Legal

Privacy Policy

Your privacy is important to me. Learn how I handle your data.

Last updated: 2026-01-28

This privacy policy applies to the processing of personal data by Cyntax;

Cyntax is the data controller within the meaning of the General Data Protection Regulation (GDPR);

Contact details:

Company name: Cyntax

Place of business: Deventer, Netherlands

Chamber of Commerce number: 94035490

Email: [email protected]

Website: https://cyntax.dev

For questions about this privacy policy or the processing of your personal data, you may contact me at the email address above.

Cyntax collects and processes the following categories of personal data:

Contact details (via contact form or email)

Name;

Email address;

Phone number (if provided);

Company name (if provided);

Content of your message.

Technical data (automatically collected)

IP address (anonymized if analytics are used);

Browser type and version;

Operating system;

Date and time of visit;

Pages visited and click behavior;

Referring website (referrer).

Business data (for Service Agreement)

Name and address details;

Billing information;

Chamber of Commerce number and VAT number;

Bank details;

Communication history.

Cyntax processes personal data exclusively for the following purposes:

Service delivery

Entering into and performing Service Agreements;

Responding to questions and requests via the contact form or email;

Preparing and sending quotations;

Invoicing for services rendered.

Communication

Maintaining contact with (potential) clients;

Informing about project progress;

Sending relevant business information.

Website and analytics

Analyzing website usage to improve user experience;

Ensuring the technical operation and security of the website.

Legal obligations

Complying with legal obligations, including tax retention requirements.

Cyntax processes personal data based on the following legal bases from Article 6 GDPR:

Performance of a contract (Article 6(1)(b) GDPR)

Processing data necessary for entering into and performing a Service Agreement;

Processing billing information.

Legitimate interest (Article 6(1)(f) GDPR)

Responding to contact requests and questions;

Analyzing website statistics to improve services;

Securing the website and systems;

Maintaining a client administration.

Legal obligation (Article 6(1)(c) GDPR)

Complying with tax retention requirements;

Complying with other legal obligations.

Consent (Article 6(1)(a) GDPR)

Placing non-essential cookies (if applicable);

Sending newsletters or marketing communications (if applicable).

Cyntax does not retain personal data longer than necessary for the purpose for which it was collected, unless a statutory retention period applies;

The following retention periods are applied:

Contact details and correspondence

Contact form data: maximum 1 year after last contact, unless an agreement is entered into;

Business correspondence: 7 years after termination of the agreement (statutory retention requirement).

Client data

Billing information and financial administration: 7 years (statutory retention requirement);

Project documentation: 7 years after project completion;

Agreements: 7 years after termination.

Technical data

Analytics data: maximum 26 months (or shorter if privacy-friendly analytics are used);

Server log files: maximum 12 months.

After retention period expires

After the retention period expires, personal data will be deleted or anonymized, unless there is a valid reason to retain the data longer.

The Cyntax website may use cookies and similar technologies;

Cookies are small text files that are placed on your device when you visit the website;

Cyntax distinguishes between the following types of cookies:

Necessary cookies

Technically necessary cookies that are essential for the operation of the website;

No consent is required for these cookies.

Analytical cookies

Cookies for collecting anonymized statistics about website usage;

If privacy-friendly analytics are used (such as Plausible or Fathom), no consent is required;

For analytics that process personal data (such as Google Analytics), consent is requested in advance.

Functional cookies

Cookies that improve website functionality, such as remembering preferences;

No consent is required for functional cookies that do not process personal data.

Marketing and tracking cookies

Cyntax does not place marketing or tracking cookies by default;

If this changes, explicit consent will be requested in advance.

Cookie preferences

You can change your cookie preferences at any time through your browser settings;

Blocking cookies may affect the functionality of the website.

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Article 15 GDPR)

You have the right to know what personal data Cyntax processes about you and to receive a copy thereof.

Right to rectification (Article 16 GDPR)

You have the right to have incorrect personal data corrected or incomplete data supplemented.

Right to erasure (Article 17 GDPR)

You have the right to have your personal data deleted, unless Cyntax has a legal basis to retain the data.

Right to restriction of processing (Article 18 GDPR)

You have the right to have the processing of your personal data temporarily restricted under certain circumstances.

Right to data portability (Article 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer it to another data controller.

Right to object (Article 21 GDPR)

You have the right to object to the processing of your personal data based on legitimate interest.

Right to withdraw consent

If the processing is based on consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of processing before the withdrawal.

Exercising your rights

You can exercise your rights by contacting [email protected];

Cyntax will respond to your request within 30 calendar days;

Cyntax may ask you to verify your identity before complying with your request.

Cyntax implements appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration or disclosure;

The following security measures are applied, among others:

Technical measures

Encrypted connections (HTTPS/TLS) for all communication via the website;

Encrypted storage of sensitive data where applicable;

Regular software updates and security patches;

Firewalls and secure server environments;

Strong passwords and two-factor authentication where possible.

Organizational measures

Limited access to personal data on a need-to-know basis;

Confidentiality obligations for any employees or contractors;

Awareness and knowledge of privacy laws and regulations.

Data breaches

In case of a data breach that is likely to pose a risk to your rights and freedoms, Cyntax will report this to the Dutch Data Protection Authority within 72 hours;

If the data breach is likely to pose a high risk to your rights and freedoms, you will be informed as soon as possible.

Cyntax reserves the right to modify this privacy policy;

Changes will be published on the website and take effect on the date of publication;

The date of the last modification is stated at the top of this privacy policy;

In case of substantial changes that materially affect your rights or the processing of your personal data, Cyntax will make reasonable efforts to inform you;

It is advisable to periodically review this privacy policy to stay informed of any changes.

If you have a complaint about the processing of your personal data by Cyntax, you may contact [email protected];

Cyntax will take your complaint seriously and strive for a satisfactory solution;

If you believe that Cyntax has not adequately responded to your complaint, or if you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens (Dutch Data Protection Authority)

P.O. Box 93374

2509 AJ The Hague, Netherlands

Phone: +31 88 1805 250

Website: https://autoriteitpersoonsgegevens.nl

Privacy Policy

Article 1. Identity and contact details

Article 1. Identity and contact details

Article 2. What personal data is collected

Article 2. What personal data is collected

Contact details (via contact form or email)

Technical data (automatically collected)

Business data (for Service Agreement)

Article 3. Purposes of processing

Article 3. Purposes of processing

Service delivery

Communication

Website and analytics

Legal obligations

Article 4. Legal bases for processing

Article 4. Legal bases for processing

Performance of a contract (Article 6(1)(b) GDPR)

Legitimate interest (Article 6(1)(f) GDPR)

Legal obligation (Article 6(1)(c) GDPR)

Consent (Article 6(1)(a) GDPR)

Article 5. Retention periods

Article 5. Retention periods

Contact details and correspondence

Client data

Technical data

After retention period expires

Article 6. Sharing with third parties

Article 6. Sharing with third parties

Processors

Other recipients

Safeguards

Article 7. Cookies

Article 7. Cookies

Necessary cookies

Analytical cookies

Functional cookies

Marketing and tracking cookies

Cookie preferences

Article 8. Data subject rights

Article 8. Data subject rights

Right of access (Article 15 GDPR)

Right to rectification (Article 16 GDPR)

Right to erasure (Article 17 GDPR)

Right to restriction of processing (Article 18 GDPR)

Right to data portability (Article 20 GDPR)

Right to object (Article 21 GDPR)

Right to withdraw consent

Exercising your rights

Article 9. Security

Article 9. Security

Technical measures

Organizational measures

Data breaches

Article 10. Changes

Article 10. Changes

Article 11. Complaints

Article 11. Complaints

Privacy Policy

Article 1. Identity and contact details

Article 1. Identity and contact details

Article 2. What personal data is collected

Article 2. What personal data is collected

Contact details (via contact form or email)

Technical data (automatically collected)

Business data (for Service Agreement)

Article 3. Purposes of processing

Article 3. Purposes of processing

Service delivery

Communication

Website and analytics

Legal obligations

Article 4. Legal bases for processing

Article 4. Legal bases for processing

Performance of a contract (Article 6(1)(b) GDPR)

Legitimate interest (Article 6(1)(f) GDPR)

Legal obligation (Article 6(1)(c) GDPR)

Consent (Article 6(1)(a) GDPR)

Article 5. Retention periods

Article 5. Retention periods

Contact details and correspondence