Last updated: 23-09-2026
Privacy policy
1. Controller
The controller responsible for the processing of personal data through this website is:
Aigora GmbH
Franz-Joseph-Straße 39
80801 Munich
Germany
Email: info@aigora.de
Phone: +49 (0)151 56771197
This Privacy Policy explains how we process personal data when you visit our website, use one of our contact forms, or otherwise contact us through the website.
It applies to website visitors and website enquiries. It does not describe the processing of healthcare, clinical or other datasets provided to Aigora in connection with customer projects, data partnerships or other contracted services. Such processing is governed by the relevant contractual and data-protection arrangements.
2. General information about processing
We process personal data only where there is an appropriate legal basis under applicable data-protection law.
Depending on the circumstances, processing may be based on:
Article 6(1)(b) GDPR, where processing is necessary to respond to a request made in connection with entering into or performing a contract;
Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests, for example to operate and secure our website or to respond to general business enquiries; or
Article 6(1)(a) GDPR, where you have given us your consent, in particular for optional analytics.
The GDPR recognises consent, contractual necessity and legitimate interests as separate legal bases for processing.
3. Hosting and website delivery
Our website is created and hosted using services provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, California 94103, USA.
When you access our website, technical information required to deliver and secure the website may be processed. Depending on the request, this can include your IP address, browser and device information, requested URL, date and time of access, referrer information and technical log data.
We process this information for the purposes of delivering the website, maintaining technical stability, preventing misuse and ensuring website security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Webflow acts as a service provider and processor for its customers in relation to customer-end-user data. Webflow states that customer and end-user data may be stored in the United States and provides data-transfer safeguards through its Data Processing Addendum, including applicable contractual mechanisms.
Webflow Privacy Policy
Webflow Data Processing Addendum
4. Contact forms and enquiries
Our website contains a general contact form as well as contact forms tailored to particular audience groups.
When you submit a form, we process the information that you enter. Depending on the form, this may include your name, work email address, company or organisation, role, area of interest, enquiry type and the content of your message or request.
We use this information to:
respond to your enquiry;
understand the nature of your request;
determine the appropriate Aigora contact person;
discuss a potential project, service, collaboration or data partnership; and
take steps requested by you before entering into a business relationship.
Where your enquiry relates to a potential or existing contractual relationship, the legal basis is Article 6(1)(b) GDPR. For other business enquiries, processing may be based on our legitimate interest in receiving and responding to relevant communications under Article 6(1)(f) GDPR.
Please do not submit patient-identifiable information, medical records, health information or other sensitive personal data through the website contact forms. If such information is relevant to a potential project, we will establish an appropriate secure process separately.
5. Processing of form submissions by Webflow
Where our contact forms are processed through Webflow Forms, the information you submit is transmitted to Webflow and may be stored in our Webflow account. Authorised members of the Aigora team may access these submissions, and Webflow may also send form-notification emails to designated recipients.
Webflow confirms that forms can be configured to store submissions within Webflow and send form notification emails.
We use Webflow for this processing as a service provider acting on our behalf.
6. Retention of contact enquiries
We retain contact-form submissions and related correspondence only for as long as necessary to process and follow up on the enquiry.
If an enquiry leads to a contractual or other business relationship, relevant information may be retained for the duration of that relationship and thereafter where required by applicable statutory retention obligations or where necessary for the establishment, exercise or defence of legal claims.
Enquiries that do not lead to an ongoing business relationship are deleted or anonymised once they are no longer required for the purpose for which they were collected, subject to any applicable legal retention requirements.
7. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors use our website so that we can evaluate website performance and improve its content, structure and usability.
Google Analytics may process information such as the pages visited, time and duration of visits, approximate geographical location, browser and device information, referrer information, session information and interactions with the website.
Google states that the default Google Analytics implementation collects user counts, session statistics, approximate geolocation and browser/device information. For visitors in the EU, Switzerland and the UK, Google states that IP addresses are discarded before being logged or stored.
We use Google Analytics only after you have given your consent.
The legal basis for the processing of personal data is Article 6(1)(a) GDPR. To the extent that Google Analytics stores or accesses information on your device, the legal basis is your consent under Section 25(1) TDDDG. German law generally requires prior consent for storing or accessing information on an end user's device unless the operation is strictly necessary for a service explicitly requested by the user.
You may withdraw your consent at any time through the Cookie Settings link on our website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Google describes Google Analytics as acting as a data processor under the GDPR where it processes Analytics data on behalf of customers.
8. Cookies
Cookies are small pieces of information stored on your device.
We do not use advertising, social-media tracking or behavioural-marketing cookies.
Our only optional cookies are used for Google Analytics and are set only if you consent to analytics.
CookieProviderPurposeDefault duration_gaGoogle AnalyticsDistinguishes website visitors for analytics2 years_ga_<container-id>Google AnalyticsMaintains session state for analytics2 years
Google currently documents these as the principal cookies set by GA4, with a default two-year expiry. Browser restrictions may shorten their effective lifetime.
A strictly necessary consent preference may also be stored locally in your browser so that we can remember whether you accepted or rejected analytics cookies. This preference is used solely to remember your privacy choice and does not perform analytics or advertising.
9. Cookie consent
When you first visit our website, you can choose whether to allow analytics.
Rejecting analytics does not prevent you from using the website or submitting a contact form.
You can change your selection at any time through the Cookie Settings link available on the website.
10. International data transfers
Some of the service providers used to operate this website are headquartered or may process data outside the European Economic Area.
Where personal data is transferred to countries outside the EEA, we rely on applicable safeguards required under data-protection law, such as an adequacy decision, participation in a recognised data-transfer framework where applicable, or the European Commission's Standard Contractual Clauses.
Webflow states that it uses the EU-U.S. Data Privacy Framework as well as contractual safeguards contained in its Data Processing Addendum for relevant transfers.
Google's applicable data-protection terms contain provisions governing international transfers and Standard Contractual Clauses where required.
11. Recipients of personal data
Personal data may be accessible to authorised Aigora personnel who require it to perform their duties.
We may also disclose personal data to service providers that assist us with website hosting, technical operation, form processing and analytics, including Webflow and, where you have consented to analytics, Google.
We do not sell personal data.
12. Your data-protection rights
Subject to the conditions of applicable law, you may have the right to request access to personal data concerning you, correction of inaccurate data, deletion of your data, restriction of processing, data portability and objection to certain processing based on legitimate interests.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, contact:
Aigora GmbH
Email: info@aigora.de
You also have the right to lodge a complaint with a competent data-protection supervisory authority.
For Aigora GmbH, the competent Bavarian supervisory authority for private-sector organisations is generally:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
The BayLDA confirms that it supervises private companies and other non-public entities in Bavaria.
13. No automated decision-making
We do not use information collected through this website to make decisions about you based solely on automated processing that produce legal effects or similarly significant effects.
14. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised disclosure or access.
No internet-based system can guarantee absolute security.
15. Changes to this Privacy Policy
We may update this Privacy Policy where our website, service providers or legal requirements change.