Legal
Privacy Policy (Landing Page)
Last updated: August 13, 2026
1. Scope
This Privacy Policy applies exclusively to the publicly accessible Sylaxis information website. It describes which personal data is processed when you access this static landing page and when you contact us.
The processing of personal data within our enterprise platform and app (user accounts, authentication, workspaces, AI workflows, and file processing) is governed by a separate privacy policy for the platform.
2. Controller
Sylaxis GmbHAm Studio 2 a
12489 Berlin
Germany
Represented by Managing Director: Nico Tobien
Email: team@sylaxis.com
3. Website Provision and Server Log Files
When you access the website, your browser transmits technically necessary information to the web server. This may include IP address, access timestamp, requested URL, previously visited page (referrer if transmitted), browser and operating system information, HTTP status code, and transferred data volume. The exact scope depends on the server and hosting environment.
Processing is necessary to deliver the website, ensure system stability and security, and detect technical errors and unauthorized access. The legal basis is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest is the secure and reliable operation of our informational website.
Standard log data is deleted or anonymized once it is no longer required for delivery, debugging, and security. Security-relevant data may be retained longer on a case-by-case basis until resolution and, where necessary, for asserting or defending legal claims.
4. Hosting and Recipients
This landing page is hosted via Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and/or Google LLC, USA. Delivery occurs via Google’s global content delivery network, which means processing may take place on servers outside Germany and the EU/EEA, including in the United States. Google processes data required for delivery and secure operation on our behalf pursuant to Art. 28 GDPR under Google’s Data Processing Terms.
For domain registration, we also use INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany, as registrar. Only domain owner registration data is processed; no visitor data is processed in this context.
Data is disclosed to other recipients only where permitted or required by law, necessary to assert or defend legal claims, or with your consent. For processing outside the European Economic Area (particularly in the US by Google), we ensure the level of data protection required by Chapter V GDPR: Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), meaning an adequacy decision of the European Commission pursuant to Art. 45 GDPR applies to data transfers to Google in the US. In addition, we base transfers on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) under Google’s Data Processing Terms.
5. No Cookies, Analytics, or Embedded Third-Party Content
This landing page currently does not use:
- Cookies or comparable storage technologies,
- Analytics, audience measurement, or advertising services,
- Social media pixels or user profiling,
- Externally embedded videos, fonts, or other third-party assets.
No purely automated decisions with legal or similarly significant effects within the meaning of Art. 22 GDPR take place.
6. Contact
When you contact us by email, we process your contact details, message contents, and metadata required to handle your request. Providing this data is voluntary; however, without required details we may not be able to process your inquiry.
If the inquiry relates to pre-contractual steps or contract performance, the legal basis is Art. 6(1) sentence 1 lit. b GDPR. In all other cases, processing is based on our legitimate interest in handling your inquiry pursuant to Art. 6(1) sentence 1 lit. f GDPR.
We delete this data once your request has been resolved and no statutory retention obligations or legitimate grounds for continued storage (such as legal defense) apply. For email operations (receipt, storage, and dispatch), we use bound technical service providers under a data processing agreement (in particular Google Workspace / Google Ireland Limited and Google LLC pursuant to the EU-U.S. Data Privacy Framework and Standard Contractual Clauses).
7. Your Rights
Subject to statutory requirements, you have the following rights:
- Access to your personal data (Art. 15 GDPR),
- Rectification of inaccurate data (Art. 16 GDPR),
- Erasure (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR), where applicable,
- Objection to processing based on Art. 6(1) lit. e or f GDPR (Art. 21 GDPR),
- Withdrawal of granted consents (Art. 7(3) GDPR) with effect for the future, where processing is based on consent.
Where we process data based on legitimate interests, you may object at any time on grounds relating to your particular situation.
You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. The supervisory authority primarily responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data. Website transmission is encrypted via HTTPS when accessed through the public domain.
9. Changes to this Policy
We update this Privacy Policy when the website, services used, or legal requirements change. The version published on this page applies.