Your privacy with ICEYE

ICEYE is committed to protecting the privacy and security of your Personal Data (“Personal Data”). The purpose of this Notice is to give you a better understanding of how ICEYE processes your Personal Data whether you are our current or prospective customer, any other kind of business contact or just visiting our website out of curiosity for satellites and SAR data.

This notice has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection legislation (“Data Protection Laws”).

ICEYE, as a controller of your data, will only process your Personal Data in accordance with this Privacy Notice unless otherwise required by applicable law. We take steps to ensure that the Personal Data that we collect about you is adequate, relevant, not excessive, and processed for explicit purposes.

We may collect certain personal data from you in the following ways:

Through cookies placed on our website

Our website uses cookies to analyze how the site is used, including the number of visitors, how you found your way to our website, and the pages you visit as well as the total time you spend on our website. A cookie is a small text file that the website sends to and stores on your computer or other device used to access the website. You may disable or remove cookies on your personal browser settings.

Personal data collected this way may include online identifiers, including cookie identifiers, internet protocol addresses, and device identifiers. This information may be collected in connection with analytics services that deliver anonymized statistics to us. Please note that information collected with cookies will never allow ICEYE to directly identify you.

Directly from you through online forms

As ICEYE has a legitimate interest in being able to keep offering relevant services to our current and prospective clients and to be able to maintain professional relationships with them and other parties we interact with, we collect personal data directly from you when you provide information on our website voluntarily. For example, personal data is collected when you request access to example SAR Datasets on our website or subscribe to our Land & Sea Blog.

The following personal data may be collected: names, titles, job titles, industry information, email addresses, phone numbers, and submitted information. In addition to these, additional information may be collected in connection to your organizational role and your company.

We may communicate with you if you’ve provided us with the means to do so and given your explicit consent. For example, if you’ve given us your email address, we may send you promotional email offers, or email you about your use of our services or products. If you do not want to receive communications from us, please indicate your preference by either utilizing the “Unsubscribe” functionality or sending a request to info@iceye.fi.

The purpose of ICEYE’s processing of personal data collected through the Website is to:

1. Ensure efficient and secure use of the Website,
2. Analyse how the Website is used,
3. Improve the quality of the Website and our services,
4. Share promotional materials about ICEYE (only with your consent),
5. Contact you.

The legal basis for processing equals ICEYE’s legitimate interests relating to the purposes above. Where required by Data Protection Laws, ICEYE will request the data subject’s consent for the processing of personal data, i.e. in relation to marketing and sending you promotional materials.

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, as long as they remain relevant to our professional services, and only to the extent necessary to achieve the purposes set out above.

We may share your Personal Data collected through this site internally with our subsidiaries within and outside of EEA. We also use services provided by third parties such as Google Analytics and HubSpot and include content on our site from Social Media Providers such as LinkedIn, Twitter, Facebook, or YouTube. These services collect, among other things, your IP address and information on the use and traffic to our website. This information is used for the purposes described above.

Our websites contain links to external websites or content from external websites, such as Facebook, Twitter, and LinkedIn. Any use of external content is subject to the website’s respective policies or notices.

ICEYE abides by good data management practices, a high duty of care, and strict data security measures to protect your Personal Data. We treat your Personal Data confidentially. It is not disclosed to any third party other than our vendors and subsidiaries unless disclosure is required by the law, judicial body, or government agency. Your Personal Data will be stored in secured databases, which use both technical means and software to ensure data security.

We do not regularly transfer your Personal Data outside of the European Economic Area. However, the collected data may be partially stored outside of the European Economic Area if our subsidiary or a vendor we use is located, or stores the data outside of the European Economic Area. In such cases, we aim to ensure that your Personal Data is transferred to these territories based on a valid data transfer mechanism, such as European Commission Standard Contractual Clauses , and that our subsidiaries and vendors maintain at the minimum the security standards that we set for ourselves. Your Personal Data will always be processed in accordance with the Data Protection Laws, these data protection principles, and descriptions of our data registers.

As a data subject, you have certain rights concerning your Personal Data and as a data controller, ICEYE is responsible for fulfilling these rights. We will respond to your requests in accordance with any applicable law, rule, or regulation relating to the processing of your Personal Data.

Details of your rights are set out below:

Request access to your Personal Data (commonly known as a "data subject access request"). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.

We reserve the right not to complete the request if the request is manifestly unfounded or vexatious. Should you request multiple copies or should you submit more than one request per year, we may charge you a reasonable fee based on administrative costs for the execution of the request.

Request rectification of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request the erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following scenarios:

• If you want us to establish the data's accuracy.
• Where our use of the data is unlawful but you do not want us to erase it.
• Where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims.
• You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Right to withdraw consent

Where you have provided your consent to the collection, processing, or transfer of your Personal Data, you may have the legal right to withdraw your consent under certain circumstances.

Right to lodge a complaint with the supervisory authority

Additionally, as a data subject, you have the right to file a complaint with the competent Data Protection Authority regarding our processing of Personal Data.

This Privacy Notice was updated on the 22nd of January 2024.

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new Privacy Notice when we make any updates.

Data controller:
ICEYE Oy
Maarintie 6,
02150 Espoo
Finland

In all questions concerning the processing of Personal Data and situations related to exercising your rights, you should contact the data controller. You may exercise your rights by contacting privacy@iceye.fi.