1.- WHO IS THE DATA CONTROLLER OF YOUR PERSONAL DATA

Company Name: B2SPACE LAUNCH SYSTEMS SL

Tax Identification Number: B02933745

Registered Office: Edificio Centro Empresas, Oficina B2Space, Avda. de la Innovación s/n, 09007 Burgos (Burgos), Spain

Registered with the Commercial Registry of Burgos, Sheet BU 18412, Page 1, Volume 780, Section 8.

Telephone: +34 947 023 668

Email: privacy@b2-space.com

 

Company Name: B2SPACE LTD

Company Number: 10220212

Registered Office: Unit 19a, Greenwich Road, Maesglas Industrial Estate, Newport, NP20 2NN, United Kingdom

Registered with Companies House in England and Wales

Telephone: +44 (0) 1633 847723

Email: privacy@b2-space.com

In advance, B2SPACE

 

2.- FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

In accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 of 5 December, and the UK GDPR and the Data Protection Act 2018, we inform you that the personal data you provide to us, together with any data generated in the course of our relationship with you, are processed for the following purposes:

     1. Data provided through contact forms:

• To manage, process and respond to your requests, enquiries, incidents or queries.
• To offer products and services.
• To carry out analysis on the use of the Website and to assess users’ preferences and behaviour.
  2. Data provided to participate in recruitment processes or unsolicited applications:

• To assess and manage your application in recruitment and selection processes.
  
  3. Datos facilitados para el envío de Newsletter:

 

• To manage subscription to and/or unsubscription from the newsletter.
• To offer products and services.
• To carry out analysis on the use of the Website and to assess users’ preferences and behaviour.

 

3.- HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?

The personal data provided will be retained for as long as the data subject does not request their erasure, or such request is not lawfully made by their legal representative, and for as long as the data are necessary or relevant for the purposes for which they were collected or recorded, including the need to retain them for the duration of any applicable statutory limitation periods.

Data retention shall also be subject to any legal obligations requiring B2SPACE to retain such data. Once the applicable retention periods have expired, the data shall be securely deleted or destroyed, and such deletion, erasure or destruction shall be carried out in a manner that ensures the information cannot be recovered.

 

4.- WHAT ARE THE LAWFUL BASES FOR PROCESSING YOUR PERSONAL DATA?

The lawful basis for processing your personal data is the consent given by the data subject.
Such consent is obtained expressly and unequivocally through the completion and, where applicable, submission of documents and forms—whether in paper or electronic format—in which personal data are collected. All documents used by the organisation for data collection include the corresponding information clauses in accordance with applicable data protection legislation. Consent is evidenced by the data subject’s signature or by the submission of the forms made available on the website.

Processing may also be lawfully based on the necessity of such processing for the performance of a contract or the provision of a service to which the data subject is a party, or for the implementation, at the data subject’s request, of pre-contractual measures, in accordance with Article 6(1)(a) and (b) of Regulation (EU) 2016/679 (GDPR) and the equivalent provisions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, where the Data Controller is an entity established in the United Kingdom.

In addition, the processing of personal data may be based on compliance with legal obligations applicable to the Data Controller, as well as on the pursuit of legitimate interests of the organisation, provided that such interests are not overridden by the fundamental rights and freedoms of the data subjects, in accordance with the applicable data protection legislation in each case.

 

5.- TO WHOM WILL YOUR PERSONAL DATA BE DISCLOSED?

Your personal data will not be disclosed to any entity without your consent, except where such disclosure is required by law. In this regard, your express consent will be requested for the disclosure of your data to any other entity where legally required.

As a result of the management of the authorised purposes, your data may be disclosed to entities or individuals directly related to B2SPACE and to the services provided by it. Likewise, your personal information may be made available to public authorities, courts and tribunals for the purposes of addressing any liabilities arising from the processing, provided that such disclosures are permitted by law.

Your data may also be disclosed to companies providing services to us, such as advisory services, IT maintenance, marketing, training or auditing services. These entities shall have access only to the personal information strictly necessary to carry out such services and are bound by a data processing agreement requiring them to maintain confidentiality, to refrain from using the information for any purpose other than the provision of the services, and to implement appropriate measures to ensure the integrity and availability of the data.

No international transfers of personal data are envisaged outside the European Economic Area or the United Kingdom, nor to entities that do not comply with the data protection standards established by Regulation (EU) 2016/679 (GDPR), the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The personal data processed by B2SPACE are provided directly by the data subject or obtained from publicly accessible sources.

 

6.- WHAT CATEGORIES OF PERSONAL DATA DO WE PROCESS?

The personal data processed are limited to those strictly necessary for the fulfilment of the purposes authorised by the user.

1. Data provided through contact forms:

• Identification data: first name and surname.
• Contact data: email address.
• Browsing data.

2. Data provided to participate in recruitment processes or unsolicited applications:

• Identification data: first name and surname.
• Contact data: email address.
• Browsing data.
• Any other information provided in the curriculum vitae (CV).

3. Data provided for the receipt of newsletters:

• Identification data: first name and surname.
• Contact data: email address.
• Browsing data.

Where the user provides personal data relating to third parties, the user declares that they have obtained the consent of such persons and undertakes to provide them with the information contained in this Privacy Policy.

 

7.- WHAT ARE YOUR RIGHTS?

Any person has the right to obtain confirmation as to whether B2SPACE is processing personal data concerning them.

Data subjects have the right to access their personal data and to obtain a copy of the personal data being processed, to update such data, and to request the rectification of inaccurate data or, where appropriate, to request their erasure where, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, and on grounds relating to their particular situation, data subjects may object to the processing of their personal data. In such cases, B2SPACE will cease processing the data unless there are compelling legitimate grounds for the processing, or for the establishment, exercise or defence of legal claims.

Likewise, in certain circumstances provided for in Article 18 of Regulation (EU) 2016/679 (GDPR) and in the equivalent provisions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, data subjects may request the restriction of the processing of their data. In such cases, B2SPACE will only process the data, other than for storage, with the data subject’s consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or the United Kingdom.

Where applicable, as a consequence of the exercise of the right to erasure or objection to the processing of personal data in the online environment, data subjects shall have the right to erasure (“right to be forgotten”), in accordance with the case law of the Court of Justice of the European Union.

Under the right to data portability, data subjects have the right to receive the personal data concerning them in a structured, commonly used and machine-readable format, and to transmit those data to another controller.

Any data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except in the cases provided for in Article 22(1) of Regulation (EU) 2016/679 (GDPR) and the equivalent provisions of the UK GDPR and the Data Protection Act 2018.

The data subject also has the right to erasure of their personal data where the purpose for which the data were processed or collected no longer exists, where consent is withdrawn and such consent was the lawful basis for processing, or for any of the other reasons set out in Article 17 of Regulation (EU) 2016/679 (GDPR) and the equivalent provisions of the UK GDPR and the Data Protection Act 2018.

Erasure shall be carried out by means of secure deletion of data stored on automated media and the physical destruction of non-automated media.

 

8.- HOW CAN YOU EXERCISE YOUR RIGHTS?

By submitting a written request to the addresses indicated in the header, specifying the right you wish to exercise. In certain cases, and for the purpose of verifying the identity of the requesting individual, you may be asked to provide proof of identity, such as a national identity document or another equivalent form of identification.

 

9.- WHAT COMPLAINTS OR REMEDIES ARE AVAILABLE?

If you consider that your data protection rights have not been duly addressed, you have the right to lodge a complaint with the competent supervisory authority, depending on the applicable territorial scope:

• In Spain, with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD):

Website: https://www.aepd.es

Telephone: +34 901 100 099 / +34 91 266 35 17

Postal address:

C/ Jorge Juan, 6

28001 Madrid

Spain

• In the United Kingdom, with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk

Telephone: +44 (0)303 123 1113

Postal address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow Cheshire SK9 5AF

United Kingdom

 

 

LAST UPDATED: 27 JANUARY 2026