Data controller

The party responsible for processing the personal data submitted through this website is the organization that operates Siglaris. You may contact it at contact@siglaris.com to exercise your rights or to request its registration details.

Information you submit

The information you voluntarily submit may include your name, organization, role, email address, country, and any optional comment provided through a form or communication. We obtain the data directly from you. We do not request data about your customers or your internal operations, and we do not collect special categories of data (such as health, origin, or political or religious beliefs) or data relating to minors.

Purpose of use

The information provided may be used to: respond to your inquiry or request; assess organizational relevance; provide an initial external reading; maintain communication relating to Siglaris services; and maintain and improve the website.

Legal basis

Where the GDPR or an equivalent law applies, we process your data: (i) to address your request and take steps prior to a possible relationship, on the basis of your consent and of pre-contractual measures; and (ii) to comply with legal obligations, on the basis of legal compliance. You may withdraw your consent at any time, without affecting processing carried out beforehand.

Automated decisions

We do not make decisions based solely on automated processing, nor do we carry out profiling, that produce legal effects concerning you or similarly significantly affect you on the basis of the data you provide on this website.

Public and voluntarily submitted information

Siglaris's initial external readings are based on publicly observable, externally available, or voluntarily submitted information. They do not require access to confidential internal systems, proprietary databases, or restricted information. If a formal engagement were to involve confidential or non-public information, the related confidentiality obligations would be governed separately by a mutually agreed written agreement.

Data sharing

We do not sell personal or organizational information. Information may be processed by external infrastructure providers used to operate the website, for example for hosting, form handling, and communication tools. These providers process the data on our instructions and in accordance with applicable law.

International transfers

Operating the website may involve processing data in countries other than your own. Where data protected under the GDPR is processed outside the European Economic Area, the transfer will be made under an appropriate safeguard recognized by applicable law.

Retention

Contact information is retained only for as long as reasonably necessary — as a general rule, for the duration of the conversation and up to 12 months after the last contact — and is deleted earlier at your request.

Cookies and analytics

This website uses only essential cookies required for its basic functionality. It does not use advertising cookies or third-party tracking analytics, and therefore does not require a cookie-consent notice.

Your rights

Regardless of the country in which you are located, you may exercise the rights granted to you by applicable law — generally: access, rectification, updating, erasure, restriction, objection, data portability, and withdrawal of consent. To exercise them, write to contact@siglaris.com; we will address your request within the time limits set by applicable law.

• European Union / European Economic Area (including Slovenia) and the United Kingdom: the rights under the GDPR and the UK GDPR apply, including the right to lodge a complaint with your supervisory authority (in Spain, the Spanish Data Protection Agency, AEPD; in each country, its national authority).
• Other European countries (for example, Serbia): the rights provided by your national data-protection law, of equivalent scope, apply and may be exercised through the contact above and, where applicable, before your national authority.
• Canada (PIPEDA): the right of access and correction, and to file a complaint with the Office of the Privacy Commissioner of Canada.
• Brazil (LGPD): the data-subject rights provided under the LGPD, which may be exercised through the contact above and, where applicable, before the ANPD.
• Mexico (LFPDPPP): you may exercise your ARCO rights — access, rectification, cancellation, and objection — and limit the use or disclosure of your data.
• Other Latin American countries: the rights provided by your national data-protection law, of equivalent scope, apply through the contact above.
• California (CCPA/CPRA): we do not sell or share your personal information, and you will not be discriminated against for exercising your rights.
• Any other jurisdiction: the rights provided by your local law apply and may be exercised through the contact above.

Minors

This website is intended for a professional and business audience and is not directed to minors.

Security

Reasonable technical and organizational measures are applied to help protect the information provided against unauthorized access, misuse, disclosure, or loss.

External services

This website may reference or integrate external platforms or infrastructure providers. The controller is not responsible for the content, availability, security practices, or privacy policies of those external services.

Updates

This policy may be updated periodically to reflect operational, legal, infrastructural, or organizational changes. Changes will be reflected by updating the “last updated” date shown at the top.