Privacy Policy

Last updated: November 9, 2026

1. Data controller

The data controller is SynX S.r.l., operating the website synxai.org. For any privacy-related request, write to info@synxai.it.

2. Data we collect

  • Contact form: first name, last name, organization, email address and message.
  • Navigation data: IP address, browser type, pages visited, time and date of the visit, processed by our hosting provider for security and operation of the site.

3. Purposes and legal basis

  • Responding to contact requests — legal basis: pre-contractual measures and legitimate interest (Art. 6(1)(b)(f) GDPR).
  • CRM and follow-up communications — legal basis: the consent you give when submitting the form (Art. 6(1)(a) GDPR).
  • Visit statistics with Google Analytics — legal basis: your consent, given in the cookie banner (Art. 6(1)(a) GDPR).

4. Data retention

Contact form data is kept for up to 24 months from submission, or until you ask us to delete it. Navigation data is kept for a maximum of 13 months.

5. Processors

We share data with the following processors under Data Processing Agreements:

  • HubSpot, Inc. (EU data centre) — CRM, receives contact form submissions and the sender's IP address (for location and spam protection).
  • Cloudflare, Inc. — hosting, content management database and CDN.
  • Google Ireland Limited — Google Analytics 4 visit statistics, only if you accept analytics cookies.
  • ORCID, Inc. — the publication list is loaded from ORCID's public API by our server; no visitor data is sent to ORCID.

No data is transferred outside the European Economic Area without adequate safeguards.

6. Your rights

Under the GDPR you have the right to access (Art. 15), rectify (Art. 16) and erase (Art. 17) your data, to restrict (Art. 18) or object to (Art. 21) its processing, to data portability (Art. 20), and to withdraw your consent at any time without affecting prior processing. To exercise them, write to info@synxai.it. You may also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

7. Cookies

This site uses technical storage needed for it to work (for example, remembering your language and cookie choices). Only with your consent, it also uses Google Analytics 4 (Google Ireland Limited) to measure visits and contact requests: it sets the _ga and _ga_<id> cookies, kept for up to 13 months, and usage data may be transferred to the United States under the EU–US Data Privacy Framework. Advertising features are disabled. You can accept or reject analytics cookies in the banner and change your choice at any time with “Manage cookies” at the bottom of every page.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows the latest revision.