Privacy Policy
We’re committed to keeping you safe
1 RESPONSIBILITY
The responsibility for data processing lies with:
European Space Imaging GmbH
Arnulfstrasse 199
80634 Munich
Email: info[at]euspaceimaging.com
For more information and contact details, please consult the legal notice of this website: https://www.euspaceimaging.com/imprint.
This Privacy Policy applies only to our services. We may provide links to websites and services of third parties. Please refer to their respective Privacy Policies.
2 GENERAL PURPOSES OF DATA PROCESSING
We process your personal data for offering our products and services, concluding respective contracts, and fulfilling them. The processing of personal data on our website is aimed at operating the website, informing of our products and services, as well as generally informing about our company.
3 THE DATA WE PROCESS AND WHY WE DO THAT
3.1 Data to establish contracts and comply with our duties thereunder
To process orders, verify your identity, send an invoice, and issue a license, the following data will be processed:
-
- First Name of employee ordering,
- Family Name of employee ordering,
- Company’s name, Branch of Company ordering,
- Email addresses,
- Phone number,
- Street name,
- Zip Code,
- City,
- Country.
In some cases, we will process additional data that we will request accordingly.
The legal basis for the processing of those data is Art. 6 (1) b) GDPR (General Data Protection Regulation).
3.2 Denied Party Screening and other Compliance Checks
We are also obliged by applicable laws and regulations to perform a Denied Party Screening (DPS) and/or similar compliance checks. This way we make sure not to violate any export control regulations and to not enter into any contracts with entities that are on sanctioned party and/or restricted party lists.
The partners from whom we source assets may be required to perform such screening or compliance check as well. We will provide the necessary data for this purpose. Please learn more in the section “Data Transfers“.
The legal basis for the processing of those data is Art. 6 (1) b) GDPR, as we are not able to process your request otherwise, and Art. 6 (1) c) GDPR as we are under legal obligation to process your personal data accordingly.
3.3 Customer Support
When you request customer service, we will process the data necessary to handle your request. Depending on the request, it may also be necessary to collect further data for this purpose. We will make an entry in our computer systems to track the matter.
To the extent that your request involves assets that we have obtained from third parties, we may request data from them and merge such data with the data we hold.
The legal basis for the processing of those data is Art. 6 (1) b) GDPR (General Data Protection Regulation).
3.4 Hosting and access data
We collect data to deliver our website and other electronic services in the correct format and to improve the structure and user convenience of our website. This may be information on which browser was used, which subpages were visited, the referrer (the website from which you got to our offers), date and time of the page impression, the device used (e.g. mobile device or computer), the screen resolution used, operating system, and similar data.
Where we use access data to improve our offer (analysis of user behavior, identification of problems using the page etc.), we will use the data in an aggregate form without reference to specific individuals.
The legal basis for the data processing in these cases is our legitimate interests as set out above, Art. 6 (1) f) GDPR.
3.5 Newsletter and advertisement
With your consent or with a legal permit, we send out newsletters with company and product information, notices on promotional offers, press releases and similar contents.
To subscribe to the newsletter, the data requested in the subscription process are required. The newsletter subscription is recorded in a protocol. After the subscription, you receive a message at the indicated email address asking you to confirm the subscription (“Double Opt-in”). This is necessary to avoid that third parties can subscribe with your email address.
You may withdraw your consent to the receipt of newsletters at any time, thus unsubscribing from the newsletter.
We store the subscription data as long as they are needed for sending the newsletter. We store the recording of the subscription and the destination address as long as there is an interest in preserving evidence of the initially given consent; as a rule, this is done for periods equivalent to the periods of limitation for civil-law claims, i.e. for a maximum of three years.
The legal basis for sending the newsletter is your consent pursuant to Art. 6 (1) a), Art. 7 GDPR in combination with sec. 7 para. 2 no. 3 UWG (German Unfair Competition Act) or the legal permission pursuant to sec. 7 para. 3 UWG. The legal basis for recording the subscription is our legitimate interest in the evidence that the newsletter was sent with your consent, Art. 6 (1) f) GDPR.
We use the MailChimp service as a technical platform for sending our newsletters as well as press releases.
The provider of this service is The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. European Space Imaging and MailChimp are parties to a Data Protection Agreement incorporating the EU-SCC (Standard Contractual Clauses) according to Art. 46 Sec II lit c) GDPR.
For more information on data protection at MailChimp, please refer to the corresponding privacy policy: https://mailchimp.com/legal/privacy/
The service provider is used in accordance with our legitimate interests pursuant to Art. 6 (1) f) GDPR and a processing contract pursuant to Art. 28 (3) sentence 1 GDPR.
3.6 Establishment of contact
When you establish contact with us, e.g. by way of the contact form, email or telephone, we will process the data required to handle the request. To this end, an entry in our computer systems will be made, if applicable.
We erase such data once they are no longer required, provided that they are not subject to any statutory periods of retention.
The legal basis for such data processing is the implementation of pre-contractual measures based on your request or – if you are our customer already – the performance of the contract, Art. 6 (1) b) GDPR.
4 CONTENTS OF THIRD PARTIES & DATA TRANSFERS
4.1 Google Analytics
We use Google Analytics, a web analyzer service of Google Inc. (“Google”). Google Analytics allows us to analyze how you use our website. We use that information to be able to improve and optimize our website. This is also where our legitimate interest rests pursuant to Art. 6 (1) sentence 1 f) GDPR.
The information generated is usually transferred to a server of Google in the USA and stored there. However, your IP address will first be truncated by Google within the member states of the European Union or in other contract states of the Agreement on the European Economic Area.
You can prevent the transfer of data to Google as well as the processing of those data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
4.2 Google Maps
We use the API (a technical interface) of Google Maps to display map information on our website. This enables us to visualize geographical information. This is also our legitimate interest according to Art. 6 Sec. I p. 1 f) GDPR.
By retrieving maps and the use of the functions of Google Maps embedded on our website, a connection between your browser and the provider Google will be established automatically. In the process, Google sets cookies and personal data as well as particularly the content of your search request may be transferred.
4.3 Googlefonts
We integrate fonts from the “Google Fonts” font library into our website. This allows us to ensure a uniform appearance of our websites on different devices and using different browsers and operating systems. This is also our legitimate interest according to Art. 6 para. 1 Sec. I f) DGPR.
By calling up the font library and the associated script library, a connection is automatically established between your browser and the provider. In the process, cookies are set by Google and personal data may be transferred.
4.4 Further information regarding the Google Services
The provider of those services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. European Space Imaging and Google are parties to a Data Protection Agreement incorporating the EU-SCC (Standard Contractual Clauses) according to Art. 46 Sec II c) GDPR. Furthermore, Google LLC is certified under the EU-US Data Privacy Framework. For more information on data protection by Google, please consult the relevant privacy policy: https://www.google.com/policies/privacy/.
5 THE TIME WE TRANSFER DATA
We do not sell or market personal data to third parties. Transfer of personal data occurs in some cases for us to meet our contractual duty, comply with applicable rules and regulations, as well as to safeguard our legitimate interests.
5.1 Licensing related data transfers
The assets we sell are in part sourced from our partners. For this purpose, the personal data listed in section 3.1 will be transferred to these partners. This is necessary because the assets must be assigned to specific licensees which is part of our contractual duties, Art. 6 Sec I lit b) GDPR.
The recipients of your personal data transferred may be located outside of the country in which you reside. In some cases, personal data will be transferred to the USA – which is a “third country”, that is a country outside the EU where the GDPR is not applicable.
In particular, personal data will be transferred if assets are being sourced from
Maxar Technologies, Inc.
1300 W. 120th Ave.,
Westminster,
80234, USA.
5.2 Data Transfers to Sales partners
In some cases, we do not fulfill the contract ourselves but pass it on to a local sales partner. We will inform you accordingly. In this case, the necessary data is transferred to this sales partner. This is necessary to fulfil our contractual duties, Art. 6 Sec I lit b) GDPR. The sales partners will act themselves as data controllers vis-à-vis you.
5.3 IT Services
Our data is stored on servers of
Synaforce GmbH
Kistlerhofstraße 172
81379 München / Munich, Germany.
We need to store data to process requests and fulfill our contractual obligations, Art. 6 Sec I lit b) GDPR. Synaforce is processing data on our behalf as a processor. The processing is governed by a data processing agreement according to Art 28 Sec. 3 GDPR.
5.4 Denied Party Screening and other Compliance Checks
We will transfer your personal data to perform Denied Party Screenings and other compliance checks as described in Section 3.2.1. Your data may be transferred to the National Oceanic and Atmospheric Administration of the USA. We need to support such screenings to fulfill our legal obligations, Art. 6 Sec I lit c) GDPR.
5.5 Further Transfers
We may, in certain cases, transfer data to third parties in connection with complying with legal obligations or establishing, exercising, or defending rights or claims (e.g., for court and arbitration proceedings, to regulators, law enforcement and government authorities, to attorneys and consultants).
6 RETENTION PERIODS
Unless indicated otherwise at the time of the collection of your personal data or in this Privacy Policy, we erase your personal data if the retention of that personal data is no longer necessary for the purposes for which they were collected or otherwise processed. In most cases, the respective data will be erased after the contractual relationship ends.
In some cases, to comply with legal obligations, we may store such data for an additional period of time to comply with obligations under tax or commercial laws. We will not use such data for any other purposes.
You may request erasure of your personal data or assert similar rights as a data subject. Please refer to section 9 of this Privacy Policy.
7 THE WAY WE USE COOKIES
When you visit parts of the European Space Imaging website, you may receive a text file called a “cookie” located in the browser directory of your computer’s hard drive. A cookie is a small piece of information that a website can store on your computer for use by your web browser.
Cookies enable our Website to recognize and remember information that you consented to give us to personalize your experience or to make your user experience more efficient.
You may control the handling of cookies by appropriate settings of your browser. For more information on such settings, please consult the documentation of your browser. You may also give or revoke consent regarding the use of certain non-necessary cookies here: CUSTOMIZE
8 THE WAY WE PROTECT YOUR DATA
To protect your personal data against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we use adequate physical, technical, and organizational security measures.
9 YOUR RIGHTS AS DATA SUBJECT
According to the applicable laws, you have various rights in respect of your personal data. If you desire to assert your rights, please direct your request via email or mail to the address indicated in section 1 above clearly identifying your person. In particular, you have the right to:
-
- Obtain from us confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to the personal data;.
- Obtain from us the correction of inaccurate personal data concerning you;
- Obtain from us the erasure of your personal data;
- Obtain from us restriction of processing regarding your personal data;
- Data portability concerning personal data, which you actively provided;
- Object, on grounds relating to your particular situation, to further processing of personal data concerning you; and where data processing is based on your consent, withdraw such consent.
10 INFORMATION FOR US USERS
10.1 Our website does currently not recognize or respond to “Do Not Track” browser signals.
10.2 Our website is not directed to children under the age of thirteen. We will not knowingly collect personal data from children under the age of thirteen without insisting that they seek prior parental consent if required by applicable law. We will only use or disclose personal data about a child to the extent permitted by law, to seek parental consent, pursuant to local law and regulations or to protect a child.
10.3 Depending on the US state in which you reside, you may have special rights with respect to your personal data.
11 INFORMATION FOR BRAZILIAN USERS
11.1 This section applies and provides you with further information if the processing of personal data
-
- occurs in Brazilian territory,
- concerns the data of individuals located in Brazilian territory,
- comprises personal data collected in Brazilian territory, or
- has as its objective the offer or supply of goods or services to individuals located in Brazilian territory.
In these cases, the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD) applies to the processing of your personal data and the following additions and/or deviations apply to this Data Privacy Notice.
11.2 In addition to the rights mentioned in this Data Processing Policy, you are entitled under LGPD to:
-
- In case your data is not being processed in accordance with the applicable data protection law or in an excessive way, request us to anonymize, block or delete unnecessary or excessive personal data or;
- Request information regarding the public and/or private entities we shared your personal data with;
- Be informed about the possibility of not giving your consent to process your data and the consequences of not giving the consent in case we request your consent to process your data;
- Revoke at any time your consent to our processing of your personal data in case we request your consent to process your data.
11.3 For information about the legal basis of processing and data retention periods please refer to the respective sections of this Data Processing Policy.
12 NO AUTOMATED DECISION-MAKING
There will be no automated decision-making based on the personal data collected on this website.
13 DATA PROTECTION QUESTIONS
If you should have additional questions or inquiries on data protection at European Space Imaging, please contact us via the website.
