Syncoded and the General Data Protection Regulation (GDPR)

Last updated: 29 July 2026.

Regulation (EU) 2016/679 on data protection (GDPR) is a European Union regulation that strengthens the protection of personal data. It came into force on 25 May 2018 and applies to any company processing the data of EU citizens, regardless of where the company is established.

This page explains how SyncAI SRL, the operator of syncoded.com, applies GDPR principles and ensures your data is processed transparently, securely and respectfully.

• Cine suntem
• The processing principles we follow
• What types of data do we collect?
• Why do we collect data?
• The technical and organisational measures we apply
• The third-party services we use and data transfers
• Cookies and the consent banner
• Your data rights
• How to exercise your rights and manage your data
• The supervisory authority and how to contact us

What is the GDPR?

In short, the GDPR gives you greater control over your personal information. Service providers (such as SyncAI SRL) must be transparent about the data they collect, how they use it and who they share it with - and you have the full right to access, change or delete your data.

Although the GDPR is an EU regulation, it applies to any business that collects or processes the data of EU residents, including SyncAI SRL.

How SyncAI SRL applies GDPR principles

Data privacy has always been a priority for SyncAI SRL. Our core practices align with GDPR principles, and internal processes are reviewed periodically to ensure full compliance.

Processing principles (art. 5 GDPR)

• Lawfulness, fairness and transparency - we process data only on a legal basis and inform you clearly about it
• Purpose limitation - we collect data for specified, explicit and legitimate purposes
• Data minimisation - we collect only the data strictly necessary
• Accuracy - we keep data correct and up to date
• Storage limitation - we keep data only as long as necessary for the stated purposes
• Integrity and confidentiality - we protect data with appropriate security measures
• Responsabilitate - putem demonstra respectarea acestor principii

The data we collect

• Date de contact: Your name, email address, phone number and the content of your message, when you contact us or request a quote through the contact form.

• Date tehnice: IP address, browser and device information, collected automatically when you visit the website.

• Comportament de navigare: The pages you visit, the time spent on the website and your interaction with our content, for statistical purposes.

Why we collect your data

• To respond to your enquiries and quote requests
• To conclude and perform service contracts with our clients
• To improve your experience on the website
• To analyse website traffic and optimise our services

Technical and organisational measures

• Encrypted communication over HTTPS/TLS across the entire website
• Access to data restricted on a need-to-know basis
• Periodic backups and data recovery procedures
• Periodic vendor assessment and processing agreements compliant with art. 28 GDPR
• Proceduri de notificare a incidentelor de securitate, conform art. 33-34 GDPR

The third-party services we use and data transfers

• Hosting services: For the secure operation of the website.

• Google Analytics: For traffic analysis and understanding visitor behaviour, enabled only with your consent.

Your data is generally stored in the European Union / European Economic Area. Where a provider involves a transfer outside the EEA (for example hosting or analytics services operated from the US), the transfer only takes place with appropriate safeguards under Chapter V GDPR - standard contractual clauses approved by the European Commission or an adequacy decision (such as the EU-U.S. Data Privacy Framework).

Cookies and the consent banner

• Essential cookies: Strictly necessary for the website to work (for example, consent preferences). They do not require your consent.

• Cookie-uri analitice: They help us understand how the website is used (Google Analytics). They are only enabled after you give consent through the banner shown on your first visit.

• The consent banner: It lets you accept or refuse non-essential cookies and change your preferences at any time, without refusal limiting your access to the website.

Your data rights

• Access your personal information (art. 15 GDPR)

• Rectify inaccurate or incomplete data (art. 16 GDPR)

• Request the erasure of your data (art. 17 GDPR)

• Restrict the processing of your data (art. 18 GDPR)

• Receive a copy of your data in a portable format (art. 20 GDPR)

• Object to processing based on legitimate interest (art. 21 GDPR)

• Withdraw your consent to the processing of personal data, at any time

How to exercise your rights and manage your data

• To exercise any of the rights above, send an email to contact@syncoded.com. We will reply within 30 days of receiving the request.
• You can ask us to update your contact details at any time.
• To request full deletion or an export of your data, send an email to: contact@syncoded.com

The supervisory authority

If you consider that the processing of your data breaches the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority. Website: www.dataprotection.ro. We do encourage you to contact us first at contact@syncoded.com - we will do everything we can to resolve any issue quickly.