1. Controller

The controller responsible for processing personal data when you visit this website or contact us is CARCIMUN Holding GmbH, Lazarettstraße 6, 82467 Garmisch-Partenkirchen, Germany, represented by its Managing Director, Berthold von und zu Zwerger.

Telephone: +49 8821 949793
E-Mail: ceo@pancancer.com

2. Scope and general information

This Privacy Policy explains how personal data is processed when you access the public CARCIMUN corporate website or contact us. The website provides information about the company, its technology and its areas of development. It does not offer user accounts, ordering, newsletter subscriptions or contact forms. The website does not collect patient data and is not intended for transmitting medical findings.

The applicable legal bases include, in particular, the General Data Protection Regulation (GDPR; DSGVO in German), the German Federal Data Protection Act (BDSG) and, where applicable, Section 25 of the German Telecommunications and Digital Services Data Protection Act (TDDDG).

3. Hosting by Checkdomain

The website operates on web hosting infrastructure provided by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. Processing connection and access data is necessary to make the website technically available. Where processing is carried out on our behalf, Checkdomain acts as a technical service provider.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is to provide a reliable, technically functional and secure website and to identify and resolve disruptions and unauthorised access.

4. Server log files

When the website is accessed, access and error logs may record, in particular, the IP address of the accessing device, the date and time of access, requested pages or files, volumes of data transferred, referrer details, browser and operating system information, and status and error messages.

These data are processed exclusively to provide and secure web hosting, analyse technical errors and prevent misuse. According to Checkdomain's published information, server log files are deleted within 14 days at the latest. Where technically possible and appropriate, IP addresses are anonymised after just 24 hours.

5. Contact by email or telephone

If you contact us by email or telephone, we process the information you provide, particularly your name, email address or telephone number, the content of your enquiry and any other information you supply voluntarily. The processing serves to handle and respond to your enquiry and, where applicable, to carry out any further business arising from it.

For pre-contractual enquiries or the performance of a contract, processing is based on Article 6(1)(b) GDPR. For other business enquiries, processing is based on Article 6(1)(f) GDPR; our legitimate interest is appropriate communication with people who contact us. Where we fulfil legal obligations, such as responding to data protection requests, Article 6(1)(c) GDPR applies.

To operate our business email account ceo@pancancer.com we use services provided by STRATO GmbH. STRATO states that the associated data processing takes place in German data centres. When you contact us by telephone, technically necessary connection data may also be processed by the telecommunications providers involved.

Please do not send medical findings or other particularly sensitive health data to the general email address. Ordinary email is not automatically end-to-end encrypted.

6. Cookies and comparable technologies

In its current technical configuration, the website does not use analytics or advertising cookies, tracking, marketing pixels or technologies for creating user profiles. No storage or access operations on end-user devices requiring consent are used. Where the technical provision of the expressly requested online service involves operations that are strictly necessary for that purpose, their permissibility is governed by Section 25(2) TDDDG.

7. Images, videos, fonts and external services

The images, graphics, fonts and videos used in the current version of the website are integrated locally. Merely accessing the website does not establish additional connections to external video, image, font or analytics providers for these resources. The website contains no embedded social media plugins or external tracking scripts.

8. Recipients and transfers to third countries

Personal data is transferred to, or processed by, technical service providers only to the extent necessary. These include, in particular, Checkdomain for web hosting and STRATO for business email infrastructure; telecommunications providers may be involved in telephone communications. Beyond this, data is disclosed only where necessary to handle an enquiry or required by law.

The current website does not use third-party tools that transfer personal data to recipients in countries outside the European Union or the European Economic Area when a page is accessed. If the actual technical infrastructure or the service providers used change, this information will be updated accordingly.

9. Retention periods

According to Checkdomain, server log files are deleted within 14 days at the latest; IP addresses are anonymised earlier where technically possible and appropriate.

Data from business enquiries and correspondence is deleted once it is no longer needed to handle the enquiry or any follow-up communication, provided that no statutory retention obligations or legitimate grounds for continued storage exist, particularly for establishing or defending legal claims. Statutory retention obligations under commercial and tax law remain unaffected.

According to STRATO, messages permanently deleted from an email account can be restored for a technically limited period of up to 30 days.

10. Rights of data subjects

Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection to processing based on legitimate interests (Article 21 GDPR). You may withdraw any consent you have given at any time with effect for the future.

To exercise your rights, please contact ceo@pancancer.com or write to the postal address given above. In connection with the website processing operations described here, we do not make automated decisions within the meaning of Article 22 GDPR and do not carry out profiling.

11. Voluntary provision of data

Merely using the website technically requires the transmission of certain connection data; without these data, the website cannot be delivered. Contacting us is voluntary. To handle an enquiry, however, we need at least a suitable means of contacting you in return and the information necessary to respond.

12. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for CARCIMUN Holding GmbH is, in particular, the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, website: www.lda.bayern.de.

13. Updates

This Privacy Policy is dated 13 October 2026. We update it when the actual processing operations, the technical services used or the legal requirements change.