Skip to content

Legal

Privacy policy

Website and lead capture·Last updated: October 2026

This English version is a convenience translation. Only the German version is legally binding.

This policy covers visiting the website and contacting us. Use of the software itself is governed by a separate data processing agreement (DPA) concluded with us.

1. Introduction and controller

Thank you for your interest in Syntriq GmbH and our product TheroAI. For us, data protection is not only a legal duty but a strategic priority. As a provider of sovereign AI, we take the protection of your personal data very seriously.

Controller within the meaning of the GDPR:

Syntriq GmbH
c/o Rosenboom Systems
Frankfurter Str. 148
51147 Köln, Germany
Managing directors: Patrick Rosenboom, Thies Jensen

2. Hosting and server location

Our website and infrastructure are hosted exclusively on servers in Germany (e.g. Hetzner Online GmbH). We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with our hosting provider. Services such as Google Analytics and the optional Calendly calendar involve the processing described below.

3. Collection and storage of personal data

a) When visiting the website

When you open our website, the browser on your device automatically sends information to our web server (server log files). This includes, for example:

  • IP address
  • Date and time
  • Browser type

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in technical stability and security).

b) When contacting us / requesting a demo

If you request a TheroAI demo by email or through Calendly or sign up for our newsletter, we collect:

  • Your name
  • Your business email address
  • Company name

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures).

c) Job applications

Data you send us by email to info@syntriq.de is processed exclusively for the purposes of the application procedure.

Legal basis: Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship).

4. Cookies and analytics

With your consent, we use Google Analytics 4 provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to measure page views, clicks and website usage. Page addresses, device and browser information and cookie identifiers are processed and sent to Google. Processing in the US is possible. Without consent, the Google tag is not loaded. Advertising personalization and Google Signals are disabled. Consent is voluntary and can be withdrawn for future processing at any time by choosing Decline in Cookie settings. This removes Analytics cookies. Your choice is stored in your browser for 180 days; Analytics cookies are limited to at most 180 days. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Google privacy policy

Our measurement code does not send names, email addresses or booking content as event properties. Selected campaign labels (UTM parameters) are kept in memory during the visit and passed to the calendar. We do not store marketing cookies or identifiers in local browser storage for this purpose.

You can additionally choose Statistics + advertising measurement voluntarily. Google Analytics and Google Ads may then attribute completed demo bookings to our ads. Google also processes ad click identifiers and may set and read cookies for advertising attribution. Advertising personalization, remarketing and Google Signals remain disabled. Existing statistics consent does not authorize this additional processing. In Cookie settings, you can switch to Statistics only; this removes advertising attribution cookies. Decline withdraws both purposes for future processing. The same consent legal bases and information about Google and possible processing in the US apply.

Scheduling with Calendly

The embedded calendar only loads when you activate it. Technical connection data is then shared with Calendly. When you book, Calendly processes the details you enter, such as your name, email and optional messages, to schedule the meeting. This processing is separate from storage in your Thero instance. You can also contact us by email.

Calendly Privacy Notice · Google Privacy Policy

5. Your rights

You have the following rights regarding your personal data:

Art. 15
Access

The right to know which of your data we store

Art. 16
Rectification

The right to have inaccurate data corrected

Art. 17
Erasure

The right to have your data deleted (“right to be forgotten”)

Art. 18
Restriction of processing

The right to restrict how your data is processed

Art. 20
Data portability

The right to receive your data in a machine-readable format

Privacy policy – TheroAI