Date last updated: 21 May 2026

1. Who we are and what is the purpose of this privacy notice?

We are GSMA Advisory Services Ltd., a wholly owned subsidiary of the GSM Association, (“GSMA”, “we”, “us” or “our”) with registered office at 1 Angel Lane, London EC4R 3AB, United Kingdom.

This privacy notice (“Privacy Notice”) explains how we collect and process personal data of individuals using our GSMA Intelligence data platform and services.

GSMA Advisory Services Ltd. is the controller of your personal data under the EU General Data Protection Regulation (“GDPR“).

2. What categories of personal data do we collect and process about you?

In this Privacy Notice, when we mention “personal data”,we mean any information that is about you.

We may process the following personal data about you:

Contact Data name, job title, company name, email, country / region, business phone (optional), information about why you are contacting us, subject, text message.

Registration Data name, email, password, organisation, telephone (optional), type of work, job title, country, information on the market data that a user is looking for.

Account Data name, email address, company/organisation, company status, country, contact number, information on your subscriptions.

Survey Data data collected for survey and research purposes that may include demographic data, organisation name, job title, or other data relevant for the research.

Billing Data contact person’s name and email address, company or organisation name, address, company registration and/or VAT numbers.

Login Credentials your email address and password for your GSMA Intelligence Account.

AI Assistant Data prompts submitted via our GSMA Intelligence AI Assistant, IP address.

Usage Data device IDs, IP address, location data, information on your use of our website, data platform, or other usage data.

3. For what purposes do we process your personal data?

We may process your personal data for the purposes described below. We also set out the data categories that we process for each purpose and our lawful basis under the GDPR for undertaking the processing purpose we have described.

1. Registration and management of your GSMA Intelligence Account
   • Description: We will process your personal data to create and manage your GSMA Intelligence Account. We may also contact you regarding matters related to the administration, maintenance, and support of your GSMA Intelligence Account, either by email or through your account.
   • Data categories: Contact Data, Registration Data, Account Data, Login Credentials, Usage Data.
   • Lawful basis: Performance of a contract.
2. GSMA Intelligence subscriptions and services
   • Description: We will process your personal data to provide you with GSMA Intelligence services and subscriptions related to data, research, consulting, additional tools, custom services (such as Spectrum insights, Global Coverage Maps, Custom Consulting), and to communicate with you. These services may include bespoke reports, radar insights, various content, and event support.
   • Data categories: Contact Data, Account Data, Billing Data.
   • Lawful basis: Performance of a contract and our legitimate interest that includes processing your personal data for activities supporting our services and subscriptions.
3. Survey services
   • Description:We may process your personal data to conduct surveys, including interviews and questionnaires. These activities support our publications, research reports, and market forecasting, which inform strategic decision-making, trend monitoring, and performance benchmarking across markets, services, and sectors. We may engage third-party agencies to assist with these activities.
   • Data categories: Survey Data.
   • Lawful basis:Consent.
4. GSMA Intelligence Events
   • Description: If you sign up for ourevents,we will process your personal data to organise the event and support your participation. We may use third-party providers, including Microsoft Teams, to host our webinars. We may also send you post event communications related to the event. In addition, we may share your personal data with sponsors of the event for purposes relating to the organisation of the event and limited post-event communication with you.
   • Data categories: Full name, job title, company, email address, other data required in your registration form.
   • Lawful basis:Consent.
5. Book a meeting form
   • Description: If you want to book a meeting with our team, you may fill out contact form on our website. We will process your personal data to respond to your request and arrange a meeting with you.
   • Data categories: Contact Data, other data related to your enquiry.
   • Lawful Basis: Our legitimate interest in processing your personal data to arrange a meeting with you.
6. GSMA Intelligence enquiry form
   • Description: If you want to submit any comments or questions to GSMA Intelligence, you may fill out contact form on our website. We will process your personal data to respond to your enquiry.
   • Data categories: Contact Data, other data related to your enquiry.
   • Lawful Basis: Our legitimate interest that includes processing your personal data to respond to your enquiry.
7. GSMA Intelligence newsletter
   • Description: If you subscribe to our GSMA Intelligence newsletter, we will process your personal data to send you updates related to GSMA Intelligence latest insights, forecasts, and research.
   • Data categories: Contact Data.
   • Lawful basis: Consent.
8. Billing
   • Description: We will process your personal data for payment processing, billing purposes, tax and accounting purposes.
   • Data categories: Billing Data.
   • Lawful basis: Performance of a contract and compliance with legal obligations.
9. GSMA Intelligence AI Assistant
   • Description: We may process your personal data when you use our GSMA Intelligence AI Assistant, including the prompts you submit. We process your prompts to analyse them and provide you with relevant responses. Any data included in your prompts may be shared with and stored by Chatbase (our AI service provider) for the purposes of identifying the source and destination of communications, maintaining activity logs, optimising and maintaining the performance of the Services, and investigating and preventing system abuse.
   • Data categories: AI Assistant Data.
   • Lawful basis: Our legitimate interest in processing and responding to your prompts as well as sharing with our AI service provider for performance monitoring and analytics.
10. Statistics and analytics
    • Description: We may use your personal data to better understand the demographics, backgrounds, and interests of users of the GSMA Intelligence data platform and our related services. We will also analyse how you interact with our website, including your data searches and downloaded reports. This information will be used to produce aggregated statistical insights that do not directly identify you, and to support the ongoing development and improvement of our GSMA Intelligence services and subscriptions.
    • Data categories: Contact Data, Account Data, Usage Data.
    • Lawful basis: Our legitimate interest in processing your data for analytical purposes.
11. Technical support and security
    • Description: We may use your personal data to diagnose, troubleshoot, and fix issues with your GSMA Intelligence Account and keep our services secure.
    • Data categories: Contact Data, Usage Data, other data required for technical support & security.
    • Lawful basis: Legitimate interest that includes diagnosing and fixing technical issues with our services, ensuring the security our services and detecting malicious activities.
12. Data subjects’ requests and enquiries
    • Description: We may use your personal data to respond to your enquiry, complaint, or a data subject request (e.g. access to data, erasure, etc.).
    • Data categories: Contact Data, other data relevant to the data subject’s request.
    • Lawful basis: Compliance with legal obligations or legitimate interest in processing your request and/or responding to your enquiry.

Consent

Where we process your personal data based on consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted on other lawful processing grounds.

Legitimate Interest

If we collect and use your personal data based on our legitimate interests (or of a third party), you may object to such processing. In that case we will no longer process your personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where we process your personal data for direct marketing purposes, you may object to such processing at any time.

4. Marketing

If you provide us with your consent or we have another lawful basis for sending marketing communications, we may process your personal data for direct marketing purposes using different communication channels such as email.

You can update your marketing communication preferences anytime in the preference centre on our website. You can access the preference centre via unsubscribe link included in each email from us. 

5. Automated processing

We will not use your personal data to make a decision about you based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for a contract between us and you, is permitted by law or you have provided us with your consent for such processing.

6. How do we collect your personal data?

Directly from you, for example when you register your GSMA Intelligence Account and access GSMA Intelligence via subscription packages, custom one-off purchases, or bespoke consulting services, subscribe for our newsletter, interact with our websites, communicate with us via email or other means.

From third parties, for example from your employer or another person that shared your data with us as part of your company’s subscription.

7. Who has access to your personal data?

We may share your personal data with the following recipients:

• Our agents, vendors, or service providers who perform functions on our behalf or provide services to us; for example IT service providers, accounting service providers, hosting service providers, AI chatbot builders (such as Chatbase);
• Our event sponsors who provide content for our events and and support event organisation;
• Authorities where we are required to do so by law for example for security reasons or in connection with criminal or regulatory investigations,
• Outside advisors, including legal counsels for the purpose of defence of legal claims, or regulatory proceedings,
• Our affiliates for examplefor administrative purposes, group reporting, or provision of other services.

Please note that this list is non-exhaustive, and we may need to share your data with other parties to effectively deliver our services.

8. International data transfers

As we operate via a global network of corporate offices, booking and service centres, and data centres, it may be necessary to transfer your personal data internationally, i.e. outside of the country where it was originally collected or outside of your country of residence.

Where we transfer personal data that originates in the European Union (“EU”), the United Kingdom (“UK”) or Switzerland to a country outside the EU, the UK or Switzerland, we will ensure such transfer is made in accordance with applicable laws. We use a variety of legal mechanisms, including Standard Contractual Clauses adopted by the European Commission, to ensure your rights and protections travel with your data.

9. How long do we keep your personal data?

We retain your personal data only for as long as necessary to fulfil the purpose(s) for which it was collected, to provide you our services, or as otherwise necessary to fulfil the purposes described in this privacy notice.

Your personal data will be deleted as follows:

• Data relating to your GSMA Intelligence Account and subscriptions will be deleted within a few business days after you terminate your account.
• Data processed for marketing purposes will be retained until you unsubscribe from email communication or request deletion of your personal data.
• Data relating to GSMA Intelligence events will be retained until you request deletion of your personal data.
• Data relating to billing will be retained for ten yearsfollowing the termination of your commercial relationship with us.

We may retain some of your personal data to comply with applicable regulations such as tax or accounting. You may contact us anytime if I you want to know more about how long we will keep your data.

10. Your rights as a data subject

Below you will find descriptions of rights that you may be able to exercise in relation to the personal data we process about you. 

Confirmation of processing – you can ask us to confirm if we are processing your personal data;

Access – you can ask us to provide a copy of the personal data that we hold about you;

Rectification – you can ask us to rectify the record of your personal data that we maintain;

Restrict – you can ask us to restrict the processing of your personal data in certain situations;

Object to processing – you can object to the processing of your personal data, where we process your data based on our legitimate interests or for direct marketing purposes;

Deletion – you can ask us to delete some or all of the personal data that we hold about you;

Portability – in certain circumstances, you can ask GSMA to provide you a copy of your personal data in a structured, electronic format, or to transmit it directly to another data controller, where technically feasible.

You have the right to contact the relevant data protection authority if you have concerns about how GSMA processes personal data. Our lead data protection authority in the EU is the Agencia Española de Protección de Datos.

However, we encourage you to contact us directly in the first instance so that we can attempt to address your concerns directly.

For additional questions or information concerning the processing of your personal data or if you would like to exercise one of your rights, you can email us atdataprivacy@gsma.com.

11. Contact us

You can contact us with any enquiry relating to your personal data by filling out this form, sending an email todataprivacy@gsma.com or writing to:

Data Privacy – Legal

GSMA Advisory Services Ltd.
1 Angel Lane,

London, EC4R 3AB

United Kingdom