Privacy Policy

1. Data Controller

Space42 Europe
Via Vittorio Bachelet 12, 00185 Rome, Italy
VAT (P.IVA): 15528011008
Email: info@space42.eu

2. What data we collect

We collect and process the following personal data:

• Contact form submissions: name, email address, and message content — provided voluntarily when you use our contact form.
• Navigation data: IP address, browser type, operating system, referring URL, pages visited, and access timestamps — collected automatically by server logs.
• Cookies: technical and, with your consent, analytics cookies. See our Cookie Policy for details.

3. Purpose and legal basis

Purpose	Legal basis (GDPR)
Responding to enquiries	Art. 6(1)(b) — contractual necessity
Website functionality & security	Art. 6(1)(f) — legitimate interest
Analytics (when consented)	Art. 6(1)(a) — consent
Legal compliance	Art. 6(1)(c) — legal obligation

4. Data sharing

We do not sell your personal data. Data may be shared with:

• Hosting provider — for server infrastructure (data processed within the EU).
• Analytics services — only if you consent to analytics cookies (see Cookie Policy).
• Map services — our contact page uses Leaflet with OpenStreetMap tiles served via CARTO. When you load the map, your IP address and basic browser data are sent to CARTO's tile servers to render the map. No cookies are set by this service. See CARTO's Privacy Policy.
• Legal authorities — when required by law.

5. Data retention

• Contact form data: retained for 12 months from the last interaction, then deleted.
• Server logs: retained for up to 90 days.
• Analytics data: retained according to the analytics provider's policy (max 26 months for Google Analytics).

6. Your rights (GDPR Art. 15–22)

You have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any right, email info@space42.eu. We will respond within 30 days.

7. Data security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, Content Security Policy headers, and access controls. However, no method of transmission over the Internet is 100% secure.

8. International transfers

Your data is processed within the European Economic Area (EEA). If a transfer outside the EEA becomes necessary, we will ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

9. Changes to this policy

We may update this policy periodically. The "Last updated" date at the top reflects the most recent revision. We encourage you to review this page regularly.

10. Contact & complaints

For privacy-related enquiries:
info@space42.eu

If you believe your rights have been infringed, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):
www.garanteprivacy.it