Privacy policy
Last updated: October 2026. The German version (Datenschutzerklärung) is the binding one.
1. Controller
Nella Christie Delva, NeuroPenetrance, Holzmarktstraße 73, 10179 Berlin, Germany. Email: partnerships@neuropenetrance.com
2. Hosting (GitHub Pages)
This website is served via GitHub Pages by GitHub, Inc. (USA). When you visit it, GitHub processes technically necessary data such as your IP address, the date and time of access and the page requested (server log files), to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Data may be transferred to the USA; GitHub relies on the EU Standard Contractual Clauses.
3. Contact forms (Formspree)
When you submit a form, your details (e.g. name, email address, company or institution, message) are transmitted to us via Formspree, Inc. (USA), which processes them to deliver your enquiry to us by email. We use this data only to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps towards a collaboration) or Art. 6(1)(f) GDPR (answering enquiries). Transfers to the USA rely on the EU Standard Contractual Clauses. If Formspree shows a spam check (Google reCAPTCHA), Google LLC (USA) also processes technical data such as your IP address. Enquiries, whether sent by form or by email to partnerships@neuropenetrance.com, are delivered through our email provider IONOS SE (Germany) and forwarded to a mailbox at Google (Gmail, Google LLC, USA). We delete enquiries once they are dealt with, unless legal retention duties apply.
4. External app (Streamlit)
This website links to the PenetranSci app, which we operate on Streamlit Community Cloud, a service of Snowflake Inc. (USA). Data you enter in the app is sent to Snowflake's servers in the USA, processed in memory for the duration of your session and not stored permanently; you can download your results yourself. For this processing we are the controller and Snowflake acts as our processor; transfers to the USA rely on the EU Standard Contractual Clauses. Please enter only pseudonymised data in the app. Streamlit's own privacy policy applies to their website.
5. No cookies, no analytics, local fonts
This website sets no cookies and uses no analytics or tracking tools. Fonts are served by this website itself; no connection is made to Google Fonts or other font providers.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Contact us at the email address above. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.