Personal data

Privacy and cookie policy.

SYNEVA pays particular attention to the protection of personal data. This policy explains which data is processed in connection with the syneva.pro website, why it is used, to whom it may be disclosed, how long it is retained and how data subjects may exercise their rights.

Last updatedAug 13, 2026

1. Data Controller

The responsible party for processing carried out within the scope of the site is:

Liliya Ezekieva, sole proprietor — EI, operating under the trade name SYNEVA.

No Data Protection Officer has been appointed. For any questions regarding personal data, the contact point is: contact@syneva.pro.

2. Data That May Be Processed

Depending on how the user interacts with the website or with SYNEVA, the following categories of data may be processed:

Identification and contact details

  • first and last name;
  • professional email address;
  • telephone number, when provided;
  • organisation, role or sector of activity, when provided.

Data relating to requests

  • subject of the enquiry;
  • message content;
  • professional context provided;
  • proposed intervention format;
  • subsequent exchanges by email or phone.

Data relating to appointments

  • identity and contact details;
  • date and time of the appointment;
  • information provided at the time of booking;
  • technical information necessary for video conferencing.

Contractual and administrative data

  • client's contact details and their organization;
  • information required for quotes, agreements, contracts and invoices;
  • history of exchanges and services;
  • information relating to payments, excluding banking data directly processed by payment institutions.

Technical data

  • IP address and technical security logs, when retained by the host;
  • browser type and technical information required for the website to operate;
  • aggregated audience statistics produced by the self-hosted Plausible Analytics instance.

SYNEVA does not request sensitive data through the contact form. Users are asked not to enter information relating in particular to their health, political opinions, religious beliefs or any other unnecessary sensitive information in free-text fields.

3. Purposes and legal bases

Respond to a contact or information request

Purpose: understand the request, respond to the user and follow up on exchanges.
Legal basis: Pre-contractual measures taken at the request of the person or in SYNEVA's legitimate interest to respond to received requests.

Arrange a meeting

Purpose: propose a time slot, confirm the appointment, send login details and follow up on it.
Legal basis: Pre-contractual measures taken at the request of the person.

Establish a commercial proposal

Purpose: prepare a quote, agreement, proposal or contract tailored to the need.
Legal basis: Pre-contractual measures.

Execute and monitor a service

Purpose: organize, deliver and administer the conferences, workshops, sprints and other agreed services.
Legal basis: performance of the contract.

Ensure billing and accounting

Purpose: prepare and keep accounting records, monitor payments and comply with tax obligations.
Legal basis: Legal obligation.

Ensure site security

Purpose: prevent unauthorized access, incidents, errors and disruptions to the site’s operation.
Legal basis: SYNEVA's legitimate interest in securing its information system.

Measure the audience

Purpose: To obtain overall statistics on site traffic and improve the site's content.
Legal basis: Legitimate interest. Plausible is self-hosted, does not place any cookies, does not create any persistent identifiers and is not used to track visitors across multiple sites.

SYNEVA does not use data collected through the contact form to send automated marketing communications.

4. Whether data provision is mandatory or optional

Fields marked with an asterisk in the forms are required to process your request.

If this information is not provided, SYNEVA may be unable to respond or arrange the meeting.

Fields not marked with an asterisk are optional. The phone number in the contact form is particularly optional.

5. Data recipients

Within their scope of responsibilities and as needed, data may be accessible to:

  • to Liliya Ezekieva;
  • the authorized SYNEVA collaborators;
  • to the site hosting provider;
  • to the provider responsible for site maintenance or development;
  • to the professional email service provider;
  • to the TidyCal booking service, when the user chooses to display the calendar or use this service;
  • to Google Meet for holding a remote appointment;
  • to Plausible Analytics' self-hosted instance for audience measurement;
  • the accounting or administrative service providers involved in managing the activity;
  • to administrative or judicial authorities when a legal obligation requires it.

Data is neither sold nor rented to third parties.

Service providers may process data only for the services entrusted to them and in compliance with applicable confidentiality and security obligations.

6. Technical providers

The main service providers and systems involved in the processing activities are:

  • IONOS SARL: hosting of the site and processing of the contact form;
  • Sumo Group Inc., trading as TidyCal: Organisation and management of appointments, only after voluntary activation of the calendar or opening of the external service;
  • Google LLC — Google Meet: holding remote appointments when a video-call link is associated with the booking;
  • Menschhh: development and technical maintenance of the site;
  • Plausible Analytics Community Edition: Aggregate audience measurement without cookies or persistent identifiers;
  • Internal anti-spam system: invisible field, submission delay control and hourly limit per IP address, without a third-party antispam provider.

The form is submitted to an internal script hosted with the site. No external plugin or service for forms is loaded in the browser.

The list can be updated when technical providers change.

7. Transfers of data outside the European Economic Area

Some providers may be established or process data outside the European Economic Area.

This is likely to be the case in particular with the TidyCal booking service, operated in the United States by Sumo Group Inc., and with Google Meet.

When data is transferred outside the European Economic Area, SYNEVA ensures that the transfer relies on a recognized legal mechanism and on appropriate contractual safeguards. TidyCal notably frames the relevant transfers using the European Commission's standard contractual clauses, unless a different mechanism has been agreed with the client.

Additional information regarding applicable guarantees may be requested from contact@syneva.pro.

8. Retention periods

Data is retained only for as long as necessary for the purpose for which it was collected, and then, when required, archived during the applicable legal periods.

  • Contact requests and prospect data: three years from the last contact initiated by the individual.
  • Data relating to appointments: three years from the appointment or last exchange, unless a contractual relationship has been established.
  • Data relating to clients and services: throughout the contractual relationship, then for five years from its end for contracts, agreements and commercial correspondence.
  • Invoices and accounting documents: ten years from the closing of the relevant financial year, in accordance with accounting obligations.
  • Internal form anti-spam log: one hour maximum; older entries are deleted with each new submission.
  • Host's technical logs: for the period strictly necessary for security, incident diagnosis or compliance with a legal obligation, depending on the IONOS hosting configuration and terms.
  • Plausible Analytics: The IP address is not recorded and no persistent identifier is created. The daily identifier used to deduplicate visits can no longer be reproduced after the daily rotation of the salt. Aggregated statistics, which do not allow an individual journey to be reconstructed, are retained in the self-hosted instance until deleted by its administrator.

At the end of the applicable periods, data is deleted or anonymized.

9. Rights of individuals

Under the conditions set by regulations, any concerned person may exercise:

  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object;
  • the right to data portability, where applicable;
  • the right to withdraw consent at any time where processing is based on consent.

These rights can be exercised by writing to contact@syneva.pro or by post:

SYNEVA — Liliya Ezekieva58, rue de Monceau
75008 Paris
France

The request must sufficiently identify the person and the subject of their request. A valid ID document will only be requested if there is reasonable doubt about the identity of the requester.

A response will be provided within the period prescribed by law.

Anyone who believes that their rights have not been respected may lodge a complaint with the National Commission on Informatics and Liberty — CNIL.

10. Security

SYNEVA implements technical and organisational measures proportionate to the risks in order to protect data against loss, alteration, unauthorised access or disclosure.

These measures include, depending on the tools used:

  • the encryption of exchanges using the HTTPS protocol;
  • limiting access to authorized persons only;
  • the use of strong passwords and, where possible, multi-factor authentication;
  • regular updating of the website and its dependencies;
  • backup mechanisms;
  • the contractual oversight of service providers;
  • the deletion or archiving of data at the end of the specified periods.

Since no system can guarantee absolute security, SYNEVA commits to handling any incident in accordance with applicable obligations.

11. Cookies and trackers

A cookie or tracker is a file or identifier that may be used when visiting a website.

Before activating the calendar

syneva.pro does not set any advertising, personalization or audience measurement cookies. Plausible Analytics is self-hosted and operates without cookies, local storage or persistent identifiers.

External booking calendar

The appointment page offers the TidyCal service without loading it automatically. The external script and calendar are added only after voluntarily clicking the "Show Calendar" button. Before this choice, no request is sent to TidyCal by the page.

The audit of the TidyCal service identified the following cookies on the domain tidycal.com after its activation:

  • __cf_bm — Provider: Cloudflare for TidyCal; Purpose: security and automated traffic detection; Duration observed: approximately 30 minutes; Page concerned: appointments, after calendar activation.
  • XSRF-TOKEN — Provider: TidyCal; Purpose: protecting exchanges against fraudulent requests; Maximum duration observed: 12 months; Page concerned: appointments, after calendar activation.
  • tidycal_session — Provider: TidyCal; Purpose: operation and maintenance of the calendar session; Maximum duration observed: 12 months; Page concerned: appointments, after calendar activation.

Loading the calendar corresponds to an explicit request to access this external service. The user who does not wish to load it can contact SYNEVA directly by email or phone. No choice regarding TidyCal is stored by syneva.pro: reloading or leaving the page resets the calendar to its unloaded state.

The site does not automatically load any tracker requiring consent. An information banner explains this choice. Dismissing it is remembered on the device through the local preference syneva_privacy_notice_dismissed, which is strictly necessary to avoid displaying the message on every page. This preference is not sent to SYNEVA and is not used for tracking. If new non-essential trackers are added, a mechanism to accept, refuse and change this choice will be implemented before they are activated.

12. Policy modification

SYNEVA may amend this policy to reflect legal, regulatory, organisational or technical changes.

The last update date is shown at the top of the page.

In the event of a substantial modification affecting the rights of individuals or the purposes of processing, appropriate information will be provided.