GDPR Compliance, Cookie Consent & Privacy Rights
A clear notice explaining how Synbus handles personal data, cookie consent, privacy rights, and data protection requests.
Purpose and Scope
This GDPR Compliance Notice explains how Synbus Inc. approaches personal data protection for website visitors, prospective clients, clients, applicants, suppliers, and other individuals who interact with Synbus through synbus.ph, forms, email, calls, project channels, cookie consent tools, or related service workflows.
This notice is intended to support transparency for individuals in the European Economic Area, United Kingdom, and other regions with similar privacy-rights expectations. It should be read together with the Synbus Privacy Policy, Cookie Policy, Terms and Conditions, and any written project agreement that applies to a specific engagement.
Controller Role and Contact
For website, service inquiry, applicant, cookie consent, and general business records, Synbus Inc. generally acts as the data controller because it determines why and how the personal data is processed. Where Synbus processes personal data only on documented instructions from a client under a written agreement, Synbus may act as a processor for that specific client-controlled processing.
Privacy questions, GDPR-related requests, and data protection concerns may be sent to info@synbus.ph or submitted through the Data Request page.
Personal Data We May Process
Synbus may process contact details, company details, job title, project inquiry information, service messages, submitted form content, applicant information, billing or administrative records, proposal and contract records, support requests, cookie consent choices, website security logs, browser information, device information, and technical data needed to operate and protect the website.
Synbus does not intentionally request special-category personal data through general website forms. Visitors should avoid submitting sensitive personal data unless it is necessary for a specific request, application, legal obligation, or service engagement.
GDPR Principles
Synbus works to process personal data lawfully, fairly, and transparently; collect data for specified and legitimate purposes; limit collection to what is reasonably needed; keep relevant data accurate where practical; retain data only for appropriate periods; and protect data with reasonable security measures.
Synbus also works to keep privacy records limited, document important privacy choices, and review service-provider handling where personal data is involved.
Legal Bases for Processing
Depending on the context, Synbus may rely on consent, steps requested before entering into a contract, performance of a contract, compliance with legal obligations, legitimate interests, website security, dispute prevention, accounting, or another lawful basis recognized by applicable privacy requirements.
Where consent is used, individuals may withdraw consent at any time. Withdrawal does not affect processing completed before consent was withdrawn or records Synbus must retain for legal, accounting, security, dispute-resolution, or service-continuity reasons.
Cookie Consent and Tracking
Synbus uses a cookie consent banner that allows visitors to accept all cookies, reject non-essential cookies, or manage preferences by category. Necessary cookies remain active because they support security, forms, admin sessions, routing, and saved consent preferences.
Analytics, marketing, and functional cookies are optional. Optional analytics or marketing scripts are not loaded until the visitor gives the relevant consent. Visitors can update choices through the Manage Cookies link in the footer.
Individual Privacy Rights
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, and information about how personal data is processed. These rights may be subject to verification, legal limits, retention duties, security needs, and legitimate business requirements.
Synbus provides a Data Request page where individuals can request access, correction, deletion, or consent withdrawal. Synbus may need to verify the requester before fulfilling a privacy request.
Data Request Handling
Privacy requests are reviewed through a restricted internal workflow. Synbus stores only the details needed to review, verify, respond to, and document the request. Submitted GDPR request records are not publicly listed.
Synbus aims to respond to verified privacy requests within a reasonable period and in accordance with applicable legal requirements. If a request is complex, unclear, repetitive, or requires additional verification, Synbus may ask for more information or explain why a request cannot be fulfilled in full.
Retention and Minimization
Synbus keeps personal data only for as long as reasonably needed for the purpose collected, including inquiry follow-up, service delivery, client support, project records, applicant review, business administration, accounting, legal compliance, security, audit, and dispute resolution.
Cookie consent logs are limited to consent choices, consent version, method, timestamp, browser information, country when available from hosting headers, and a hashed IP value when available. Raw IP addresses are not stored in consent logs.
Security Measures
Synbus applies reasonable technical and organizational safeguards designed to protect personal data from unauthorized access, misuse, loss, alteration, or disclosure. These safeguards include restricted admin access, server-side privacy request handling, consent-aware script loading, limited logging, and controlled internal workflows.
No internet-based system can be guaranteed completely secure, but Synbus works to keep privacy records limited, controlled, and handled through appropriate operational processes.
Service Providers and International Processing
Synbus may use trusted service providers for hosting, infrastructure, analytics, communications, forms, project management, payment support, security, storage, accounting, and business operations. These providers may process data only as needed to provide their services to Synbus and are expected to apply appropriate security and confidentiality measures.
Where personal data is processed outside an individual's country or region, Synbus works to use appropriate safeguards, vendor controls, and contractual protections consistent with applicable privacy requirements.
Complaints and Updates
Individuals may contact Synbus first at info@synbus.ph for questions, concerns, or privacy requests. Depending on location, individuals may also have the right to contact a relevant data protection authority.
Synbus may update this GDPR Compliance Notice when website features, services, service providers, legal requirements, or data practices change. The latest version will be published on this page.