Privacy Policy

Controller

astranet OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. Contact: hi@astranet.io.

Project enquiries and email contact

We process your name, email address, subject / idea and details about format, timing and constraints to handle your enquiry. Form submissions are stored in the protected administration area; when internal notifications are enabled, the details are also emailed to the configured enquiry-handling recipient. No automatic acknowledgement email is sent to the person making the enquiry. When you contact us by email, we process your address, message and associated communication data. The legal basis is GDPR Art. 6(1)(b) for pre-contractual or contractual enquiries, otherwise Art. 6(1)(f) (our legitimate interest in responding). Enquiries and correspondence are retained as required for handling them and legal obligations; no fixed deletion period is specified here.

Technical operation and form protection

Technical connection data including IP addresses and, where applicable, server logs are processed for delivery and security. Necessary sessions and cookies support sign-in, CSRF protection and the locally operated captcha; no external captcha service is embedded. The legal basis is GDPR Art. 6(1)(f) (secure operation); necessary device access serves the expressly requested function. Optional browser storage of an enquiry success marker is removed. We use no analytics or advertising services. Images and illustrations are loaded from our own server. External links, for example to YouTube, connect to the provider only when opened; that provider’s privacy terms then apply.

Optional newsletter and member account

When newsletter registration is enabled, we process email address, language, consent version, request, confirmation and withdrawal timestamps, a cryptographic IP record and delivery status data. A confirmation email provides double opt-in; subscription begins only after confirmation. Confirmation creates a member account for a new address and processes a password stored as a password hash. An existing account password is not changed. The account is assigned to the newsletter group. The newsletter and related confirmation/welcome emails rely on GDPR Art. 6(1)(a); abuse protection and necessary evidence rely on Art. 6(1)(f). Consent can be withdrawn at any time through the unsubscribe link or by contacting us, without affecting the lawfulness of previous processing. Unsubscribing removes newsletter membership but does not automatically delete the member account or all evidence. Account deletion can be requested separately.

Newsletter retention

Unconfirmed tokens are valid for 24 hours. The cleanup job removes expired token values, rate-limit data whose window is older than two hours, and unconfirmed registrations without a token requested more than 30 days ago. Delivery metadata older than 90 days is deleted for statuses sent, failed, failed_final and cancelled, and for still-pending DOI confirmations. Other pending or retry messages are not universally covered by this criterion. These are deletion criteria, not guaranteed maximum retention periods: cleanup depends on actual job execution. Confirmed accounts and necessary consent/withdrawal evidence are not automatically deleted by this job.

Recipients and operational details

Authorized enquiry-handling and administration staff and, where applicable, contracted hosting and email providers have access. The specific providers, their log retention periods and any third-country transfers are not yet identified in this notice and must be completed based on actual operating arrangements; this notice claims neither particular providers nor the absence of such transfers.

Your rights and complaints

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and portability, and may object to processing based on legitimate interests. You may withdraw consent at any time. Contact for these rights: hi@astranet.io. You can complain to a data protection supervisory authority, particularly in the place of your habitual residence, work or a suspected infringement; in Estonia this is the Andmekaitse Inspektsioon.