Privacy Policy

1. Regulatory Scope & Commitment

Spectrum Nexus ("we", "us", or "our"), headquartered with operational representation in Bremen, Germany, operates as a premier international regulatory engineering and compliance consultancy. We coordinate global Radio Frequency (RF) type approvals, telecommunications homologation, testing laboratory logistics, and statutory in-country representation across 217+ sovereign markets worldwide.

We are deeply committed to safeguarding the proprietary technical dossiers, pre-market intellectual property, and personal data entrusted to us by hardware manufacturers, OEMs, test laboratories, and regulatory partners. This Privacy Policy sets forth our practices regarding the collection, processing, protection, and statutory retention of technical and corporate data in compliance with the European Union General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), the California Consumer Privacy Act (CCPA), and relevant international telecommunications confidentiality frameworks.

2. Information We Collect

To execute sovereign type approvals and certification filings on your behalf, Spectrum Nexus collects and processes the following categories of information:

• Proprietary Technical Dossiers: Electrical schematics, block diagrams, PCB layout artwork, component bills of materials (BOM), antenna gain patterns, operational descriptions, tune-up procedures, and firmware specifications.
• Laboratory Test Data: Accredited ISO/IEC 17025 test reports covering Electromagnetic Compatibility (EMC), Radio Frequency (RF), Specific Absorption Rate (SAR), Maximum Permissible Exposure (MPE), and Electrical Product Safety.
• Regulatory Identifiers & Filings: Manufacturer FCC Grantee Codes, FCC IDs, ISED Company Numbers, ANATEL registration numbers, CE Declarations of Conformity (DoC), and localized regulatory label artwork.
• Corporate & Representative Information: Commercial entity registration details, corporate headquarters addresses, tax registration credentials, Power of Attorney (PoA) authorisations, and contact details of designated regulatory officers.
• Telemetry & Site Analytics: Anonymized Internet Protocol (IP) addresses, browser environments, device parameters, and usage telemetry collected via privacy-compliant session cookies to safeguard web infrastructure and enhance platform usability.

3. Legal Basis and Purpose of Processing

Spectrum Nexus processes information strictly under well-defined lawful bases pursuant to Article 6 of the GDPR:

• Contractual Performance (Art. 6(1)(b) GDPR): Processing is necessary to prepare, submit, and oversee formal regulatory applications, conduct technical pre-compliance audits, and secure certification grants across selected target countries.
• Statutory Compliance (Art. 6(1)(c) GDPR): Complying with mandatory legal obligations imposed by national telecommunications authorities, ministerial agencies, and customs authorities requiring formal manufacturer registration.
• Legitimate Interests (Art. 6(1)(f) GDPR): Protecting against unauthorized hardware tampering, preventing regulatory fraud, validating genuine certification grants, and maintaining communication with our enterprise clients.

4. Hardware Prototype Confidentiality & Non-Disclosure Safeguards

We understand that pre-market compliance documentation frequently contains highly sensitive, unannounced trade secrets and proprietary product architectures. All client technical disclosures are treated as strictly confidential under binding Non-Disclosure Agreements (NDAs).

When interfacing with public disclosure regulatory authorities (such as the United States Federal Communications Commission), Spectrum Nexus formally executes Long-Term and Short-Term Confidentiality Requests pursuant to 47 CFR § 0.457 and § 0.459. This ensures that electrical schematics, block diagrams, internal hardware photographs, and user manuals remain legally shielded from public disclosure until commercial launch dates.

5. Third-Party Disclosures & Cross-Border Transfers

Spectrum Nexus does not sell, lease, monetize, or distribute client technical or commercial data to advertising brokers or commercial third parties. Disclosures occur exclusively within the statutory certification pipeline:

• Sovereign Regulatory Authorities: Direct submittal to national communications commissions (e.g., FCC, CE/RED notified bodies, ANATEL, PTA, MIC, KC, SRRC, ISED, WPC) to review technical compliance and issue equipment authorizations.
• Accredited Test Laboratories: Authorized ISO/IEC 17025 partner testing facilities for physical sample evaluation and regulatory report generation.
• In-Country Local Representatives: Accredited regional corporate partners legally appointed to act as statutory certificate holders within jurisdictions mandating local presence.

Cross-border data transfers originating within the European Economic Area (EEA) to overseas regulatory destinations are protected under European Commission Standard Contractual Clauses (SCCs) and statutory legal exemptions necessary for the establishment, exercise, or defense of legal regulatory claims.

6. Data Retention and Dossier Archiving

Regulatory compliance dossiers, laboratory test reports, certificates of conformity, and associated correspondence are retained in encrypted repositories for the full statutory duration required by national regulatory frameworks (typically between 5 to 10 years following certificate expiration or product retirement). Upon conclusion of applicable statutory obligations, proprietary technical files are securely expunged or permanently anonymized.

7. Your Statutory Rights

Under the GDPR and corresponding global data protection legislation, you retain enforceable rights regarding your corporate and personal data:

• The right to request access to your archived certification records.
• The right to rectify inaccurate technical or corporate registry entries.
• The right to request data erasure, subject to mandatory statutory regulatory retention periods.
• The right to restrict or object to discretionary processing.
• The right to data portability in standard machine-readable formats.

To exercise your statutory privacy rights or submit an inquiry, please contact our compliance data protection officer at info@spectrumnex.com.

8. Cookies & Tracking Policies

Our web console utilizes strictly necessary cookies for session authentication, security protection, and user preference persistence (including Dark/Light UI modes). We do not employ third-party behavioral advertising trackers. Users may regulate cookie permissions via local browser settings.

9. Governance & Contact Information

For formal inquiries regarding this Privacy Policy, regulatory non-disclosure protocols, or our compliance operations, direct all correspondence to: