How CyberPhone addresses the EU General Data Protection Regulation.
Effective: July 6, 2026
This statement explains how CyberPhone meets its obligations under the EU GDPR.
This statement applies to personal data of individuals in the EEA that CyberPhone processes as a controller for its own activities, and as a processor on behalf of customers.
We process personal data on the basis of contract performance, legal obligation, legitimate interests, and—where applicable—consent.
Individuals may exercise rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent and lodge a complaint with a supervisory authority.
We respond to requests within one month, extendable by two months where necessary.
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.
CyberPhone hardware-modified devices are sold exclusively to vetted corporate, investigative, and compliance professionals for lawful monitoring of devices the purchaser is legally authorized to monitor. Use requires legal authority under the applicable jurisdiction. We do not sell for stalking, unlawful interception, or surveillance without consent where required by law. Every request is reviewed before procurement, and all sales are conditional on acceptance of our Legal Notice.