Skip to content
Syndryx

Privacy Policy

Last updated: October 1, 2026. This policy explains how Syndryx collects, uses, and protects personal data under the General Data Protection Regulation (GDPR).

1. Who We Are / Controller

Syndryx designs and builds websites and online shops, sets up CRM and content management systems, and provides website repair, hosting, maintenance and support for businesses in Greece.

The data controller for this website and the enquiries submitted through it is Syndryx, [LEGAL ENTITY NAME], with registered address [REGISTERED ADDRESS], Athens, Greece, VAT [ΑΦΜ]. You can contact the controller at info@syndryx.com.

2. Data We Collect

Depending on how you use the site, we may collect:

  • Contact and consultation forms: name, email, phone, company, current website, subject or need, selected plan, message, optional demo URL, your consent flag and timestamp, and the page submitted from.
  • Server and hosting logs: IP address, user agent, and timestamps, processed by Hostinger and by our own EU server strictly for security and operation.
  • Website assistant on the homepage: it answers common questions from content built into the website. The questions you choose or type are handled in your browser and are not stored or sent to us. If you want us to contact you, please use a contact form.
  • Demo Builder inputs: the information you type into the Demo Builder is processed in your browser only and is not stored server-side unless you submit a form.

This website does not provide user accounts and does not collect payment data.

4. How We Use Your Data

We use personal data to:

  • Answer and follow up on your enquiry.
  • Understand your requirements and prepare quotes.
  • Deliver and support the services you request, such as your website, online shop, CRM, repairs or maintenance.
  • Keep our website, systems, and communications secure.

We do not use profiling or automated decision-making, and we do not send marketing emails without your explicit request.

5. Where Your Data Goes / Processors

Where necessary to provide the website and respond to you, data may be processed by:

  • Hostinger International Ltd: website hosting and form storage, using EU data centres.
  • Syndryx CRM: our own customer management system, where enquiries from the website forms are recorded. It runs on a server in the EU operated by Syndryx and is accessible only through a private network.
  • Our email provider: used to reply to your enquiry.
  • Google Ireland Limited: Google tags for analytics and advertising conversion measurement.

We do not sell personal data. Google may process data in the United States under the EU–US Data Privacy Framework, as described in our Cookie Policy.

6. Retention

Enquiries are kept for up to 24 months after our last contact unless a contract follows. If a contract follows, relevant records are kept for the contract duration and statutory tax or accounting periods, generally five years in Greece. Hosting logs are retained according to Hostinger’s retention practices. You may request earlier deletion where applicable.

7. Cookies

We use strictly necessary storage to remember your privacy choice. With your consent, we use Google analytics and Google Ads conversion cookies to measure visits and which ads lead to enquiries; the data is processed by Google Ireland Limited. Fonts are self-hosted and are not requested from Google. See our Cookie Policy for details and ways to change your choice.

8. Your Rights

Subject to applicable law, you may request:

  • Access to your personal data.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data.
  • Restriction of processing.
  • Portability of data you provided.
  • Objection to processing based on legitimate interests.
  • Withdrawal of consent where processing relies on consent.

To exercise your rights, email info@syndryx.com. We aim to respond within one month. You also have the right to complain to the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, Greece.

9. Security

We use TLS for data in transit, restrict access to authorised personnel, keep internal systems behind a private network, and maintain backups. We handle personal-data breaches and notify the relevant authorities and affected people where required by Articles 33 and 34 GDPR.

10. Children

This website and its services are not directed to children under 16.

11. Changes to This Policy

We may update this policy to reflect changes to the website, services, or applicable law. The date at the top of this page shows when it was last updated.