Privacy / Datenschutz
Last updated: 13 October 2026. This notice covers visits to this website, enquiries and its browser tools.
1. Controller
Dr Stephan Breimann, trading as Breimann Analytics (InXBio), Grünwalder Str. 270, 81545 München, Germany. Email: hello@inx.bio. Further contact details are in the imprint.
2. Hosting and security
Cloudflare hosts and delivers this website. It receives technical request data, including IP address, request time, requested resource, browser information and response status. Processing is based on Article 6(1)(f) GDPR: our legitimate interest in delivering and securing the website. Technical data is retained according to delivery and security needs, including incident investigation and legal obligations.
The provider group includes Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and its subsidiaries. Processing can take place outside the European Economic Area. Cloudflare’s data processing addendum describes transfer safeguards, including EU Standard Contractual Clauses where applicable. Information about relevant safeguards is available from us on request. See also Cloudflare’s privacy policy.
3. Cookies and storage
The website code sets no cookies and uses no analytics or advertising storage. Map display preferences last only while the page is open. Cloudflare security checks may use cookies depending on the features involved; see its cookie documentation.
4. Enquiries
The contact forms prepare a message in your email application; we receive it only when you send it. We use the name, contact details, organisation, message, attachments and proposed times you provide to answer your enquiry and arrange consultations. Providing information is voluntary, but we need a contact route to respond.
The legal basis is Article 6(1)(b) GDPR for steps towards your own contract, or Article 6(1)(f) for other correspondence: our legitimate interest in responding to enquiries. Email and forwarding providers process message content, addresses and delivery data for transmission and storage. Access is limited to those handling the enquiry and the necessary service providers.
5. Retention
Enquiries are deleted after handling and relevant follow-up end, unless further retention is necessary for a contract, statutory duties or legal claims. Where statutory duties apply, business correspondence is generally kept for six years, accounting vouchers for eight years, and relevant books and financial statements for ten years, calculated from the end of the relevant calendar year. Statutory retention is based on Article 6(1)(c) GDPR and § 147 AO.
6. Browser tools
The protein design map and local file analysis in Membrane Annotation run in your browser. External database requests occur when you select a lookup. The selected provider receives the identifier or search term and connection data, including your IP address. Providers include UniProt, EMBL-EBI (AlphaFold DB and InterPro), RCSB PDB and Membranome at Lehigh University.
A live Phobius request sends a sequence and email address to EMBL-EBI after explicit confirmation. An optional analysis-service connection also requires confirmation; subsequent actions can send the selected structure or sequence to that service. Where these optional transfers involve your personal data, processing is based on consent under Article 6(1)(a) GDPR. Declining them leaves local calculations available.
External providers may process data outside the EEA under their own privacy policies. For transfers arranged by InXBio, information about applicable safeguards is available on request. See the EMBL-EBI Job Dispatcher privacy notice and UniProt privacy information.
7. Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction and data portability. You may object to processing based on legitimate interests for reasons arising from your situation. Consent can be withdrawn at any time without affecting earlier lawful processing. Contact hello@inx.bio to exercise these rights.
You may complain to a data protection authority, including the authority where you live or work. The authority responsible for this Munich-based operator is the Bavarian State Office for Data Protection Supervision (BayLDA).
