Privacy Policy

1. Who We Are

Sunapsis Group ('we', 'us', 'our') is a strategic advisory firm with operating offices in Austria, Belgium, and the United Kingdom. We provide advisory services across governance, peace and security, climate governance, digital transformation, finance and economic governance, and health equity.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website (the 'Site') or engage with us directly. We are committed to handling your personal information in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, organisation, and the content of any enquiry you submit through our contact form.
• Technical data: IP address, browser type and version, operating system, referral source, pages visited, and time spent on the Site (collected via analytics tools).
• Communications data: records of any correspondence you initiate with us by email or through the Site.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted via the contact form.
• To maintain and improve the performance and security of our Site.
• To analyse aggregate usage patterns for internal reporting purposes.
• To comply with our legal and regulatory obligations.

We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or trade your personal information to third parties.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

• Legitimate interests: responding to enquiries and operating our Site.
• Legal obligation: complying with applicable laws and regulations.
• Consent: where we have obtained your explicit consent for a specific processing activity.

5. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Contact enquiry data is retained for up to 24 months unless you request earlier deletion. Technical and analytics data is retained in anonymised or aggregated form.

6. Data Sharing

We may share your data with trusted third-party service providers who assist us in operating our Site (for example, hosting and analytics providers). These parties are bound by contractual obligations to process your data only in accordance with our instructions and applicable law.

We will disclose personal data to competent authorities where required by law or legal process.

7. International Transfers

Given our operating offices across Austria, Belgium, and the United Kingdom, your data may be transferred and processed within the European Economic Area (EEA) and the United Kingdom. Any transfers outside these territories are conducted using appropriate safeguards, including standard contractual clauses approved by the European Commission.

8. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time.

To exercise any of these rights, please contact us at advisory@sunapsisgroup.com. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority in your country.

9. Cookies

Our Site uses cookies and similar technologies to improve your experience and gather analytics data. Essential cookies are necessary for the Site to function. Analytics cookies are used only with your consent. You can manage your cookie preferences through your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the effective date noted below. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at: