GDPR Notice (Accept Mission)

2 min read

0:00 3:47

Doc Summary

Effective date: January 1, 2026

This GDPR Notice explains how Accept Mission supports compliance with the EU General Data Protection Regulation (“GDPR”) when customers and users process personal data in the Accept Mission platform.

This notice is informational. It does not replace our contractual terms, privacy policy, or data processing addendum.

1) What GDPR means for Accept Mission #

GDPR sets requirements for how personal data is collected, used, stored, shared, and protected. It also gives individuals rights over their personal data, such as the right to access, correct, delete, restrict, and object to processing.

Accept Mission is committed to handling personal data in a lawful, fair, and transparent way and to supporting customers that use the platform as part of their innovation workflows.

2) Roles under GDPR: controller and processor #

Accept Mission is a B2B platform used by companies and innovation teams. Roles depend on the type of data:

Customer Data inside a workspace or Mission: the Customer is typically the controller. Accept Mission acts as the processor, processing that personal data on the Customer’s instructions.
Account, billing, website, and operational security data: Accept Mission is typically the controller for this data.

Customers control access to their workspace, configure permissions, and decide what content is submitted to the platform.

3) Data protection principles we apply #

Our approach aligns with GDPR principles, including:

Purpose limitation: data is processed to provide and secure the platform and related support.
Data minimization: we aim to process only what is needed for the function.
Security and confidentiality: access controls, monitoring, encryption, and secure development practices are used to reduce Risk.
Retention discipline: data is retained only as long as needed for service delivery, customer instructions, and legal obligations.

4) Data subject rights #

Depending on applicable law, individuals may request:

Access to their personal data
Correction of inaccurate data
Deletion (where conditions apply)
Restriction of processing (in certain cases)
Objection to certain processing, including direct marketing
Portability where applicable

How to submit a request #

Email: [email protected]

To help us respond quickly, include:

The email address associated with your account
The workspace name or Mission URL (if relevant)
The specific right you want to exercise and what data you want us to focus on

If your request concerns content inside a specific customer workspace or Mission, the workspace owner (Customer) may need to approve or execute the request because they control that data.

5) Data Processing Addendum (DPA) #

Accept Mission provides a Data Processing Addendum for customers where Accept Mission processes personal data on their behalf as a processor. The DPA describes processing instructions, security measures, subprocessors, assistance obligations, breach notification, deletion or return, and international transfer safeguards.

If your organization requires a signed version or has specific procurement requirements, contact: [email protected].

6) Subprocessors #

Accept Mission uses selected subprocessors to deliver the platform, such as cloud hosting, communications tooling, monitoring, and payment processing. Subprocessors are contractually bound to protect personal data and process it only for service delivery.

7) International transfers #

Customer data is hosted and processed primarily in the European Economic Area, with standard hosting in West Europe. If processing involves transfers outside the EU or EEA, Accept Mission applies appropriate safeguards required by GDPR, such as Standard Contractual Clauses and supplementary measures where relevant.

8) Retention and deletion #

Retention depends on data category and customer configuration:

Workspace and Mission content: controlled by the Customer. Customers can delete or export content based on their governance.
Account data: retained while the account is active and deleted or anonymized after account deletion, subject to legal and security needs.
Billing data: retained as required by tax and accounting rules.
Security logs: retained for a limited period for protection and investigation, then deleted or anonymized.

9) Security incident handling #

Accept Mission maintains an incident response process designed to detect, contain, investigate, remediate, and recover from security incidents. Where a personal data breach affects customer data under our control, we notify customers without undue delay and provide relevant details to support customer obligations.