Skip to content

Privacy

Privacy Policy

As of: July 2026

Dear Sir or Madam,

The protection of your personal data is an important concern to us. We ourselves are data subjects in a great many situations and expect, at all times and from everyone, that our own data is handled in a trustworthy manner.

Today, in our relationship with you, we are the partner that must process data. A contractual relationship without a minimum of data is impossible. However, out of personal conviction and following the principle "as much as necessary, as little as possible", we assure you that we handle your data responsibly and to the minimum extent required. We also expressly welcome the new data protection rules and the associated obligation to inform you about the use of your data. Please refer to the following text for this information.

Controller

CORTEX Biophysik GmbH
Walter-Köhn-Str. 2d
04356 Leipzig

Principles of data processing

We will process your data to the extent necessary for the initiation and performance of the contract (Art. 6 (1) (b) GDPR). This data is made accessible only to the persons involved in handling the contractual relationship at the respective time and is used solely for the performance of the contract. Performance of the contract is not possible without this data.

Should this require the disclosure or exchange of data, in particular name, date of birth and address, to or with authorities, credit agencies or other third parties, we will do so within the scope of Art. 6 (1) (c) and (f) GDPR. We may process data that is lawfully transmitted to us by these third parties. This may include, for example, credit information.

Your data will be retained and processed within the statutory retention periods. Thereafter, it will be deleted within one year.

You naturally have the right to obtain information about the data collected about you (Art. 15 GDPR). You also have the right to have this data rectified (Art. 16 GDPR), erased (Art. 17 GDPR) or to have its processing restricted (Art. 18 GDPR). In addition, under certain circumstances, you have the right to object to the processing. We must retain a minimum set of data required for the proper handling of the order for the duration of our contractual relationship.

Your data will not be used beyond what is described here, in particular not for profiling, without your express and revocable consent.

If you have any questions, comments or complaints regarding data protection at our company, our data protection officer (datenschutz@cortex-medical.com) is available to assist you. You also have the option of contacting a supervisory authority responsible for data protection. With this approach, we aim to establish and maintain a good and trusting business relationship with you.

Data collection on our website

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

We use no cookies on the publicly accessible pages of this website, neither for analytics nor for marketing purposes. Our web analytics (see section "Matomo") also works entirely without cookies. For this reason, we do not use a cookie banner.

The only exception is the access-protected distributor area: after a successful login, a technically necessary session cookie is set, which serves solely to keep you logged in. It contains no tracking information and becomes invalid when the session expires. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure provision of the protected area); the storage is strictly necessary within the meaning of § 25 (2) of the German TDDDG in order to provide the service you have expressly requested.

Local storage (localStorage)

For certain functions, this website stores information in your browser's localStorage: your selected sales region (key "cx-region"), your language selection (key "cx-lang"), and an indicator of whether the region was detected automatically or selected by you. This information serves solely to provide you with your desired region and language selection, as well as the corresponding sales block on the contact page; the storage is strictly necessary within the meaning of § 25 (2) TDDDG in order to provide this function you have expressly requested. The stored values do not leave your browser, with one exception: if you submit a contact inquiry, the sales region stored at that time is transmitted along with it (see section "Contact inquiries"). You can delete this information at any time via your browser settings. Your decision to object to the web analytics (see section "Objection") is also stored locally this way.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The basis for the data processing is Art. 6 (1) (f) GDPR: our legitimate interest in the technically error-free and secure provision of the website.

Contact form

If you send us inquiries via the contact form, we will process your data to the extent necessary for the initiation and performance of the contract (Art. 6 (1) (b) GDPR). This data is made accessible only to the persons involved in handling the contractual relationship at the respective time and is used solely for the performance of the contract. Performance of the contract is not possible without this data.

Should this require the disclosure or exchange of data, in particular name, date of birth and address, to or with authorities, credit agencies or other third parties, we will do so within the scope of Art. 6 (1) (c) and (f) GDPR. We may process data that is lawfully transmitted to us by these third parties. This may include, for example, credit information. Your data will be retained and processed within the statutory retention periods. Thereafter, it will be deleted within one year.

You naturally have the right to obtain information about the data collected about you (Art. 15 GDPR). You also have the right to have this data rectified (Art. 16 GDPR), erased (Art. 17 GDPR) or to have its processing restricted (Art. 18 GDPR). In addition, under certain circumstances, you have the right to object to the processing. We must retain a minimum set of data required for the proper handling of the order for the duration of our contractual relationship.

Your data will not be used beyond what is described here, in particular not for profiling, without your express and revocable consent.

Contact inquiries (data held on our own systems)

The information submitted via our contact form (including name, business email address, organization, country and the content of your inquiry) is stored for the purpose of processing your inquiry in our own content management system, which we operate on servers in data centers within the European Union (hosting: IONOS SE). To help us classify your inquiry, we additionally store origin information: the page from which you opened the form, the referring page (referrer) and, where applicable, campaign parameters (e.g. UTM values from ad links). Until the form is submitted, these campaign parameters are held temporarily in your browser's sessionStorage (§ 25 (2) TDDDG, technically required storage without tracking) and are automatically deleted when the browser tab is closed.

When the form is submitted, it also transmits technical information from your browser: the configured browser language, the time zone of your device and the sales region derived from these or selected by you on the website (DACH, International or USA). This information is not entered by you but collected automatically. We use it solely to show you the content and contact persons appropriate for your region. The same processing applies to the short form for the Quick Guide download as to the contact form, except for this technical information: it transmits only your name and email address to the same endpoint.

The legal basis for the processing is Art. 6 (1) (b) GDPR (initiation of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in the efficient handling and follow-up of inquiries). Your data does not leave our own infrastructure; it is deleted as soon as it is no longer required for the purposes for which it was collected and no statutory retention obligations stand in the way.

Registration on this website

Certain information on our website can only be viewed after logging in. We provide these login credentials (username and password) exclusively to our distributors upon personal request.

Web analytics

Matomo (self-hosted)

This website uses the open-source web analytics service Matomo. We operate Matomo ourselves on our own server infrastructure within the European Union. The data collected is processed and stored exclusively on our own servers; it is not passed on to third parties and not transferred to third countries (in particular not to the USA).

Matomo helps us understand how our website is used, for example which pages are visited, which source visitors come from (e.g. search engines or campaign links) and whether a contact form is submitted. This allows us to continuously improve what we offer.

Cookieless measurement and IP anonymization

We deliberately operate Matomo in a privacy-friendly manner: no cookies are set, and no information is stored on or read from your device beyond what is technically necessary. Your IP address is only stored in truncated form (anonymization of the last two bytes), so that no link to your person can be established. Before truncation, Matomo determines country and region from the full address, using a database on our own server. There is no cross-site tracking and no cross-device recognition.

Recognition of visiting organizations

To recognize the visiting organization, Matomo sends your IP address to our processor ipapi.is (Nikolai Tschacher, Berlin), truncated by its last byte. Only in exceptional cases does Matomo send the full address. ipapi.is receives no other information about your visit. We store only the name and type of the organization, never internet or mobile network providers, and delete this information together with the other Matomo data after 180 days. The legal basis is Art. 6 (1) (f) GDPR (measuring our website's reach among organizations); your objection (see below) also ends this processing.

Legal basis

Matomo is used on the basis of our legitimate interest in a statistical, anonymized analysis of usage behavior in order to optimize our website (Art. 6 (1) (f) GDPR). Since the measurement is cookieless and does not access information on your device, no consent under § 25 (2) TDDDG is required for this.

Storage period

The anonymized raw data of visits is automatically deleted after 180 days. Aggregated statistics that cannot be linked to a person may be retained beyond that period.

Objection

You can object to the anonymized reach measurement at any time with effect for the future. To do so, activate the following option. Your decision is stored exclusively locally in your browser; further page views will then no longer be measured. If you delete this website's browser data, you will need to set the objection again.

Conversion measurement (Google Ads)

We run ads on Google Ads. When you click one of these ads, Google appends a click identifier to the destination URL (a "gclid", "wbraid" or "gbraid" parameter). If you later submit a contact inquiry, we store that identifier together with your inquiry.

To measure whether our ads work, we periodically report back to Google that the click with this identifier led to an inquiry. Only the click identifier and the time of the inquiry are transmitted; your name, your email address and the content of your inquiry stay with us. The report is sent server-side to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and may involve a transfer to the USA, which Google safeguards through the EU standard contractual clauses and the EU-US Data Privacy Framework. The website itself loads no Google code and sets no cookies; Google does not learn from us which pages you visit.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in measuring the success of our own advertising campaigns). This affects only visitors who reached us through a Google ad and then submit an inquiry. You can object to the transmission at any time, for example by emailing the address given above.

Plugins and tools

YouTube (two-click solution)

On individual pages, we embed videos from the YouTube platform. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The embedding is deliberately data-minimizing: when the page is loaded, no connection to YouTube is established. We serve the preview images from our own servers. Only when you actively click on a video is the player loaded in enhanced privacy mode (youtube-nocookie.com) and a connection to the servers of YouTube and Google established. In the process, data (including your IP address) may be transmitted to Google, possibly also to the USA.

The legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by clicking on the respective video. If you are logged into your YouTube account, YouTube can assign your viewing behavior to your profile; you can prevent this by logging out beforehand. If you do not watch the video, no data is transmitted.

Further information on the handling of user data can be found in Google's privacy policy: google.de/intl/de/policies/privacy.

Job advertisements (B-ITE)

In the careers section of our company page, we embed current job advertisements via our applicant management service provider B-ITE. The embedding is data-minimizing: the job advertisements are only retrieved from B-ITE's servers when you scroll to the careers section. When this happens, a connection to B-ITE is established and your IP address is transmitted.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing current job openings). If you do not visit the careers section, no data is transmitted to B-ITE.

Objection to promotional emails

We hereby object to the use of contact data published to comply with the imprint obligation for the purpose of sending advertising and information materials that have not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam emails.

For questions, suggestions and complaints

Please write to:

Data Protection Officer
CORTEX Biophysik GmbH
Walter-Köhn-Str. 2d
04356 Leipzig

or send an email to: datenschutz@cortex-medical.com