Privacy notice

Released by: European Space Agency, as Data Controller
Addressed to: individuals whose personal data is collected and processed
Concerning collection and processing initiated by: ESA Communication Department

European Space Agency (herein the “Agency”, “ESA” or “We”) is committed to protect Personal Data in line with the ESA Framework on Personal Data Protection (herein the “ESA PDP Framework”) available at: https://www.esa.int/About_Us/Law_at_ESA/Highlights_of_ESA_rules_and_regulations composed by

  • The Principles of Personal Data Protection adopted by the ESA Council on 13 June 2017
  • The Rules of Procedure for the Data Protection Supervisory Authority adopted by the ESA Council on 13 June 2017
  • The Policy on Personal Data Protection (including its Annex “Governance Scheme of the Agency’s Personal Data Protection”) adopted by the Director General of ESA on 1 March 2022 (“ESA PDP Policy”).

This notice is intended to describe why and how Your personal data are collected and processed by, or on behalf of, the Agency, as Data Controller, upon the initiative of ESA Communication Department, as well as what rights You have in relation to Your personal data. It also informs You about the contact details of the Data Protection Officer. This privacy notice was last updated on 24/02/2025. It must be read in conjunction with the ESA PDP Framework and other privacy notices referred to herein.

This privacy notice does not exclude the application of additional terms and conditions governing the relevant activities mentioned, or referred to herein.

(1) What are the relevant contact details for this notice?

ESA Data Protection Officer (“DPO”) may be contacted in line with the ESA PDP Framework at DPO@esa.int. As the collection and processing concerned by this notice is performed upon initiative of the ESA Communications Department, questions may also be addressed to the e-mail address: commppdp@esa.int.

(2) What kind of personal data are collected and further processed?

We collect and process a variety of Your personal data and may require You to provide personal data for the purposes mentioned further below. Depending on the purpose for which they are collected and further processed, the personal data may include:

  • Identity Information: including names, date of birth, passport number or other official identity number, gender indication, nationality, marital status;
  • Contact Information: including address, email address and telephone number;
  • Professional Information: including job title, email address, phone number and addresses;
  • Professional Career Information: including Your previous positions and professional experience;
  • Technical Information, including online identifiers: for example, internet protocol (IP) address or domain names of the devices utilised, login data, browser type and version, uniform resource identifier (URI) address, time zone setting and location, browser plug-in types and versions, ESA or other operating system and platform and other technology on the devices you are using – collected when you access our website, our electronic portals and platforms which we offer or which we have agreed with you to use or made available to you where you have agreed to their use; logs;
  • Photo: including photographs, likeness, image;
  • Audio-video Recordings, Statements, Interviews;
  • CCTV (“close circuit television”) and physical security data: CCTV footage and other information relating to access of facilities used for ESA communication activities, obtained through electronic means,
  • Financial Information: bank account number, payment card details;
  • Social Media Information: when you are an user of social media and depending on the circumstances or the social media in question, the personal data that we may collect are derived from:
    • Your user profile, e.g. Your profile picture published on social media, Your pseudonym, nickname or avatar),
    • Your interactions (e.g. interacting with a story, following or unfollowing a web page, linking or unlinking a web page or post, recommending a web page, sharing a post, reacting to a web page or a post, commenting a web page or a post, or other action related to a specific topic, network and /or connection) on the social media or other information related to Your habits, hobbies, interests, professional and educational background etc.
    • Your online identifiers, including Technical Data related to Your social media use;
    • personal data processed via third-party platform, app or a website (connected to social media platform) that may be obtained when a user visits or uses their services;
    • the audiovisual content that might be published on the social media platforms; this may include information in or about the content provided by a user (e.g., metadata), such as the location / date of a photo, voice recordings, video recordings, or an image of a data subject
    • other personal information You may disclose via the social media or in the use thereof.
  • Other personal information You may provide, in particular content of exchanges with the Agency, as for instance dietary preferences, assistance data;
  • Other data, such as:
    • Your messages, date, and time the message has been sent;
    • the content of the questions you asked
    • other data mentioned in Your messages,
    • data You made public.

(3) How are Your personal data collected or further processed?

In addition to the personal data, We collect directly from You (e.g. you fill in a form submitted by, or for, ESA), We may, depending on Your situation, collect certain personal data about You indirectly by various means. This includes collection of personal data from availably sources or from third parties, including from analytics providers or from social media platforms.

(4) Why are Your personal data collected and further processed?

We collect and process Your personal data because it is necessary for the activities conducted to fulfil Our purpose, which is “to provide for and to promote, for exclusively peaceful purposes, cooperation among European States in space research and technology and their space applications, with a view to their being used for scientific purposes and for operational space applications systems” (as per ESA Convention). We serve the public interest, and we wish to foster the public interest in space activities and programmes.

All the processing carried out by, or on behalf of, the Agency upon initiative of the Communication Department falls in this general purpose and, in particular, into one of the reasons permitted under ESA PDP Framework, in particular under ESA PDP Policy.

In any case, we do not use Your personal data for activities where our interests are overridden by the impact on you, unless we have Your consent or are otherwise required or legally permitted.

You will find more information on this matter in the below.

What is the purpose of processing Your personal data?

4.1 IF YOU ARE A (PROSPECTIVE) PARTICIPANT TO AN EVENT

Your personal data is collected and further processed for the following purposes:

  1. To manage Your registration for the event; to correspond with You about the event, including sending you pre- and post-event information.
  2. To secure Your access to the event premises (admission checks).
  3. To deliver the event You have registered for.
  4. To accommodate any special needs you may have, such as dietary restrictions.
  5. To take photos and audio-video recordings and possibly distribute / publish them (offline and/or online) for documenting the event, event reporting or ESA outreach purposes; Photos taken in a private capacity do not fall under the responsibility of ESA.
  6. To provide you with feedback on the current event (for the purpose of evaluating the event and optimizing future events) and/or invitations to future events.
  7. if applicable, to ensure reimbursement of certain expenses (e.g. travel).
  8. if applicable, to ensure creation of an account of a platform used for the organisation of the event.
  9. To produce statistics.
  10. To analyse the participation indicators to better manage the events in the future.
  11. to defend the Agency from possible liability claims that may arise in connection with Your participation in the event.
  12. To collect and process CCTV and security data to ensure that only authorised persons enter the event premises and take necessary actions to protect the legitimate interests of the Agency and of the participants, including You;

4.2 IF YOU ARE A SPEAKER TO AN EVENT

Your personal data is collected and processed for all the purposes mentioned in 4.1 above, which more particularly includes:

  1. To facilitate Your registration and attendance at the speaking engagement.
  2. To communicate with you regarding event logistics, scheduling, and any updates related to Your speaking engagement.
  3. To enable You to deliver a speech during the event and if recorded, to make it public via any media worldwide.
  4. To transcribe the content of Your participation into a different formats, such as transcribing audio to text.
  5. To communicate with potential participants and send marketing materials and invitations to our events.
  6. To publish information and content from the event on ESA websites including newsletters and social media channels..

4.3 IF YOU SUBSCRIBED TO ESA COMMUNICATION NEWSLETTERS OR OTHERWISE EXPRESSED YOUR INTEREST IN RECEIVING INFORMATION RELATED TO ESA ACTIVITIES AND PROGRAMMES

Your personal data is collected and processed for the following purposes:

  1. To provide you with information about ESA activities, programmes and events, via newsletters and updates.
  2. To collect feedback to help ESA monitor and improve future newsletters.
  3. To defend the Agency from possible liability claims that may arise in connection with Your use of the information received;
  4. To respond to requests related to ESA activities, programmes and space-related matters, initiatives and activities.

4.4 IF YOU ARE VISITING ESA WEBSITE(S)

Your personal data is collected and processed by, or for, ESA as necessary for the performance of public interests’ tasks related to ESA’s mission under ESA Convention. In particular, Your personal data is collected and further processed for the following purposes.

  1. To inform the public and raise awareness about ESA activities, programmes, campaigns and initiatives as well as third-party ones relevant for the space field.
  2. To conduct qualitative media monitoring and analysis of website use, traffic and interactions.
  3. To conduct activities supporting communication, such as sending emails and invitations, to manage contact lists.
  4. To raise awareness or to conduct surveys on topics related to space activities, programmes, initiatives, including the ones of ESA.
  5. To analyse and monitor Your interactions with the website.
  6. To address Your queries or requests formulated on such website(s) or to otherwise engage with You.
  7. To analyse and to monitor Your reactions to ESA activities, programmes and initiatives as well as to various posts, statements or declarations made in connection with space activities, programmes, initiatives in particular to optimise Our communication and engagement on websites.
  8. To ensure audience measurement.
  9. To grant user access to specific website functionalities that require authentication.
  10. To better understand the needs and the browsing experience of ESA website visitors.
  11. To gather statistics with a view to improving our communication and to enhance user experience.
  12. To identify and track unauthorized access attempts.
  13. To delete irrelevant, offensive or abusive comments.
  14. To defend the Agency from possible liability claims related to Our communication activities.

In the use of ESA websites You may find information (e.g., links) to third party websites that will be governed by separate Terms and Conditions. In case of voluntary registration and use of such third- party websites, their applicable terms and conditions and privacy policies will apply and the Agency has no control thereof. The use of third-party websites accessible via information present on ESA websites does not entail endorsement by ESA of the related terms and conditions or of their privacy policies.

4.5 IF YOU ARE USING SOCIAL MEDIA OR INTERACTING WITH ESA ACCOUNT(S) ON SOCIAL MEDIA

Informing the broad public (including raising awareness about ESA activities among the general public in ESA Member States) and qualitative media monitoring, including monitoring and analysis of social media activities are public service tasks related to ESA mission as resulting from the ESA Convention. Your personal data are collected and further processed as necessary for the performance of such tasks.
The processing of Your social media personal data follows Your voluntary registration and use of social media (including forums, blogs, related APIs) and Your voluntary acceptance of their applicable terms and conditions and privacy policies, over which the Agency has no control.
Your social media personal data is processed by or for the Agency for the communication activities, such as coordinating social media presence, for sending e-mails and invitations (this entails the management of contact lists for correspondence), for statistical and analytical purposes and, generally, for the promotion of the Agency’s communication campaigns and related activities and programmes.

In particular, Your personal data is collected and further processed for the following purposes:

  1. To inform You and raise Your awareness about space activities, programmes, campaigns and initiatives as well as about the ones of ESA;
  2. To address Your queries or requests formulated on such social media, platforms, account(s) or to otherwise engage with You;
  3. To ensure audience measurement;
  4. To gather statistics with a view to improving our communications and to enhance user experience;
  5. To analyse and monitor Your interactions with other users, in relation to space activities, programmes, initiatives and to ESA mission, programmes and activities;
  6. to analyse and monitor Your reactions to ESA activities, programmes and initiatives as well as to various posts, statements or declarations made in connection with space activities, programmes, initiatives to optimise ESA communication and engagement on social media;
  7. To make the decision about inviting You to participate in ESA communication activities;
  8. To identify and collaborate with influencers who may engage in ESA communication activities or otherwise promote ESA activities, programmes, campaigns or initiatives;
  9. To delete irrelevant, offensive or abusive comments.
  10. To defend the Agency from possible liability claims that may arise in connection with ESA communication activities;

4.6 IF YOU ARE A MEMBER OF THE PRESS OR ANY MEDIA OUTLET REPRESENTATIVES

In particular, Your personal data is collected and further processed for the following purposes:

  1. To respond to requests.
  2. To ensure that ESA can contact the journalists or any media outlet representatives interested in ESA activities, programmes and initiatives.
  3. To maintain a dialogue with the press and media.
  4. to disseminate content, press releases, any relevant material and analysing, monitoring thereof.
  5. To raise awareness on topics related to space activities, programmes, initiatives and to ESA mission, programmes and activities.
  6. To deal with Your current and future queries or requests.
  7. To analyse and monitor all media publications related to ESA activities, programmes and initiatives as well as other space news.
  8. To defend the Agency from possible liability claims that may arise in connection with ESA communication activities.

4.7 IF ESA MEDIA CONTENT INCLUDES YOU, ACTIVELLY OR INCIDENTALLY

ESA produces, distributes, promotes and archives media content, such as, movies, educational materials and other communication materials intended:

  1. To create public awareness and interest for space activities and technologies.
  2. To documents events, activities, or stories.
  3. To inform, educate or engage target audience.
  4. To maintain historical and institutional records for future reference and archival purposes.
  5. To fulfil ESA mission under ESA Convention.

When Your personal data is collected and processed, this includes:

  1. To capture, record, edit, reproduce and display Your name, appearance and/or voice by all means and on any media.
  2. To identify You and give you the credits related to Your participation.
  3. To modify, edit, cut or apply any means of production and post-production.
  4. To fulfil legal or contractual obligations related to content production and rights management
  5. To distribute all or part of the audio-visual material to the relevant audience, including to the public via any means, such as ESA website, social media, video platforms, podcast platforms, events, media and press.

When the media content is intended to be sold, rented or otherwise commercially exploited by third parties, Your specific consent shall be requested and the Department in charge of corporate communication shall review the media content before public release

4.8 IF YOU PARTICIPATE IN ANY OF ESA COMMUNICATION CHALLENGES OR CONTESTS

When you become a participant of an ESA communication challenge or contest, Your personal data might be processed for the following purposes:

  1. To enable and manage Your participation;
  2. To verify Your eligibility, to manage and evaluate Your entry submission;
  3. To communicate with You regarding logistics, updates, results or prizes.
  4. To deliver You the prize or opportunity if You are selected as a winner;
  5. To promote the contest or challenge and showcase participants’ contributions, by any means.
  6. To communicate with You about any related topic.
  7. To fulfil all legal or regulatory requirements.
  8. To analyse the engagement and impact for the purpose of improving future communication challenges and contests.

4.9 IF YOU SUBMIT ANY OF ESA ONLINE FORMS FOR SPECIFIC PERMISSIONS OR LICENSES

ESA has online forms to enable externals specific permissions or licenses. When you submit one of these forms to ESA, Your personal data may be processed for the following purposes:

  1. To allow You to submit Your request to ESA, on behalf of the external entity;
  2. To evaluate Your request and contact You to request further information or to discuss further steps if Your request has been granted;
  3. To protect, enforce or defend the Agency’s rights and interests in connection with any matter arising in connection with the permissions or licences at stake;
  4. To communicate with You about any topic connected to the request.

4.10 IF YOU FORMULATED A REQUEST OR A COMPLAINT IN THE EXERCISE OF YOUR RIGHTS

In particular, Your personal data is collected and further processed for the following purposes:

  1. To handle, and respond to, any questions or complaints you submit to ESA;
  2. To handle, and respond to, any request relating to Your rights;
  3. To protect, enforce and/or defend the Agency’s rights and interests and, generally, to defend the Agency in connection with Your request, question or complaint.

4.11 IF YOU USE ESA INFORMATION AND COMMUNICATION TECHNOLOGY (IT) INFRASTRUCTURE, TOOLS AND/OR FUNCTIONALITIES (OPERATED BY ESA OR ON BEHALF OF ESA)

Your personal data may be collected and further processed for the purposes of enabling the Agency to comply with its obligations under the ESA Personal Data Protection Framework, in particular:

  1. To provide and, as applicable, to discontinue Your access to the IT infrastructure, tools and/or functionalities made available by, or on behalf of, ESA;
  2. To provide optimised data flow between target environments in an automated manner;
  3. To ensure the management and maintenance of the access to, and use of, the IT infrastructure, tools and/or functionalities;
  4. To enable ESA to perform actions in connection with access management, incident prevention, incidents management or reporting;
  5. To ensure data subject rights management;
  6. To ensure personal data quality and accuracy.

(5) On what legal grounds do We collect and process Your data?

We process Your personal data pursuant to the ESA PDP Framework, in particular pursuant to Article 5 of the ESA PDP Policy, for fair, specified and legitimate purposes or for purposes compatible therewith. Other ESA Rules and Regulations may serve as legal basis, as they may be indicated to You in additional notices, as appropriate.

What are the legal grounds for processing Your personal data?

5.1 General grounds for processing under ESA PDP Policy

Generally, the processing referred to in this notice falls under Article 5.2.1 of the ESA PDP Policy, i.e.

a. for the performance of an activity carried out by the Agency within its purpose and in the framework of, and in conformity with, the ESA Convention, the Policy on Personal Data Protection adopted by Director General of ESA on 1 March 2022 “Agreement between the States Parties to the Convention for the establishment of a European Space Agency and the European Space Agency for the protection and the exchange of classified information” done in Paris on 19 August 2002, and the applicable rules and procedures, including ESA Security Regulations and Directives; this includes Processing necessary for the Agency’s management and functioning, Dispute Resolution Procedure, and or Investigation Procedures; or

b. for compliance with a legal obligation to which the Agency is subject; or

c. for tasks in the frame of the Agency’s cooperation with the competent authority of Member States, in order to facilitate the proper administration of justice; or

d. for security; or

e. for the performance of a contract concluded by the Agency within its purpose in relation with an activity carried out by the Agency in the framework of, and in conformity with, the ESA Convention and the applicable rules and procedures;

f. for Your legitimate interest; or

g. or purposes covered by Your Consent, as it may be obtained from You as mentioned herein or under a separate document (e.g. Consent form).

5.2 Grounds for processing sensitive personal data under ESA PDP Policy

In addition, We may process Your data under Article 5.2.2 of the ESA PDP Policy concerning Sensitive Personal Data, i.e. when the processing:

a. is covered by Your Consent, as it may be obtained from You under a separate document (e.g. Consent form); or

b. relates to Sensitive Personal Data which are manifestly made public by any means (for instance, social media) by You;

c. is necessary for:

  • the protection of Your vital interests or of another natural person where the You are physically or legally incapable of giving Consent;
  • Dispute Resolution and Investigation Procedures;
  • the purposes of carrying out obligations of the Agency under the applicable Staff Regulations, Rules and Instructions or Pension Rules or the provision of health or social care or the treatment or the management of health or social care systems and services;
  • the protection against serious threats to security or individual or public health

5.3. Consent

When consent is the most appropriate lawful basis for processing, it will be requested from You and You can refuse to consent. Depending on the situation, Your consent may be given by various modalities (e.g. written form, verbally) and may in particular result from:

  1. filling in paper consent forms, by responding to questionnaires,
  2. oral statements or gestures (e.g. a nod of the head) that signifies agreement (e.g. for instance, expressed in a video or voice recording),
  3. use of electronic means, such as mouse-click, swipe, keystroke,
  4. use of a service-specific user interface (for example, via a website, an app, a log-on account, the interface of an IoT device or by e-mail), choosing certain settings in connection thereof,
  5. filling in electronic consent forms, using digital signatures, sending email(s), sending sms, filling in web forms for newsletter subscriptions, filling in event registration forms, responding to surveys, filling in and submitting applications,
  6. positive behaviour or action, based on the knowledge of the fact that such behaviour or action involves agreement, such as::
    • You enter into an area covered by a privacy notice on video recording,
    • You drop Your business card in an area dedicated to collecting information for the purposes indicated in that area,
    • You publicly express opinions, make statements, create posts, share declarations, aware of the fact that each of them may trigger responses in connection with the subject matter covered by such opinions, statements, posts, declarations;
    • You send Your name and address to us in order to obtain information from us.

When you consented for a certain processing, You may withdraw the consent or exercise your rights in line with Article 9 herein. Unless otherwise advised in a separate notice or by ESA DPO, you are
able to withdraw consent by contacting DPO@esa.int, and to copy communications at: commppdp@esa.int

For example: In case you provided your consent to subscribe to an online newsletter, we may process all the data on your interests to build a profile of what articles you consult. Later on, You inform us that You no longer wish to receive the online newsletter, by clicking the “unsubscribed” link in the footer of emails you received from us or by contacting us at commppdp@esa.int. Upon which We will then delete retrievable personal data relating to or collected in the context of the newsletter subscription from our database, including the profile(s) relating to you.

If Your data was being processed for several purposes, We will not use the personal data for the part of the processing for which consent has been withdrawn.

(6) Under what circumstances may We transfer or provide access to Your personal data?

At times, it is necessary for us to disclose Your personal data to authorised recipients (e.g., ESA staff members, advisors, contractors), under a “need to know” principle, to carry out the processing operations referred to in this notice. Typically, the third-party recipients include:

1/ service providers: We may engage various service providers such as:

  • providers involved in with the organisation and management of communication activities,
  • providers involved in the management of social media accounts,
  • providers involved in communication activities, managing newsletters, managing statistics
    and media services,
  • providers of cloud/data hosting services,
  • providers of website related services,
  • providers of support in the production of ESA audiovisual productions, like photographers, or video recorders,
  • providers enabling Us to manage our contracting process,
  • providers ensuring the security of our premises,
  • providers enabling Us to provide You with working tools, etc.

2/ Partners of ESA, in relation to ESA activities and programmes and, generally, in relation to ESA mission as foreseen in ESA Convention; that includes licensees of ESA proprietary content or other participants to ESA communication activities;

3/ ESA governing bodies ad authorities and their subordinate bodies, as required by the legal framework applicable to ESA.

It is important to note that these third-party recipients are generally situated in the European Union, the European Economic Area or in countries that offer an adequate level of protection equivalent to that offered within the European Union and the European Economic Area (e.g. Argentina, Canada, Japan, Switzerland, United-Kingdom).

When the third-party data recipients are located in a country or international organisation not offering an adequate level of protection (e.g., Australia, United States, etc.), we take necessary measures to safeguard Your data, in line with the conditions set forth in ESA PDP framework.

Additionally, we may utilise services provided by IT providers or integrate social media features into our platforms. In such instances, these IT providers or social media platforms may provide links to their respective websites, where they conduct their own data processing activities. It is entirely at Your discretion whether You choose to access and utilise these social media features, depending on the terms and conditions applicable to each platform. If You prefer not to engage with social media or accept their terms and conditions, You have the option to refrain registering as a user on these platforms. Your decision regarding social media usage is within Your control.

In case of transfer of personal data to the United States or other countries not offering an adequate level of protection, the transfer may expose You to certain risks, particularly the risk of profiling, the risk that the applicable legal framework may allow further processing of the personal data and that any given consent may not be withdrawn.

In exceptional cases, such as in the event of a criminal offense evidenced by the collection or processing of data, we may share the said data with the appropriate authorities or bodies, including those having an investigative role or those involved in the concerned legal proceedings.

(7) How long do We retain Your personal data for?

Your data is stored for the shortest time possible, taking into account the reasons why we need to process Your data, as well as all legal obligations applicable to the Agency. The Agency has established time limits to erase or review the data stored. Retention periods applied by the Agency are proportionate to the purposes for which they were collected. Thus, the Agency will keep Your personal data for as long as necessary for the fulfilment of those purposes and shall be deleted afterwards. By way of exception, We may keep Your personal data for a longer period, for archiving purposes in the public interest or for reasons of scientific or historical research, being reminded that appropriate technical and organisational measures in place (e.g. anonymisation, encryption, etc.).

(8) How do We protect and safeguard Your personal data?

All processing operations are carried out pursuant to ESA Rules and Regulations, including the ESA PDP Framework and ESA Security Regulations. In particular, the Agency collects and processes personal data under conditions protecting confidentiality, integrity and security of personal data.

To protect Your personal data, ESA has implemented several technical and organisational measures against the risks of loss, unauthorised access, destruction, use, modification or disclosure of personal data, particularly when such risks concern sensitive personal data.

These measures take into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons. They may include, as appropriate, the pseudonymisation and encryption of personal data.

(9) What are Your rights as data subject and how can you exercise them?

Under conditions detailed in the ESA PDP Framework, You have:

  • The right to be informed about the identity of the data controller, the contact details of the data protection officer, the purpose of the data processing, the data recipients to whom the personal data shall be disclosed, the rights of rectification or erasure of his/her data, the storage time- limits (if any), the practical modalities of exercising the rights, etc.; This is the purpose of this privacy notice and any other notice referred to herein ;
  • The right to access the personal data We process about You; Unless You have access to such data via an account, You may send us Your request by email to dpo@esa.int ;
  • The right to have Your personal data erased, rectified, completed; if You want to review and correct the personal information, You can either do it Yourself, in case you have access to such data via an account, or You may send us Your request by email to dpo@esa.int ;
  • The right to lodge a complaint before the Supervisory authority, in accordance with the latter’s rules of procedure. If You demonstrate, or have serious reasons to believe, that a data protection incident occurred in relation with Your personal data, following a decision of the Agency, You may send notify us thereof by email to dpo@esa.int.

Once a request to erase data is received, we will ensure that the data is deleted unless it can be processed on another legal ground, amongst the ones mentioned in Article 5.1 above. If Your data was being processed for several purposes, We will not use the personal data for the part of the processing for which consent has been withdrawn.

For instance:

  • Your personal data may continue to be processed for the performance of a legal obligation of ESA or where such data is necessary for the establishment, exercise, or defence of legal claims;
  • If there are multiple processing concerning You, based on consent, You have to expressly indicate which consent You wish to withdraw.

When the processing of Your personal data is based on Your consent and unless a specific case applies (e.g. see Article 6 above), You have also the right to withdraw Your consent.

You may wish to exercise any of the above-mentioned rights, by sending a request explicitly specifying Your query to the ESA DPO via e-mail at dpo@esa.int

You may be asked additional information to confirm Your identity and/or to assist ESA in locating the data You are seeking.

(10) Specific rules for children

We generally do not intend to directly collect personal information from children (under the age of majority). However, We may need to collect such personal information from the legal guardian of the child where such processing is necessary for the relevant processing activities as described in this policy.

If You are under the age of majority, You are expressly requested not to interact or engage with ESA without obtaining the consent of Your legal guardian (such as Your parent). You must also act under their supervision, when interacting or otherwise engaging with ESA.

For certain initiatives specifically addressed to children, there are specific terms and conditions applicable to those initiatives. These may contain additional privacy terms and conditions which will then apply to You.

In any case, we reserve the right to request the contact information of to Your legal guardian whenever necessary, for instance to verify Your identity and to check that You have obtained the approval of Your legal guardian.