Our Commitment to GDPR Compliance
Savanna Logic is committed to protecting the privacy and personal data of all individuals, including those residing in the European Union. We adhere to the principles and requirements set forth in the General Data Protection Regulation (GDPR).
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
- Legal obligation: Processing is necessary for us to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or to complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, including when the data is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You have the right to request restriction of processing your personal data under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
Right to Data Portability
You have the right to request transfer of your personal data to another organization or directly to you under certain conditions.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time.
Data Protection Officer
For questions regarding data protection or to exercise your GDPR rights, please contact us at:
Email: [email protected]
Subject Line: GDPR Request
Response Time
We will respond to requests to exercise GDPR rights within one month of receipt. If your request is particularly complex or you have made multiple requests, we may extend this period by two additional months, and we will inform you of any such extension.
Data Transfers
When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements. This may include standard contractual clauses approved by the European Commission.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Supervisory Authority
If you believe we have not addressed your concerns appropriately, you have the right to lodge a complaint with your local supervisory authority or the data protection authority in the jurisdiction where our business is established.
Updates to This Statement
We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.