Data Protection Policy
Last updated: August 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Oncodianova GmbH
Glückstraße 57
22081 Hamburg
Germany
Telephone: +49 172 44 35 028
Email: j.a.frerichs@oncodianova.com
2. Data Protection Officer
A Data Protection Officer has been appointed for Oncodianova GmbH:
Gert Brinkmann
c/o Oncodianova GmbH
Glückstraße 57
22081 Hamburg
Germany
Telephone: +49 40 450 67 0
Fax: +49 40 450 67 490
Email: info@oncodianova.com
3. Provision of the Website and Server Log Files
When you access our website, technically necessary data are processed. These may include in particular:
- IP address
- Date and time of access
- Page or file accessed
- Browser type and browser version
- Operating system used
- Referrer URL
The processing is carried out for the technical provision of the website as well as to ensure its stability and security.
The legal basis is Art. 6(1)(f) GDPR.
Our legitimate interest lies in the secure, stable and functional provision of our website.
The data are deleted as soon as they are no longer required for these purposes, unless statutory retention obligations or other legal grounds require further storage.
4. Contact by Email
If you contact us by email, we process the personal data you provide, in particular your email address and the content of your message, in order to process and respond to your inquiry.
For general inquiries, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper processing and response to inquiries addressed to us.
If your inquiry serves the implementation of pre-contractual measures or is connected with an existing contractual relationship, the processing is based on Art. 6(1)(b) GDPR.
The data are deleted as soon as your inquiry has been fully processed and no statutory retention obligations or other legal grounds require further storage.
5. Contact Form
If you use the contact form provided on our website, we process the personal data you enter. These include in particular:
- Name
- Email address
- Content of the message
The processing is carried out in order to process and respond to your inquiry.
For general inquiries, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in proper and efficient communication with persons who contact us.
If your inquiry serves the implementation of pre-contractual measures or is connected with an existing contractual relationship, the processing is based on Art. 6(1)(b) GDPR.
The data transmitted via the contact form are deleted as soon as the respective inquiry has been fully processed and no statutory retention obligations or other legal grounds require further storage.
6. Cookies and Comparable Technologies
Where technically necessary cookies or comparable technologies are used on our website, this takes place only insofar as their use is strictly necessary for the provision of a digital service expressly requested by the user or where another statutory exception applies.
Where the storage of information on your terminal device or access to information already stored on your terminal device requires consent, this takes place only in accordance with Section 25 TDDDG and the applicable data protection provisions.
7. Hosting and Technical Service Providers
External technical service providers may be used for the technical provision, maintenance and operation of our website.
Where these service providers process personal data on our behalf, such processing is carried out in accordance with the applicable statutory data protection requirements.
Recipients or categories of recipients of personal data may in particular include hosting providers and technical IT service providers, insofar as their involvement is necessary for the operation, maintenance or security of the website.
8. Storage Period
We generally store personal data only for as long as is necessary for the respective processing purpose.
Where statutory retention obligations or other legal grounds require further storage, the data are deleted after the expiry of the respective periods or once the reason for storage no longer applies.
9. Your Rights
Subject to the statutory requirements, you have in particular the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
10. Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object at any time to such processing on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
11. Withdrawal of Consent
Where the processing of personal data is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of the processing carried out on the basis of your consent prior to its withdrawal remains unaffected.
12. Right to Lodge a Complaint with a Data Protection Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.
The following supervisory authority is in particular responsible for Oncodianova GmbH:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany
Telephone: +49 40 42854-4040
Email: mailbox@datenschutz.hamburg.de
13. Updating of this Data Protection Policy
This Data Protection Policy will be updated where changes to our website, the technical procedures used or the legal requirements make this necessary.