Privacy Policy
Last updated: 26 February 2026 · Version 1.0
Controller: Syro Robotics, registered in the Netherlands. Contact: info@syrorobotics.com — For urgent data subject requests, use the subject line "GDPR Request – [your full name]".
1. Who we are
Syro Robotics ("Syro", "we", "us") operates syrorobotics.com, a professional online retailer of drone components and flight control systems. We are the data controller responsible for personal data collected through this website.
Our registered office is in the Netherlands. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Dutch Telecommunications Act (Tw) implementing the ePrivacy Directive.
2. Data we collect and why
2.1 Account and identity data
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email | Account creation, order fulfilment | Art. 6(1)(b) GDPR |
| Password (hashed) | Authentication | Art. 6(1)(b) |
| OAuth tokens | Social sign-in (Google, Microsoft) | Art. 6(1)(b) |
2.2 Order and transaction data
We collect your shipping and billing addresses, order contents, and payment status. Payments are processed by Mollie B.V. (Amsterdam, NL). We receive a payment status confirmation but do not store card or bank details.
2.3 Analytics data (consent-based)
Only with your explicit consent, we use Google Analytics 4 (G-7PC04E20JG) to collect pseudonymous usage data such as pages visited and session duration. IP addresses are anonymised before storage. You may withdraw this consent at any time via the Cookie Settings link in the footer.
2.4 Functional / preference data (consent-based)
With your consent, we store functional cookies that remember your sign-in state when using Google OAuth or Microsoft OAuth. These are necessary for social login flows to work correctly.
3. How we store and protect your data
Personal data is stored on servers located within the European Economic Area (EEA). We implement appropriate technical and organisational measures including:
- HTTPS encryption for all data in transit
- Hashed storage of passwords (never stored in plaintext)
- Short-lived JWT access tokens (~1 hour) with 7-day refresh tokens
- Role-based access controls on backend systems
4. Data retention
| Data type | Retention period |
|---|---|
| Account data (name, email) | Until account deletion + 30 days |
| Order and invoice data | 7 years (Dutch tax law requirement) |
| Analytics data | 14 months (Google Analytics default) |
| Cookie consent record | 12 months |
5. Third-party processors
| Processor | Purpose | Location |
|---|---|---|
| Mollie B.V. | Payment processing | Netherlands (EEA) |
| Google LLC | Analytics (GA4), OAuth sign-in | USA (SCCs apply) |
| Microsoft Corporation | OAuth sign-in | USA (SCCs apply) |
Where processors are located outside the EEA, transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46 GDPR.
6. Your rights under GDPR
As a data subject under GDPR, you have the following rights:
- Access (Art. 15): Request a copy of the personal data we hold about you.
- Rectification (Art. 16): Ask us to correct inaccurate or incomplete data.
- Erasure (Art. 17): Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Restriction (Art. 18): Ask us to restrict processing of your data in certain circumstances.
- Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Objection (Art. 21): Object to processing based on legitimate interests.
- Withdraw consent (Art. 7(3)): Withdraw any consent at any time without affecting prior processing.
To exercise any of these rights, contact us at info@syrorobotics.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. Cookies
We use cookies and similar local storage mechanisms. For full details of which cookies we use and how to manage them, please see our Cookie Policy.
8. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website at least 14 days before taking effect. The "last updated" date at the top of this page reflects the most recent revision.
9. Contact
Syro Robotics
Registered in the Netherlands
Email: info@syrorobotics.com