Privacy Policy
As of: August 7, 2026
This policy applies to the website assist.idana.com. A separate policy applies to the product Idana AI Assist itself, which you will receive upon access.
1. In Short
- This page introduces a product and accepts reservations for the beta. You do not purchase anything here and you do not create an account.
- We do not process patient data or health data here.
- For pre-registration, we need your name and your email address. Providing the organization is voluntary.
- Analytics and marketing only run if you consent. If you do nothing, nothing runs.
- You can withdraw your consent at any time: the reservation by email, analytics and marketing via Cookie Settings in the footer.
2. Who Is Responsible
Idana AG
Ellen-Gottlieb-Straße 19
79106 Freiburg im Breisgau
Deutschland
Email: ai-assist@idana.com
You can reach our data protection officer at datenschutz@idana.com.
3. When You Simply View the Site
Cloudflare delivers this website. In doing so, Cloudflare sees your IP address and technical information about your browser and device. Without this, a website can neither be operated nor protected against attacks. We do not maintain our own server logs. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).
If you open the reservation form, Cloudflare Turnstile spam protection is added. It uses your IP address, your browser, and your inputs to check whether you are a human, temporarily storing an identifier on your device for this purpose. Without it, the form would be spammed within hours. Here, too, the legal basis is Art. 6 (1) (f) GDPR; access to your device is strictly necessary for this service requested by you (§ 25 Abs. 2 Nr. 2 TDDDG).
Your browser remembers your language choice and your cookie decision. Both are necessary so that the site behaves as you have set it; we must also be able to demonstrate your cookie decision (Art. 6 (1) (f) and (c) GDPR, § 25 Abs. 2 Nr. 2 TDDDG).
Your right to object. You can object to both of these processing operations at any time (Art. 21 GDPR). How you can reach us is stated under Your Rights.
4. When You Register for the Reservation List
We store your name, your email address, optionally your organization, your language, as well as the timestamp and version of the text you agreed to. We do not store an IP address for this purpose. The purpose is a single email as soon as the beta opens. The legal basis is your consent (Art. 6 (1) (a) GDPR).
Voluntary. You do not have to register for the reservation list. If you do, we need your name and your email address – without both, we cannot register you or notify you. Providing your organization is voluntary and has no consequences.
Withdrawal. Every email from us contains an unsubscribe link; a single click is sufficient, and we will delete your entry. If you wish to have it deleted earlier, write us a short message. We will only retain proof that you consented and withdrew consent for as long as we are required to demonstrate it. What occurred lawfully up to that point remains lawful.
5. Only with Your Consent
Two services only start if you consent in the banner. You may also allow only one of them:
- Analytics (Cloudflare Web Analytics): counts visits, without cookies and without recognizing you across devices.
- Marketing (HubSpot): sets cookies and connects your visit with a contact in our customer relationship management system.
The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 Abs. 1 TDDDG). You can change or withdraw it at any time via Cookie Settings in the footer. If you withdraw marketing consent, tracking ends; we delete data for which there is no other legal basis.
6. Who Else Sees the Data
| Service Provider | Task | Processing Countries |
|---|---|---|
| Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (German branch: Cloudflare Germany GmbH, Rosenheimer Straße 143C, 81671 München) | Website delivery, spam protection, database and backups, analytics | Database and backups: European Union. Delivery and spam protection: global network of Cloudflare, also outside the EU and in the USA. |
| HubSpot Ireland Limited, Dublin, with HubSpot, Inc., USA | Marketing, only upon consent | European Union, with access from the USA. |
Data processing agreements pursuant to Art. 28 GDPR have been concluded with both (Cloudflare, HubSpot). According to its own statements, Cloudflare processes part of the network and security data under its own responsibility.
Transfer to the USA. Cloudflare, Inc. and HubSpot, Inc. are certified under the EU-US Data Privacy Framework; we base the transfer on this (Art. 45 GDPR). Where this does not apply, the standard contractual clauses of the EU Commission apply (Art. 46(2)(c) GDPR). You can obtain a copy upon request.
7. How Long We Store Data
- Reservation: until your withdrawal, for a maximum of twelve months after the launch of the public beta.
- Proof of your consent: stored with the entry; after withdrawal, for as long as we must be able to demonstrate it.
- Backups: a deleted entry disappears from them as soon as the backup is overwritten.
- Analytics: Cloudflare retains individual data for seven days and thereafter retains only an aggregated evaluation.
- Marketing: HubSpot cookies expire between 30 minutes and six months depending on the purpose. We delete data in our customer relationship management system when the purpose ceases to apply.
- Delivery and spam protection: Cloudflare processes this connection data for as long as is necessary for operation and security, and subsequently deletes it.
8. Your Rights
You have the right to access, rectify, erase, and transfer your data, restrict its processing, and object to its processing (Art. 15 to 21 GDPR). You may withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
A message to datenschutz@idana.com is sufficient; the information is free of charge for you. You may also lodge a complaint with a supervisory authority (Art. 77 GDPR) – with the authority at your place of residence or workplace or with the authority competent for us, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
We do not make automated decisions with legal effect on this website.
9. For Persons in Switzerland
In addition, the Swiss Federal Act on Data Protection applies. Your personal data is transferred to Germany and to other member states of the European Union. Furthermore, via Cloudflare's global network and corporate access by Cloudflare and HubSpot, data is transferred to the United States and to other locations of this network outside the EU; Cloudflare publicly lists these locations on Cloudflare.
For the USA, we rely on the Swiss-U.S. Data Privacy Framework, otherwise on the standard contractual clauses. You can lodge a complaint with the Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB) (Federal Data Protection and Information Commissioner (FDPIC)).
10. Status
This policy is valid as of 7 August 2026. If the website changes, we will adapt it.