Privacy policy

This policy explains how Lisario Systems Ltd (“we”, “us”) processes personal data through the website talonis.co.uk. It is written to meet the requirements of the UK GDPR and the UK Data Protection Act 2018, the EU General Data Protection Regulation (Regulation (EU) 2016/679), and the Swiss Federal Act on Data Protection (nFADP).

1. Controller

Lisario Systems Ltd, 128 City Road, London EC1V 2NX, United Kingdom.
Company number: 16691071.
Data protection contact: privacy@talonis.co.uk

2. Data we process

• Technical data — IP address, user agent, referrer, request path and timestamp. Processed by our hosting provider to serve the site and protect against abuse.
• Contact enquiries — if you write to us (e.g. via a technical briefing request), we process the information you provide (name, organisation, email, message content).
• Consent state — a local browser storage entry recording your choice on the cookie banner. This stays on your device and is not transmitted to us.

We do not use analytics, advertising, profiling, or third-party tracking cookies. We do not sell personal data.

3. Legal bases

• Serving the site and log data: Art. 6(1)(f) GDPR / UK GDPR — legitimate interest in operating and securing the website. Under the Swiss FADP the processing is necessary for the operation of the service.
• Handling enquiries: Art. 6(1)(b) GDPR — pre-contractual measures — and Art. 6(1)(f) GDPR — legitimate interest in responding to correspondence.
• Any optional cookies or third-party embeds would only be loaded on the basis of your explicit consent (Art. 6(1)(a) GDPR; s. 6(6) PECR in the UK; Art. 45c FADP where applicable).

4. Cookies and local storage

This site uses only strictly necessary storage: a single local-storage entry to remember your cookie-banner choice. No tracking, analytics or advertising cookies are set. Strictly necessary storage does not require consent under PECR, the ePrivacy Directive, or Swiss guidance.

5. Recipients and processors

We use infrastructure providers to host the site and to route email. These providers act as processors and are bound by written data-processing terms. They may operate servers within the UK, the European Economic Area, or third countries covered by an adequacy decision or appropriate safeguards (Standard Contractual Clauses; UK IDTA/Addendum; Swiss transfer rules).

6. International transfers

Where personal data is transferred outside the UK, the EEA, or Switzerland, we rely on adequacy decisions or Standard Contractual Clauses together with the UK Addendum and the Swiss addendum as required.

7. Retention

Server logs are kept for up to 30 days for security and troubleshooting. Correspondence is kept for as long as is necessary to handle the enquiry and to meet legal record-keeping obligations.

8. Your rights

You have rights of access, rectification, erasure, restriction, objection, and data portability, and the right to withdraw consent at any time. Under the Swiss FADP you additionally have the right to information. To exercise any right, write to privacy@talonis.co.uk.

You may lodge a complaint with a supervisory authority. In the UK: the Information Commissioner’s Office (ico.org.uk). In the EU: the supervisory authority of your country of residence. In Switzerland: the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

9. Changes

We may update this policy to reflect changes to the service or to the law. The current version and its date are shown at the top of this page.