Privacy Notice

This Privacy Notice describes the privacy practices of Network of Resources (NoR) Providers Community.

This Privacy Notice applies to https://community.nor-discover.org/: Starion S.p.A. is under contract with ESA for to manage and operate the NoR Providers Community.

The starting date for the validity of these conditions is 15/11/2025. With the publication of a new version the validity of all previous versions expires. This Privacy Policy describes which personal data we collect, what this data is used for and with whom and under which conditions this data can possibly be shared with third parties. We also explain to you how we store your data, how we protect your data against misuse and which rights you have with regard to the personal data you provide us.

Definitions

For the purposes of this Privacy Policy:

You , or Data Subject, are the person who sign-up and log-in to the NoR Providers Community “https://community.nor-discover.org/”.

Company: Starion Italia S.p.A.

Data Subject is the physical person to whom the personal data belongs.

Personal Data is any information that relates to an identified or identifiable individual.

Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.

GDPR stands for “General Data Protection Regulation”, a law of the European Union, which regulates the Processing of Personal Data. We also include the GDPR of Switzerland and common rules about the protection of Personal Data in our policy.

NoR stands for Network of Resources, an ESA-affiliate (ESA means European Space Agency).

Processing of Data stands for collecting, storing, deleting, transferring and computing personal data.

Service refers to the Website.

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analysing how the Service is used.

Relevant legislation

Along with our business and internal computer systems, this website is designed to comply with the following national and international legislation with regard to data protection and user privacy:

• EU General Data Protection Regulation 2018 (GDPR)

Personal Data collected and purpose of collecting

To participate in the NoR Community, you need to create an account and log in. During registration, we collect personal data such as your name (or full name) - optional, username, email address, company, and password. This information is necessary to:

  • Create and manage your user account.
  • Enable participation in discussions and interaction with other community members.
  • Ensure the security and proper functioning of the platform.

Additional optional profile information you provide (e.g., avatar, bio) is stored within the Community platform and used solely to personalize your experience.

Navigation information is automatically processed by our website through Cookies. You can consult the Cookie Notice at https://nor-discover.org/Cookies

Legal ground of processing

The legal basis for the processing of personal data is consent and legitimate interest, which is derived from the above-listed purposes for data collection.

Storage of personal data

When you access our website https://community.nor-discover.org/, the browser deployed on your terminal device will automatically send information to our website server. This information is temporarily saved in a so-called log file. In this process, the following information will be collected without any action on your part and stored until its automated deletion after one week:

  • IP address of the computer sending the request,
  • Date and time of website access,
  • Name and URL of the retrieved file,
  • Website from which our site was accessed (referral URL),
  • Browser used and, if applicable, your computer’s operating system as well as the name of your access provider,

When you access the NoR Community platform, certain information is automatically collected and stored in server logs for security and operational purposes. This includes:

  • IP address of the device making the request
  • Date and time of access
  • Pages or resources accessed
  • Referring URL (if applicable)
  • Browser type and version, operating system, and device information

In addition, when you register and use the Community, your account data (such as username, email address, and profile details) and activity data (posts, messages, interactions) are stored within the Discourse platform. These are retained for as long as your account remains active or until you request deletion, in accordance with applicable data protection regulations.

Third parties

We use a number of third parties to process personal data on our behalf. These third parties have been carefully chosen, and all of them comply with the applicable legislation.

• Matomo Analytics, is a web analytics platform locally installed in order to measure, collect, analyse and report user data for purposes of understanding and optimizing our website. Matomo sends navigation data to Starion after having anonymized the related IP addresses.

• Cloudferro, providing to Starion with the Infrastructure As A Service to host the NoR website and Matomo instance.

(Privacy Policy | CloudFerro)

Starion CZ s.r.o. is another recipient to process anonymized navigation data.

Transfers to NON-EU countries

Starion and third parties will not transfer personal data outside of the European Union.

Data Retention

Data Retention applicable to Navigation Data is stated in the Cookie Notice.

Personal data used to register and participate to the NoR Community is retained until the user deletes the account.

Data Subject Rights

On the basis of the applicable European legislation, you as a Data Subject have certain rights with regard to the personal data processed by or on behalf of us.

  • Right of access;
  • Right to rectification;
  • Right to limit the processing;
  • Right to portability;
  • Right of objection;
  • Right not to be subject to automated individual decision-making or profiling. (We do not process your data in such a way that this right applies).

You can exercise your rights by writing an email to privacy@stariongroup.eu

You will receive a response to your request within 30 days.

Data Controller

Data Controller for this website is:

Starion Italia S.p.A.

Via di Grotta Portella 28, 00044 Frascati, Italy

Data Protection Officer

The Data Protection Officer for this website can be contacted at:

Starion Data Protection Officer (Starion DPO)

Rue des Etoiles 140, 6890 Libin, Belgium

privacy@stariongroup.eu

Changes to the privacy policy

We reserve the right to change our privacy policy at any time. On this page, you will always find the most recent version. If the new privacy policy affects how we process already collected data relating to you, we will notify you by e-mail.