Privacy Policy – Astronomy Platform

Last update: February 2026

1. Data controller

For the platform available at astronomie.spacescience.ro, the data controller is:

Institute of Space Science – INFLPR Subsidiary (ISS)
Str. Atomiștilor nr. 409, Măgurele, Jud. Ilfov, Romania, 077125
E-mail: office@spacescience.ro
Phone: +40 214 574 471

For personal data requests and GDPR rights, you may also contact:

• dpo@spacescience.ro

2. Categories of personal data

Depending on how you use the platform, we may process:

• account data: name, e-mail, authentication-related data;
• technical and security data: IP address, session identifiers, logs, browser/device metadata;
• user-provided files and metadata (e.g., uploaded spectra and related parameters);
• operational data generated by platform usage (analysis actions, downloads, platform analytics);
• communication data sent through support/contact channels.

3. Purposes and legal basis

Data is processed for:

• account management and authentication;
  Legal basis: GDPR Art. 6(1)(b) (performance of a contract / requested service)
• platform operation, scientific processing, and feature delivery;
  Legal basis: GDPR Art. 6(1)(b)
• security, fraud prevention, abuse detection, and system integrity;
  Legal basis: GDPR Art. 6(1)(f) (legitimate interest)
• legal and regulatory compliance;
  Legal basis: GDPR Art. 6(1)(c)
• optional communications or consent-based features (if applicable);
  Legal basis: GDPR Art. 6(1)(a)

4. Data recipients

Data may be accessed by:

• authorized ISS personnel;
• contracted service providers (hosting, infrastructure, maintenance), under confidentiality and data processing obligations;
• public authorities, when legally required.

ISS does not sell personal data.

5. International transfers

If data is transferred outside the EEA, ISS will apply appropriate safeguards in accordance with GDPR (e.g., adequacy decisions, standard contractual clauses, or equivalent legal mechanisms).

6. Retention periods

Data is retained only as long as necessary for the stated purposes, for example:

• account data: while the account is active, plus legal/operational retention where required;
• guest/session files: temporary, session-based retention;
• user uploaded files: retained until user deletion action or account removal, subject to backup and security cycles;
• security and access logs: retained for a limited period, proportional to security and compliance needs.

7. Security measures

ISS implements technical and organizational safeguards, including access controls, secure transport/encryption where applicable, and monitoring of security events.

No online system can guarantee absolute security; users should also protect credentials and use trusted environments.

8. Your rights

Subject to GDPR and applicable law, you may request:

• access to your personal data;
• rectification of inaccurate data;
• erasure (“right to be forgotten”);
• restriction of processing;
• data portability;
• objection to processing based on legitimate interest;
• withdrawal of consent (where processing is consent-based).

Requests can be submitted to:

• dpo@spacescience.ro

You also have the right to lodge a complaint with the competent supervisory authority.

9. Cookies and similar technologies

The platform may use strictly necessary session and security cookies for authentication, language/session persistence, and service integrity.

Additional non-essential technologies, if introduced, will be handled according to applicable law and transparency requirements.

10. Minors

The platform is not intended for children under the age threshold established by applicable law (including GDPR rules for consent). If such data is identified without proper legal basis, ISS may remove it.

11. Changes to this policy

This policy may be updated periodically. The latest version is published on this page, with the “Last update” date adjusted accordingly.