Privacy

PermaSat ApS, CVR 46080319, Aalborg, Denmark, is responsible for the personal data we use to operate this website and respond to enquiries. For privacy requests, contact us through our contact form or reply to an existing email conversation with us. Please do not include sensitive personal information in the form.

Contact enquiries

We collect your name, email address and message to respond to your enquiry and manage the resulting business correspondence. These fields are required to send the form. The submission is processed by our Cloudflare-hosted contact endpoint and sent through Microsoft Graph to our Microsoft 365 email mailbox. Microsoft processes and stores the correspondence as our email service provider; authorised PermaSat staff can access it to handle your request.

For general enquiries, our lawful basis is our legitimate interest in communicating with people interested in our business (GDPR Article 6(1)(f)). Where you ask us to take steps towards a contract with you, the basis is Article 6(1)(b). Sending an enquiry does not subscribe you to marketing.

Hosting, security and analytics

Cloudflare delivers and protects this website. Requests expose technical information such as your IP address, requested URL and browser information to Cloudflare. The contact form uses Cloudflare Turnstile to distinguish legitimate visitors from automated abuse; this involves browser and device signals, a verification token and your IP address. Our basis for processing personal data for delivery and security is our legitimate interest in providing a reliable website and preventing abuse (Article 6(1)(f)). See the Cloudflare Privacy Policy and Turnstile Privacy Addendum.

When enabled on a deployment, Cloudflare Web Analytics collects page-view and performance measurements to help us understand and improve the website. Cloudflare describes this service as not using cookies or tracking individual visitors across websites. This is separate from hosting and security processing; it is not a promise that every third-party feature is cookie-free. See Cloudflare’s analytics documentation.

Video, thumbnails and external links

News pages can include YouTube videos using the privacy-enhanced youtube-nocookie.com player, or Vimeo videos with its do-not-track option. Loading a player connects your browser to that provider and may disclose your IP address, browser information and the page you are visiting. Playing a video may involve additional processing, cookies or browser storage under the provider’s policy. Privacy-enhanced mode is not a guarantee of no data collection.

News thumbnails may load from img.youtube.com or, for Vimeo, vumbnail.com, even before a video is played. These hosts receive the technical information needed to serve the image. We use this media to illustrate our news, based on our legitimate interest in communicating our work (Article 6(1)(f)) where personal data is involved. See Google’s Privacy Policy and Vimeo’s Privacy Policy. External links, including LinkedIn, take you to services governed by their own policies. We do not embed a LinkedIn tracking widget.

We do not use our own advertising or tracking cookies. Third-party players and security features may use cookies or similar storage; your browser settings can restrict these, which may affect playback or form verification.

Retention and international processing

We retain contact correspondence according to the ongoing enquiry, business relationship and any applicable legal or record-keeping needs. We have not set a single fixed deletion period for all enquiries. Provider security logs, mailbox backups and technical data can have separate retention schedules. Contact us to ask about the data and retention relevant to your enquiry; we cannot promise immediate deletion from every backup.

Microsoft, Cloudflare and media providers operate internationally, so data may be processed outside Denmark or the EU/EEA, including in the United States. GDPR requires an appropriate transfer mechanism where applicable, such as an adequacy decision or standard contractual clauses. The mechanism and processing locations depend on the provider and service arrangements; contact us for information about the safeguards relevant to your data. This notice does not certify a particular provider configuration or promise EU-only storage. See also Microsoft’s Privacy Statement.

Your rights and complaints

Subject to the conditions in the GDPR, you can request access, correction, erasure, restriction and portability of your personal data. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. We may need to verify your identity before acting on a request.

You can complain to the Danish Data Protection Agency, Datatilsynet, or your local supervisory authority. You do not have to contact us first.