Privacy Policy.

1. Data Controller

The Data Controller is Astradyne S.r.l., registered office at Via Giovanni Nickmann 10, Bari (BA), Italy.

Email: info@astradyne.space · Certified email (PEC): astradyne@pec.it · Tel: +39 331 4374074.

2. Source and types of data collected

Data provided by the user. When you contact us using the contact addresses on the site, we acquire the sender's contact details needed to respond, together with any personal data included in your communication. Sending such messages is optional and voluntary.

Navigation data. The IT systems and software procedures that operate this site acquire, during normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols — for example IP addresses or domain names of the devices used, the URIs of requested resources, the time of the request, the request method, the size of the file returned, the numerical status code of the response, and other parameters relating to your operating system and IT environment. These data are used to obtain aggregate statistical information on the use of the site and to check that it works correctly. Navigation data are kept for no longer than seven days and are deleted immediately after aggregation, save for any need to investigate offences at the request of the judicial authority.

Cookies and other tracking tools. This site uses cookies. For details of the cookies used, please see our Cookie Policy.

3. Purposes of processing

Depending on the type of processing carried out, the Controller uses the data collected and/or provided by the user for the following purposes:

1. to respond to communications, requests for information and/or services sent by users through the contact addresses on the site;
2. to manage and control risks, prevent possible fraud, insolvency or default, and to prevent and manage possible disputes, taking legal action where necessary.

4. Legal basis

In relation to the purposes above, the legal basis is, respectively:

1. the need to perform a contract to which the data subject is party, or to take pre-contractual measures at the data subject's request;
2. the need to pursue the legitimate interest of the Controller (in particular the prevention of fraud and insolvency and the handling of disputes).

5. Recipients of the data

The personal data processed by the Controller is not disseminated. It may be disclosed to employees operating under the Controller's authority, authorised to process it in accordance with their roles and the instructions given to them. The Controller has also engaged third-party service providers in connection with the operation of the site — such as hosting providers, IT maintenance providers, and providers that enable additional site functionality (for example web analytics). These providers, appointed as Data Processors, receive only the data necessary to deliver their services and may not use or disclose it for other purposes without prior authorisation. Data may also be disclosed to parties entitled to access it under laws, regulations or EU rules.

6. Data transfer

The Controller does not transfer personal data outside the European Economic Area, with the exception of certain third-party services used on this website — in particular Google (for web analytics and web fonts) — which may process data in the United States. Such transfers take place on the basis of European Commission adequacy decisions and/or Standard Contractual Clauses. The relevant services are listed in the Cookie Policy and only operate after you have given consent through the cookie banner.

7. Data retention

The Controller retains and processes personal data for as long as necessary to fulfil the stated purposes. Thereafter, personal data is retained, and no longer processed, for the period established by applicable civil and tax law. In the event of a dispute, the data collected will be retained for the entire duration of the dispute, until the time limits for bringing appeals have expired. If a user provides personal data that is not requested or not necessary, the Controller will delete it as soon as possible.

8. Your rights

At any time you have the right to: request access to your personal data (Art. 15 GDPR); obtain rectification of inaccurate data or completion of incomplete data (Art. 16); obtain erasure of your data (Art. 17); obtain restriction of processing (Art. 18); receive your data in a structured, machine-readable format and have it transmitted to another controller, where processing is based on contract or consent and carried out by automated means (data portability, Art. 20); object to processing in particular situations (Art. 21); and withdraw consent at any time where processing is based on it, without affecting the lawfulness of processing carried out beforehand (Art. 7(3)).

To exercise these rights, contact the Controller by certified email (PEC) at astradyne@pec.it, by email at info@astradyne.space, or by registered letter with return receipt to Via Giovanni Nickmann 10, Bari (BA), Italy.

If you believe your data is being processed in breach of the Regulation, you may lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali — www.garanteprivacy.it), pursuant to Art. 77 GDPR, or bring the matter before the competent courts (Art. 79 GDPR).

9. Refusal to provide data

If you do not provide the data identified as necessary to carry out a requested service, the Controller will not be able to proceed with the related processing or the resulting obligations. Refusing consent for activities that require it does not affect the provision of other services, nor those for which consent has already been given. If consent is later withdrawn, or you object to processing, your data will no longer be processed for those activities, with no adverse consequences for you or for any other services requested.

10. Automated decision-making

The Controller does not carry out processing consisting of automated decision-making about individuals.