Effective: 2 September 2026
Privacy notice
1. Data controller
GENETIC INSTITUTE MÜNCHEN – Melinda Bartók
Legal form: sole proprietorship (Einzelunternehmerin)
Owner and representative: Melinda Bartók
Registered office: Georg-Knorr-Str. 21, 85662 Hohenbrunn, Germany
Email: info@genetikainstitute.hu, m.bartok@geneticinstitute.eu
Phone: +49 (0)162 2625397
Website: geneticinstitute.eu
2. Scope
This notice covers enquiries made through the temporary website at geneticinstitute.eu and analytics or marketing measurement activated with consent. The website does not request or transmit genetic samples, genetic results or medical records. Please do not include such special-category data in the message field.
3. Technical website logs
When the website is accessed, the hosting provider may record technical data required for secure and reliable operation, in particular the IP address, date and time, requested page, browser and device information and referring page. The purposes are delivery of the website, IT security and troubleshooting. The legal basis is the controller's legitimate interest under GDPR Art. 6(1)(f). Logs are retained for no longer than 30 days unless a security incident requires longer investigation.
4. Enquiry form
Data: enquiry type, name, email, optional phone number, message and technical delivery log data. Purpose: to receive and answer enquiries and prepare the requested B2C or B2B relationship. Legal basis: where the enquiry requests steps before entering into a contract, GDPR Art. 6(1)(b); for general or partnership enquiries, the controller's legitimate interest in providing contact and business communication, GDPR Art. 6(1)(f). You may object to processing based on legitimate interests.
Retention: no longer than 12 months after the last meaningful communication, unless a contract or law requires longer retention.
5. Cookies and measurement technologies
The site stores the visitor's choice in local browser storage for no longer than 180 days. Visitors may separately allow analytics measurement or all analytics and marketing measurement. The sole legal basis for non-essential services is prior consent under GDPR Art. 6(1)(a). Refusal does not restrict essential website functions. The choice can be changed or withdrawn at any time through “Cookie settings” in the footer.
Google Analytics 4 — analytics
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: aggregate analysis of visits, website use, traffic sources and technical performance. Data may include page and event data, approximate location, browser, device and technical data, online identifiers and truncated or technically processed IP data. The service may use the _ga and _ga_<container-id> cookies, with a default lifetime of up to 2 years. GIM will configure event-level Analytics retention to 14 months. Details: Google Analytics cookies and the Google Privacy Policy.
Google Tag Manager — tag management
Provider: Google Ireland Limited. Purpose: technical management and loading of permitted measurement tags. Tag Manager does not itself build visitor profiles; Google may process aggregate diagnostic information and standard HTTP logs for stability, deleting the latter within 14 days according to its documentation. In the GIM configuration, the container loads only after all measurement is accepted. Every additional tag placed in the container must be assigned to the correct consent category and added to this notice where necessary. Details: Google Tag Manager data privacy and security.
Meta Pixel — marketing and conversion measurement
Provider: Meta Platforms Ireland Limited, Merrion Road, Ballsbridge, Dublin D04 X2K5, Ireland. Purpose: campaign and conversion measurement, advertising attribution, audience creation and remarketing. Data may include page views and configured events, page URL, time, browser and device data, IP address, Meta identifiers and cookies such as _fbp, and actions taken on the site. Transmission of the name, email, phone number or message entered in the contact form is not configured and is not permitted. The Pixel loads only after marketing consent. Meta retains data in its systems for as long as required to provide its services, comply with legal obligations and protect legitimate interests. Details: Meta Privacy Policy, Meta Cookies Policy and Meta Business Tools Terms.
6. Recipients and transfers
Data may be accessed by the controller and necessary hosting, email and technical providers only to the extent required for their work. Email communication may take place through Google Workspace. With analytics consent, Google Ireland Limited may receive data; with marketing consent, Google Ireland Limited and Meta Platforms Ireland Limited may receive data. The parties' roles for collection and transmission through Meta Pixel are governed by the Meta Business Tools Terms and Controller Addendum. Where processing takes place outside the EEA, the providers' appropriate safeguards under the GDPR — such as an applicable adequacy decision or standard contractual clauses — apply. The controller does not sell personal data.
7. Your rights
You may request access, correction, erasure, restriction and, where applicable, portability; object where processing relies on legitimate interests; and withdraw consent. Contact info@genetikainstitute.hu or m.bartok@geneticinstitute.eu. You may lodge a complaint with the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany; phone +49 (0)981 180093-0; email poststelle@lda.bayern.de, or seek a judicial remedy.
8. Automated decisions, security and updates
The website does not make automated decisions or profile visitors based on enquiry data. The controller uses appropriate technical and organisational safeguards. This notice will be updated when services or legal requirements change; the current version date appears above.