Privacy policy

Last updated: 10 November 2026

In brief

• This website measures the detail of its traffic only with your consent. If you decline, or until you answer, it sets no cookies and counts your visit only anonymously (PostHog tool, hosted in the European Union). The only exception: the booking calendar for our meetings, provided by Google.
• We collect two things: what you send us from our forms (contact, Flash Diagnostic when you book a Scoping Meeting, referral programme), to reply to you, prepare the meeting or follow up on a referral; and the strict technical minimum needed to display and protect the website.
• This website is hosted in France, by OVH, like the service that receives what you send from our forms: what you send us is received and kept in the European Union.
• Your data is not sold, rented out, or used to train an artificial intelligence model.
• No decision is made automatically: the Flash Diagnostic gives you a first direction, calculated in your browser; every request is read by a person.
• At any time, you can view your data, have it corrected or deleted, or refuse our approaches: use our contact form.

Who is responsible for your data?

Synergetik, the publisher of this website, whose full identity appears in the legal notice.

For any question about your data: our contact form, or . Your request is handled directly by one of the two founders.

What we collect, and why

Each form shows its required fields: without them, we cannot process your request. The others are optional.

When you write to us

• Data: first name, last name, email, company (optional), subject and message.
• Why: to reply to you and follow up on your request.
• What allows us to do so: our legitimate interest in replying to the messages sent to us (Article 6(1)(f) of the GDPR); for a job application, the pre-contractual measures taken at your request (Article 6(1)(b)).
• How long: three years from the last contact initiated by you, then deletion. For an unsuccessful job application: two years from our last exchange, unless you object.

When you take the Flash Diagnostic and book a Scoping Meeting

The Flash Diagnostic calculates your result in your browser: until you click "Choose my time slot", nothing is sent to us, and nothing is kept once the page is closed.

• Data, sent with your request:
  • you: your work email;
  • your company: headcount band, business sector;
  • your answers to the questionnaire (the departments where you lose time, your need, your uses of artificial intelligence, where the information is, when you would like to start) and the result shown to you.
• Why: to process your request, prepare and conduct the meeting, write the report, get back to you and point you towards what suits you.
• What allows us to do so: the pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR) or, when you act on behalf of your company, our legitimate interest in processing its request (Article 6(1)(f)).
• How long: three years from the last contact initiated by you, then deletion. If you become a client, your data is kept for the duration of our relationship, then archived for the period required by our legal and accounting obligations.

When you become a referral partner

• Data: first name, last name, email, phone (optional), company, profile and a few words about your work (optional); then, if we sign a referral agreement, what we need to pay you and declare your commissions: identity, address, business status and number, VAT status, bank details.
• Why: to present the programme to you, conclude and manage the agreement, follow your referrals and pay your commissions.
• What allows us to do so: the pre-contractual measures taken at your request, then the performance of the agreement (Article 6(1)(b) of the GDPR); our accounting and tax obligations, including the annual declaration of the commissions paid (Article 6(1)(c)).
• How long: without an agreement, three years from the last contact initiated by you, then deletion; with an agreement, for the duration of our relationship, then ten years for accounting records.

When you refer a company to us

• Data: your first name, last name and email; the name of the referred company; the first name, last name, role and email or phone number of the person to contact; the need you have spotted and your connection with the company.
• Why: to record the referral, contact the person, keep you informed and calculate your commission.
• What allows us to do so: our legitimate interest in following up on the referrals sent to us (Article 6(1)(f) of the GDPR). You only pass on a person’s contact details with their agreement.
• The referred person: when we first contact them, we tell them where their contact details come from. They can refuse any follow-up and have their data deleted at any time.
• How long: three years from the last contact initiated by the referred person, then deletion; if they become a client, the periods stated above.

Our forms do not ask you for any sensitive data, such as your health or your opinions. In the free-text fields, describe your activity without including any, and without information about other people (clients, employees) that we do not need.

When you choose your time slot

The time slot is booked in our Google Calendar, displayed in a window or in the page when you click "Book a meeting". You enter your name and email there, and if you wish your phone number and company, which Google passes on to us with the appointment, on our behalf. To display this calendar, your browser connects to Google’s servers (see "Cookies and trackers"). Would you rather avoid this? Book through our contact form or by phone.

If our exchange continues

We record your request in our sales tracking tool, so as not to lose anything we have agreed. We may then write to you about our offers, when they concern your business activity.

• What allows us to do so: our legitimate interest in following up the requests of the companies that have contacted us (Article 6(1)(f) of the GDPR).
• Your choice: you can refuse these messages at any time, without having to give a reason; each of them tells you how to do so. We then stop contacting you.
• How long: the periods stated above.

Where your submissions arrive

What you send from our forms is received by a service we operate ourselves, hosted by OVH, in France. It records it in our sales tracking tool (Baserow, in Germany) and forwards it to us by email, in our mailbox. It keeps nothing else, and this service keeps nothing in the United States.

To run and protect the website

• Technical logs: to display the pages to you, the server that hosts the website, at OVH in France, receives your IP address, the date and time, the page requested and the type of browser. The same applies when your email client displays the logo in our email signatures, which is served by this site: it is the same image for everyone, and we do not use it to find out who opens our messages. This server keeps no access log: it retains neither your IP address nor the pages you viewed.
• Protection against automated submissions: our forms contain an invisible field that only robots fill in; a submission that fills it in is rejected. The service also rejects a submission sent too quickly after the page is opened, and limits the number of submissions per IP address: this address is kept in memory for 24 hours at most, and is never recorded.
• What allows us to do so: our legitimate interest in ensuring the security and proper functioning of the website (Article 6(1)(f) of the GDPR).

Cookies and trackers

Traffic measurement. On your first visit, a banner asks whether we may measure traffic on the website. "Decline" is as simple as "Accept", and the website works the same way in both cases. Until you answer, the website behaves as if you had declined.

If you decline, or until you answer, nothing is set or read in your browser: no cookie, no storage. Only the page visit is counted, anonymously: PostHog works out, from your browser, your IP address, the day and the website, an identifier that changes every day, then keeps neither your IP address nor your browser. This identifier cannot be used to recognise you from one page or one day to the next. No click, no recording of your browsing, no named event, no link between Routéo and this website.

If you accept, our measurement tool, PostHog, hosted in the European Union (Frankfurt), records:

• the pages you view, the page you came from, and the links and buttons you click;
• a recording of your browsing on the pages, to see where visitors hesitate or get lost;
• a few named events: a form being sent, the start and the end of the Flash Diagnostic. Only the fact is noted, never what you wrote or answered.

What is never recorded: what you type into a form, and your answers to the Flash Diagnostic. Forms and the booking calendar are replaced by an empty block in the recording, and left out of click capture. We do not identify visitors: no name, no email, no individual profile; the tool receives an IP address that it does not store.

What is kept on your device: a PostHog cookie (name starting with "ph_"), which recognises your browser from one page to the next, including between this website and our free tool Routéo; and our own cookie "synergetik_mesure", which remembers your choice. Both last six months at most, and the banner then comes back. Measurement data is kept for one year, browsing recordings for 30 days.

Changing your mind: the "Audience measurement" button at the bottom of every page reopens the choice. If you decline after accepting, detailed measurement stops, the PostHog cookie is erased and only your visit is counted, anonymously.

What allows us to do so: your consent for detailed measurement (Article 6(1)(a) of the GDPR; Article 82 of the French Data Protection Act for cookies); our legitimate interest in knowing traffic, on anonymous data, for counting those who decline (Article 6(1)(f)). We use it to know how many people visit the website, where they come from, and whether the journey from Routéo to our Flash Diagnostic works.

Other trackers. The website displays neither advertising nor social network buttons, and loads no other content from another website: no video, no map, no typeface.

One single exception: our booking calendar, displayed by Google Calendar when you click "Book a meeting", on the Scoping Meeting page and at the end of the Flash Diagnostic, after your answers are sent. Your browser then connects to Google’s servers, which receive your IP address and may set their own cookies, under their responsibility and according to Google’s rules.

Only one piece of information is kept in your browser without your consent: if you use the button to switch to the light or dark theme, your choice is kept for the length of your visit, so that it applies to the following pages. It stays on your device, is never sent to us, and is erased when you close the tab, or as soon as you go back to your device’s theme. The cookie that remembers your measurement choice follows the same rule: it only serves to respect your decision.

These two settings, which you request yourself, do not require your consent: the CNIL, the French data protection authority, lists trackers used for "personalising the user interface", such as choosing how a service is presented, among those exempt from it (guidelines of 17 September 2020, deliberation no. 2020-091).

Links to LinkedIn are plain links. By following them, you leave this website: LinkedIn’s policy then applies.

What we do not do

• No automated decision-making: the Flash Diagnostic suggests a first direction, calculated in your browser from your answers; it is not a decision, and it has no effect on you. It is the Scoping Meeting, conducted by a person, that leads to our conclusions.
• No resale: your data is not sold, rented out or transferred.
• No model training: your data is never used to train an artificial intelligence model. If an artificial intelligence tool helps us prepare the meeting or the report, a person reviews everything it produces.

Who has access to your data, and where?

• At Synergetik: the people who handle your request (today, the two founders).
• Our providers, who process it on our behalf, on our instructions only, under a contract that obliges them to protect it (processors, within the meaning of Article 28 of the GDPR):

Provider	What it does	Where
Google Ireland Limited (Google Workspace)	hosts our email; displays our booking calendar and records the appointments in it	European Union, United States
OVH SAS	hosts the website, the service that receives our forms, and part of our email	France
Baserow B.V.	hosts our sales tracking tool, where our form submissions are recorded	Germany
PostHog, Inc.	measures traffic on the website, if you accept it	European Union (Frankfurt); US company

Transfers outside the European Union: Google may process our email and calendar data in the United States: Google LLC is certified under the same Data Privacy Framework, and the Google Workspace data processing amendment provides for the standard contractual clauses.

Our work tools: to prepare the meeting and follow up our exchange, we also use online office and email tools, and sometimes an artificial intelligence assistant. Some of these providers are based outside the European Union, notably in the United States. These transfers are covered by an adequacy decision of the European Commission or by its standard contractual clauses. On request through our contact form, we will send you the up-to-date list of these providers and a copy of these safeguards.

We only disclose your data to an authority if the law requires us to.

Your rights

You can:

• access your data and obtain a copy of it;
• have it corrected if it is inaccurate;
• have it erased;
• have its use temporarily restricted, for example while a dispute is being checked;
• object to its use, without having to give a reason when it comes to commercial approaches;
• receive it in a reusable format, when its processing is based on pre-contractual measures (portability);
• set instructions on what happens to your data after your death (Article 85 of the French Data Protection Act).

How: use our contact form, or call us on . We reply within one month; if your request is complex, this period may be extended by two months, and we will let you know. We only ask you to prove your identity in case of reasonable doubt.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, 75007 Paris, France, or online at cnil.fr.

Security

The website can only be accessed over an encrypted connection (HTTPS). Your data is only accessible to the people who handle your request, and our providers are bound by contract to keep it secure and confidential.

Changes to this page

We update this page when our practices change; the date at the top shows its latest version. If a change alters the use of data you have already entrusted to us, we will inform you directly.