← Back to Home

NukeProof® Alliance Privacy Policy

Who we are

NukeProof® Alliance is an initiative for European data sovereignty, operated by Space and Time Oy (Business ID: 1781499-1), a company registered in Finland.

Space and Time Oy is the controller responsible for your personal data under applicable Finnish law and the EU General Data Protection Regulation (GDPR).

If you have any questions about this policy or how your data is processed, you can contact us at: [email protected].

What data we collect

When you join our alliance, you provide the following information through our contact form:

  • Full name
  • Email address
  • Phone number (optional)
  • Sponsorship interest (yes/potentially/no)

We may also collect technical data when you visit our website, such as IP address, browser type and pages visited, but only where you have consented to analytics cookies as described below.

Why we use your data and legal bases

We process your personal data for the following purposes and on the following legal bases under GDPR:

  • To contact you about the NukeProof® initiative via email or phone, and to manage your relationship with the alliance (legitimate interest in running and growing our initiative, and in some cases performance of pre‑contractual steps at your request).
  • To discuss potential sponsorship opportunities if you indicated interest (legitimate interest in developing sponsorships and partnerships, and performance of pre‑contractual steps at your request).
  • To send you updates about the alliance (on the basis of your consent).
  • To understand how visitors use our website and improve it, using privacy-friendly analytics (Plausible, which requires no consent) and business visitor identification (Leadfeeder, with your consent).

You are not obliged to provide your personal data, but if you choose not to, we may not be able to contact you or consider you for sponsorship.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Data processing and recipients

Your form data is collected via Google Forms and stored in Google Workspace (data located within the EU/EEA). Google acts as our processor and processes your data only on our documented instructions under a data processing agreement.

Analytics data is processed by:

  • Plausible Analytics – A privacy-friendly analytics service that does not use cookies, does not collect personal data, and does not track individual users. It collects only aggregate data such as page views, referral sources, and browser/device type. All data is processed within the EU.
  • Leadfeeder (Dealfront) – Identifies companies visiting our website based on IP address lookups and enriches company‑level information; personal visitor data is only collected if you submit a form on our site. This service requires your consent.

Plausible Analytics operates without consent requirements as it does not process personal data. Leadfeeder acts as a processor and is contractually required to protect your data and process it only for our specified purposes.

Cookies and tracking

We use analytics services to understand how visitors use our website and improve your experience.

Services we use

  • Plausible Analytics — A privacy-friendly, cookie-free analytics service that helps us understand website traffic without tracking individual users. Plausible does not use cookies, does not collect personal data, and all data is processed within the EU. No consent is required for this service under GDPR.
  • Leadfeeder — Identifies companies visiting our website from business IP ranges and shows us company‑level visit information; residential IP addresses are filtered out to the extent supported by the service. This service requires your consent.

When you consent

When you give consent to analytics cookies:

  • Leadfeeder scripts are loaded and their cookies may be set on your device.
  • This tool collects and processes company-level visit data as described above.

When you decline

If you choose not to consent, or withdraw your consent:

  • Leadfeeder tracking scripts are not loaded.
  • Any existing Leadfeeder cookies under our control are deleted where technically feasible.
  • No new Leadfeeder cookies are set.

Note: Plausible Analytics runs regardless of your consent choice as it does not use cookies or collect personal data.

Managing your preferences

You can manage or change your cookie preferences at any time via our consent banner when you first visit, or later using the "Cookie Settings" link in our website footer.

How long we keep your data

We keep your personal data only for as long as needed for the purposes described above:

  • Contact and sponsorship data: kept while we are in active contact with you or reasonably expect mutual interest, and regularly reviewed and deleted when no longer needed.
  • Email communication records: kept in line with our legal retention obligations and limitation periods under Finnish law.
  • Analytics data: Plausible Analytics retains aggregate data indefinitely (no personal data is collected). Leadfeeder data is retained for the periods configured in that tool, after which it is automatically deleted or anonymised.

When data is no longer needed, it is deleted or irreversibly anonymised in accordance with our internal policies.

Your rights

Under GDPR, you have the following rights in relation to your personal data:

  • Right of access – to obtain confirmation whether we process your data and to receive a copy.
  • Right to rectification – to have inaccurate or incomplete data corrected.
  • Right to erasure – to request deletion of your data in certain circumstances.
  • Right to restriction – to request that we limit how we use your data in certain cases.
  • Right to object – to object at any time to processing based on our legitimate interests, including profiling; we will stop the processing unless we demonstrate compelling legitimate grounds.
  • Right to data portability – to receive your data in a structured, commonly used, machine‑readable format and transmit it to another controller where technically feasible.
  • Right to withdraw consent – where processing is based on consent (for example, analytics cookies), you can withdraw your consent at any time via the "Cookie Settings" link in our footer; this does not affect the lawfulness of processing before withdrawal.

To exercise these rights or unsubscribe from our communications, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority or with the Finnish Data Protection Ombudsman if you believe your rights have been infringed.

Contact

For privacy‑related inquiries or to exercise your data protection rights, please contact:

Space and Time Oy
Email: [email protected]