GDPR Policy

The General Data Protection Regulation (GDPR) is a privacy law in the European Union (EU) that grants EU citizens and residents the right to access and control their personal data.

Is Subsignal GDPR compliant?

Yes. Subsignal is designed with GDPR compliance in mind and we fully comply with the GDPR framework for all our competitive intelligence and market monitoring services.

Our Privacy Policy explains what data we collect during market monitoring, how long we retain it, how it may be transferred, and your data protection rights.
All user data and business intelligence collected through Subsignal is encrypted both in transit and at rest, and securely stored.
You have full control over your account data, monitoring preferences, and any personal information you provide to our platform.
We offer a comprehensive Data Processing Agreement (DPA) for business users that covers our role as a data processor for your market intelligence needs.
We implement data minimization principles, collecting only the information necessary to provide effective competitive intelligence services.

Do you have a Data Processing Agreement?

By creating a Subsignal account and accepting our Terms and Conditions, business users also agree to the terms of our Data Processing Agreement (DPA). Our DPA specifically addresses the processing of personal data in the context of competitive intelligence and market monitoring services. Please see our DPA page for more details.

What happens with monitored data?

Subsignal provides competitive intelligence and market monitoring services, but you remain in control of your account data and monitoring preferences. You are the data controller for the information you input and configure. Subsignal acts as the data processor, collecting and analyzing market data on your behalf.

As long as your account remains active, you retain full control over your monitoring settings, tracked companies, and personal account data.
You can modify, delete, or export your account data and monitoring configurations at any time through your dashboard.
We respect all deletion requests. Any personal data you request to be deleted is permanently removed from our systems within 30 days.
Market intelligence data collected from public sources may be retained for analytical purposes but is anonymized to prevent identification of individual users.

How Subsignal processes market intelligence data

Our platform collects publicly available business information to provide competitive intelligence services. This process is designed to respect privacy while delivering valuable market insights.

We collect data from publicly available sources such as company websites, press releases, regulatory filings, and news articles.
Personal information that may be contained in public business data (such as executive names) is processed only for legitimate business intelligence purposes and is not used for direct marketing.
We implement automated systems to minimize the collection of unnecessary personal data while maintaining the effectiveness of our monitoring services.
Any personal data collected during market monitoring is processed under the lawful basis of legitimate interests for providing business intelligence services.

How Subsignal uses your personal data

Subsignal acts as a data controller for the personal information you provide to us in order to use our competitive intelligence platform (such as registration details and monitoring preferences).

We do not sell personal data to third parties, nor do we use it for marketing or advertising purposes without your explicit consent.
We only share your information with trusted service providers who assist us in operating Subsignal's infrastructure, and these providers are required to comply with the GDPR framework.
Your account data is used solely to provide you with personalized market intelligence and competitive monitoring services.
We may use aggregated, anonymized usage data to improve our platform and develop new features for competitive intelligence.

Data retention and international transfers

We maintain clear policies on how long we retain different types of data and how we handle international data transfers.

Account data is retained for as long as your account remains active and for a reasonable period after account deletion to comply with legal obligations.
Market intelligence data from public sources may be retained longer for historical trend analysis but is anonymized to protect individual privacy.
When transferring data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.
We provide transparency about our subprocessors and international data transfer mechanisms in our Data Processing Agreement.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to access your personal data and understand how it's processed
Right to rectify inaccurate personal data
Right to erasure of your personal data (“right to be forgotten”)
Right to restrict processing in certain circumstances
Right to data portability to move your data to another service
Right to object to processing based on legitimate interests
Right to withdraw consent where processing is based on consent
Rights related to automated decision-making and profiling

To exercise any of these rights or if you have questions about how your data is processed in our competitive intelligence platform, please contact us at [email protected]

Contacting Us About Data Privacy

If you have any questions about how we collect, use, or protect your personal data in connection with our market monitoring services, you can contact our Data Protection team:

General Privacy Inquiries: [email protected]

Data Protection Officer: [email protected]

Data Subject Rights Requests: [email protected]

We aim to respond to all inquiries within 72 hours and complete data subject rights requests within 30 days as required by GDPR.

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority in the EU.