Privacy Policy

Last updated: March 22, 2026

This Privacy Policy describes how AstroKube SL (“the Company”, “We”, “Us” or “Our”) collects, uses, and protects Your personal data when You use our website and services. It also explains Your rights under applicable data protection law.

This policy is governed by Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), Spain’s Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and, where applicable, the California Consumer Privacy Act (CCPA).

For full company identification details, please refer to our Legal Notice.

Data Controller


Company	AstroKube SL
CIF	B88517255
Address	Vía Dos Castillas 33, Complejo Empresarial Atica - Edificio 4, 28224 Pozuelo de Alarcón, Madrid, Spain
Email	info@astrokube.com

AstroKube SL is the Data Controller responsible for Your personal data under the GDPR.

What Personal Data We Collect

Data You Provide Directly

When You use our contact form, You provide us with:

First name and last name
Email address
Company name
Phone number

Data Collected Automatically

When You visit our website, we may collect the following data automatically:

Usage Data: IP address, browser type and version, the pages You visit, the time and date of Your visit, time spent on pages, unique device identifiers, and other diagnostic data.
Analytics Data (with consent only): Google Analytics 4 collects pseudonymized data about how You interact with the website. This data is only collected after You explicitly grant consent via our cookie banner. See our Cookies Declaration for details.

Data We Do Not Collect

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data). We do not knowingly collect data from anyone under the age of 16.

How We Use Your Personal Data

We process Your personal data for the following purposes, each with a specific legal basis:

Purpose	Data used	Legal basis (GDPR Art. 6)
Respond to Your inquiries via the contact form	Name, email, company, phone	Performance of pre-contractual measures (Art. 6(1)(b))
Provide and maintain our website	Usage Data	Legitimate interest in operating our website (Art. 6(1)(f))
Analyze website traffic via Google Analytics 4	Pseudonymized analytics data	Consent (Art. 6(1)(a)) — only after You opt in via the cookie banner
Protect against spam and abuse via Cloudflare Turnstile on the contact form	IP address, device data (processed by Cloudflare)	Legitimate interest in website security (Art. 6(1)(f))
Comply with legal obligations	Any data as required	Legal obligation (Art. 6(1)(c))

We do not use Your personal data for targeted advertising, behavioral remarketing, or profiling.

We share Your personal data only with the following third-party service providers (data processors), who process data on our behalf under contractual obligations:

Service provider	Purpose	Data processed	Location	Transfer safeguard
Google LLC (Google Analytics 4)	Website analytics	Pseudonymized usage data	United States	EU-US Data Privacy Framework (Google is certified)
Notion Labs Inc.	Contact form data storage	Name, email, company, phone	United States	Standard Contractual Clauses (SCCs) included in Notion’s DPA
Cloudflare Inc.	Bot protection (Turnstile) and CDN	IP address, device data	Global (including US)	EU-US Data Privacy Framework + SCCs in Cloudflare’s DPA
Amazon Web Services (AWS)	Website hosting	Usage Data (server logs)	EU (Frankfurt)	N/A — data remains in the EU

We do not sell, rent, or trade Your personal data to any third party.

International Data Transfers

Some of our service providers are located in the United States. When Your personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

EU-US Data Privacy Framework: Google and Cloudflare are certified under the EU-US Data Privacy Framework, which the European Commission has recognized as providing adequate protection (adequacy decision of July 10, 2023).
Standard Contractual Clauses (SCCs): Where the Data Privacy Framework does not apply, we rely on the European Commission’s Standard Contractual Clauses as adopted under Decision 2021/914.

We do not transfer personal data to countries without adequate safeguards in place.

Data Retention

We retain Your personal data only for as long as necessary to fulfill the purposes described in this policy:

Data category	Retention period	Reason
Contact form submissions (name, email, company, phone)	24 months from submission	Reasonable period for follow-up on business inquiries
Analytics data (Google Analytics 4)	14 months	GA4 default retention period
Cookie consent preferences	182 days	Duration of the consent cookie
Server logs (Usage Data)	90 days	Security monitoring and debugging

After the retention period expires, personal data is deleted or anonymized. If We are required by law to retain data for a longer period (e.g., tax or accounting obligations), We will do so only for the legally mandated duration.

If You are located in the European Economic Area (EEA), You have the following rights under the GDPR:

Right of access (Art. 15) — request a copy of the personal data We hold about You.
Right to rectification (Art. 16) — request correction of inaccurate or incomplete data.
Right to erasure (Art. 17) — request deletion of Your personal data when there is no compelling reason to continue processing it.
Right to restriction of processing (Art. 18) — request that We limit the processing of Your data under certain circumstances.
Right to data portability (Art. 20) — receive Your personal data in a structured, commonly used, machine-readable format, or request that We transfer it to another controller.
Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent (Art. 7(3)) — where processing is based on consent (e.g., analytics cookies), You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right not to be subject to automated decision-making (Art. 22) — We do not carry out automated decision-making or profiling.

How to Exercise Your Rights

You may exercise any of these rights by contacting us at info@astrokube.com. We will respond to Your request within 30 days. We may ask You to verify Your identity before processing Your request.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Spanish Data Protection Authority:


Authority	Agencia Española de Protección de Datos (AEPD)
Website	https://www.aepd.es
Address	C/ Jorge Juan 6, 28001 Madrid, Spain
Phone	+34 901 100 099

You may also contact the data protection authority in the EU member state where You reside.

CCPA Privacy (California Residents)

This section applies solely to visitors, users, and others who reside in the State of California, as required by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

We may collect the following categories of personal information from California residents:

Category A: Identifiers. Name, email address, IP address, company name, phone number.
Category F: Internet or other similar network activity. Browsing history on our website, interaction with our Service.

We do not collect Social Security numbers, financial information, medical information, biometric data, geolocation data, sensory data, professional or employment information, education information, or inferences drawn from personal information.

Sources of Personal Information

Directly from You. Information You provide via our contact form.
Automatically from You. Information collected through cookies and analytics when You visit our website (with Your consent).

How We Use Personal Information

We use personal information for the business purposes described in the “How We Use Your Personal Data” section above: responding to inquiries, operating our website, analyzing traffic (with consent), and protecting against spam.

We do not sell Your personal information. We do not rent, trade, or otherwise make Your personal information available to third parties for monetary or other valuable consideration.

We share personal information only with the service providers listed in the “Data Sharing and Third-Party Processors” section above, solely for the business purposes described in this policy.

Your Rights Under the CCPA

If You are a California resident, You have the following rights:

Right to know. You have the right to request that We disclose the categories and specific pieces of personal information We have collected about You, the categories of sources, the business purpose for collection, and the categories of third parties with whom We share it.
Right to delete. You have the right to request the deletion of Your personal information, subject to certain exceptions.
Right to correct. You have the right to request correction of inaccurate personal information.
Right to opt-out of sale. We do not sell personal information. If this changes in the future, We will provide a “Do Not Sell My Personal Information” link.
Right to non-discrimination. We will not discriminate against You for exercising any of Your CCPA rights.

Exercising Your CCPA Rights

To exercise any of Your rights, contact us at info@astrokube.com. We will respond to verifiable requests within 45 days. You may also designate an authorized agent to make a request on Your behalf.

Cookies

We use cookies and similar technologies on our website. For full details about the cookies we use, how to give or withdraw consent, and how to manage cookies in your browser, please refer to our Cookies Declaration.

Children’s Privacy

Our Service is not directed at anyone under the age of 16. We do not knowingly collect personal data from children under 16. If You are a parent or guardian and become aware that Your child has provided Us with personal data, please contact Us at info@astrokube.com. If We discover that We have collected personal data from a child under 16 without verification of parental consent, We will take steps to delete that information.

Do Not Track

Our website does not respond to Do Not Track (DNT) browser signals, as there is no industry-standard technology for recognizing DNT signals. However, You can control analytics tracking through our cookie consent banner.

Links to Other Websites

Our website may contain links to third-party websites that are not operated by Us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites. We encourage You to review the privacy policy of every website You visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of any material changes by posting the updated Privacy Policy on this page and updating the “Last updated” date at the top.

We encourage You to review this Privacy Policy periodically. Changes are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us:

Email: info@astrokube.com
Address: Vía Dos Castillas 33, Complejo Empresarial Atica - Edificio 4, 28224 Pozuelo de Alarcón, Madrid, Spain