Privacy Policy

Last updated: 7 August 2026

This Privacy Policy explains how M&J Company s.r.o., operating the Synergie Farm brand, processes personal data when you visit this website, subscribe to the newsletter or contact us.

1. Data controller

2. Data we process and why

Newsletter

When you subscribe, we process your email address together with subscription records such as the date, form identifier and subscription status. Campaign emails may also use a remote image and tagged links to record delivery, opening, link-interaction and unsubscribe events at contact level. We use these data to send Synergie Farm news, promotions and insights and to measure and improve those communications. The legal basis is your consent under Article 6(1)(a) GDPR and the applicable rules on electronic commercial communications. Subscription is immediate: clicking “Subscribe now” adds your address to the list and sends a confirmation email without requiring another confirmation click.

You can withdraw consent at any time through the unsubscribe link in our emails or by contacting us. Withdrawal does not affect processing carried out before it. We may retain a minimal suppression and consent record where needed to respect your opt-out and demonstrate compliance.

Direct enquiries

If you contact us by email, telephone or WhatsApp, we process the contact details and information you choose to provide so that we can answer and manage your request. The legal basis is taking steps at your request before entering into a contract or performing a contract under Article 6(1)(b) GDPR. Where no contract is involved, we rely on our legitimate interest in handling business correspondence under Article 6(1)(f) GDPR.

Website delivery and security

When the website is requested, technical data such as IP address, request URL, date and time, browser or device information and security events may be processed to deliver, protect and troubleshoot the service. The legal basis is our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR.

3. Service providers and recipients

• Brevo (Sendinblue SAS) provides the subscription form, contact-list management and newsletter delivery. Brevo states that its hosting databases are stored in the European Union. See the Brevo Privacy Policy.
• Cloudflare, Inc. provides website hosting, content delivery and security and may process technical request data. See the Cloudflare Privacy Policy.
• Google Workspace is used for business email and may process the contents and metadata of messages sent to us. See the Google Privacy Policy.
• WhatsApp Ireland Limited processes data under its own terms if you choose to open a WhatsApp conversation from this website. See the WhatsApp Privacy Policy.

Data may also be accessed by authorised personnel, professional advisers or public authorities where required by law. We do not sell personal data.

4. International transfers

Some providers or their subprocessors may process data outside the European Economic Area. Where this occurs, transfers are protected by an adequacy decision, Standard Contractual Clauses or another safeguard recognised by applicable data-protection law, as described in the relevant provider terms.

5. Retention

• Newsletter data are kept while your subscription is active and afterwards only as needed to document consent, honour an opt-out or meet legal duties.
• Enquiry data are kept for the time needed to answer and manage the request, any resulting business relationship and applicable legal limitation or record-keeping periods.
• Technical data are retained only for the periods necessary for delivery, security and troubleshooting, subject to provider settings and obligations.

6. Your choices and rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. You have an unconditional right to object to direct marketing.

To exercise a right, contact info@synergiefarm.com. You may also lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (ÚOOÚ).

7. Required information and automated decisions

Providing an email address is voluntary but necessary to receive the newsletter. Information provided in direct communications is voluntary, but without the details needed to understand your request we may be unable to respond. We do not use personal data for automated decision-making or profiling with legal or similarly significant effects.

8. Cookies and browser storage

We do not use advertising or analytics cookies. The age check stores only a non-identifying value in the current browser tab so that it is not shown again while that tab remains open; it is not used to track you. Hosting and security providers may still process the technical request data described above.

9. Changes to this policy

We may update this policy when our services or legal obligations change. The date at the top shows the latest revision.