Where GDPR applies to Astronaut or a customer's activity, we use appropriate compliance controls and support requests connected with the platform.
1. Roles
Astronaut is normally controller for account, billing, and direct service data. For data a customer hosts for its own users, the customer is often controller and Astronaut processor, depending on the service and agreement.
2. Principles
- Lawfulness, fairness, and transparency;
- purpose limitation and data minimisation;
- accuracy and storage limitation;
- integrity, confidentiality, and accountability.
3. Data-subject requests
We provide a channel for access, correction, deletion, restriction, objection, and portability requests where the right applies. Contact privacy@astronaut.ge.
4. Processor terms
Business customers may request a Data Processing Addendum covering instructions, confidentiality, security, subprocessors, assistance, and deletion or return of data.
5. International transfers
Transfers outside the EEA use an applicable mechanism, such as an adequacy decision or Standard Contractual Clauses where required.
6. Security and incidents
Risk-based controls include access management, encryption in transit, logging, monitoring, backup, and recovery procedures. As processor, we notify the customer of an incident without undue delay according to contract and law.
7. Compliance requests
Email privacy@astronaut.ge for a DPA, subprocessor information, or security questionnaire and identify the organisation and service used.