adequate level of data protection, we take appropriate safeguards where required, such as contractual protections, standard data protection clauses, provider assessments, or other legally recognised mechanisms.

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Typical retention periods are:

• contact form inquiries: up to 24 months after the last interaction, unless a business relationship follows;
• business correspondence: for as long as needed for the business relationship and legal documentation;
• contract, accounting, tax, and invoice records: for the period required by applicable law;
• technical logs: for a limited period necessary for security, troubleshooting, and website operation;
• analytics data: Google Analytics user- and event-level data for no more than 14 months and Microsoft Clarity data for no more than 9 months, subject to the shorter periods described in Section 8;
• analytics consent preference: 180 days.

We may retain data longer where required to establish, exercise, or defend legal claims.

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include access controls, secure infrastructure, encrypted connections, backups, provider security measures, and internal restrictions on who can access personal data.

No website, email system, or internet transmission is completely secure. We therefore cannot guarantee absolute security.

Depending on the applicable law and circumstances, you may have the right to:

• request information about the personal data we process about you;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• object to certain processing;
• request restriction of processing;
• request data portability, where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent data protection authority.

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner.

To exercise your rights, contact us at:

info@synertech-labs.ch

We may need to verify your identity before responding to a request.

We do not use personal data collected through this website for automated decisions that produce legal effects or similarly significant effects on individuals.

Our website and services are intended for business and professional audiences. They are not directed at children.

If we become aware that we have collected personal data from a child without appropriate authorisation, we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.

The latest version published on this website applies.

For questions about this Privacy Policy or our processing of personal data, contact:

SynerTech Labs SNC
c/o Thomas Lerch
Rue Saint-Maurice 5
2852 Courtételle
Switzerland

Email: info@synertech-labs.ch
Phone: +41 79 886 91 31