SISG (Super Intelligence Systems Group) is a brand of X DIGITAL ASSETS SIA. This Privacy Policy explains how X DIGITAL ASSETS SIA ("we", "us", "our") collects, uses, discloses, and protects personal data when you use our website, contact forms, and services. This policy is designed to comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Personal Data Processing Law of the Republic of Latvia.
1. Data Controller
The data controller responsible for your personal data is:
X DIGITAL ASSETS SIA (brand: SISG)
Reg. No. 40203611907
VAT No. LV40203611907
"Skudriņas", Mārupes novads, LV-2167, Latvia
Email: info@sisg.eu
2. Data We Collect
We may collect the following categories of personal data:
- Contact information - name, email address, company name when you submit our contact form
- Communication data - the content of messages you send us
- Technical data - IP address, browser type, device information, pages visited (collected automatically via standard web server logs)
- Cookie data - if you consent to cookies, we may use analytics cookies to understand site usage
3. How We Use Your Data
We use your personal data for the following purposes:
- Responding to your enquiries and contact form submissions
- Providing our software development and IT consulting services
- Sending project-related communications
- Improving our website and services
- Complying with legal obligations
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR Article 6:
- Consent - when you submit a contact form or opt in to communications
- Contractual necessity - when processing is required to perform a contract with you or take pre-contractual steps at your request
- Legitimate interests - for improving our services and protecting our business, where such interests are not overridden by your rights
- Legal obligation - where we are required by law to process your data
5. Data Sharing
We do not sell your personal data to third parties. We may share data with:
- Service providers - the XDA form relay, our own contact form service running on Cloudflare Workers; XDA Hub, our own enquiry management system, with its database hosted by Supabase in the EU (Stockholm, Sweden); Cloudflare, which hosts this website and routes email sent to our domain; and Google Workspace, our business email provider
- Professional advisers - accountants, lawyers, or auditors where necessary
- Law enforcement - when required by law or to protect our legal rights
All third-party processors are bound by data processing agreements and must meet GDPR standards.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form data - retained for up to 12 months after last communication
- Client project data - retained for 5 years after project completion (in line with the Accounting Law of the Republic of Latvia)
- Website analytics - aggregated data retained for up to 24 months
After these periods, data is securely deleted or anonymised.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access - request a copy of the data we hold about you
- Right to rectification - request correction of inaccurate data
- Right to erasure - request deletion of your data ("right to be forgotten")
- Right to restrict processing - request limitation of how we use your data
- Right to data portability - request your data in a structured, machine-readable format
- Right to object - object to processing based on legitimate interests
- Right to withdraw consent - withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at info@sisg.eu. We will respond within one month of receiving your request.
8. International Transfers
Our website is hosted on Cloudflare, and our business email is provided by Google Workspace. These providers may process data outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions of the European Commission.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption on all web traffic
- Access controls and authentication
- Regular security reviews and dependency scanning
- Secure data storage and transmission practices
10. Cookies
Our website uses minimal cookies. We do not use tracking or advertising cookies. Any analytics cookies require your explicit consent before being set. You can manage cookie preferences through your browser settings.
11. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. Our lead supervisory authority is:
Data State Inspectorate of Latvia (Datu valsts inspekcija)
Elijas iela 17, Rīga, LV-1050, Latvia
Website: www.dvi.gov.lv
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.