PRIVACY POLICY OF SYNHEX SOLUTIONS

Effective Date: January 21, 2025

This Privacy Policy (the "Policy") governs the data processing activities of Synhex Solutions ("Synhex," "We," "Us," or "Our"), a legal entity incorporated under the laws of the **Islamic Republic of Pakistan**. This Policy concerns the use of the website https://www.synhex.solutions (the "Website") and any proprietary mobile applications developed and distributed by Synhex (the "Services").

1. DEFINITIONS AND SCOPE OF APPLICATION

Term	Definition
Personal Data (PD)	Any information relating to an identified or identifiable natural person, including online identifiers (e.g., IP address, cookie data) and contact information.
Data Subject	The identified or identifiable natural person to whom the Personal Data relates.
Controller	Synhex Solutions, which determines the purposes and means of the Processing of Personal Data.

By utilizing the Website or any Services, the Data Subject consents to the Processing of their PD as described in this Policy.

2. CATEGORIES OF PERSONAL DATA COLLECTED

2.1. Direct Collection (Contact and Inquiry Data):

We collect PD when voluntarily provided by the Data Subject through forms, email, or telephone:

Contact Identifiers: Name, email address, telephone number, and professional affiliation.
Correspondence: Records of communications and service inquiries.
Application Data: Professional details submitted for employment consideration.

2.2. Automated Collection (Operational and Usage Data):

When a Data Subject interacts with the Website, the following data is automatically collected via analytics technologies (e.g., Google Analytics):

Technical Identifiers: IP address, browser type, operating system, and device information.
Usage and Tracking Data: Pages viewed, duration of visit, referral sources, and interaction behavior (collected through Cookies).

2.3. Mobile Application Data:

If a Data Subject utilizes a proprietary mobile application by Synhex, the application may access and process Geolocation Data (precise or imprecise location). For your transparency, this data is processed locally on the Data Subject's device and is not transmitted or stored by Synhex on our servers.

3. LEGAL BASIS AND PURPOSE OF PROCESSING

The Processing of PD is justified under the following Legal Bases (derived from the GDPR framework) and for the specified purposes:

Purpose of Processing	Legal Basis
Responding to Service Inquiries and providing requested information.	Contractual Necessity (Pre-contractual steps) or Legitimate Interests (Responding to client queries).
Optimizing Website Security and detecting technical issues.	Legitimate Interests (Improving and securing business operations).
Conducting Non-Essential Analytics (via Google Analytics/Cookies).	Consent (Obtained via the Cookie Consent Banner).
Fulfilling Legal or Regulatory Requirements.	Legal Obligation (Compliance with applicable law).

4. DATA STORAGE LOCATION AND INTERNATIONAL TRANSFER

4.1. Server Location: The primary servers utilized for the storage of Contact and Correspondence Data are located in **Frankfurt, Germany (European Union)**.

4.2. International Data Transfer: The Controller, Synhex Solutions, is incorporated in the **Islamic Republic of Pakistan**. Due to the server location in the European Union, the Processing of PD constitutes an **international transfer of data**. By using the Services, the Data Subject acknowledges and accepts that their PD may be processed by personnel in Pakistan, subject to adequate data protection safeguards.

5. COOKIE USAGE AND CONSENT

We employ Cookies for the purpose of enhancing user experience, tracking analytics (Google Analytics), and supporting marketing objectives. Non-essential Cookies (Performance and Targeting) are deployed only upon the Data Subject's explicit consent, solicited via a standard cookie consent interface upon initial access to the Website. Withdrawal of this consent can be managed via the provided cookie settings or through browser configuration.

6. DATA SUBJECT RIGHTS

Data Subjects possess certain rights regarding their PD. To exercise these rights, requests must be submitted in writing to the contact specified in Section 9. We will verify the identity of the Data Subject and respond to all legitimate requests within thirty (30) calendar days.

Right to Access: Obtain a copy of the PD We hold.
Right to Rectification: Correct inaccurate or incomplete PD.
Right to Erasure ("Right to be Forgotten"): Request the deletion of PD, subject to legal retention requirements.
Right to Object: Object to Processing based on legitimate interests.
Right to Withdraw Consent: Withdraw previously granted consent for Processing.

7. THIRD-PARTY WEBSITES

The Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third-party websites or services. We encourage all Data Subjects to review the privacy policies of external sites before providing any Personal Data.

8. CHILDREN'S PRIVACY

The Services are not directed to individuals under the age of thirteen (13). We do not knowingly solicit or collect PD from children under 13.

9. POLICY AMENDMENTS

Synhex reserves the unilateral right to amend, modify, or update this Policy at any time and without prior notification. The most current version will supersede all previous versions. Continued use of the Website following any such amendment constitutes the Data Subject's definitive acceptance of the revised Policy.

10. CONTACT INFORMATION AND CONTROLLER DETAILS

All inquiries, concerns, or requests regarding this Policy or the Processing of your Personal Data should be directed to the Data Controller:

Entity: Synhex Solutions

Email: [email protected]