Privacy notice

Controller

Cortx EOOD, registered office Bul. Tsar Boris III n. 165A, piano 4, uff. 11, 1618 Sofia (rione Krasno selo), Bulgaria, VAT BG208805445, EIK/UIC 208805445. Contact: email hello@astarforyou.com.

Data we collect

• Order data: name, email address, shipping address for physical products, and dedication details such as names, dates, messages and observation location.
• Contact data supplied through support forms or email.
• Technical navigation data, security logs and cookie choices, as described in the Cookie Policy.
• Payment references processed by the payment provider; we do not receive or store complete card details.

Purposes and legal bases

We process personal data for the following purposes and legal bases:

• handling orders and producing personalised content — steps requested before entering into a contract and performance of the contract;
• tax, accounting and other statutory duties — compliance with legal obligations;
• customer support and complaint handling — performance of the contract and legitimate interests;
• site security, fraud prevention and the establishment, exercise or defence of legal claims — legitimate interests;
• non-necessary cookies and any promotional communications — consent only.

Retention

We retain data only for the periods required by the stated purposes. Tax and accounting records are retained for ten years; consent evidence and legal-version records are retained for the period needed to demonstrate compliance; support correspondence is retained for the time needed to handle the request and any related legal claims.

At the end of the applicable period, data is deleted or anonymised unless a further legal obligation requires retention.

Recipients and processors

Authorised staff and providers needed to deliver the service—including hosting, payments, email, document storage, Google Analytics for consented statistics, print fulfilment, shipping and professional advisers—receive only the data needed for their role and act as processors where required.

To generate the astronomical sky cutout, the CDS/Aladin service receives only the selected star’s sky coordinates and technical image parameters, not customer identifiers or customer-entered dedication text.

We do not sell personal data. Where a provider processes data outside the European Economic Area, the transfer takes place using the safeguards required by the GDPR.

Your rights

Under Articles 15–22 GDPR, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time without affecting processing carried out before withdrawal.

To exercise these rights, contact hello@astarforyou.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority competent for your habitual residence or place of work.

Security

Technical and organisational measures include access controls, scoped links, encryption in transit, logging, backups and minimisation. No system can promise absolute security.

Cookies

The site uses necessary cookies and—only with consent—preference, analytics and marketing cookies. Full details and controls are provided in the Cookie Policy.

Data protection officer

Where a data protection officer is appointed, current contact details are published here. Otherwise contact the controller at hello@astarforyou.com.

Changes to this notice

Material changes are versioned and published with an updated date. The notice and consent evidence applicable to an order remain frozen by locale.