GDPR Compliance

Last updated: November 2024

Our Commitment to GDPR

Saga-sky is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take the protection of your personal data seriously and have implemented comprehensive measures to ensure your rights are respected.

Data Controller Information

Saga-sky acts as the data controller for personal information collected through this website and our consultation services.

Contact: [email protected]

Address: 47 Greenfield Business Centre, Whitworth Road, London SE15 4PQ, United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by GDPR Article 6:

Consent (Article 6(1)(a))

When you submit enquiry forms or request consultations, you provide explicit consent for us to process your data for the stated purposes. You may withdraw consent at any time.

Contract Performance (Article 6(1)(b))

Processing necessary for the performance of consultation services you have requested or to take steps at your request prior to entering a contract.

Legitimate Interests (Article 6(1)(f))

We may process data for our legitimate business interests, such as improving our services and website functionality, provided these do not override your fundamental rights.

Legal Obligation (Article 6(1)(c))

Where processing is necessary for compliance with legal requirements applicable to our business.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Article 15)

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification (Article 16)

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure (Article 17)

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for its original purpose.

Right to Restriction (Article 18)

You may request that we restrict processing of your personal data in specific situations.

Right to Data Portability (Article 20)

You may request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object (Article 21)

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of your GDPR rights, contact us at [email protected]. We will respond to your request within one month. In complex cases, this period may be extended by up to two additional months, with notification.

Data Protection Measures

We implement appropriate technical and organisational measures including:

• Secure data storage and transmission protocols
• Access controls limiting data availability to authorised personnel
• Regular security assessments and updates
• Staff training on data protection practices
• Data minimisation principles in collection and retention

Data Breach Notification

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and communicate with affected individuals as required by GDPR Articles 33 and 34.

International Data Transfers

Where personal data is transferred outside the UK or EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses or transfers to countries with adequacy decisions.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk

Helpline: 0303 123 1113

Updates to This Statement

We review and update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements.