GDPR compliant

Privacy Policy

Transparent information on the processing of your personal data on synaplan.com.

Last updated: April 2026

1. Controller

The controller responsible for data processing on this website is:

metadist data management GmbH

Königsallee 82, 40212 Düsseldorf, Germany

Email: [email protected]

2. General information on data processing

We take the protection of your personal data very seriously and treat it in accordance with applicable data protection laws and this privacy policy. In general, you can use our website without providing personal data. Where personal data is collected on our pages, this is always on a voluntary basis. This data will not be passed on to third parties without your explicit consent. We draw your attention to the fact that data transmission over the internet may have security gaps. Complete protection against access by third parties is not possible.

3. Data collection on this website

Cookies

Our website uses cookies. Cookies are small text files stored on your device. You can manage cookies via your browser settings or our cookie banner at any time and enable or disable individual categories.

Necessary cookies

These cookies are required for the basic functions of the website (session management, security, language settings). Without these cookies the website cannot function properly.

Art. 6(1)(f) GDPR

Analytics cookies

These cookies help us understand how visitors interact with the website by collecting and reporting information anonymously, allowing us to continuously improve the user experience.

Art. 6(1)(a) GDPR (consent)

Marketing cookies

These cookies are used to offer visitors relevant content and marketing campaigns. They track visitors across websites and collect information to provide tailored content.

Art. 6(1)(a) GDPR (consent)

Server log files

The website provider automatically collects and stores information in server log files that your browser transmits to us. This includes: IP address, date and time of the request, page accessed, access status/HTTP status code, data volume transferred, referring website, browser and operating system.

Legal basisArt. 6(1)(f) GDPR
Retention period7 days

4. Book a Demo (Calendly)

Our website offers you the option to book a demo appointment via the Calendly service. When you use the booking feature, your details (name, email address, any additional information you provide and the chosen time slot) are transferred to Calendly and processed there. Data is only transferred to Calendly once you actively complete and submit the booking form.

ProviderCalendly, LLC, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA
PurposeScheduling product demonstrations
Legal basisArt. 6(1)(a) GDPR (consent through active use of the booking form)
Transfer to the USACalendly processes data on servers in the USA. Calendly is certified under the EU-U.S. Data Privacy Framework (DPF).
Further informationhttps://calendly.com/legal/privacy-notice

5. Hosting by Hetzner

This website is hosted on servers operated by Hetzner Online GmbH. The hoster processes data collected during your visit to the website on our behalf.

ProviderHetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Data processedIP address, access time, pages accessed, referrer, browser information
Legal basisArt. 6(1)(f) GDPR (legitimate interest in reliable hosting)
Data processing agreementData processing agreement pursuant to Art. 28 GDPR in place

6. Cloudflare Content Delivery Network (CDN)

We use Cloudflare's Content Delivery Network (CDN) to enhance the security and delivery speed of our website. A CDN is a network of globally distributed servers that delivers content to users in an optimised manner.

ProviderCloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany
Data processedIP address, timestamps, HTTP requests, browser information
PurposeFaster load times, DDoS protection, SSL certificate provision, rate-limiting and abuse detection
Legal basisArt. 6(1)(f) GDPR
Data processing agreementData processing agreement pursuant to Art. 28 GDPR
Transfer to the USACloudflare also processes data on servers in the USA. The transfer is based on the EU Commission's Standard Contractual Clauses and the EU-U.S. Data Privacy Framework (DPF).

7. Cloudflare Zaraz – Server-side Analytics

This website uses Cloudflare Zaraz, a server-side tag management system running on Cloudflare's edge infrastructure. Analytics scripts are not loaded directly in your browser but processed server-side, preventing direct contact between your browser and third-party servers. This provides enhanced privacy and improved website performance.

Legal basisArt. 6(1)(a) GDPR (consent). You can withdraw your consent at any time in the cookie settings. Without consent, no analytics data is collected.
Transfer to the USAServer-side processing via Cloudflare Zaraz prevents the direct transfer of data from your browser to US servers.

Privacy measures

Active privacy measures: IP addresses are truncated before transmission (IP anonymisation). User-agent strings are sanitised. Processing takes place on Cloudflare's EU servers. Google Consent Mode v2 is enabled — personal data is only processed after you have given your explicit consent.

8. Data retention and deletion

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. After the retention period expires, your data is automatically deleted unless statutory retention obligations (e.g. tax retention periods of 6 or 10 years) apply.

Data typeRetention period
Server log files7 days
Demo bookings (Calendly)Per Calendly privacy policy
Cookie consents6 months

9. Your rights as a data subject

Under GDPR you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)

You can request information about the personal data we process about you.

Right to rectification (Art. 16 GDPR)

You can request the correction of inaccurate data or the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You can request the deletion of your personal data where the legal requirements are met.

Right to restriction of processing (Art. 18 GDPR)

You can request the restriction of the processing of your data.

Right to data portability (Art. 20 GDPR)

You can receive your data in a structured, commonly used and machine-readable format.

Right to object (Art. 21 GDPR)

You can object to the processing of your data based on your particular situation at any time.

Right to withdraw consent (Art. 7(3) GDPR)

You can withdraw consent you have given at any time with effect for the future.

Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact:

[email protected]

10. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock icon in the browser bar. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

Controller

metadist data management GmbH

Königsallee 82, 40212 Düsseldorf

[email protected]
Privacy inquiries

For questions about your rights or data processing, contact us at any time.

Send email

Last updated: April 2026