Privacy & Data Protection Policy

1. Data Controller Identification

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD), the data controller responsible for personal data processed through this domain (inocua.space) is:

• Entity: Inocua Aerospace Systems S.L.
• Tax Identification (NIF): B-88491024
• Registered Office: Parque Científico y Tecnológico, Edificio Galileo, 28760 Tres Cantos, Madrid, Spain
• Data Protection Officer (DPO): dpo@inocua.space

2. Scope of Data Collection

Inocua Space Systems collects only data strictly required to facilitate professional aerospace consultations, flight hardware requests, cleanroom allocations, and recruitment. Data categories include:

• Contact Information: Full name, institutional email address, organization/prime contractor affiliation.
• Technical Parameters: Mission profile, payload mass, target orbital or planetary destination, cleanroom environment requirements.
• Technical Server Logs: Anonymized IP addresses, browser user-agent strings, and request timestamps strictly utilized for server integrity, telemetry monitoring, and cybersecurity defense.

3. Legal Basis for Processing

Processing of technical inquiries is based on Article 6(1)(b) of the GDPR (steps prior to entering into an engineering contract). Processing of server security logs is conducted under Article 6(1)(f) (legitimate interest in safeguarding critical infrastructure and aerospace proprietary assets).

4. Cookies & Tracking Technologies

inocua.space employs strictly necessary functional session cookies (such as CSRF validation tokens) essential for secure form transmission and session security. We do not deploy third-party advertising cookies, cross-site trackers, or commercial profiling scripts.

5. Aerospace Data Security & Non-Disclosure

All flight hardware specifications, interface control documents, and mission briefs are treated as confidential aerospace technical data. Technical data is stored in ISO/IEC 27001-certified European data centers protected by AES-256 encryption at rest and TLS 1.3 in transit.

6. Exercise of Data Subject Rights

Under GDPR Articles 15 to 22, you possess the right to access, rectify, erase, restrict, or object to the processing of your personal data. To exercise these rights, submit a formal request accompanied by proof of identity to dpo@inocua.space.