Privacy Policy

Image

1. Introduction

Novaspace SAS, its subsidiaries, and affiliates (collectively, “Novaspace”, “us”, or “we”) understand that your privacy is important to you. We are committed to respecting your privacy and protecting your personal data, which is any information that can either directly or indirectly identify you as an individual. This Privacy Notice describes how we handle and protect your personal data when you interact with us, including when you use our websites, and services, or otherwise engage with us.

This Privacy Notice applies to the following websites:

2. Who we are

Novaspace emerges from the combined strength of Euroconsult and SpaceTec Partners, a united force committed to promoting forward thinking and supporting decision-making for all space stakeholders. We are positioned to deliver professional services for the space sector in Management Consulting, Technology Consulting, Executive Summits and Market Intelligence. With offices and entities in different countries we provide services around the globe. More information in https://nova.space/.

Novaspace carry out a variety of different processing activities as both a Data Controller that determines the means and purpose for processing and a Data Processor acting on behalf of another organisation, such as a third-party contractor or partner. Novaspace acts as a Data Processor in the context of some client projects or where we work in a consortium.

Our registered offices are the following:

Novaspace SAS
47 rue Louis Blanc,
92400, Courbevoie, France
(Employee, client, marketing data)
Novaspace SRL
Avenue Louise 89,
B-1050 Brussels, Belgium
Novaspace GmbH
Rumfordstr. 10,
D-80469 München, Germany
Novaspace Technology SAS
36 rue du Languedoc,
31000, Toulouse,
France
Les Services Novaspace Canada Inc.
465 Rue McGill, Suite 1103
Montreal (QC) H2Y 2H1, Canada
Novaspace Inc.
1301 K St NW, Suite 300W
Washington, DC 20005,
United States Of America
Novaspace PTY LTD
Level 34, 60 Margaret Street,
Sydney, NSW 2000,
Australia

3. Applicable Legislation

Novaspace have offices and operations around the world. As such, we process personal data in accordance with applicable data protection laws, including:

  • The General Data Protection Regulation (EU) 2016/679 (“GDPR”)
  • ePrivacy Directive 2002/58/EC
  • The UK Data Protection Act 2018 and UK GDPR
  • Applicable local data protection laws in jurisdictions where we operate.

4. Collection and processing of personal data

The categories of personal data that we collect, use, and share include:

Purpose

Personal Data

To recruit and evaluate job applicants.

·        Personal information (such as name, contact details, data of birth)

·        Characteristics (such as ethnicity, language, and nationality)

·        Recruitment records (CVs, cover letters, references)

·        Medical information for any reasonable adjustments

·        ID photographs

 

To provide you with certain services or products, including industry consultations through interviews

·        Personal information (such as name and contact details)

·        Financial Information (such as credit card details and bank account numbers)

·        Opinions and Feedback: Responses to interview questions, including opinions, experiences, and suggestions.

To fulfil your requests for information.

 

·        Your name

·        Contact details, such as mailing address, e-mail address and telephone number

 

To enforce our terms of use and Novaspace’s agreements.

We may receive contractor’s information to give them access to software or in the context of specific client projects.

To process your requests to participate in conferences and events.

·        Your name

·        Contact details, such as mailing address, e-mail address and telephone number

·        Allergy information

 

Account registration

·        Full Name: To identify you uniquely.

·        Email Address: For communication and account recovery.

·        Phone Number: Often used for two-factor authentication and contact purposes.

·        Date of Birth: To verify age and comply with legal requirements.

·        Physical Address: For billing, shipping, and verification purposes.

·        Username and Password: To create secure login credentials.

To distribute newsletters and alerts to you.

·        Your name

·        Contact details, such as mailing address, e-mail address and telephone number.

 

For corporate reporting obligations

Beneficial Ownership Information (BOI)

·        Personal Identification: Names, addresses, and dates of birth of beneficial owners

·        Identification Numbers: Social Security numbers, passport numbers, or other government-issued identification numbers

·        Ownership Details: Information about the percentage of ownership or control each beneficial owner has in the company

Financial Information

·        Financial Statements: Income statements, balance sheets, and cash flow statements.

·        Tax Information: Tax identification numbers and tax returns.

Compliance Information

·        Regulatory Filings: Information required for compliance with various regulations, such as environmental, labor, and safety standards.

·        Audit Reports: Details from internal and external audits.

To analyse the websites’ performance and functioning. 

 

Novaspace collects personal data from areas of the websites when you register for an account or an event, send a message via the contact form, or register for Novaspace email updates. We may also automatically collect information about the devices you use to interact with our websites. The information we automatically collect may include:

 

·        IP address

·        Device identifier

·        Web browser

·        Browsing information collected through cookies (collectively, “Cookies and Other Tracking Technologies”) on our websites.

 

We may also collect information about how you use the websites automatically, such as what you have searched for and viewed on the websites.

 

For social media and networking

Our websites may allow you to sign into and associate your social network accounts including, but not limited to, Twitter, LinkedIn, and YouTube, with Novaspace. By associating your social network account with Novaspace, you give us permission to access information that you have made available in your public profile for that social network account. The information available in your public profile varies based on the social network and your settings, but may include your email address, real name, profile picture, gender, and location.

For the processing of personal data to be lawful under the General Data Protection

Regulation, a valid lawful basis under Article 6 must be identified. These are the following:

  • Consent. We may process your personal data based on your freely given, specific, informed, and unambiguous consent. For example when you sign up to receive marketing emails or newsletters or when we gather participant data in the context of a project.
  • Performance of a Contract. We may process personal data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, when you sign up for our services, when we conduct studies or when we provide support or fulfil your service-related requests.
  • Compliance with a Legal Obligation. We process personal data to comply with legal or regulatory obligations to which we are subject. For example, to comply with tax, employment, and financial regulations or meet obligations under data protection, and other applicable laws.
  • Vital Interests. In rare cases, we may process your personal data to protect someone’s life. For example, in emergency situations that require immediate disclosure of information to medical personnel or law enforcement.
  • Legitimate Interests. We may process personal data where it is necessary for our legitimate interests or those of a third party, provided your interests or fundamental rights and freedoms do not override those interests. For example, to process your application as job candidate, to improve and develop our products and services, to prevent fraud, misuse of services, or security threats, to conduct business operations and manage client relationships, for internal analytics and performance monitoring.

5.Sharing of information

We do not sell your personal data under any circumstances. However, we may share your information with trusted third parties for the reasons explained below. The data sharing is carried out in accordance with applicable laws, is limited to what is strictly necessary, and is protected by appropriate contractual and technical safeguards. All third parties are required to process your personal data solely on our instructions and are obligated to uphold robust standards of security and confidentiality. The categories of the recipients of the personal data are the following:

  • Third-party vendors, service providers, and contractors (“processors” or “sub-processors”) who perform services on our behalf and under our instructions (hosting and infrastructure services, IT support and maintenance, customer relationship management platforms, email and communications platforms, marketing and advertising services (only where legally permitted)
  • We may share data with our group companies, subsidiaries and business partners to support international service delivery, facilitate cross-border customer support and develop and improve our products and services
  • We may disclose your personal data where required to do so by law or in good faith belief that such action is necessary to comply with a legal obligation (e.g., tax reporting, anti-money laundering laws), respond to lawful requests by public authorities, including courts, regulators, and law enforcement agencies or defend our legal rights or protect the rights, property, or safety of our users or others
  • In emergency situations that require immediate disclosure of information to medical personnel or law enforcement.

6. International Data Transfers

Due to  our global presence, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
  • Relying on adequacy decisions where applicable.

7. Security measures and storage of personal data

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, accidental loss, disclosure, or destruction. These measures include access controls, secure servers, firewalls, and regular security assessments. Access to personal data is restricted to authorized personnel who are bound by confidentiality obligations.

We retain personal data only for as long as necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law. For example, Novaspace may retain personal data, for the duration of the relevant business relationship. In certain circumstances we are legally required to retain personal information for longer, such as accounting or regulatory purposes (e.g. accounting and tax reasons., or audits and grants) . We may also retain information to protect ourselves against legal or insurance claims, use it for analysis or historical record-keeping, or comply with our information management policies and schedules.

8. Cookies and our websites

Novaspace may use first- and third-party Cookies and Other Tracking Technologies to:

  • Manage our websites, our services, and collect analytics about how you use them;
  • Enhance your user experience (a cookie is a little piece of text stored by your browser on your computer, at the request of our server);

Deliver content specific to your interests and to save your personal preferences, so you don’t have to re-enter them each time you connect to the Internet or our website.

The information provided throughout this Privacy Notice about cookies also applies to these other tracking technologies. You are always free to decline our cookies, if your browser permits, or to ask your browser to indicate when a cookie is being sent. Cookie files can be manually deleted from your computer at your discretion. Please note, however, that if you decline our cookies or ask for notification each time a cookie is being sent, this may affect your ease of use of our website.

Novaspace may provide links to third-party websites or information as a service to our users. If you use these links, you will leave the websites. Such links do not constitute or imply an endorsement, sponsorship, or recommendation by Novaspace of the third party, the third-party website, or the information contained therein, and Novaspace shall not be responsible or liable for your use thereof. Such use shall be subject to the terms of use and privacy policies applicable to those sites.

9. Social Media and Networking

Our websites may allow you to sign into and associate your social network accounts including, but not limited to, Twitter, LinkedIn, and YouTube, with Novaspace. By associating your social network account with Novaspace, you give us permission to access information that you have made available in your public profile for that social network account.

The information available in your public profile varies based on the social network and your settings, but may include your email address, real name, profile picture, gender, and location. We use the information we receive from your social network account in accordance with the social network’s terms of use and this Privacy Notice. Please refer to the privacy settings in your social network account for information about what data is shared with Novaspace and other connected applications and to manage the data that is shared through your account, including information about your activities using our websites.

If you would like to disconnect a social media account from us, refer to the settings of that social network account and its provider. For more information on how each social media network processes personal data, please visit the relevant website below:

Twitter/X: https://x.com/en/privacy

YouTube (Google): https://policies.google.com/privacy?hl=en-GB

LinkedIn:https://www.linkedin.com/legal/privacy-policyhttps://www.linkedin.com/legal/privacy/eu

10. Data subject rights

Under the GDPR, data subjects are entitled to exercise certain rights against their personal data. These are the follows:

a) Right of Access
You have the right to request access to the personal data we hold about you and to receive a copy of that information.

b) Right to Rectification
If you believe that any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.

c) Right to Erasure (“Right to be Forgotten”)
You may request that we delete your personal data, subject to certain legal or contractual obligations that may require us to retain it.

d) Right to Restrict Processing
You have the right to request the restriction of processing where there is a dispute about the accuracy or legality of the processing, or if you object to the processing and we are considering your request.

e) Right to Object to Processing
You can object to the processing of your personal data where it is based on our legitimate interests or used for direct marketing purposes.

f) Right to Data Portability
Where we process your personal data based on consent or contract and by automated means, you have the right to receive that data in a structured, commonly used, and machine-readable format, and to request that it be transferred to another controller where technically feasible.

g) Right to Withdraw Consent
If we process your personal data based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

h) Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable data protection laws.

  • For EU residents, this is your local data protection authority.
  • For UK residents, this is the Information Commissioner’s Office (ICO).

We aim to respond to all valid data subject requests within one month of receipt, in accordance with applicable data protection laws. If your request is particularly complex or if we receive multiple requests, we may extend this period by an additional two months, and we will inform you of any such extension. We may also need to verify your identity before processing certain requests.

11. How to exercise your rights

 SpaceTec Partners (part of the merged entity of Novaspace) has duly appointed Trilateral Research Ltd as the Data Protection Officer (DPO). Please contact privacy@nova.space should you wish to:

  • Exercise one of your data subject rights outlined above;
  • Enquire about any of the information contained within this privacy notice;
  • Request further information; or
  • Make a data protection complaint.

Trilateral’s registered office is:
Marine Point (2nd Floor),
Belview Port, Waterford,
X91 W0XW, Ireland

12. Changes to Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable laws. We encourage you to review it periodically.