プライバシーステートメント

The controller is Signips B.V., Het Spegelt 12, 5674 CD Nuenen, the Netherlands, Chamber of Commerce number 17234831, VAT number NL820000954B01. For anything about privacy you can reach us at info@signips.com or +31 (0)85 8000 300.

Our customers decide what they show on their screens. Where the content they upload to the CMS contains personal data, for instance photos of staff, calendar items or feeds, the customer is the controller and Signips processes that content on the customer's instructions; see section 8.

Visiting this website. Our web server records the IP address, the time, the pages requested, the browser type and the referring page in a technical log. We use that log only to keep the site secure and working (legitimate interest). We use no analytics services and no advertising trackers.

Contacting us. When you use the contact form, e-mail us or call, we process your name, organisation, e-mail address, telephone number and the content of your message, so that we can answer you and follow up (steps prior to a contract, legitimate interest).

Planning a demo. When you book a demo we process your name, organisation, e-mail address, telephone number, the number of screens you have in mind and the time slot you chose, so that we can hold the demo and send you a calendar invitation (steps prior to a contract).

Orders, subscriptions and invoices. When your organisation orders, we process the details of the organisation (name, addresses, VAT number, Chamber of Commerce number) and of its contacts (name, role, e-mail address, telephone number), the order, the invoices and the payment status. We use them to deliver, invoice and support the subscription (performance of the contract) and to meet our tax and bookkeeping obligations (legal obligation). Online payments are handled by our payment provider; we receive a payment reference and its status, never your card or bank details.

Customer portal. The portal lets a customer's contacts log in with a one-time link sent by e-mail, see invoices, manage the subscription and reach support. We process the e-mail address, login times and the actions performed, to provide the portal and to protect it against misuse (performance of the contract, legitimate interest).

CMS user accounts. Customers create accounts for their editors in the CMS. For each account we process the name, e-mail address, a hashed password, the two-factor settings if enabled, and login records (performance of the contract).

Players and screens. Each player reports to our servers about every 60 seconds with its identifier, software version, network address and playback status, so that we can monitor and support it. These reports describe devices rather than people, but we protect them with the same care.

Support. When you ask for help we process the details of your request and, with your permission, may look into your CMS environment to solve it.

Commercial messages. We may inform existing customers about Signips products and changes by e-mail (legitimate interest); every such message has an unsubscribe link. Anyone else only receives such messages after asking for them. We never pass your data to other companies for their marketing.

This website sets no analytics or advertising cookies and loads no third-party trackers. Fonts, images and scripts are served from our own servers.

We use only what the site needs to work: a cookie that remembers the language you chose; a login cookie for the customer portal, which is set only after you log in, cannot be read by scripts and expires after 30 days without activity; and, while you fill in an online order, the order draft in your browser's own session storage so that a page reload does not lose it. None of these are shared with anyone.

You can delete or block cookies in your browser settings. The portal will then not keep you logged in.

We share personal data only with parties that help us provide the service, and only what they need:

• Hetzner Online GmbH (Germany): hosting of this website, the ordering and portal systems and their backups.
• Google Ireland Limited (Ireland, Google Workspace): receiving and storing the messages sent to us, including the ones from the contact form.
• Mollie B.V. (Netherlands): processing of online payments and direct-debit mandates.
• The European Commission's VIES service: validation of the VAT number entered when ordering.
• Shipping carriers: name, delivery address and telephone number for delivering and collecting hardware.
• Our accountant and bookkeeping software: invoice data, as the law requires.

The servers that run the CMS and receive the players' reports are hosted within the European Union.

We give personal data to authorities only when the law obliges us to, after a specific and reasoned request.

We host this website, the CMS, the ordering systems and their backups in the Netherlands and Germany, so personal data normally stays within the European Economic Area. Two things do go outside it: correspondence with a customer located outside the EEA, and external services that a customer chooses to connect to the CMS (section 7). Where a supplier of ours processes personal data outside the EEA, that happens on the basis of an adequacy decision of the European Commission or under its standard contractual clauses, with additional measures where they are needed.

We keep personal data no longer than needed for the purpose it was collected for:

• Web server logs: at most 60 days.
• Contact form messages and e-mail: as long as needed to handle your request, and at most two years after the last contact.
• Demo bookings: 12 months after the demo date.
• Orders, invoices, subscription and payment records: seven years after the end of the financial year, as the tax authority requires.
• Portal and CMS accounts: for the duration of the subscription and up to 12 months after it ends, unless the customer asks us to delete an account sooner.
• Customer content in the CMS: deleted within 30 days after the subscription ends.
• Backups: kept for 14 days, then overwritten.

When a period ends we delete the data or make it anonymous.

All connections to this website, the portal and the CMS are encrypted (TLS). Portal logins use one-time links instead of passwords; CMS passwords are stored hashed and two-factor authentication is available. Access to systems and data is limited to the people who need it for their work, servers receive security updates automatically, and backups are made every night and kept within the European Union.

If a security incident nevertheless affects your data in a way that is likely to put you at risk, we inform you and the Dutch Data Protection Authority as the law requires.

The CMS can show content from external services that a customer chooses to connect, such as YouTube, calendars, social media or data feeds. When you connect such a service, its provider processes data under its own terms and privacy policy, and may do so outside the European Economic Area.

The YouTube feature uses YouTube API Services. By using it you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to the data Google processes. You can withdraw the CMS's access to your Google data at any time on the Google security settings page.

Everything a customer publishes through the CMS is the customer's responsibility. Where it contains personal data, the customer is the controller and Signips the processor. We process that content only to store, transmit and display it as instructed, within the European Union, and we delete it within 30 days after the subscription ends.

A data processing agreement that sets this out, including the sub-processors involved, is available on request from info@signips.com.

If you appear on a screen run by one of our customers and have questions about it, please contact that organisation first; we help our customers respond.

You have the right to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent you have given. Send your request to info@signips.com. So that we never hand your data to someone else, we may ask you to confirm your identity, for instance by writing from the e-mail address we have on file; we do not ask for a copy of your ID.

We answer within one month. Complex or numerous requests may take up to two months longer; we will tell you if that is the case.

If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

We make no automated decisions with legal effect about you, and our services are not aimed at children under 16.

We may update this statement when our services or the law change. The current version is always at signips.com/privacy, and substantial changes are announced to customers by e-mail. This version applies from 17 September 2026 and replaces the earlier statement.