Website privacy and analytics

1. Controller and scope

The controller for synanext.com is Daniel Bozzolan, who operates the Synanext website, Bolzano, Italy. You can contact him through the form linked at the end of this page. Synanext products and services may provide separate notices.

2. Analytics tools and observed data

The site uses Cloudflare Web Analytics and Plausible Analytics as cookieless aggregate benchmarks, together with a first-party analytics system operated by Synanext on its own application infrastructure.

If you submit the contact form, the site processes your name, email, interest and message, together with any company and role you choose to provide. Language, request time, IP address, user agent, origin and referrer accompany delivery for security, abuse prevention and technical diagnostics.

• Page path, referrer origin and only explicitly allowlisted UTM values; all other query parameters and URL fragments are removed before a beacon is sent.
• Viewport and coarse technical context derived from the user agent, such as device, browser and operating system.
• Page views and visible-page interaction time. This time is an observed lower bound and may be shorter than the actual visit.

3. Pseudonymisation and network signals

Raw IP address and user agent reach the server boundary for each request. The IP limits abuse, contributes with the user agent, site key and daily secret salt to a pseudonymous visitor hash scoped to the site and day, and derives approximate location, ASN and network type. The user agent also filters bots and derives only browser and operating-system families. Visitor Intelligence neither stores nor logs raw IP addresses or user agents.

A random identifier links checkpoints only for the current page and remains in browser memory; before storage it is transformed into an HMAC scoped to the site, day and pseudonymous visit. No cookies or persistent identifiers are written, visits are not linked across sites and no person is identified. Company attribution is probabilistic and does not prove who visited the site.

Location, ASN and network data currently come from locally managed datasets. A possible organisation may be enriched through public registers queried with the organisation name only, never with IP, user agent or pseudonyms. External IP-to-company providers remain disabled until each provider passes contractual, privacy and operational approval; this notice will be updated before activation.

4. Purpose and lawful basis

Analytics data is used to measure site reliability, understand useful content and journeys, assess campaigns and possible organisation-level interest, and improve products and communication. The lawful basis relied on is legitimate interest under Article 6(1)(f) GDPR, with minimisation, pseudonymisation, limited retention, human commercial review and the right to object. The contact form is processed to answer the request and, where applicable, take pre-contractual steps requested by you.

No automated decision with legal or similarly significant effects is made about a person. Aggregate Google Search Console data is not linked to an individual visit’s query or identity.

5. Retention, recipients and security

Analytics events, daily visitor hashes, page HMACs, aggregate organisation visits and any enrichment profiles are retained for the configured period, never longer than 365 days, and are then deleted. Raw IP and user agent are not part of stored events. Contact requests remain in the recipient mailbox only as long as needed to handle the request, any resulting relationship and applicable obligations.

Cloudflare and Plausible separately process the data required for their analytics services. The form runs on Cloudflare and is forwarded to the controller’s mailbox through the configured email-delivery service. Data is not sold or disclosed to third parties for their own marketing. Mailbox and dashboard access is limited to authorised personnel.

6. Your rights

You may request access, rectification, erasure or restriction where applicable, and object at any time to processing based on legitimate interest under Article 21 GDPR. You may also lodge a complaint with the competent supervisory authority.

7. Cookies and preferences

The analytics tools described here do not set cookies. Visitor Intelligence writes no persistent identifier. If you use the control below, this page stores only synx_ignore=true in local storage: it is a technical preference, not an identifier, and disables Visitor Intelligence on this browser. It does not disable Cloudflare Web Analytics or Plausible.