Curia | Empowering Cancer Patients

Privacy Policy CURIA App-Website

I. General Information
The Website (“Website”) is a service of Innoplexus AG, hereinafter also referred to as “Innoplexus” or “we”/”us”.

Hereby we inform you about the handling of your personal data. If you use our Website, personal data will be transmitted and processed outside your country and you expressly declare your acceptance to such cross-border transmission and processing of your personal data every time you use our Website or provide us with any of your personal data for processing.

You can access this data protection declaration at any time under the section “Privacy Policy” at on our Website.

II. Name and address of the controller
Innoplexus, as operator of the Website, is responsible regarding personal data that gets processed because you use our Website.

Innoplexus AG
Frankfurter Straße 27
65760 Eschborn

Tel.: +49 6196-9677-311

Chairman of the Supervisory Board: Ruben King-Shaw Jr.
Executive Committee: Gaurav Tripathi

III. Contact details of the data protection officer
If you have any questions or if you wish to exercise your data subject rights, please contact our data protection officer at

IV. Processing personal data
1. Providing the Website and creation of log files
a) Description and scope of data processing
Every time you visit our Website, your browser transmits the following data which gets automatically saved for technical reasons:
– information about your browser type and version
– the operating system you are using
– the previous website from where you are accessing us (referrer URL)
– your IP addresses
– the date and time when accessing our Website

Our system stores your personal data in log files. This data is not stored with other personal data in relation to you.

b) Legal basis for data processing
We process your data temporarily pursuant to Article 6 Sec. 1 phrase 1 lit. f of the EU General Data Protection Regulation (GDPR).

c) Processing purpose
It is necessary for us to process your IP address temporarily to enable the Website to be made available on your terminal device. Furthermore, we use your personal data to optimize our Website and guarantee the security of our IT systems. These reasons also reflect our legitimate interest in processing your personal data. Your data will not be processed for marketing purposes, whether direct marketing to yourself such as by email or SMS, or indirectly.

d) Storage period
The aforementioned personal data will be deleted as soon as it is not necessary anymore for achieving the processing purpose. This is the case when the respective session has been ended by you.

IP addresses that were processed in log files, will be deleted after seven days. A longer storage period is only appropriate if your IP address is deleted or alienated, which would make it impossible for us to draw any conclusions from the IP address to your person.

e) Possibility to object and removal according to Article 21 GDPR
It is not possible to object to the processing of this data since it is necessary for the Website’s functioning.

2. Cookies
a) Description and scope of data processing
We use so-called cookies on our Website. They serve us to recognize you as a user and to facilitate the usage of our Website. Cookies are small text files which your web browser installs on your terminal device. Mostly so-called “session cookies” are used, they get deleted automatically after your session has been completed.

Other cookies, so-called “persistent cookies”, remain installed on your terminal device until they get removed by you. These cookies allow us to identify your web browser when you visit our Website the next time.

You can check in your web browser the cookies that are installed on your terminal device. Within the predefined scope of your web browser settings, you can choose whether cookies should be permitted in individual cases, should not be accepted in general or be deleted automatically after your web browser has been closed. Nevertheless, disabling cookies may limit the possibility to use the Website.

We use cookies to make our Website more user-friendly for you. Therefore, some elements of our Website require the possibility to identify the calling browser after a page change has occurred.

The following data is stored and transmitted in the cookies:
– Log-in information for input masks
– IP address
– Time zone
– Information about technical failures
– Selection of settings and back-up information

b) Legal basis for data processing
We process your personal data according to Article 6 Sec. 1 phrase 1 lit. f GDPR.

c) Processing purpose
We use technical cookies that are necessary to optimize the usage of our Website. Otherwise, we would not be able to offer certain functions on our Website. It is essential for these functions that your web browser gets recognized after a page change has occurred. These purposes also represent our legitimate interest in processing your personal data.

The use of cookies is required for the following applications:
– Use of website functions

We do not use personal data collected by technically necessary cookies to create user profiles.

d) Storage period, possibility to object and removal according to Article 21 GDPR
Cookies that are installed on your terminal device transfer the stored information to our Website. Thus, you have full control of whether and how long cookies can contain informational data. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. Though, please be aware that while deactivating the use of cookies, it may no longer be possible to use all functions our Website is offering.

3. Google Analytics with anonymization function
a) Description and scope of data processing
We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter “Google”) on our Website. Google Analytics uses so-called cookies. These are text files that are stored on your terminal device (see above) and enable an analysis of the use of our Website.

The information generated by this cookie regarding your usage behavior is transmitted to Google’s servers located in the USA and stored there.

So that you can still use our portal anonymously, we use Google Analytics with the addition “_gat._anonymizeIp”. This means that your IP address is already reduced by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymized. Only in very special cases will the full IP address be transmitted to a Google server in the USA and shortened there. Under no circumstances will your IP address be merged with other data collected by Google. Google has signed standard contractual clauses to ensure an appropriate level of data protection.

More detailed information on the terms of use and data protection of Google Analytics can be found at

b) Legal basis for data processing
We process your personal data according to Article 6 Sec. 1 phrase 1 lit. a GDPR based on your consent.

c) Processing purpose
Google uses the information to determine how you have used the Website, to provide us with a summary of website activity and to provide other services related to internet and Website usage. This includes all demographic and geographic data. If necessary, Google will transfer the collected information to third parties if this is required by law or if Google commissions third parties to process this data.

d) Storage period
The storage period of the data transmitted by you and linked to cookies is 2 years. After this period, the data will be automatically deleted. The deletion of data whose retention period has been reached takes place automatically once a month. In addition, you can independently uninstall the cookies installed by Google Analytics and thus delete the stored data. We explain how this deletion can be carried out via the browser settings in the following point.

e) Revocation in accordance with Art. 7 (3) GDPR.
You are free to revoke the installation of cookies at any time by making the appropriate setting in your browser software and without giving any reasons.

For this purpose, Google offers a deactivation add-on for the most common browsers, which gives you more control over what data is collected by Google about the portal page you call up. The add-on tells the JavaScript (ga.js) of Google Analytics that no information about the portal visit should be transmitted to Google Analytics. However, the Google Analytics browser deactivation add-on does not prevent information from being transmitted to us or to other web analytics services we may use. For more information on how to install the browser add-on, please click on the following link:

This does not affect the lawfulness of the processing carried out until then based on the consent. In the event of revocation, your personal data will no longer be processed, but deleted.

4. Possibility of contacting
a) Description and scope of data processing
We integrated on our Website a contact form to offer you the opportunity to get in touch with us. By contacting us through the contact form, all the information which is provided by you, will be transmitted to and stored by us for processing your inquiry.
The following data is collected at the time of your request:
– Name
– E-mail address

At the time of sending your request, the following data will also be processed:
– IP address
– Date and time when the request has been sent

In case you are contacting us via the email-address we made available on our Website, we will process your e-mail-address and all personal data which is associated with your e-mail-address.

b) Legal basis of data processing
We process your personal data pursuant to Article 6 Sec. 1 phrase 1 lit. f GDPR.

c) Processing purpose
We process your personal data only for the purpose of processing your inquiry.
Other personal data which got collected during the transmission process is carried out for our protection, in particular to prevent a misuse of our contact possibilities and an impairment of our IT systems.

These purposes also constitute our legitimate interest in processing your personal data.

d) Storage period
Your personal data gets deleted when it is not necessary anymore to achieve the processing purpose.
Therefore, we delete personal data you sent through the contact form, when the conversation has ended. The conversation has ended when the circumstances indicate that the relevant matter has been resolved.

Other personal data which is associated with the contact form and got transmitted through its usage will be deleted after a period of 3 months.

e) Possibility to object and removal according to Article 21 GDPR
You have the possibility to object to the processing of your personal data in accordance to Article 21 GDPR at any time. In such a case, the conversation cannot be continued. Please address your objection to In this case, the personal data processed during the communication will be deleted.

5. Use of Social Media Buttons
On our Website we integrate the following social networks by providing a hyperlink to access them:
– Facebook-components
– Instagram-components
– LinkedIn-recommendation-components

The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as your rights in this regard and possible configuration settings for protecting your privacy can be found in the privacy policies of the respective social network providers:
– Facebook –
– Instagram –
– LinkedIn –

V. Rights of the data subject
Regarding the processing of your personal data on our Website, you are a data subject within the meaning of the GDPR, therefore, you are entitled of the following free of charge rights towards us:

1. Right to be informed
You have the right to request information about your personal data processed by us at any time. This includes information about the origin, recipients or categories of recipients to whom we transfer your data and the purposes for which we process your personal data.

Besides the information provided to you above, in the case we obtain personal data directly from you, we shall provide you upon registration of such data, with any further information which is necessary, having regard to the specific circumstances in which the data are to be processed and to ensure the processing is fair to you. Such information to be provided to you shall include the names of the recipients of the data or the categories of recipients, whether replies to any questions we ask you for the purpose of the processing are obligatory or voluntary, as well as the possible consequences of failure to reply. You shall have the right to access all data concerning you upon request.

2. Right to rectification
You have the right to request the rectification of inaccurate personal data concerning you, to have incomplete personal data completed, and to block, if technically possible, any personal date relating to you when the processing of such data is illegal or if the data is inaccurate or outdated

3. Right to erasure and right to restriction
You can ask us to delete your personal data immediately. We are obliged to carry out the deletion immediately unless we are obliged to further process your personal data on the basis of contractual and/or legal regulations. This is the case, for example, if we are prohibited from deleting data under tax law. In such a case we restrict the processing and delete the personal data in question immediately after expiry of the retention period.

4. Right to data portability
You have the right to receive your personal data you have provided in a structured, current and machine-readable format, if this is technically possible. Furthermore, you have the right to transfer this data to another controller without any hindrance.

5. Rights in relation to automated decision making and profiling
You have the right not to be subject to a completely automated decision-making process – including profiling – that has a legal effect against you or significantly impairs you in a similar manner.

6. Right to appeal to a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR or the law applicable in the jurisdiction of your habitual residence.

Our competent supervisory authority under the GDPR is:

Der Hessische Datenschutzbeauftragte
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
Phone: (0611) 14 08-0
Fax: (0611) 14 08-900

The Competent authority Under the Data Protection Law of the Kingdom of Bahrain is:

Tel: (+973) 175 133 14
(+973) 175 133 21
(+973) 175 133 41

For every natural person who is habitually resident in the Kingdom of Bahrain or maintains a place of business therein, the applicable law regarding the protection their personal data is the Data Protection Law No. 30 of 2018. The mandatory terms of that law will be applicable and should prevail over any of the above-stated terms and GDPR provision in case on contradiction. A full copy of that law is available on the Personal Data Protection Authority website at