Privacy policy

1. Controller

GeneTechX (in formation), Dr. Dr. rer. nat. Najmeh Heshmatpour, [street, postcode] Heidelberg, Germany. Email: info@genetechx.com

2. Hosting and server log files

When you visit this website, our hosting provider automatically stores technical data in server log files: IP address, date and time, page requested, referrer, browser and operating system. This is necessary to deliver the website securely (Art. 6(1)(f) GDPR). Logs are deleted after at most 14 days unless needed to investigate an attack.

Hosting provider: [name and address of your hosting provider, data processing agreement in place]

3. Photos and videos from Unsplash and Mixkit

To show high-quality images, your browser loads photos directly from images.unsplash.com (Unsplash Inc., USA) and videos from assets.mixkit.co (Envato Pty Ltd, Australia). In doing so these providers receive your IP address and browser details. We send no other data and set no referrer. Legal basis: our legitimate interest in an attractive website (Art. 6(1)(f) GDPR). Transfers to the USA may rely on the EU–US Data Privacy Framework where the provider is certified; Australia has no EU adequacy decision. Privacy policies: unsplash.com/privacy and envato.com/privacy.

4. Fonts

All fonts are stored on our own server. No connection to Google Fonts or other font services is made.

5. Contact form and email

If you use the form or write to us, we process your name, email address, organisation (optional) and message to answer your enquiry (Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f)). The form is sent by our own server as an email to our inbox; no external form service is involved. We delete enquiries when they are settled, at the latest after 12 months, unless legal retention periods apply.

Spam protection: the form uses a hidden field, a signed one-time token and a time check. To limit repeated sending, the server keeps a hashed (not readable) form of your IP address for at most one hour. Your browser remembers the time of your last message in local storage on your own device only.

Please do not send health, genetic or other special-category data through the form.

6. Cookies and tracking

This website sets no cookies and uses no analytics, advertising or social media plug-ins. That is why there is no cookie banner.

7. Future GeneTechX service

This policy covers the website only. Genetic and biomarker data in the future GeneTechX service will be processed under a separate privacy policy and only with your explicit consent (Art. 9(2)(a) GDPR).

8. Your rights

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20 GDPR).
• Objection to processing based on legitimate interest (Art. 21 GDPR).
• Complaint to a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Stuttgart.

To exercise your rights, write to info@genetechx.com.

9. Security

The website is delivered only over HTTPS (TLS) with strict security headers, including a Content Security Policy. Security issues can be reported as described in /.well-known/security.txt.

Status: October 2026