EU MDR
EU MDR privacy notice
Who is responsible
Rubicon Microproducts Inc. operates MedTech Signal and is the controller for personal data processed in the EU MDR module. Contact info@mdsignal.org for any privacy question.
Personal data in EUDAMED records
EUDAMED records are about companies and devices. They can include names of organizations and, occasionally, business contact details that the European Commission publishes. We copy only the fields needed to identify devices, certificates and manufacturers, and we do not import person-level contact directories.
Your searches
When you search EU records or ask an EU question in Ask AI, we process your account, the search text and the time of the request to deliver results and protect the service. AI answers are generated from our database; your question is not used to train AI models.
Legal bases (GDPR)
Publishing and searching public regulatory records rests on legitimate interests in medical device transparency, which EU Regulation 2017/745 itself pursues. Processing your account and searches rests on performance of your subscription contract. Analytics cookies are used only with your consent.
International transfers
Our service providers may process data outside the European Economic Area. Where they do, transfers rely on adequacy decisions or standard contractual clauses.
Retention
EU records are refreshed from EUDAMED and replaced when EUDAMED changes them. Search history tied to your account is kept while your account is active and deleted within 90 days after it closes.
Your rights
If you are in the EU or UK you can ask to access, correct, erase, restrict or object to processing of your personal data, and you can complain to your data protection authority. If EUDAMED data about you is wrong, it must also be corrected at the source through the European Commission.
See also the main Privacy policy, the EU MDR data terms and the EU MDR topic page.