Privacy Policy

Responsible for data processing:
ATAURI Holding UG (haftungsbeschränkt)
operating under the name SYNNWERK
Große Burgstraße 34
14712 Rathenow
Germany

Contact:
hello@synnwerk.com

This website currently does not use analytics, advertising tracking or marketing technologies. We do not use your data for newsletters or unrelated advertising unless you explicitly consent to this separately.

We currently do not use cookies or similar technologies that require consent for analytics, advertising or cross-site tracking. For this reason, no cookie consent banner is currently displayed.

When you access this website, technically necessary connection data may be processed in order to deliver the website, maintain security and diagnose technical issues.

If the technical setup changes in the future, this Privacy Policy and, where required, the consent mechanism will be updated before such technologies are activated.

When you complete the AI Opportunity Check, we process and store the answers you provide, the resulting assessment and recommendation, the time of submission and a randomly generated technical submission identifier.

The technical submission identifier is used to associate the different steps of one submission and to prevent duplicate records. It is not intentionally used by us to identify you as a person.

We use the assessment data to provide the result, evaluate how the AI Opportunity Check is used, improve the tool and understand which types of use cases may benefit from further validation or decision support.

Please do not enter personal data relating to third parties, special-category personal data, confidential information, trade secrets, passwords, credentials or other sensitive information into the AI Opportunity Check.

Insofar as personal data is processed, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are the provision, security, evaluation and improvement of the AI Opportunity Check.

AI Opportunity Check submissions without an email address are retained for up to 90 days and are then automatically deleted.

If you voluntarily request early access, we store the email address you provide and link it to the corresponding AI Opportunity Check submission using the randomly generated submission identifier.

From that point, the associated assessment data can be linked to you through your email address.

We use this information only to manage your early access request, contact you about the requested early access and understand the context of that request.

The legal basis for processing your email address for this purpose is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw that consent at any time with effect for the future by contacting us at hello@synnwerk.com.

Your early access request does not subscribe you to a newsletter and is not used as consent for unrelated marketing.

AI Opportunity Check submissions linked to an early access email address are retained for no longer than 12 months without further interaction and are then automatically deleted, unless a longer retention period is required by law or another legal basis applies.

This website is hosted using services provided by Vercel Inc. Vercel processes data as necessary to deliver and secure the website and to provide the hosting infrastructure.

In connection with website access, Vercel may process technical information such as IP addresses, request information, timestamps, browser or device information and security or diagnostic log data.

We use Vercel on a Pro plan. Where Vercel processes personal data on our behalf, processing is governed by Vercel's Data Processing Addendum.

We use Supabase to provide database infrastructure for the AI Opportunity Check.

The connection to Supabase is made through our server-side application. The Supabase secret key is not made available to website visitors.

Our Supabase project is configured in the Central EU (Frankfurt) region. The selected project region determines where the primary project data is stored.

Supabase processes relevant data on our behalf under its Data Processing Addendum and may engage subprocessors in accordance with its contractual and data protection documentation.

Where service providers or their subprocessors process personal data outside the European Economic Area, appropriate safeguards are used where required under applicable data protection law, including contractual transfer mechanisms such as the EU Standard Contractual Clauses.

Insofar as personal data is processed for technically necessary website hosting, security and infrastructure purposes, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of this website and the AI Opportunity Check.

If you contact us directly by email, we process the information you provide in order to respond to your request.

We use Google Workspace as our email service. This means that personal data contained in emails and related communication metadata may be processed by Google in connection with providing the email service.

Where Google processes personal data on our behalf, the processing is governed by the applicable Google Workspace data processing terms. Google operates infrastructure internationally, and data may therefore be processed outside the European Economic Area subject to the applicable data protection safeguards.

Depending on the nature of your request, the legal basis is Art. 6(1)(b) GDPR for steps taken at your request prior to or in connection with a business relationship, or Art. 6(1)(f) GDPR based on our legitimate interest in responding to general business communications.

Please do not send confidential, sensitive or special-category personal data in an initial contact email unless this is necessary and has been agreed with us.

We retain personal data only for as long as necessary for the respective purpose or as required by applicable law.

AI Opportunity Check submissions without an email address are retained for up to 90 days.

AI Opportunity Check submissions linked to an early access email address are retained for no longer than 12 months without further interaction.

These retention rules are implemented through an automated deletion process.

Other technical data, hosting logs and email communications are retained in accordance with the respective purpose, applicable service configuration and any statutory retention obligations.

Subject to the applicable legal requirements, you have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing and data portability.

Where processing is based on Art. 6(1)(f) GDPR, you also have the right to object to the processing under the conditions set out in Art. 21 GDPR.

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact:
hello@synnwerk.com

We may update this Privacy Policy when our services, technical infrastructure or legal requirements change. The current version is published on this page.

Last updated: August 2026