Privacy Policy

Information on the processing of personal data under Regulation (EU) 2016/679 (GDPR).

1. Controller

The controller responsible for data processing on this website is:

Company: CD4 Therapeutics GmbH
Address: Kiefernweg 38, 82319 Starnberg, Germany
Email: ml@cd4therapeutics.com
Phone: +49 160 2517541

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. For all questions relating to data protection, you can contact us at any time at the address above.

2. Data protection at a glance

This website is deliberately built to be data-minimal. It sets no advertising or tracking cookies, uses no analytics service, loads no external content delivery networks and embeds no social media plug-ins. Web fonts and all other assets are hosted locally, so visiting this website does not establish connections to third-party servers beyond the hosting infrastructure itself. Personal data is processed only where technically necessary to deliver the website, or where you actively contact us.

3. Hosting and server log files

This website is hosted by an external hosting provider on servers located in the European Union. Personal data collected on this website is processed on the hosting provider's servers on the basis of a data processing agreement pursuant to Art. 28 GDPR.

When you visit this website, the hosting provider automatically collects and stores information in server log files that your browser transmits: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources and is automatically deleted after a short retention period defined by the hosting provider. The legal basis for this processing is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free presentation, stability and security of the website.

4. Contacting us

If you contact us by email or telephone, your enquiry including all resulting personal data (such as your name, organisation and email address) will be stored and processed by us solely for the purpose of handling your request. We do not pass on this data without your consent.

The request form on our Investors page does not transmit or store any data on this website: submitting the form composes a pre-addressed email in your own email application containing the details you entered. Data is only transferred to us when you actively send that email.

The legal basis for processing enquiries is Art. 6(1)(b) GDPR, insofar as your request is related to the performance of a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding effectively to enquiries addressed to us.

5. Cookies and local storage

This website does not set advertising, analytics or tracking cookies and does not use local storage for tracking purposes. No consent banner is required because no consent-requiring technologies are in use.

6. External links and our LinkedIn profile

This website contains links to external websites, including our company profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). These are plain links, not embedded plug-ins: no data is transferred to LinkedIn or any other third party by merely visiting this website. If you follow such a link, the privacy policy of the respective operator applies; for LinkedIn, see linkedin.com/legal/privacy-policy.

7. Storage period

Unless a specific storage period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it, such as statutory retention periods under commercial or tax law; in the latter case, deletion takes place after those reasons cease to apply.

8. Your rights

As a data subject, you have the following rights under the GDPR:

Right of access to your stored personal data (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR); the authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, Ansbach)

To exercise any of these rights, an informal message to ml@cd4therapeutics.com is sufficient.

9. SSL / TLS encryption

This site uses TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us. You can recognise an encrypted connection by the "https://" prefix and the lock symbol in your browser's address line. When TLS encryption is activated, the data you transmit to us cannot be read by third parties.

10. Changes to this policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services, for example the introduction of new features on this website. The version published here always applies to your visit.