Skip to main content
Get early access

Privacy Policy

Last updated: 2 November 2026


Kuva Space Oy (“Kuva Space” or “we”) is committed to respecting your privacy and protecting your personal data, which is any information relating to an identified or identifiable individual (“Personal Data”).

This Privacy Policy describes how we process your Personal Data as a data controller in connection with our business activities, including our data platform, client services, websites, conferences and events, and communications that link to this Privacy Policy.

This Privacy Policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). We may update this Privacy Policy from time to time.

1. Contact details

Data controller: Kuva Space Oy
Vaisalantie 2-8, 02130
Espoo, Finland
privacy@kuvaspace.com

2. Personal Data We Collect

We collect Personal Data as part of our business activities and when providing services to you. We primarily receive Personal Data directly from you, as you use our services and through your interactions with us. However, to the extent permitted by applicable laws, we may also collect Personal Data from third parties.

We may collect and process the following types of Personal Data:

  • Contact and identification information, such as name, title, telephone number, email address, mailing address, and the name of the company you represent.
  • Data platform user information, such as account information, platform usage, and subscription and payment data.
  • Device information, such as IP address, device identifier, web browser, browsing information collected through cookies, web beacons, pixels and other similar technologies used on our website.
  • Other data you provide to us.

3. Purposes and Legal Bases for Processing

We process Personal Data for the following purposes and on the following legal bases:

  • Performance of a contract: we process your contact information and information provided by you to perform our contractual obligations and to provide you with the services you have requested.
  • Legitimate interests: we process Personal Data based on our legitimate interests to ensure the functionality, security, and reliability of our data platform, as well as to develop and improve it.
  • Communications and marketing: we process Personal Data to communicate, market and interact with our customers and potential customers. The legal basis is our legitimate interests and your consent (where applicable).
  • Compliance with legal obligations: we process Personal Data to comply with our legal obligations. Certain processing of Personal Data is required due to our status as a licensed ground station. This obligation is laid out in the Act on Ground Stations and Certain Radars (96/2023). When legally obligated to do so by applicable law, we process and disclose your personal information to relevant authorities. This includes your contact information and other data which may be requested.

4. Data Retention

We retain your Personal Data only as long as necessary for the purposes we have collected the data for. We will delete Personal Data when its retention is no longer necessary and there is no right or obligation to process it under law.

5. Recipients of Personal Data

We may disclose Personal Data to third parties in the following ways:

  • Service providers and business partners where they process Personal Data on our behalf and in accordance with our instructions, for example to identify and address data security issues.
  • Authorities, including the Finnish Transport and Communications Agency, where disclosure is required or permitted by applicable law.
  • Other recipients with your consent, within the scope of that consent.

6. International Data Transfers

Your Personal Data is mainly processed within the European Economic Area (“EEA”).

However, in certain cases, when it cannot be avoided, for instance for technical reasons, such as load-balancing, or for compliance with regulatory requirements, we may transfer or access Personal Data outside the EEA. In such cases, we provide adequate protection for the transfers of Personal Data to countries outside of the EEA through a series of agreements with our service providers based on the Standard Contractual Clauses or through other appropriate safeguards, such as the EU-U.S. Data Privacy Framework.

7. Cookies and Similar Technologies

We use cookies and similar technologies on our websites and data platform. The cookies are used to recognize a device and collect certain information about the use of websites and services online.

When you visit our data platform or websites, we may collect information from you automatically through cookies or similar technology in order for us to understand how you use our website and services. Cookies recognize you on our website and remember your previously selected preferences. The information stored can include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.

You can manage your cookie settings from your browser. However, in a few cases, some of our website features may not function as a result.

8. Your Rights

Right to access. You have the right to access the Personal Data processed by us. This means that you may contact us, and we will inform you about the Personal Data we have collected and processed regarding you, as well as the purposes for which such data are used.

Right to withdraw consent. In the case that data processing is based on your consent, you may withdraw that consent at any time.

Right to correct. You have the right to have incorrect, imprecise, incomplete, outdated, or unnecessary Personal Data we have stored corrected or completed. You have the right to update for example your contact information or your other Personal Data.

Right to deletion. You may also ask us to delete your Personal Data from our systems. We will comply with such a request unless we have legitimate grounds to not delete the data.

Right to restriction of processing. You may request us to restrict the processing of Personal Data, for example when your data erasure, rectification or objection requests are pending and/or when we do not have legitimate grounds to process your data.

Right to object. You may have the right to object on grounds relating to your particular situation to the processing of your Personal Data based on our legitimate interest. We will comply with such objections unless we have legitimate grounds not to. You also have the right to object where we are processing your Personal Data for direct marketing purposes.

Right to data portability. You have the right to receive the Personal Data you have provided us with in a structured and commonly used format.

How to use your rights. If you would like to exercise any of these rights, please contact us by using the contact information given at the beginning of this Privacy Policy. We may reject requests that are unreasonably repetitive, excessive, or manifestly unfounded.

9. Information Security

We are committed to keeping your data safe and secure. We use a variety of organizational and technical safeguards to protect the Personal Data we collect and process. Our security controls are designed to maintain an appropriate level of data confidentiality and integrity.

The Personal Data stored under this Privacy Policy shall only be processed on a need-to-know basis. The use of Personal Data is protected by appropriate user rights, passwords, and rights of use. Paper documents shall be stored in locked storage.

10. Third-Party Services

Our website may contain links to third-party websites or services. This Privacy Policy applies only to the information we collect and does not address processing carried out by third parties.

11. Lodging a Complaint

In case you consider our processing of Personal Data to be inconsistent with the applicable data protection laws, you have the right to lodge a complaint with the local supervisory authority for data protection. In Finland, the competent authority is the Data Protection Ombudsman (www.tietosuoja.fi).