Privacy Policy / Datenschutzerklärung

Your privacy matters to us | Ihre Privatsphäre ist uns wichtig

Gene Therapy Consultancy
Effective Date: 26.05.2025

At Gene Therapy Consultancy, accessible from https://genetherapyconsultancy.com, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Who We Are

Gene Therapy Consultancy
Ackerstr. 34
39112 Magdeburg
Germany
Email: [email protected]

We are the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Contact Information: such as name, email address, company affiliation (e.g., via contact forms or newsletter sign-up)
  • Usage Data: information on how you use our website, pages visited, time spent, clicks, etc.
  • Technical Data: IP address, browser type, device information, and similar technical data collected through cookies and analytics tools

3. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and maintain our website
  • To respond to inquiries and communicate with you
  • To send newsletters and marketing communication (only with your consent)
  • To analyze usage and improve our website and services
  • To ensure website security and performance

4. Legal Bases for Processing

We process your data based on:

  • Your consent (Art. 6(1)(a) GDPR)
  • The necessity for the performance of a contract or to take steps at your request (Art. 6(1)(b) GDPR)
  • Our legitimate interest in improving our services and website functionality (Art. 6(1)(f) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)

5. Services and Third-Party Tools Used

We use third-party services to optimize our website. We ensure that these partners comply with GDPR standards. For services based outside the EEA (e.g., USA), we rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.

Important Note on Marketing: We do not use visitor identification services (deanonymization) to collect email addresses without your explicit entry and consent. All marketing communications require a verified Double Opt-In.

We use the following services that may collect and process data on our behalf:

  • Google Tag Manager (Google Ireland Limited) – Manages other tags and scripts. Does not collect personal data itself but may trigger tools that do. Privacy Policy
  • Google Analytics (Google Ireland Limited) – Tracks website usage and generates statistical reports. Opt-Out | Privacy Policy
  • Microsoft Clarity (Microsoft Corporation) – Analyzes user behavior via heatmaps and session recordings to improve website usability. All data is pseudo-anonymized. Privacy Policy
  • LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) – Tracks conversions, enables retargeting, and provides aggregated professional demographics of visitors. Privacy Policy
  • Cloudflare (Cloudflare, Inc.) – Ensures performance and security of the website. Privacy Policy
  • GoHighLevel (HighLevel, Inc.) – Used as our core CRM, community platform, and for processing expert applications. Privacy Policy
  • Google Workspace / Gmail – For internal communication and email correspondence. Privacy Policy

These services may transfer your data to servers outside the European Economic Area (EEA). In such cases, appropriate safeguards (e.g., Standard Contractual Clauses) are in place to ensure the security of your data.

Call Transcripts

When you book a call via our scheduling page, GTC captures a transcript of the call for internal business purposes (meeting notes and follow-up).

For free Discovery Calls: legal basis is Art. 6(1)(a) GDPR — your explicit consent given at the time of booking.
For paid Strategy Sessions: legal basis is Art. 6(1)(f) GDPR — legitimate interest in maintaining accurate business records. You have the right to object at any time.

Transcripts are processed using AI tools including Granola and Claude by Anthropic. Both may process data on their servers. Anthropic is based in the United States; data transfers are governed by Standard Contractual Clauses.

Transcripts are held exclusively by Gene Therapy Consultancy and are not shared with any third party. Transcripts are retained as long as required by applicable law (up to 10 years under German HGB §257 and AO §147) and deleted when those requirements are met. You may request deletion at any time by emailing [email protected].

6. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. You can manage or withdraw your consent to cookies at any time via the cookie banner or your browser settings.

7. Your Rights under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion ("right to be forgotten")
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with a data protection authority

To exercise any of these rights, please contact us at [email protected].

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law.

9. Security

We take appropriate technical and organizational measures to secure your data against unauthorized access, disclosure, or destruction.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date."