Privacy Policy

This privacy policy explains how synanovae AG ("we", "our", or "us") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Last updated: January 2026

Data Controller Information

synanovae AG is the data controller for the personal information we collect about you. We are registered in Austria with registration number FN852147a and VAT number ATU85369741. Our registered address is Josefstädter Straße 123, 8072 Graz, Styria, Austria.

Data We Collect

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us, such as when you fill out contact forms, subscribe to our newsletter, or request our services. This may include your name, email address, phone number, company information, and any messages or enquiries you send to us.

We also automatically collect certain information about your visit to our website, including your IP address, browser type, operating system, referring website, pages viewed, and the dates and times of your visits. This information helps us understand how our website is used and improve our services.

How We Use Your Information

We use the personal information we collect for various purposes related to providing and improving our services. We use your data to respond to your enquiries and provide customer support, deliver our e-commerce analytics services, send you important updates about our services, and improve our website and service offerings.

When you provide your contact information, we may use it to communicate with you about our services, send you relevant business information, and provide technical support. We process this information based on our legitimate business interests and, where required, with your explicit consent.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to control them, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as marketing communications
• Contract: When processing is necessary to perform a contract with you or take steps before entering into a contract
• Legitimate interests: When we have legitimate business interests that are not overridden by your privacy rights
• Legal obligation: When we need to comply with legal requirements

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential.

We may also disclose your information when required by law, to protect our rights or property, or to ensure the safety of our users and the public.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Contact form submissions and enquiry data are typically retained for up to three years to maintain our business records and provide ongoing support.

Website analytics data and cookie information are retained according to the retention periods specified by the respective analytics services, typically ranging from 14 months to 38 months. You can request deletion of your personal data at any time, subject to certain legal obligations.

Your Rights

Under GDPR and Austrian data protection law, you have several rights regarding your personal information:

• Right of access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate personal data
• Right to erasure: You can request deletion of your personal data
• Right to restrict processing: You can request limitation of processing under certain circumstances
• Right to data portability: You can request transfer of your data to another organisation
• Right to object: You can object to processing based on legitimate interests
• Right to withdraw consent: You can withdraw consent at any time where processing is based on consent

International Data Transfers

We primarily process your personal data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of your information.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable data protection laws, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) or your local supervisory authority.