Privacy policy
Last updated: 2026-07-22
1. Controller and contact details
The controller of the personal data described in this notice is ASTROLINK SRL, unique registration code (CUI) 55275327, registered with the Romanian Trade Register under no. J2026045853009, with registered office at Municipiul București, Sector 5, Str. Serg. Nuțu Ion, Nr. 44, Bl. CT7, Et. 7, Ap. CT 7.7.7.
For privacy requests or questions, email us at contact@astrolink-space.com.
2. Scope of this notice
This notice applies to astrolink-space.com, including the public pages, contact form and restricted administration area. The public website currently offers no customer accounts and no direct online purchases.
3. Data we process
- Contact requests: name, email address, message and, if you choose to provide it, organization. Our infrastructure also processes limited request and anti-abuse metadata needed to deliver and protect the form.
- Technical operation: IP address, request time, requested resource, browser/device details, referrer and security logs may be processed automatically by our hosting and infrastructure providers.
- Language preference: the selected website language is stored in your browser.
- Optional analytics: only after consent, we record the page path, a random pseudonymous browser identifier, language and the referring origin and path. Query strings and URL fragments are excluded. This information is pseudonymous, not anonymous.
- Restricted administration: authorized administrators use Supabase Auth, which processes their login and session information. This is not a public account service.
4. Purposes and legal bases
- To answer requests, prepare proposals and take steps requested before a contract: GDPR Article 6(1)(b). For general business correspondence, our legitimate interest in responding and managing professional relationships: Article 6(1)(f).
- To deliver and secure the website, prevent spam and misuse, and diagnose failures: our legitimate interests in reliable and secure operations, Article 6(1)(f).
- To remember the language you select: our legitimate interest in providing the interface you requested, Article 6(1)(f).
- To measure page usage with the optional analytics identifier: your consent, Article 6(1)(a). You can refuse or withdraw without affecting access to the website.
- To meet legal obligations and establish, exercise or defend legal claims where necessary: Article 6(1)(c) or Article 6(1)(f), as applicable.
5. Required and optional information
The contact form marks name, email and message as required because we cannot receive and answer the request without them. Organization is optional. Analytics is entirely optional and rejecting it does not limit any website feature.
6. Recipients and service providers
Personal data is available only to authorized AstroLink personnel and to providers acting on our instructions where necessary:
- Netlify, for hosting, serverless form processing and security;
- Supabase, for database hosting, restricted admin authentication and consented page analytics; the project database is hosted in the European Union;
- Resend, for delivering contact-form email notifications.
We may also disclose data to professional advisers or public authorities where lawfully required. We do not sell personal data and do not provide it to advertising networks.
7. International transfers
Some providers or their subprocessors may process data outside the European Economic Area. Where this occurs, transfers are protected by an applicable adequacy decision, including the EU-US Data Privacy Framework where valid, or by the European Commission’s Standard Contractual Clauses and supplementary safeguards. You may request information about the relevant safeguard at contact@astrolink-space.com.
8. Retention
- Contact requests and our operational copies are kept while the request or business relationship is active and for no more than three years after the last substantive interaction, unless a contract, legal duty or legal claim requires longer retention.
- Consented page-view records are kept for up to 12 months. The analytics browser identifier expires after 12 months.
- The privacy choice is kept for six months. The language preference remains until you change it or clear browser storage.
- Hosting, email-delivery and security logs are kept only for the limited operational, backup, fraud-prevention or legal periods applied by the relevant provider and are then deleted or anonymized.
9. Browser storage and analytics choices
| Item | Purpose | Duration | Type |
|---|---|---|---|
| astrolink-lang | Remembers interface language | Until cleared | Necessary preference |
| astrolink-privacy-consent | Remembers your privacy choice | 6 months | Necessary preference |
| astrolink-vid | Pseudonymous page analytics | Up to 12 months | Optional analytics |
No analytics identifier is created and no page-view event is sent before you accept. Use “Privacy settings” in the footer at any time to change your choice. Rejecting after acceptance removes the local analytics identifier and stops future analytics; it does not alter lawfully collected historical records.
10. Third-party content and links
The contact page embeds an OpenStreetMap map. Loading it can disclose connection data such as your IP address, browser details and the referring page to the OpenStreetMap Foundation. Google Maps and WhatsApp are opened only when you select their respective links and then process data under their own privacy terms. These providers act independently for their own services.
11. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
Send a request to contact@astrolink-space.com. We normally respond within one month; the GDPR permits an extension of up to two further months for complex or numerous requests, in which case we will inform you.
12. Complaints
You may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or with the competent authority where you live or work. See dataprotection.ro.
13. Security, automated decisions and changes
We use proportionate technical and organizational measures, including access controls, encrypted transport, restricted administrative access and service-side abuse protection. No online transmission or storage system can be guaranteed completely secure.
We do not use website data for automated decision-making or profiling that produces legal or similarly significant effects. We may update this notice when the website or processing changes; the current version and update date will remain available here.
