Privacy Policy.

Who is responsible for your data.

The controller of your personal data is:

Orbispect provides Earth-observation and satellite-data analytics, delivered as intelligence reports and application programming interfaces (APIs). This policy applies to our website at orbispect.com and to interactions with us as a prospective or active customer.

What personal data we process.

Information you provide to us

• Contact and enquiry data — when you email us or submit a contact or pilot request, we process your name, email address, organisation, and the content of your message.
• Customer and contractual data — where we enter into an engagement, we process billing contact details and the information necessary to deliver and administer the service.

Information collected automatically

• Technical and usage data — IP address, browser type, device information, pages viewed and approximate location, collected through server logs and analytics.
• Cookies and similar storage — see our Cookie Notice for details on essential and analytics storage.

We do not intentionally collect special categories of personal data, and we ask that you do not send them to us through our contact channels.

Why we process your data and on what basis.

We process personal data under the following legal bases set out in Article 6(1) of the GDPR:

• Performance of a contract — Art. 6(1)(b) — to respond to enquiries, scope and deliver pilots, reports and API access, and administer our customer relationship.
• Legitimate interests — Art. 6(1)(f) — to operate, secure and improve our website and services, to understand usage through analytics, and to communicate with prospective customers. You may object to processing based on this ground (see Section 06).
• Consent — Art. 6(1)(a) — for non-essential cookies and analytics where consent is required, and for any optional communications. You may withdraw consent at any time.
• Legal obligation — Art. 6(1)(c) — to comply with accounting, tax and other obligations to which we are subject.

How long we keep your data.

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Enquiry and contact data — for the duration of the conversation and a reasonable follow-up period, after which it is deleted or anonymised.
• Customer and contractual records — for the term of the engagement and thereafter for the period required by applicable accounting and limitation-period rules.
• Technical and analytics data — for a limited period consistent with security and analytics needs, after which it is aggregated or deleted.

Who we share data with.

We do not sell personal data. We share it only with service providers acting as processors on our behalf, and only as needed to run our website and deliver our services. These may include hosting and content-delivery providers, analytics providers, and email and communications providers. Each processor is bound by a data-processing agreement that limits use of the data to our documented instructions.

International transfers

Orbispect is EU-based and prioritises EU data residency. Where a processor results in a transfer of personal data outside the European Economic Area, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with any supplementary measures required.

Your rights under the GDPR.

Subject to the conditions in the GDPR, you have the right to:

• Access — obtain confirmation of whether we process your data and a copy of it.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted where one of the legal grounds applies.
• Restriction — restrict processing in certain circumstances.
• Data portability — receive data you provided in a structured, commonly used, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw.

Privacy contact.

For any question about this policy or about how we handle your personal data, contact us at [email protected] or by post at ul. Złota 75A/7, Warsaw, Poland.

We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the last update shown above.