GDPR Compliance Statement
Last Updated: November 9, 2026
Strigridis is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws in the United Kingdom. This statement outlines how we comply with GDPR requirements and your rights under the regulation.
Legal Basis for Processing
We process your personal data under the following legal bases:
Consent
When you submit forms on our website, subscribe to publications, or opt in to receive communications, you provide explicit consent for us to process your personal data for the specified purposes.
Contract Performance
When you book services or register for programmes, we process your data as necessary to fulfill our contractual obligations to you.
Legitimate Interests
We may process data based on our legitimate interests in operating and improving our services, conducting research, and ensuring website security, provided these interests do not override your fundamental rights and freedoms.
Legal Obligations
We process data when required to comply with legal requirements, such as tax reporting or responding to lawful requests from authorities.
Your Rights Under GDPR
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You may request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or when you withdraw consent.
Right to Restriction of Processing
You can request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a portable format and to transmit it to another controller where technically feasible.
Right to Object
You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority if you believe we have not handled your data appropriately.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. In complex cases, we may extend this period by two additional months and will notify you of the extension.
When submitting a request, please provide sufficient information to allow us to verify your identity and locate your personal data.
Data Protection Officer
For questions about data protection or to exercise your rights, you may contact our data protection representative at [email protected]
Data Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data in transit and at rest
- Regular security assessments and audits
- Access controls limiting who can view personal data
- Staff training on data protection principles
- Secure backup and disaster recovery procedures
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also notify you directly without undue delay.
International Data Transfers
When we transfer personal data outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, such as:
- Adequacy decisions by the relevant authorities
- Standard contractual clauses approved by the European Commission
- Binding corporate rules
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Updates to This Statement
We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated statement on our website.
Contact Information
For questions about GDPR compliance or to exercise your rights, please contact us at:
Email: [email protected]
Address: 42 Kensington Gardens, London, W2 4RU, United Kingdom