Last updated: 7 July 2026
This page is maintained by the Global Supply Chain Council (GSCC) to explain how the GSCC Vendor Radar handles personal data. It applies to visitors, vendors submitting information, and readers who contact us.
Browsing. We do not use third-party advertising trackers. Basic server logs (IP address, user agent, request path, timestamp) are kept short-term for security and abuse prevention.
Vendor submissions. When a vendor submits information via the verification form, we collect the submitter's name, work email, company details, and the vendor attributes they provide. The submitter's email must be on the vendor company domain.
Correspondence. If you email us, we keep the message and reply history to answer you and maintain corrections.
Submission data is used to verify vendor listings, contact the submitter about their submission, and publish the vendor's attributes on the Radar. Correspondence is used to answer questions and log corrections. Server logs are used for security, debugging, and abuse prevention.
We do not sell personal data and do not share it with advertisers.
Under the GDPR, we rely on legitimate interest (running the Radar, verifying vendor claims, securing the service) and consent (when you actively submit a vendor form or email us).
Vendor submissions and published attributes are retained as long as the vendor is listed on the Radar. Rejected submissions and correspondence are kept for up to 24 months. Server logs are kept for up to 30 days.
We use a small set of infrastructure providers to run the site: our hosting and database provider, our transactional email provider, and Google Ireland Limited (Google Analytics 4) for aggregate usage analytics. All are bound by data processing agreements and process data on our instructions.
You can request access, correction, or deletion of your personal data by emailing radar@gscc.co. You also have the right to complain to your local data protection authority.
Strictly necessary cookies keep the site working (e.g. session and CSRF protection) and are always on. With your consent, we use Google Analytics 4 (Google Ireland Limited) to measure aggregate usage such as page views and referrers. IP addresses are anonymised and no advertising or remarketing signals are enabled (Google Consent Mode v2, ad_storage denied). Legal basis: consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time using the "Cookie settings" link in the footer, which will reopen the banner.
Data controller: Global Supply Chain Council. Contact: radar@gscc.co.