Privacy Policy

1. Controller

Andreas Thomsen
Eisenbahnstraße 24
79341 Kenzingen
Germany
Email: info@thom-med.de

2. General notes

This is a static website that sets no cookies. When you visit this website, technically necessary data (server logs) is processed by the hosting provider, and aggregated, anonymous usage data is collected via a cookieless web analytics method (see section 5).

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When accessing the website, server log data is collected automatically, including IP address, date and time of access, page accessed, data transferred, and browser used. This data is required for the secure operation of the website.

As Vercel is a US-based provider, personal data may be transferred to the United States. Vercel is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision of 10 July 2023). Standard contractual clauses pursuant to Art. 46(2)(c) GDPR additionally apply as a supplementary safeguard.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

4. Contact form

When you submit the contact form on this website, the data entered (name, institution, email address, message) is transmitted to a server function operated by our hosting provider and there converted solely into an email notification to Thom-Med. No external form service and no transfer to a third country is used for this purpose.

The email is delivered via our mailbox provider mailbox.org (Heinlein Support GmbH, Berlin, Germany). Form data is not stored permanently in a database; it remains as an email in our mailbox and is deleted once your enquiry has been conclusively processed.

Purpose: processing Aga Cup requests and technical enquiries.
Legal basis: Art. 6(1)(b) GDPR (initiation of a contractual relationship) or Art. 6(1)(f) GDPR (legitimate interest in communicating with prospective customers).

5. Contacting researchers (Aga Cup collaborations)

To initiate scientific collaborations around the Aga Cup, we specifically approach research groups whose published work is technically related to our product (in particular the culture of primary cells from tissue). As we did not obtain your data from you directly in this case, we hereby inform you pursuant to Art. 14 GDPR.

Source of the data: The personal data processed does not originate from you, but from publicly accessible scientific sources – namely the bibliographic databases OpenAlex (OurResearch, non-profit) and Europe PMC (EMBL-EBI).

Categories of data: name, institutional affiliation, ORCID, where applicable a professional or published e-mail address, as well as publicly published metadata of your scientific work (title, DOI, abstract).

Purpose: an initial professional approach regarding evaluation of the Aga Cup and the initiation of possible scientific collaboration. We process exclusively professionally relevant, publicly available data in a professional context; no disclosure to third parties for advertising purposes takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in professional contact and collaboration initiation in a scientific setting). We have carried out the required balancing of interests and process only data from the professional sphere of the data subject.

Storage and recipients: The data is stored in a database provided by Supabase (region eu-central-1, Frankfurt am Main / Germany). To generate individual messages we use the AI service Google Gemini (Google Ireland Ltd.); in doing so, your name and publicly published abstracts may be transferred to Google servers, including in the USA.

Sending: The actual contact is made as an individual e-mail directly by Andreas Thomsen from his own mailbox. No automated bulk sending takes place.

Retention period: We store the data only for as long as necessary to initiate or maintain a possible collaboration. Once it is established that no collaboration will come about, or if you object to the processing, your data will be deleted without delay – at the latest, however, 12 months after the last contact.

Your right to object (Art. 21 GDPR): You may object to the processing of your data for the aforementioned purposes at any time, without giving reasons. In that case we will delete your data promptly and make no further contact. A short message to info@thom-med.de is sufficient. You will receive this information at the latest upon our first contact (Art. 14(3) GDPR).

6. Cookies and web analytics

This website sets no cookies. In particular, no conventional tracking or marketing cookies are used. There is no website tracking via Google Analytics, Facebook Pixel, or comparable services.

For audience measurement we use Vercel Web Analytics, a service provided by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel Web Analytics operates without cookies and collects only aggregated, anonymous usage data (e.g. page views, referrer, approximate geographic origin, and device and browser type). No personal user profiles are created and no cross-site tracking is performed.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement and in optimising the operation of the website).

As Vercel is a US-based provider, data may be transferred to the United States in this context. For the safeguards covering this third-country transfer (EU-US Data Privacy Framework and standard contractual clauses), see section 3 (Hosting).

7. Self-hosted fonts

This website uses exclusively locally hosted fonts (Inter Variable and Roboto). No fonts are loaded from Google Fonts or other external services. When loading the page, no data is transmitted to external font services.

8. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: info@thom-med.de

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent authority for Baden-Württemberg, Germany is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
www.baden-wuerttemberg.datenschutz.de

10. Currency of this policy

This privacy policy is currently valid and dated 2026. Changes to our website or changes in legal requirements may make it necessary to update this privacy policy.