Legal
GDPR & Data Privacy
R52 Digital Signage Alliance is GDPR compliant. Here is how we protect your data and what it means for you.
Our commitment to GDPR
R52 Digital Signage Alliance processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and UK GDPR. We act as a data processor for personal data you store in our platform, and as a data controller for data we collect about your use of our services.
Data Processing Agreement (DPA)
All paid plan customers can request a signed Data Processing Agreement. The DPA documents the roles and obligations of both parties under GDPR Article 28, including processing purposes, data subject categories, security measures, and sub-processor details. Contact us via the support centre to request a DPA.
Data residency
Customer data is stored in EU data centres (AWS eu-west-1 and eu-central-1) by default. Enterprise customers can request data residency in specific regions including US-East, US-West and Asia-Pacific. Data is never transferred outside your chosen region without explicit consent.
Sub-processors
We use a limited number of approved sub-processors to deliver our services. These include cloud infrastructure (AWS), payment processing, transactional email delivery, and customer support tooling. A complete and up-to-date list of sub-processors is available on request and is included in our DPA.
Your rights as a data subject
Under GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing; request data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us through the support centre. We respond to all data subject requests within 30 days.
Certifications
R52 Digital Signage Alliance maintains ISO 27001 certification and SOC 2 Type II compliance. These frameworks validate our information security management systems and the controls we have in place to protect customer data. Certification reports are available to enterprise customers under NDA.
Questions about data privacy?
Our data protection team responds within 24 hours on business days.