GDPR Compliance

Siannova is committed to compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This page outlines how we process personal data of individuals in the European Economic Area (EEA) and United Kingdom, and the rights you have under GDPR.

If you are located in the EEA or UK, this notice applies to you in addition to our Privacy Policy.

Siannova acts as the data controller for personal data collected through our website and in the course of providing our services. As data controller, we determine the purposes and means of processing your personal data.

We process your personal data only when we have a valid legal basis. These include:

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15) — You can request a copy of the personal data we hold about you, free of charge.
• Right to Rectification (Art. 16) — You can ask us to correct inaccurate or incomplete personal data.
• Right to Erasure / "Right to be Forgotten" (Art. 17) — You can request deletion of your personal data under certain circumstances.
• Right to Restrict Processing (Art. 18) — You can ask us to limit how we use your data in certain situations.
• Right to Data Portability (Art. 20) — You can request your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21) — You can object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to Automated Decision-Making (Art. 22) — You have rights if you are subject to solely automated decisions, including profiling, that produce legal or significant effects.

To exercise any of these rights, email us at privacy@siannova.com. We will respond within 30 days. In complex cases, this may be extended by a further two months with notice to you.

If we transfer your personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with an adequacy decision by the European Commission
• Other legally recognized transfer mechanisms

We retain personal data for no longer than necessary for the purposes set out in our Privacy Policy, unless a longer retention period is required by law. Client project data is typically retained for 7 years to comply with accounting and tax obligations. Marketing data is retained until you unsubscribe or request deletion.

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). In the EU, you should contact your national data protection authority.

We encourage you to contact us first at privacy@siannova.com so we can try to resolve your concern directly.

For any GDPR-related queries, please contact us directly: