This privacy policy explains how we process personal data (Art. 4 GDPR) when you visit our website sdx-app.com. The terms used correspond to those of the General Data Protection Regulation (GDPR). Use of the SDX platform itself under a contract is governed by separate agreements.
The German version of this privacy policy is the legally binding one.
1. Controller and data protection officer
The controller responsible for data processing on this website is:
Jenomics GmbH
Thalkirchner Straße 55
80337 Munich
Germany
E-mail: info@jenomics.de
Phone: +49 89 2000 337 0
Fax: +49 89 2000 337 55
The data protection officer of Jenomics GmbH can be reached at the above address or at datenschutz@jenomics.de.
2. Hosting
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is located in the Netherlands, so data is processed within the European Union. Hostinger processes the data generated when you visit the website (see section 3) and the website content on our behalf. We have concluded a data processing agreement with Hostinger in accordance with Art. 28 GDPR.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, quickly and reliably.
3. Server log files
When you open our website, your browser automatically sends information to our web server. This information is stored temporarily in a log file. The following data is collected without any action on your part:
- IP address of the requesting device,
- date and time of access,
- name and URL of the file or page requested,
- referrer URL (the previously visited page), if transmitted,
- browser and operating system used.
We process this data to ensure a smooth connection and convenient use of the website, to evaluate system security and stability, and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest follows from these purposes. We do not use the data to draw conclusions about you personally. Log files are deleted automatically after 30 days at the latest [CHECK: confirm retention period at Hostinger].
4. Contact form
If you send us an enquiry through the contact form, we process the data you enter: your e-mail address (required) and, optionally, your phone number and your message. We also store your consent, the page from which the enquiry was sent, the time, your IP address and your browser identifier (user agent) in order to detect misuse.
We use this data solely to handle your enquiry, for example to arrange a demo with you. The enquiry is stored on our website’s server and then forwarded by e-mail to the responsible staff. Storing it ensures that no enquiry is lost if sending the e-mail temporarily fails.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the checkbox in the form, and, where your enquiry aims at concluding a contract, Art. 6(1)(b) GDPR. You can withdraw your consent at any time with effect for the future (see section 9.6).
We delete your enquiry once it has been fully dealt with, and no later than six months after our last contact [CHECK: set the period], unless statutory retention obligations apply.
To protect against spam, the form contains a field that is invisible to humans, and the number of enquiries per IP address is limited (see section 6). No cookies are set and no data is passed to third parties for this purpose.
5. Cookies
Cookies are small text files that your browser stores on your device. This website sets no cookies and does not store any other information on your device either (for example in local storage). We use no analytics, statistics, advertising or tracking services.
The language of the website follows only from the address you open (for example /en/ for English); no cookie is needed for this.
6. Website security
The pages of this website are static files; there is no content management system, no login for visitors and no third-party security plugin. To protect the contact form against misuse, we limit the number of enquiries per IP address (at most five enquiries in ten minutes). For this, the IP address is only kept in the server’s memory and discarded after ten minutes at the latest; it is not passed on to third parties.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and our visitors’ data.
7. Fonts, images and videos
All fonts, images and videos on this website are loaded from our own server. Visiting the website does not establish a connection to servers of Google or any other external provider.
Our website contains links to other websites, for example to Jenomics GmbH. Data is only transferred to the respective provider when you click such a link; that provider’s privacy policy then applies.
8. Disclosure of data
We do not transfer your personal data to third parties for purposes other than those listed in this policy. We only pass on your personal data to third parties if:
- you have given your express consent under Art. 6(1)(a) GDPR,
- the disclosure is necessary under Art. 6(1)(f) GDPR to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
- there is a legal obligation to disclose the data under Art. 6(1)(c) GDPR, or
- this is legally permissible and necessary under Art. 6(1)(b) GDPR for the performance of a contract with you.
We only use service providers who process data on our behalf (for example our hosting provider) on the basis of a data processing agreement in accordance with Art. 28 GDPR.
9. Your rights
9.1 Access (Art. 15 GDPR)
You can ask us whether and which personal data we process about you. In particular, you are entitled to information about:
- the purposes of processing,
- the categories of personal data processed,
- the recipients or categories of recipients to whom your data has been or will be disclosed, in particular recipients in third countries,
- the planned storage period or, if that is not possible, the criteria used to determine it,
- the existence of a right to rectification, erasure, restriction of processing or objection,
- the existence of a right to lodge a complaint with a supervisory authority,
- the source of your data, if it was not collected from you,
- where applicable, the existence of automated decision-making including profiling,
- where applicable, the appropriate safeguards under Art. 46 GDPR for transfers to third countries.
The right of access may be restricted where data is stored only because of statutory retention obligations or serves exclusively for data backup or data protection control purposes, and providing the information would require disproportionate effort.
9.2 Rectification (Art. 16 GDPR)
If the data we hold about you is incorrect, you can request that it be corrected without delay. If it is incomplete, you can request that it be completed.
9.3 Erasure (Art. 17 GDPR)
You can request the erasure of your data, in particular if:
- the data is no longer necessary for the purposes for which it was collected,
- the processing was based solely on your consent and you have withdrawn it,
- you have objected to the processing and there are no overriding legitimate grounds for it,
- the data has been processed unlawfully, or
- erasure is required to comply with a legal obligation.
The right to erasure does not apply where processing is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
9.4 Restriction of processing (Art. 18 GDPR)
You can request the restriction of processing if you contest the accuracy of your data (for the duration of the review), if the processing is unlawful and you request restriction instead of erasure, if we no longer need the data but you need it to establish, exercise or defend legal claims, or if you have objected under Art. 21(1) GDPR and it has not yet been determined whether our legitimate grounds override yours.
9.5 Data portability (Art. 20 GDPR)
If the processing is based on your consent or on a contract and is carried out by automated means, you can request to receive the data you provided to us in a structured, commonly used and machine-readable format, or, where technically feasible, to have it transmitted directly to another controller.
9.6 Withdrawal of consent (Art. 7(3) GDPR)
You can withdraw any consent you have given at any time with effect for the future, informally by e-mail, phone, fax or post. This does not affect the lawfulness of processing carried out before the withdrawal.
9.7 Right to object (Art. 21 GDPR)
Where processing is based on Art. 6(1)(f) GDPR (legitimate interest), you can object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You can object to processing for direct marketing purposes at any time without giving reasons. You can send your objection informally to the contact details given in section 1.
9.8 Complaint to a supervisory authority (Art. 77 GDPR)
If you believe that the processing of your data is unlawful, you can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de
10. Data security
This website is transmitted exclusively in encrypted form via HTTPS (TLS). You can recognise this by the padlock symbol and “https://” in your browser’s address bar. We also take appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access, and we continuously improve these measures in line with technological developments.
11. Changes to this privacy policy
This privacy policy is dated October 2026. We will update it if we develop our website further or if legal or regulatory requirements change. The current version is always available on this page.