ExoGen Space s.r.o.
Last updated: 13 June 2026
1. Introduction
ExoGen Space s.r.o. respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, contact us, subscribe to our updates, interact with us as a business partner, applicant, collaborator, investor, media contact, research contact or other stakeholder.
This Privacy Policy applies to the websites operated by ExoGen Space s.r.o. at  https://www.space-diet.com; https://www.exogen-space.com; https://www.3d-food.com and to related communications with ExoGen Space s.r.o.
We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), Act No. 110/2019 Coll., on the Processing of Personal Data, and other applicable data protection laws.
2. Who we are
The data controller is:
ExoGen Space s.r.o.
Registered office: Nové sady 988/2, 602 00 Brno, Czech Republic
Company ID / IČO: 23447443
Registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File No. 145769.
Email: zsuzsanna.benyo@gmail.com
Websites: https://www.space-diet.com; https://www.exogen-space.com; https://www.3d-food.com
For privacy-related questions or requests, please contact us at:
zsuzsanna.benyo@gmail.com
Unless expressly stated otherwise, ExoGen Space s.r.o. is the controller of the personal data described in this Privacy Policy.
3. What personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us.
3.1 Information you provide to us
This may include:

• name, surname, title and professional position;

• company or organisation name;

• email address, telephone number and business contact details;

• messages, inquiries, requests and other communications you send to us;

• newsletter or event registration details;

• business, supplier, investor, customer or partner information;

• CVs, professional background, portfolio information and application materials if you apply for a role, internship, collaboration or advisory position;

• information you voluntarily provide in relation to research, innovation, nutrition, space-food, biotech or commercial cooperation inquiries.

Please do not send us sensitive personal data, such as health data, medical information, genetic information, biometric data, information about children, or other special categories of personal data, unless we have specifically requested it and provided a separate privacy notice or consent form for that specific purpose.
3.2 Information collected automatically through the website
When you visit our website, we may automatically collect limited technical and usage information, such as:

• IP address;

• browser type and version;

• device type;

• operating system;

• pages visited;

• date and time of visit;

• referring website;

• cookie preferences;

• approximate location derived from technical information;

• website analytics information, where enabled and subject to applicable consent requirements.

4. Why we process personal data and legal bases
We process personal data only where we have a valid legal basis under the GDPR.
4.1 Responding to inquiries
We process your contact details and message content to respond to your inquiries, requests, meeting proposals, partnership questions or media requests.
Legal basis: legitimate interest; steps prior to entering into a contract where relevant.
4.2 Business, supplier, customer and partner relationships
We process business contact details, correspondence, contractual information, invoicing information and related records to manage cooperation with customers, suppliers, partners, research collaborators, consultants, investors and other stakeholders.
Legal basis: performance of a contract; steps prior to entering into a contract; legitimate interest; legal obligation.
4.3 Website operation and security
We process technical data to operate, maintain, secure and improve our website, prevent misuse, detect technical issues and protect our systems.
Legal basis: legitimate interest; legal obligation where applicable.
4.4 Newsletters, marketing and public updates
When you subscribe to our newsletter or updates, we process your name, email address, and preferences to send you information about ExoGen Space, its activities, events, research, innovation, business development, funding, media updates, and related opportunities.
Legal basis: consent, or legitimate interest for limited B2B communications where permitted by law.
You may unsubscribe or object to marketing communications at any time.
4.5 Events, webinars and outreach activities
If you register for or participate in an event, webinar, meeting, educational activity, presentation, or outreach programme, we may process your registration details, attendance information, and communication data.
Legal basis: performance of a contract or requested service; legitimate interest; consent where required.
If an activity involves minors, students, research participants or sensitive information, separate information and consent procedures may apply.
4.6 Recruitment and collaboration applications
If you apply for a job, internship, advisory role, consultancy, research collaboration or similar position, we process your application materials and related communications.
Legal basis: steps prior to entering into a contract; legitimate interest; consent where we keep your data for future opportunities.
4.7 Legal, accounting and compliance purposes
We may process personal data to comply with accounting, tax, corporate, grant, audit, legal or regulatory obligations, and to establish, exercise or defend legal claims.
Legal basis: legal obligation; legitimate interest.
5. Special category data and research-related information
Our general website is not intended to collect health, genetic, biometric, or other special categories of personal data.
Because ExoGen Space operates in the fields of R&D, space nutrition, wellbeing, biotechnology, personalized food experience and future food systems, some future research, testing, validation, pilot projects or product development activities may require more specific data. Such activities will be governed by separate participant information sheets, consent forms, ethics documentation, contracts, or specific privacy notices, as required.
This general website Privacy Policy does not replace any separate research, clinical, laboratory, ethics or participant privacy documentation.
6. Cookies and similar technologies
Our website may use cookies and similar technologies.
Cookies are small text files stored on your device when you visit a website. They help the website function, remember your preferences, analyse website performance and, where enabled, support marketing or analytics.
We may use the following types of cookies:
6.1 Strictly necessary cookies
These cookies are required for the website to function properly and cannot usually be disabled through our website settings.
Legal basis: legitimate interest.
6.2 Preference cookies
These cookies remember your choices, such as language or cookie preferences.
Legal basis: consent, where required; legitimate interest where strictly necessary.
6.3 Analytics cookies
These cookies help us understand how visitors use our website, which pages are most relevant and how we can improve the website.
Legal basis: consent, where required.
6.4 Marketing cookies
If used, these cookies may help us measure campaigns or display relevant content through third-party platforms.
Legal basis: consent.
You can manage cookies through our cookie banner, your browser settings, or your device settings. Non-essential cookies should only be used where you have given consent, unless another legal basis is clearly applicable.
Before publishing this policy, ExoGen Space should check which tools are actually active on the website, for example, Wix analytics, Google Analytics, Meta Pixel, LinkedIn Insight Tag, Mailchimp, HubSpot or similar tools, and list them accurately in the website’s cookie settings.
7. Whom we share personal data with
We do not sell your personal data.
We may share personal data with the following categories of recipients where necessary:

• website hosting and IT service providers;

• email, cloud, security, analytics and communication providers;

• accounting, legal, tax, audit and compliance advisers;

• business, research, technical or project partners where relevant to your inquiry or cooperation;

• grant, accelerator, incubator, funding or public authorities where required for reporting or compliance;

• payment, invoicing or banking service providers where applicable;

• public authorities, courts or regulators where required by law.

Where required, we use appropriate contractual safeguards with service providers and processors.
8. International transfers
Where possible, we process personal data within the European Economic Area.
Some service providers or partners may be located outside the European Economic Area, including in countries that may not provide the same level of data protection as the EU. Where personal data is transferred outside the EEA, we will use appropriate safeguards, such as European Commission adequacy decisions, Standard Contractual Clauses, contractual safeguards, technical measures or other lawful transfer mechanisms under the GDPR.
9. How long we keep personal data
We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
In general:

• website technical logs are kept for a limited period necessary for security and operation;

• inquiries and correspondence are kept for as long as needed to respond and manage the relationship, and then for a reasonable limitation period;

• newsletter data is kept until you unsubscribe or withdraw consent;

• business and contractual records are kept for the duration of the relationship and for applicable legal, tax, accounting or limitation periods;

• recruitment data is generally kept for the recruitment process and a limited period afterwards, unless you consent to longer retention for future opportunities;

• legal and compliance records may be kept as long as necessary to comply with legal obligations or defend legal claims.

10. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.
These measures may include access controls, secure storage, password protection, limited access rights, internal confidentiality rules, secure service providers and reasonable administrative, technical and organisational safeguards.
However, no website, email system or online transmission is completely secure. If you believe that your communication with us is no longer secure, please contact us immediately.
11. Your rights
Subject to the conditions and limitations under the GDPR, you have the following rights:

• the right to access your personal data;

• the right to request correction of inaccurate or incomplete data;

• the right to request deletion of your personal data;

• the right to request restriction of processing;

• the right to object to processing based on legitimate interests;

• the right to object to direct marketing at any time;

• the right to data portability, where applicable;

• the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;

• the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable;

• the right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at:
[insert privacy/contact email]
We may ask you to verify your identity before responding to a request. We will respond within the period required by applicable law.
12. Supervisory authority
You have the right to lodge a complaint with the Czech supervisory authority:
Úřad pro ochranu osobních údajů
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Email: posta@uoou.gov.cz
You may also contact the data protection authority in your country of residence or workplace.
13. Links to third-party websites
Our website may contain links to third-party websites, social media pages, partner websites, videos, articles, publications, platforms or services.
We are not responsible for the privacy practices, content or security of third-party websites or services. We recommend that you read the privacy policies of any third-party websites you visit.
14. Social media
If you interact with us on social media platforms, the relevant platform may process your personal data according to its own privacy policy. We may process your public profile information, messages, comments, interactions or other information you choose to share with us through those platforms.
15. Children and minors
Our general website is intended primarily for adults, business contacts, research partners, investors, suppliers, professional stakeholders and members of the public interested in ExoGen Space.
We do not knowingly collect personal data from children through the general website without appropriate consent or legal basis. If we organise educational, student, STEM, outreach or youth programmes, separate privacy information and consent procedures may apply, especially where minors are involved.
16. Automated decision-making
We do not use personal data collected through the general website for automated decision-making that produces legal effects or similarly significant effects on individuals.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our activities, website, legal requirements or data protection practices.
The latest version will always be published on our website with the date of the most recent update.
18. Contact
For any questions about this Privacy Policy or how we process personal data, please contact:
ExoGen Space s.r.o.
Email: zsuzsanna.benyo@gmail.com
Website: https://www.space-diet.com; https://www.exogen-space.com; https://www.3d-food.com