--- title: GDPR Notice (Accept Mission) description: "**Effective date:** January 1, 2026 This GDPR Notice explains how [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) supports compliance with the EU General Data Protection Regulation (“GDPR”) when customers and users process personal data in the [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) platform. This notice is informational. It does…" url: "https://www.acceptmission.com/de/knowledge/gdpr-notice-accept-mission/" updated: "2026-04-15" category: "Privacy & Data Protection" --- # GDPR Notice (Accept Mission) **Effective date:** January 1, 2026 This GDPR Notice explains how [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) supports compliance with the EU General Data Protection Regulation (“GDPR”) when customers and users process personal data in the [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) platform. This notice is informational. It does not replace our contractual terms, privacy policy, or data processing addendum. ## 1) What GDPR means for [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) GDPR sets requirements for how personal data is collected, used, stored, shared, and protected. It also gives individuals rights over their personal data, such as the right to access, correct, delete, restrict, and object to processing. [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) is committed to handling personal data in a lawful, fair, and transparent way and to supporting customers that use the platform as part of their innovation workflows. ## 2) Roles under GDPR: controller and processor [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) is a B2B platform used by companies and innovation teams. Roles depend on the type of data: - **Customer Data inside a workspace or [Mission](https://www.acceptmission.com/de/encyclopedia/mission/):** the **Customer** is typically the **controller**. [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) acts as the **processor**, processing that personal data on the Customer’s instructions. - **Account, billing, website, and operational security data:** [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) is typically the **controller** for this data. Customers control access to their workspace, configure permissions, and decide what content is submitted to the platform. ## 3) Data protection principles we apply Our approach aligns with GDPR principles, including: - **Purpose limitation:** data is processed to provide and secure the platform and related support. - **Data minimization:** we aim to process only what is needed for the function. - **Security and confidentiality:** access controls, monitoring, encryption, and secure development practices are used to reduce [Risk](https://www.acceptmission.com/de/encyclopedia/risk/). - **Retention discipline:** data is retained only as long as needed for service delivery, customer instructions, and legal obligations. ## 4) Data subject rights Depending on applicable law, individuals may request: - **Access** to their personal data - **Correction** of inaccurate data - **Deletion** (where conditions apply) - **Restriction** of processing (in certain cases) - **Objection** to certain processing, including direct marketing - **Portability** where applicable ### How to submit a request Email: **security@acceptmission.com** To help us respond quickly, include: - The email address associated with your account - The workspace name or [Mission](https://www.acceptmission.com/de/encyclopedia/mission/) URL (if relevant) - The specific right you want to exercise and what data you want us to focus on If your request concerns content inside a specific customer workspace or [Mission](https://www.acceptmission.com/de/encyclopedia/mission/), the workspace owner (Customer) may need to approve or execute the request because they control that data. ## 5) Data Processing Addendum (DPA) [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) provides a Data Processing Addendum for customers where [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) processes personal data on their behalf as a processor. The DPA describes processing instructions, security measures, subprocessors, assistance obligations, breach notification, deletion or return, and international transfer safeguards. If your organization requires a signed version or has specific procurement requirements, contact: **security@acceptmission.com**. ## 6) Subprocessors [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) uses selected subprocessors to deliver the platform, such as cloud hosting, communications tooling, monitoring, and payment processing. Subprocessors are contractually bound to protect personal data and process it only for service delivery. ## 7) International transfers Customer data is hosted and processed primarily in the European Economic Area, with standard hosting in West Europe. If processing involves transfers outside the EU or EEA, [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) applies appropriate safeguards required by GDPR, such as Standard Contractual Clauses and supplementary measures where relevant. ## 8) Retention and deletion Retention depends on data category and customer configuration: - **Workspace and [Mission](https://www.acceptmission.com/de/encyclopedia/mission/) content:** controlled by the Customer. Customers can delete or export content based on their governance. - **Account data:** retained while the account is active and deleted or anonymized after account deletion, subject to legal and security needs. - **Billing data:** retained as required by tax and accounting rules. - **Security logs:** retained for a limited period for protection and investigation, then deleted or anonymized. ## 9) Security incident handling [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) maintains an incident response process designed to detect, contain, investigate, remediate, and recover from security incidents. Where a personal data breach affects customer data under our control, we notify customers without undue delay and provide relevant details to support customer obligations. ## 10) Contact For GDPR questions, data rights requests, DPA requests, or privacy concerns: **security@acceptmission.com** [Accept Mission](https://www.acceptmission.com/de/encyclopedia/accept-mission/) B.V. Westplein 12 3016 BC, Rotterdam The Netherlands