Privacy policy

Last updated: November 2026. English translation for convenience; the German version is legally binding.

1. Controller

Controller for data processing on this website within the meaning of Art. 4 (7) GDPR:

Shusma Magar
Innosynch
Dahrendorfweg 9d
22119 Hamburg
Deutschland
Email: al@innosynch.com

A data protection officer is not required by law and has not been appointed.

2. Principles and legal bases

Personal data is processed only as far as necessary to operate this website, answer requests or use the blog. Legal bases are in particular:

• Art. 6 (1) (a) GDPR (consent),
• Art. 6 (1) (b) GDPR (contract or pre-contractual steps, e.g. requests and blog membership),
• Art. 6 (1) (c) GDPR (legal obligation, e.g. retention duties),
• Art. 6 (1) (f) GDPR (legitimate interest in a secure and working service).

Storing or accessing information on your device follows § 25 TDDDG: technically necessary storage under § 25 (2) no. 2 TDDDG, everything else only with consent under § 25 (1) TDDDG.

3. Hosting

This website is hosted by: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Deutschland. The host processes data only on behalf and on instruction (data processing agreement under Art. 28 GDPR). Legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is reliable delivery of the website.

4. Server log files

When the website is accessed, the browser automatically transmits information that is stored in server log files: IP address, date and time, requested page, referrer URL, browser type and version, and operating system. This data is used to deliver the website, keep it stable and defend against attacks (Art. 6 (1) (f) GDPR). It is not combined with other data sources and is deleted or anonymised after 7 days at the latest, unless needed to investigate a specific security incident.

5. SSL/TLS encryption

Data is transmitted encrypted via HTTPS, recognisable by the lock icon in the browser's address bar.

6. Cookies and local storage

The following technically necessary cookies are set without consent:

• innosynch_lang: selected language (German/English), stored for 1 year.
• innosynch_consent: your choice in the cookie notice, stored for 6 months.
• wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie: only after logging in to the blog, for the session or up to 14 days with “Stay logged in”.

Google Analytics cookies (_ga, _ga_*, stored for up to 2 years) are only set with your consent (see section 11). The choice can be changed at any time in the cookie settings.

7. Contact form and email

For requests via the contact form, name, email address, optionally the company, the selected topic and the message are processed. The request is stored in the website's admin area and forwarded by email to al@innosynch.com. To prevent abuse, the IP address is stored in hashed form for at most one hour to limit the number of requests.

The legal basis is Art. 6 (1) (b) GDPR if the request aims at a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering). Data is deleted once the request has been fully handled, at the latest after two years, unless statutory retention periods apply (e.g. 6 or 10 years under German commercial and tax law). The same applies to requests by email.

8. Blog registration and membership

An account is required to write posts and comments. The following is processed:

• at registration: name, email address, password (stored only as a hash) and a one-time confirmation link valid for 48 hours,
• voluntary profile details: photo, headline, short bio, website,
• content: posts, uploaded images, categories and comments,
• connections with other members (requests and confirmed connections).

Publicly visible are name, profile photo, headline, bio, website, member since, number of posts and connections, and published posts and comments. The email address is not public; it is shown only to members with whom a connection has been confirmed by both sides. Emails are sent only to confirm the account, reset the password and notify about connection requests.

The legal basis is Art. 6 (1) (b) GDPR (user relationship) and, for the public profile, your consent at registration (Art. 6 (1) (a) GDPR). To prevent abuse, registrations, logins and uploads are counted briefly (at most 24 hours) using a hashed IP address or account ID.

Deletion: The account can be deleted at any time in the dashboard under “Profile”. This permanently removes the profile, all posts, uploaded images, comments and connections. Alternatively, an email to al@innosynch.com is sufficient.

9. Comments

Only logged-in members can comment. The comment, its time and the related account are stored. IP address and browser identification are not stored for comments.

10. No other external services

This website does not load fonts, videos, maps or social media plugins from third parties. Profile photos are stored on this website; Gravatar is not used.

The buttons for sharing articles (Facebook, LinkedIn, X, WhatsApp, email) and the links to social media profiles are plain links. No data is transmitted to these platforms when the page loads; the platform only opens after a click, and its own privacy policy then applies.

11. Google Analytics (only with consent)

With your consent, Google Analytics 4 is used, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse use of the website, e.g. pages viewed, time on page, approximate location, device and browser. Google Analytics 4 does not store IP addresses. Data is processed on Google servers and may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists (Art. 45 GDPR).

The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Without consent, Google Analytics is not loaded. Consent can be withdrawn at any time with effect for the future in the cookie settings; the analytics cookies are then removed. Data is deleted after the retention period set in Google Analytics (2 to 14 months). More information: policies.google.com/privacy.

12. Recipients

Recipients of personal data are the host (section 3) as processor and, only with consent, Google (section 11). Data is passed to other third parties only where required by law.

13. Your rights

You have the right at any time to:

• access the stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation.

An informal message to al@innosynch.com is sufficient for all requests.

Right to lodge a complaint: You can complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence, workplace or the place of the alleged infringement.

14. Obligation to provide data, automated decisions

Providing personal data is neither legally nor contractually required. Without the details mentioned, however, requests cannot be answered and no blog account can be created. No automated decision-making including profiling takes place.

15. Changes

This privacy policy is updated whenever the website or legal requirements change. The version published here applies.