Privacy Policy
1. Who We Are & Data Controller Identity
ISPTech ("we", "us", or "our") is the data controller responsible for processing your personal data in connection with the services available at isptech.org (the "Service").
Registered address:
ISPTech
Im Langen Grund 1
74239 Lampoldshausen
Germany
For general privacy inquiries:
Email: [email protected]
Postal: Privacy Team, ISPTech, Im Langen Grund 1, 74239 Lampoldshausen, Germany
1.1 Data Protection Officer (DPO)
For matters relating to personal data processing and your data subject rights, contact ISPTech directly at [email protected] with subject line "Data Protection Enquiry". As a small company (under 250 employees), ISPTech does not have a mandatory DPO obligation under Art. 37 GDPR; the data controller handles data protection responsibilities directly.
2. Scope of This Policy
This Privacy Policy applies to all personal data collected through:
- Our website at isptech.org and any subdomains;
- Communications between you and us (email, contact form, telephone);
- Publication download requests and datasheet requests.
It does not apply to third-party websites linked from our Service.
3. Personal Data We Collect
3.1 Data You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity data | Name, job title, organisation name | Contact form, RFQ submission, publication download request |
| Contact data | Email address, telephone number | Contact form, RFQ submission |
| Programme data | Mission type, propellant type, thrust requirements, programme timeline | RFQ form fields |
| Communications data | Content of your enquiry or message | Contact form message field, email |
3.2 Data Collected Automatically
| Category | Examples | Source |
|---|---|---|
| Technical data | IP address, browser type, OS, device type | Server logs |
| Usage data | Pages visited, referral source, session duration | Analytics (with consent) |
| Cookie & tracking data | Cookie consent preference stored locally | Essential cookie — see Cookie Policy |
3.3 Special Category Data
We do not intentionally collect or process special categories of personal data (Article 9 GDPR). Please do not submit such data through our Service.
4. Legal Bases & Purposes for Processing
| Purpose | Legal Basis (Art. 6 GDPR) | Data Categories |
|---|---|---|
| Respond to technical enquiries and RFQ submissions | Legitimate interests (6(1)(f)) — conducting business in the aerospace sector | Identity, contact, programme, communications |
| Provide requested datasheets and publications | Legitimate interests (6(1)(f)) / Pre-contractual steps (6(1)(b)) | Identity, contact |
| Analytics — improve website performance | Consent (6(1)(a)) | Technical, usage |
| Comply with legal obligations (tax, German commercial law) | Legal obligation (6(1)(c)) | Identity, contact, programme |
| Fraud prevention and security | Legitimate interests (6(1)(f)) | Technical data |
5. Data Sharing & Third-Party Processors
We do not sell your personal data. We share data only as described below:
| Recipient | Purpose | Transfer Safeguard |
|---|---|---|
| Web hosting provider (EU-based) | Website delivery and email infrastructure | EU/EEA — no transfer outside EU |
| Analytics provider (if consent given) | Aggregate website analytics | Consent + SCCs where applicable |
| German tax authorities (Finanzamt) | Legal obligation — tax compliance | National legal obligation |
ISPTech does not use US-based advertising platforms, social media tracking pixels, or cross-site behavioural advertising networks. We do not transfer personal data outside the EU/EEA unless required by law.
6. Data Retention
| Data Category | Retention Period | Basis |
|---|---|---|
| RFQ / enquiry data (no commercial relationship established) | 3 years | Legitimate interests — programme follow-up |
| Commercial correspondence (contracts, invoices) | 10 years | German commercial law (HGB §257) / tax law (AO §147) |
| Server access logs | 90 days | Security / operational necessity |
| Cookie consent records | 12 months | GDPR consent documentation |
7. Your Rights Under GDPR
Under EU GDPR (Articles 15–22) and German BDSG, you have the following rights:
You may request a copy of personal data we hold about you and information about how we process it.
You may request correction of inaccurate or incomplete personal data.
You may request deletion of your personal data where there is no legitimate basis to continue processing.
You may request that we limit processing of your data in certain circumstances.
For data processed by automated means on the basis of consent or contract, you may request a machine-readable copy.
You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
You have the right to lodge a complaint with your national supervisory authority. In Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) or the relevant Landesbeauftragter in Baden-Württemberg.
To exercise any of these rights, contact us at [email protected] with subject line "GDPR Rights Request". We will respond within 30 days (extendable by two further months in complex cases, with notification).
8. Security
ISPTech implements appropriate technical and organisational security measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These include HTTPS encryption on all website connections and access controls on internal systems. ISPTech will notify you and the competent supervisory authority of any personal data breach as required by Article 33–34 GDPR.
9. Cookies
Our website uses cookies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be notified on the website homepage for 30 days following the update.
11. Contact
ISPTech
Im Langen Grund 1
74239 Lampoldshausen
Germany
[email protected]
+49 7139 413044