Privacy Policy

Last updated 25 October 2026

This policy explains what personal data EuroSpaceport collects through eurospaceport.com and our online platform, why, how long we keep it, and what rights you have. We keep it short and specific: if something is not described here, we do not do it.

Who we are

The data controller is EuroSpaceport ApS, CVR 41765739, Linnésgade 25, 1. v11, 1361 København K, Denmark. For anything about your personal data, write to info@eurospaceport.com. We answer within one month.

Website statistics

To understand how the site is used and which organisations are interested in our services, every page sends a small, cookie-free request to our own server when it loads. We do not use a third-party analytics service for this.

What we record: the page and its title, the time, the website that linked to us (without any search terms or query), campaign tags in the link (such as utm_source), your browser, operating system and device type, your browser language, and your approximate location (country and city), which we look up on our own server from your IP address.

Your IP address is used once, when the request arrives, to look up your approximate location and which network it belongs to. The network lookup uses public internet registry records (WHOIS/RDAP) and reverse DNS. Then:

• if the address belongs to an organisation (a company, university or public authority with its own registered network), we keep the address and the organisation's name, so we can see which organisations read about our services;
• for everyone else (home and mobile connections, hosting and VPN services) we delete the IP address straight after the lookup, and keep only the country, city and the name of the internet provider.

To count returning visitors without cookies, we store a pseudonymous code made from a one-way hash of your IP address and browser identifier. It cannot be turned back into either.

What we do not do: we store nothing on your device and read nothing from it. We do not link visits to your name, email address, forms you send or your platform account. We do not try to identify individual people, and we do not sell or share the data. Only our administrators can see it.

Legal basis: our legitimate interest in running and improving our website and understanding interest in our services (GDPR Art. 6(1)(f)). You can opt out: if your browser sends a Global Privacy Control or Do Not Track signal, we record nothing. You can also ask us to delete visits from your address (see Your rights).

Retention: visit details are deleted after 90 days. After that we keep only daily totals (number of page views and visitors), which contain no personal data. Country and city come from IP Geolocation by DB-IP, a database that runs on our own server.

Our web server also keeps short technical logs (IP address, time, requested address, browser identifier) for security and troubleshooting. They are deleted when the logs rotate.

Cookies and Google Analytics

Our public pages use Google Analytics only if you accept it in the cookie banner. Until then Google Analytics is not loaded at all. If you accept, Google sets the cookies _ga and _ga_<id> (lifetime up to 2 years) and processes your IP address and browsing on our site on our behalf. Google is certified under the EU–US Data Privacy Framework. Legal basis: your consent (GDPR Art. 6(1)(a)).

Your choice is remembered in your browser (local storage key esp-cookie-consent). You can change it, or withdraw consent, at any time. This deletes the Google Analytics cookies:

Change cookie choice

If you sign in to the platform, your session is kept in your browser's local storage. This is strictly necessary for the login to work and is removed when you sign out.

Forms and email

When you contact us, we use your details only to handle your request. Form submissions are stored in our database and also sent to us by email. You can always ask us to delete them.

• Microgravity enquiries (name, email, organisation, experiment details, message): to answer and follow up on your enquiry. Legal basis: steps prior to a possible contract and our legitimate interest in answering (Art. 6(1)(b) and (f)).
• Job applications (name, email, phone, message, CV): only to assess your application. Legal basis: steps prior to a possible employment contract (Art. 6(1)(b)).
• Supplier registration (company details, contact person's name, role, email and phone, company profile): to keep a register of potential suppliers, with your consent (Art. 6(1)(a)).
• Surveys: you can answer anonymously. Each survey shows its own notice, explaining how optional name and email are handled and when they are deleted automatically.
• Email to us: kept as long as relevant for the conversation and our records.

For each form submission we also store the sender's IP address and browser identifier, to prevent abuse. Forms are protected against spam by Cloudflare Turnstile (see Third-party services).

Platform accounts

Our platform is used by our team, partners and customers. Accounts are created by us. For each account we store your name, email address, company, a securely hashed password, your access rights and your last sign-in time. To keep the platform secure and understand how it is used, we log sign-ins and the pages viewed while signed in (with IP address and browser identifier). The log is deleted after 12 months.

Whatever you enter on the platform is stored with your account: for example applications, vehicle data, tasks, comments, time registrations and uploaded files. We also send you service emails, such as password resets and signature confirmations. Legal basis: the agreement under which you use the platform (Art. 6(1)(b)), and our legitimate interest in security (Art. 6(1)(f)). Time and invoicing records are kept as the Danish Bookkeeping Act requires.

Online NDAs

Some platform areas require signing a non-disclosure agreement online. As evidence of the signature we store the signer's name and title, the company details entered, the account email, the time of signing and confirmation, the IP addresses used, and a fingerprint (hash) of the agreement text. A signed copy is emailed to the signer and to us. Legal basis: the agreement itself and our legitimate interest in being able to document it (Art. 6(1)(b) and (f)).

Third-party services

These providers process personal data for us, or receive your IP address because your browser connects to them:

• Our hosting provider, which runs the servers where all the data above is stored.
• Scaleway (France): sends our transactional emails (password resets, confirmations, form notifications).
• Google Fonts (Google): your browser downloads our typeface from Google, which receives your IP address.
• Google Analytics: only with your consent, as described above.
• Cloudflare Turnstile (Cloudflare): spam protection on our forms. It processes your IP address and browser characteristics to tell people from bots.
• Internet registries (RIPE NCC in the Netherlands for European addresses; the corresponding registry elsewhere, e.g. ARIN in the US): for the organisation lookup in our website statistics, we ask the registry responsible for an address who holds it. The registry receives only the IP address.
• Esri (ArcGIS) map tiles and CelesTrak: some map and satellite pages on the platform load map images and orbital data directly in your browser.

Where a provider is outside the EU/EEA, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

Your rights

You have the right to access the data we hold about you, have it corrected or deleted, restrict our use of it, receive it in a portable format, and object to processing based on our legitimate interests, including the website statistics. Where we rely on consent, you can withdraw it at any time. Withdrawing does not affect processing that already took place.

Write to info@eurospaceport.com. For website statistics, tell us the IP address you visited from (you can find it by searching "what is my IP"). We may need to confirm your identity first.

You can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

Changes

When we change how we process personal data, we update this page and the date at the top.