Privacy Policy

Last updated: October 31, 2025

1. Data Controller

ROCS Project Consortium — operating the EOCube.RO platform (“we”, “us”).

2. What Personal Data We Collect

  • Account and identification data: name, email, organization, roles. Authentication is provided via Keycloak.
  • Technical and usage data: IP address, device and browser information, access timestamps, pages and services used (e.g., STAC Catalog, Jupyter, Eclipse Che), error logs.
  • Preferences: language and consent choices.
  • Support communications: messages you send via forms or email.

We do not intentionally collect special categories of data via the public website.

  • Provide and operate the platform (Art. 6(1)(b) contract or Art. 6(1)(e) task in the public interest where applicable).
  • Account management and security including fraud prevention and access control (Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interest).
  • Analytics and service improvement to understand usage and improve performance (Art. 6(1)(a) consent, where analytics cookies are used; otherwise Art. 6(1)(f) for strictly aggregated metrics).
  • Communications and support responding to your requests (Art. 6(1)(b)/(f)).
  • Compliance with legal obligations and requests from authorities (Art. 6(1)(c)).

4. Cookies and Analytics

  • Necessary cookies: session/authentication, security, load balancing, language. These are essential.
  • Analytics cookies/tools: may be used to measure usage and performance. These are optional and used only with your consent via the cookie banner. You can change your choices anytime via the footer link “Cookie Settings” or your browser settings.

Further details are available in the Cookie section of the site or consent banner.

5. Recipients and Processors

We share personal data only as necessary with:

  • Service providers/processors supporting hosting, security, analytics, and operations, under data‑processing agreements.
  • Consortium members who operate the platform components.
  • Public authorities where required by law.

We do not sell personal data.

Named processors for the platform operations include:

  • University Politehnica of Bucharest (Universitatea Politehnica București)
  • Romanian Space Agency (Agenția Spațială Română)
  • National Meteorological Administration (Administrația Națională de Meteorologie)
  • BEIA Consulting SRL

6. International Transfers

Where providers are located outside the EEA, we use safeguards such as European Commission adequacy decisions or Standard Contractual Clauses, plus additional technical and organizational measures where appropriate.

7. Data Security

We apply appropriate technical and organizational measures, including HTTPS encryption, access controls, network segregation, monitoring, backups, and least‑privilege principles.

8. Retention

We retain data only for as long as necessary for the purposes described above:

  • Account data: for the life of the account and limited time afterward for audit/security.
  • Logs: typically up to 12 months, unless needed longer for investigations.
  • Analytics data: according to the configured retention period in the analytics tool and your consent.

9. Your Rights

Under GDPR you may exercise: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (for consent‑based processing). You also have the right to lodge a complaint with the supervisory authority.

To exercise your rights, contact: privacy@eocube.ro. We may need to verify your identity.

10. Changes to This Notice

We may update this Privacy Policy. We will indicate the latest update date and, where material, provide a notice on the site.

11. Contact and DPO

12. Supervisory Authority

National Supervisory Authority for Personal Data Processing (ANSPDCP)