Privacy Policy

SKIA is a high-speed unmanned surface vehicle developed in Cyprus by a consortium of TAG, Ceranext, Additess, Trinomial Technologies, Spaceboats and Amadema.

The consortium works together under a collaboration agreement and has not yet set up a separate legal entity for the project. TAG LTD (“TAG”) acts as the consortium’s representative and coordinator. TAG is the data controller for this website and for personal data submitted through it: it decides how and why that data is processed (“we”, “us”, “our”).

TAG: TAG LTD.

For any question about this policy or your personal data, contact us at info@tag-defence.com.

This policy covers personal data you give us when you:

• submit the Request a Briefing form;
• submit the Book a Meeting form for trade shows and events;
• email us directly at info@tag-defence.com.

It also covers the limited technical data processed when you visit the site. It does not cover third-party websites linked from this site, which have their own policies.

• Briefing request form. Full name, rank or job title (optional), organisation, country, work email address, area of interest, the content of your message, and a record of your acknowledgement of this policy with its date and time.
• Meeting request form. Full name, organisation, work email address and preferred meeting day.
• Email correspondence. Your email address, name, signature details and whatever you choose to include in your message or attachments.
• Technical data. IP address, browser type, device and operating system, date and time of access and pages requested, recorded automatically in server logs. To protect the forms from abuse, your IP address and the email address you enter are also kept for one hour as a keyed one-way code, never in readable form. Your language choice is stored in a cookie (see section 10).

Please give us only professional contact details. We do not ask for, and ask you not to send, special-category data (for example health, political opinions or religious beliefs) or data about criminal convictions.

We use personal data only for the purposes below, each with a legal basis under Article 6(1) GDPR:

• Responding to your request and arranging briefings or meetings. Basis: taking steps at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in responding to professional enquiries about SKIA (Art. 6(1)(f)).
• Checking that enquiries come from eligible organisations. Because SKIA is a defence and security product, we may verify your identity and organisation and screen enquiries against applicable sanctions and restricted-party lists before sharing information. Basis: compliance with legal obligations, including EU and national export-control and sanctions law (Art. 6(1)(c)), and our legitimate interest in preventing unauthorised access to controlled information (Art. 6(1)(f)).
• Managing the ongoing professional relationship where a briefing, evaluation or partnership follows. Basis: Art. 6(1)(b) and Art. 6(1)(f).
• Operating and securing the website, including detecting abuse and fixing faults. Basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f)).
• Establishing, exercising or defending legal claims and keeping records required by law. Basis: Art. 6(1)(c) and Art. 6(1)(f).

The checkbox on the briefing form confirms that you have read this policy. We do not send marketing or newsletters on the strength of a form submission. If we ever want to, we will ask for your separate, opt-in consent (Art. 6(1)(a)), which you can withdraw at any time.

Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You can ask us for details of this assessment. We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

The forms and email address on this site are not accredited for classified information. Do not submit classified, export-controlled or otherwise sensitive operational information through them. Where a briefing requires it, we will arrange an appropriate secure channel through official procedures.

We do not sell personal data. We share it only on a need-to-know basis with:

• Other SKIA consortium partners (Ceranext, Additess, Trinomial Technologies, Spaceboats and Amadema), where needed to answer your enquiry or deliver a briefing. TAG shares only what the task requires. Under the consortium’s data-protection terms, partners may use the data only for that purpose and must apply equivalent safeguards.
• Service providers acting as processors, such as website hosting, form handling and email providers. They process data only on our documented instructions under contracts that meet Article 28 GDPR.
• Professional advisers, such as lawyers and auditors, under duties of confidentiality.
• Public authorities, including export-control, customs or law-enforcement authorities, where the law requires it or it is needed to protect our legal rights.

We aim to keep personal data within the European Economic Area (EEA). If data is transferred outside the EEA, for example to a service provider, we make sure it is protected by an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified recipients) or by the European Commission’s Standard Contractual Clauses with supplementary measures where needed. You can ask us for a copy of the relevant safeguards.

When a retention period ends, we securely delete or anonymise the data. We may keep it longer only where needed to establish, exercise or defend legal claims.

We use appropriate technical and organisational measures to protect personal data. These include encrypted transmission (HTTPS/TLS), role-based access limited to staff who need the data, confidentiality obligations, and regular review of our providers. No method of transmission over the internet is completely secure. If a personal data breach is likely to result in a risk to your rights, we will notify the supervisory authority and, where required, you, in line with Articles 33 and 34 GDPR.

This site does not use advertising or analytics cookies, does not track you across other websites, and stores nothing in your browser’s local storage. It sets only these cookies:

• Session cookie. Keeps the forms working between page loads, for example to show a form’s errors or its confirmation. It expires after two hours of inactivity. Strictly necessary for the forms.
• XSRF-TOKEN. Protects the forms against forged requests from other websites. It expires after two hours of inactivity. Strictly necessary for the forms.
• locale. Remembers the language of the pages you view, so the site opens in that language next time. It is kept for 12 months.

These cookies are needed to provide the site and the functions you use, so they do not require consent. You can delete them at any time through your browser settings.

If we add analytics or other non-essential cookies in future, we will ask for your consent first and update this policy.

Subject to the conditions and exceptions in the GDPR, you have the right to:

• access the personal data we hold about you and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data;
• restriction of processing;
• data portability for data you gave us, where processing is based on contract or consent and carried out by automated means;
• object to processing based on legitimate interests, on grounds relating to your particular situation;
• withdraw consent at any time, where processing is based on consent, without affecting processing carried out before withdrawal.

To exercise any of these rights, email info@tag-defence.com. We will reply within one month, which may be extended by two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity before acting on a request. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

If you have concerns about how we handle your data, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live, work or where the alleged infringement took place. In Cyprus, the supervisory authority is:

Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
www.dataprotection.gov.cy

The consortium intends to set up a dedicated legal entity for SKIA. When it does, that entity may take over as data controller. Before that happens we will update this policy to name the new controller, and we will notify people whose data we hold. Their personal data will be transferred to the new entity only for the purposes described here.

We may also update this policy to reflect changes to the website, our processing or the law. The effective date at the top shows when it was last revised. If changes are material, we will highlight them on this page and, where appropriate, notify people whose data we hold.

TAG, on behalf of the SKIA consortium
TAG LTD
Email: info@tag-defence.com