Privacy Policy | Signalzappyd

1. Scope & Legal Identification

This Privacy Policy applies to the collection, processing, and storage of personal data by Signalzappyd Expedition Systems Ltd. (Registration No. HRB-849201-E, with registered address at 14 Quai du Port, 06300 Nice, France, hereinafter referred to as "Signalzappyd", "we", "us", or "our"). We act as the Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and relevant international privacy statutes including the California Consumer Privacy Act (CCPA).

2. Data We Collect and Process

When you interact with our route planning engines, download geographic dossiers, or contact our desk, we may process:

Identity and Contact Data: Full name, professional or personal email address, and communication records submitted via our contact forms.
Telemetry and Route Preference Data: Selected travel corridors, trip duration preferences, waypoint configurations, vehicle transit preferences, and saved route bookmarks.
Technical System Data: Internet Protocol (IP) address (truncated where required by law), browser classification, screen resolution, operating system, and timestamped access logs.

3. Lawful Basis for Processing Under GDPR

We process your personal information strictly under the following lawful bases:

Contract Performance (Art. 6(1)(b) GDPR): Necessary to calculate customized route topologies, deliver requested GPX dataset files, and provide expedition consulting.
Legitimate Interests (Art. 6(1)(f) GDPR): Necessary to protect platform integrity, prevent malicious crawling of our cartographic datasets, and improve interactive UI responsiveness.
Consent (Art. 6(1)(a) GDPR): Applicable where you explicitly opt in to analytics telemetry or marketing route dispatches.

4. Data Retention & Third-Party Processors

We do not sell, rent, or trade your personal data. We retain customer contact logs for a maximum period of twenty-four (24) months following the last active communication. We utilize secure European Union-based hosting and storage infrastructure that complies with ISO/IEC 27001 security standards.

5. Your Rights Under GDPR and CCPA

As a data subject, you possess enforceable legal rights, including:

Right of Access: You may request a verified machine-readable copy of your personal data held by us.
Right to Rectification: You may correct inaccurate or incomplete contact records.
Right to Erasure ("Right to be Forgotten"): You may request the immediate deletion of your records where retention is no longer legally required.
Right to Restriction and Objection: You may restrict processing or object to analytics profiling at any time.

6. Data Protection Officer (DPO) Contact