Controller
The controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is Dominic Walsh, 11-12 S Parade, Nottingham, United Kingdom, phone 0115 947 5034. Further details are on the imprint page.
Server logs
Each time a page, image or file of this site is requested, the server records the IP address of the device, the date and time of the request, the address requested, the status code and size of the response, the referring page if the browser sends one, and the browser's user-agent string. Nothing is added to these records and they are not combined with any other data.
The records are needed to deliver the pages, to keep the site stable and secure, and to find and fix errors and misuse such as automated attacks. The legal basis is Article 6(1)(f) UK GDPR: the legitimate interest in running a secure and working website. The logs are deleted as soon as they are no longer needed for these purposes; an entry is kept longer only while it is needed to investigate a specific security incident.
No cookies, analytics or embedded content
The site sets no cookies and uses no analytics or advertising tools, social media buttons, embedded videos, or third-party fonts or scripts. The only thing it keeps in the browser is a short-lived session-storage flag that tells the page transition animation where the visitor came from; it holds no personal data, is removed on the next page and never leaves the device. Links to other websites, such as the image release pages of ESA and NASA, are plain links; the other site only receives data once a link is followed, under that site's own privacy policy.
Contact by phone or post
Anyone who calls or writes provides the details needed to answer, such as a name, a phone number or an address. They are used only to deal with the request, on the basis of Article 6(1)(f) UK GDPR, and deleted when the matter is closed, unless a law requires them to be kept longer.
Hosting and delivery
The site is hosted by a hosting provider in a data centre in Germany, within the European Union, and is delivered through a content delivery network whose provider is based in the United States and operates servers worldwide. Both process the server log data described above on behalf of the controller and only to host and deliver the site, including filtering attacks. Where data is processed outside the United Kingdom, this happens under the safeguards that UK data protection law provides for such transfers.
Your rights
Every visitor has the right to access the personal data held about them, to have it corrected or erased, to restrict its processing, to data portability, and to object at any time to processing based on legitimate interests. A request can be sent by phone or by post to the controller named above. There is also the right to complain to the Information Commissioner's Office, the UK supervisory authority (ico.org.uk); visitors in the European Union may also contact the data protection authority in their own country.
Security
All pages are served over an encrypted HTTPS connection, the site has no user accounts, forms or logins, and access to the server and its logs is limited to the people who run it. No decisions are made about visitors by automated means, and no profiles are built.
Last updated: .