Privacy notice

Controller

Kernel Synclab, Level 8, 27 Torstraße, Berlin 10119, Germany, is the controller for the processing described here. Contact: info@kernel-synclab.digital or +49 30 5551 2180.

Data we receive

When you enquire, we process your name, email address, requested service, timing, message, and later correspondence. If you become a client, we may also process billing details, appointment records, relocation facts needed for the agreed advice, and the recap we create. Please do not place passport numbers, health data, or full identity documents in the public form.

Our host may process IP address, request time, requested resource, browser information, and security logs to deliver and protect the website. Your cookie choice is stored locally in your browser.

Purposes and legal bases

We process enquiries and prepare requested contracts under Article 6(1)(b) GDPR; perform contracts under the same basis; retain invoices and accounting records under Article 6(1)(c); and secure the site, prevent misuse, and manage ordinary business correspondence under our legitimate interests in Article 6(1)(f). Optional analytics, if introduced and accepted, rely on consent under Article 6(1)(a) and applicable German telecommunications data-protection rules.

You can withdraw consent prospectively at any time. Withdrawal does not affect earlier lawful processing.

Recipients and processors

Data may be handled by our hosting, email, appointment, accounting, and secure document-service providers under appropriate agreements. We disclose information to authorities or professional advisers only when legally required, necessary for legal claims, or requested and authorised by you. We do not sell personal data.

International transfers

We prefer processing in the European Economic Area. If a provider processes data in a country without an EU adequacy decision, we use an approved transfer mechanism such as the European Commission’s Standard Contractual Clauses and assess supplementary safeguards where required. You may ask for information about the relevant mechanism.

External image and font providers can receive connection data when your browser requests their resources. Those public assets are selected for site presentation; consult the provider’s own notice for its processing.

Retention

Unsuccessful enquiries are ordinarily deleted within six months after the last substantive contact. Client working records and recaps are ordinarily retained for three years after the end of the engagement to manage questions or claims. Invoices and tax-relevant records are retained for the periods required by German law, commonly eight or ten years depending on the record and current rule. Security logs are generally retained for up to 30 days unless an incident requires longer preservation.

We delete or anonymise information when its purpose and mandatory retention end.

Your rights

Subject to statutory conditions, you may request access, correction, erasure, restriction, portability, or objection to processing based on legitimate interests. You may withdraw consent. You may also complain to a competent supervisory authority; for a Berlin controller, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

To exercise a right, email info@kernel-synclab.digital. We may need proportionate information to verify identity.

Automated decisions and necessity

We do not use personal data for solely automated decisions with legal or similarly significant effects. Required enquiry fields are necessary to answer and assess fit; optional timing information can be omitted, though this may limit scheduling guidance.

Security and updates

We use access controls, minimisation, secure transport where supported, and processor review appropriate to a small advisory practice. No internet transmission is risk-free. We update this notice when practices or legal requirements materially change. See the cookie notice for browser-storage details.