Privacy policy

Note on the responsible entity

The responsible party for data processing on this website is: ions.bio GmbH, Am Klopferspitz 19, 82152 Planegg.

Represented by its managing directors: Dr. Sebastian Virreira Winter & Dr. Philipp Geyer.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the state data protection commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Objection to advertising mails

The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Cookies, consent, and your choices

Cookies are small text files stored on your device by your browser; comparable technologies such as local storage work the same way for the purposes described here. We distinguish two kinds, and treat them differently.

Strictly necessary storage is used to operate this website — for example to remember the cookie choice you make below, so we do not have to ask again on every page. This is permitted without your consent under § 25 (2) TDDDG, and the associated processing is based on our legitimate interest in providing a functioning website (Art. 6 (1) lit. f DSGVO).

Everything else is loaded only if you have consented. That currently covers two purposes: analytics (Google Analytics) and external media (the Google Maps embed on our contact page). Until you consent, no analytics script is loaded and no map is requested, so no data is transmitted to those providers. The legal basis for storing and reading this information on your device is § 25 (1) TDDDG, and for the subsequent processing your consent (Art. 6 (1) lit. a DSGVO).

You can change or withdraw your choice at any time, with effect for the future, using the "Cookie settings" link in the footer of every page. Withdrawing analytics consent also deletes the Google Analytics cookies already set in your browser. Withdrawal does not affect the lawfulness of processing carried out before it.

Server log files

We automatically store information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 (1) lit. f DSGVO — our legitimate interest in the technically error-free presentation and the optimization of this website.

Links to third party offers

Websites and services of other providers linked to this website have been designed and are provided by third parties. We have no influence on the design, content and function of these third-party services. We expressly distance ourselves from all content of all linked third-party services. Please note that the third-party services linked from this website may install their own cookies on your terminal device or collect personal data. We have no influence on this. If necessary, please inform yourself directly with the providers of these linked third-party offers.

Legal basis

The legal basis depends on the processing in question and is stated in the relevant section of this policy. In summary: where you have given consent — for analytics and for external media — processing is based on Art. 6 (1) lit. a DSGVO; where processing serves a contract or steps taken at your request, such as arranging a consultation, on Art. 6 (1) lit. b DSGVO; and where it serves our legitimate interest in operating a secure, functioning website, on Art. 6 (1) lit. f DSGVO.

You have the following rights vis-à-vis us with regard to the personal data concerning you:

• Right to information
• Right to correction or deletion
• Right to restriction of processing
• Right to object to processing
• Right to data portability

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

Objection to data processing

Of course, you can object to us processing your personal data at any time. You can inform us about your objection under the following contact data: ions.bio GmbH, Am Klopferspitz 19, 82152 Planegg.

Resource requests and email delivery (Brevo)

When you request a downloadable resource (e.g. a science note) or sign up for updates, we process the data you enter — first name, last name, company, e-mail address, the resource requested, and your consent together with its timestamp — in order to send you the resource and, where you have opted in, related information about our services. Processing is based on your consent (Art. 6 (1) lit. a DSGVO), which you can withdraw at any time with effect for the future, for example via the unsubscribe link in any e-mail or by contacting us.

For storing these contacts and sending the e-mails we use Brevo, a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (part of the French Brevo group), whose servers are located within the European Union. Brevo processes this data solely on our behalf and in accordance with our instructions; we have concluded a data processing agreement (Auftragsverarbeitung) with the provider. For details see Brevo's privacy policy at https://www.brevo.com/legal/privacypolicy/.

Contact enquiries

When you write to us through the contact form, we process the name, e-mail address, organisation and message you enter in order to answer you. The message is delivered to us by e-mail and is also stored, together with your name and organisation, in our Brevo account so that the enquiry can be found again later.

The legal basis is our legitimate interest in handling and documenting business enquiries (Art. 6 (1) lit. f DSGVO) and, where the enquiry concerns a possible contract, steps taken at your request before entering into one (Art. 6 (1) lit. b DSGVO). Getting in touch is not a subscription: we do not add you to any newsletter or marketing list on that basis, and you will not receive advertising from us unless you separately opt in.

Google Analytics 4

With your consent, this website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use it to understand which pages are useful to visitors and how the site is found, so we can improve it.

Google Analytics sets cookies on your device and processes, among other things, the pages you view, the approximate location derived from your IP address, your device and browser type, the referring source, and interactions such as submitting one of our forms. Google Analytics 4 shortens IP addresses within the EU/EEA before any transfer, and we do not use it for advertising. Advertising storage, advertising user data, and ad personalisation are refused directly by our tag, so no Google Ads cookies or identifiers are set through it; in addition, Google Signals and the reporting of demographic characteristics are switched off in our property.

The legal basis is your consent under Art. 6 (1) lit. a DSGVO, together with § 25 (1) TDDDG for the storage of and access to information on your device. Nothing is loaded before you consent — if you decline or have not yet decided, no Google Analytics script is requested and no data reaches Google. You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer, which also deletes the Google Analytics cookies in your browser.

We have concluded a data processing agreement with Google. Data may be transferred to Google LLC in the USA; Google relies on the EU Standard Contractual Clauses and its certification under the EU-U.S. Data Privacy Framework for such transfers. Despite these safeguards, we cannot rule out that U.S. authorities may access the data. Data collected via Google Analytics is retained for 14 months and then deleted automatically. Further information is available in Google's privacy policy: https://policies.google.com/privacy

Fonts

The typeface used on this website is hosted on our own servers and delivered together with the rest of the page. No web fonts are loaded from Google Fonts or any other external font service, and your browser therefore makes no connection to a third party in order to display our text.

Google Maps

Our contact page can display a map showing our location, provided by Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading the map transmits your IP address to Google and may involve a transfer to Google LLC in the USA; Google relies on the EU Standard Contractual Clauses and its certification under the EU-U.S. Data Privacy Framework for such transfers.

The map is not loaded automatically. It appears only if you have consented to external media — either in the cookie banner or by pressing the "Load map" button shown in its place. Until then, we display our address as plain text and nothing is requested from Google. The legal basis is your consent (Art. 6 (1) lit. a DSGVO, § 25 (1) TDDDG), which you can withdraw at any time via "Cookie settings" in the footer. Further information: https://policies.google.com/privacy

Cloudflare Turnstile (form protection)

Our contact, newsletter, and resource-request forms are protected by Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. It distinguishes submissions made by a person from those made automatically, so that the forms cannot be used to send unsolicited e-mail in our name.

For this purpose Cloudflare processes your IP address, information about your browser and device, and signals about how the page was used, and issues a short-lived, single-use token that our server checks before accepting a submission. Turnstile is designed not to be used for advertising or cross-site tracking. Data may be transferred to the USA; Cloudflare relies on the EU Standard Contractual Clauses and its certification under the EU-U.S. Data Privacy Framework, and we have concluded a data processing agreement.

The legal basis is our legitimate interest in protecting our forms and our e-mail reputation against automated abuse (Art. 6 (1) lit. f DSGVO). The associated technical storage on your device is strictly necessary to provide the function you requested and is therefore permitted under § 25 (2) TDDDG without consent — which is also why we use it solely for this protection. Further information: https://www.cloudflare.com/privacypolicy/

Microsoft Bookings

Our booking page embeds Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, so that you can see our real-time availability and arrange a consultation. When you open that page, the embedded booking tool is loaded from Microsoft and receives your IP address; the appointment details you enter there — such as your name, e-mail address, and any message — are processed in order to arrange the appointment.

Because this embed exists solely to provide the booking function you deliberately called up, the legal basis is the performance of pre-contractual measures at your request (Art. 6 (1) lit. b DSGVO). If you would rather not use it, you can simply e-mail us at info@ions.bio to arrange an appointment instead. Microsoft's privacy statement: https://privacy.microsoft.com/privacystatement