Privacy Policy
1. Controller
The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is:
Syda Capital UG (limited liability) Bahnhofstraße 17 82327 Tutzing Germany Email: info@insyda.de
2. Overview
We treat personal data confidentially and in accordance with the GDPR, the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and this privacy policy. You can generally use this website without providing personal data. We only collect personal data where technically necessary or where you actively provide it, for example through the contact form.
3. Hosting
This website is hosted with Firebase Hosting, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the website is accessed, the hosting provider automatically processes technical access data, including the IP address, date and time, requested page, browser type and operating system. This is technically necessary to deliver the website and maintain its stability and security.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing the website securely and efficiently. Data may be transferred to the United States. Google LLC is certified under the EU–US Data Privacy Framework and also uses the European Commission’s Standard Contractual Clauses.
4. Firestore content
Parts of this website, such as articles and editable website copy, are loaded from a Google Firestore database. Your browser therefore connects to Google’s servers and transmits your IP address for technical reasons. We do not store additional personal data as part of this content delivery.
5. Contact form and email
When you send an enquiry through the contact form, the information you provide — name, email address, selected services and project description — is stored in our Firestore database and forwarded to us by email so we can respond. We do not share this information without your consent.
The legal basis is Article 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps, and Article 6(1)(f) GDPR for our legitimate interest in responding to enquiries. We retain enquiry data until the purpose for storing it no longer applies or you request deletion, subject to mandatory statutory retention periods.
6. Cookies and local storage
This website does not use tracking, analytics or marketing cookies. We only use technically necessary storage under Section 25(2) TDDDG:
– Your privacy and cookie preference is stored in your browser’s local storage so the notice does not reappear on every visit. – The password-protected admin area uses Firebase Authentication session data and is accessible only to authorised employees. – Your selected website language is stored locally so the website can remember your preference.
Because we currently use no optional services requiring consent, consent is not necessary. If optional analytics or marketing services are added later, they will only load after explicit consent. You can change your settings at any time through “Cookie settings” in the footer.
7. Language preference
The selected language is stored locally in your browser. This information is not used for tracking and is not transferred to SYDA.
8. LinkedIn
Our website links to our LinkedIn profile. These are standard links, not embedded social media plug-ins. No data is sent to LinkedIn merely by visiting this website. LinkedIn’s own privacy terms apply only after you actively follow the link.
9. SSL/TLS encryption
This website uses SSL/TLS encryption for security. You can identify an encrypted connection by “https://” and the lock symbol in your browser.
10. Your rights
Subject to the applicable legal requirements, you have the right to:
– access personal data stored about you (Article 15 GDPR) – correct inaccurate data (Article 16 GDPR) – request erasure (Article 17 GDPR) – restrict processing (Article 18 GDPR) – receive portable data (Article 20 GDPR) – object to processing (Article 21 GDPR)
You may withdraw consent at any time with future effect. To exercise your rights, email info@insyda.de.
11. Right to lodge a complaint
If you believe data protection law has been breached, you may lodge a complaint with a supervisory authority. Our competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
12. Automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.
13. Updates
July 2026 — We may update this privacy policy to reflect current legal or technical requirements.