Sigma Archive Data SRL
Book a discovery call
LEGAL DOCUMENT

GDPR — Your Rights

The procedure for exercising your GDPR rights at Sigma Archive Data SRL.

1. Purpose of this page

This page describes the procedure for exercising your GDPR rights at Sigma Archive Data SRL. The full list of collected data and sub-processors is on the Privacy Policy page. The cookies and sub-processors list is on the Cookies page.

2. Your rights in detail (Art. 15-22 GDPR)

2.1 Right of access (Art. 15)

You have the right to obtain a copy of the personal data we process about you. Response within 30 days.

2.2 Right to rectification (Art. 16)

You have the right to correct inaccurate or incomplete personal data.

2.3 Right to erasure ("right to be forgotten", Art. 17)

You have the right to request the deletion of personal data when it is no longer necessary for the original purpose or if you withdraw your consent.

Exceptions: data we retain in accordance with legal obligations (Romanian accounting legislation — 5-year retention for active contracts).

2.4 Right to restriction (Art. 18)

You may request temporary restriction of processing (instead of deletion) when you contest the accuracy of the data or the purpose of processing.

2.5 Right to portability (Art. 20)

You have the right to receive your personal data in a structured, machine-readable format (JSON or CSV). For portal clients (Phase 2), the export is available at /app/profile/export.

2.6 Right to object (Art. 21)

You may object to processing based on legitimate interest (for example, the contact form lead qualification).

2.7 Right not to be subject to automated decisions (Art. 22)

We do NOT perform profiling or automated decisions. This right does not apply in Sigma's practice.

3. How to exercise your rights

  1. Send an email to office@sigmadata.eu with the subject "GDPR Request — [type of right]".
  2. Include: full name, associated email (for identity verification), concrete description of the request.
  3. We respond within 30 calendar days. In complex cases, we communicate an extension of 60 additional days in accordance with Art. 12(3) GDPR.
  4. The response is free of charge. Exception: manifestly unfounded or excessive requests (a reasonable administrative fee in accordance with Art. 12(5) GDPR).

4. Right to complain to the supervisory authority (ANSPDCP)

If you believe we are violating your rights, you have the right to lodge a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP)

ANSPDCP is the supervisory authority for Romania in accordance with Art. 51 GDPR.

5. DPO (Data Protection Officer)

Sigma Archive Data SRL is not required to appoint a DPO under Art. 37 GDPR (small company, we do not process sensitive data at scale). The contact person for all GDPR requests is office@sigmadata.eu.

6. Changes to this procedure

This procedure may be updated. Check the last updated date in the footer.

7. Contact

For any questions regarding your GDPR rights: office@sigmadata.eu.

Last updated: