Privacy Policy

Last updated: 30 April 2026

I. Data Controller

II. Applicable Law

This policy complies with:

• Regulation (EU) 2016/679 — GDPR
• Spanish Organic Law 3/2018 — LOPD-GDD
• Spanish Law 34/2002 — LSSI-CE

III. What data we collect and why

3.1 Contact forms

When you submit a form on this website, we process: your name, email address, phone number (optional), country, organisation (optional), enquiry type and message content.

Purpose: to respond to your enquiry and, where you have given consent, to send commercial communications about Dark Sky Hosting services.

Legal basis: consent (Art. 6(1)(a) GDPR) and legitimate interest in responding to information requests (Art. 6(1)(f) GDPR).

Retention period: 12 months from receipt if no contract is signed. If a service contract follows, data is retained for the duration of the contract plus 5 years to meet fiscal obligations.

3.2 Website analytics

We use WP Statistics to analyse traffic anonymously. IP addresses are irreversibly hashed before storage; individual users cannot be identified from this data. No tracking cookies are used for this purpose.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in improving our service.

Retention period: 12 months in anonymised form.

3.3 Cookies

We use strictly necessary cookies to manage your consent preferences (Complianz GDPR) and standard WordPress session cookies. No advertising or third-party tracking cookies are set without prior consent.

For full details, please read our Cookie Policy.

3.4 Client portal (future)

When the client portal becomes available, a specific annex will be published detailing the data processed in the context of remote telescope hosting services.

IV. Recipients and international transfers

Dark Sky Hosting does not share personal data with third parties except where required by law. Our data processors are:

• Complianz B.V. (cookie consent management) — EU-based, Data Processing Agreement in place.
• WP Statistics — all processing takes place on our own server; no data is transferred to third parties.

No personal data is transferred outside the European Economic Area.

V. Security

Dark Sky Hosting implements appropriate technical and organisational security measures, including TLS encryption for all communications, restricted access to processing systems, access logs and periodic security audits. In the event of a personal data breach, we will notify the AEPD within 72 hours and, where applicable, the affected individuals.

VI. Your rights

You may exercise the following rights by sending a request to dpo@darkskyhosting.com (identity verification may be requested only in case of reasonable doubt):

• Access: find out what personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer necessary.
• Restriction: limit processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Not to be subject to automated decision-making with significant legal effects.

We will respond within one month. If you believe our processing is not compliant with the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

VII. Minors

Dark Sky Hosting services are aimed at professionals and users aged 18 or over. We do not knowingly collect data from minors. If you believe a minor has provided data without parental consent, please notify us at dpo@darkskyhosting.com.

VIII. Changes to this policy

We may update this policy as needed. The "last updated" date at the top of this page reflects the current version. Material changes will be communicated via a notice on the website.