Privacy Policy

Last updated: August 2026

1. Data Controller

BioNordet GmbH, Hanauer Landstraße 291, 60314 Frankfurt am Main, Germany.

2. Data Protection Officer

You can contact our Data Protection Officer at datenschutz@bionordet.com.

3. Data We Collect

We collect personal data only when you voluntarily provide it through our contact form: name, email address, company, phone number, reason for enquiry, and message. We also automatically collect technical data when you visit the site: IP address (anonymised), browser type, operating system, pages visited, and duration of the visit.

4. Legal Basis for Processing

The processing of your data is based on: your consent (Art. 6(1)(a) GDPR) when submitting the contact form; our legitimate interest (Art. 6(1)(f) GDPR) in improving the website and ensuring IT security; and compliance with legal obligations (Art. 6(1)(c) GDPR) regarding pharmacovigilance.

5. Purpose of Processing

Your data is used to: respond to your commercial or medical enquiries, manage pharmacovigilance reports, improve website functionality, and comply with applicable regulatory requirements.

6. Data Recipients

Your data may be disclosed to: Formspree Inc. (contact form processor, located in the USA, with EU-approved standard contractual clauses); health authorities when required by law; and web analytics service providers (Google Analytics, with anonymised IP).

7. International Transfers

When data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including standard contractual clauses or adequacy decisions by the European Commission.

8. Data Retention

Contact form data is retained for the time necessary to respond to your enquiry and for a maximum of 3 additional years for follow-up purposes. Pharmacovigilance data is retained in accordance with applicable legal retention periods. Web analytics data is anonymised and aggregated after 14 months.

9. Your Rights

Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection. You may exercise these rights by contacting datenschutz@bionordet.com. You also have the right to lodge a complaint with the competent supervisory authority — the Hessischer Beauftragter für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information).

10. Cookies

This website uses essential technical cookies required for its operation. Analytics cookies (Google Analytics) are only activated with your prior consent via the cookie banner. For more information, please see our Cookie Policy.

11. Security

We implement appropriate technical and organisational measures to protect your data, including SSL/TLS encryption, Content Security Policy, IP anonymisation, and database access controls.

12. Changes

We reserve the right to update this policy. The date of the last update is indicated at the top of this document. We recommend reviewing this page periodically.