Skip to content
ISOVIA — Radiopharmaceutical Logistics & Emergency Transport
LanguageDeutschEnglishFrançais

Privacy Policy

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Medical Products & Services Mugabo e.K. (ISOVIA), Alain Mugabo, Oberaustrasse 98, 53179 Bonn, Germany. Email: operations@isovia.eu, Phone: +49 151 53781930.

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing takes place on the basis of consent (Art. 6(1)(a) GDPR), for the performance of contractual or pre-contractual measures (Art. 6(1)(b) GDPR), or to safeguard legitimate interests (Art. 6(1)(f) GDPR).

3. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the accessing computer system (including IP address, date and time of access, browser and operating system used, and page requested). This data is stored in log files and serves to ensure smooth operation and the IT security of our systems (Art. 6(1)(f) GDPR). This data is not combined with other data sources.

4. Hosting and database

This website is operated on Salesforce, Inc. (Heroku), 415 Mission Street, San Francisco, CA 94105, USA, in the Europe region (Ireland data centre). Personal data collected through this website — in particular the details submitted through the contact form — is stored on servers in Ireland and in a PostgreSQL database (Heroku Postgres) operated there.

The hosting provider acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Salesforce is a US company. According to the provider, certain technical operations — in particular database backups and system and application logs — may also be processed in the USA. Where such a transfer to a third country takes place, it is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) together with supplementary safeguards. The legal basis for its use is our legitimate interest in the secure and reliable operation of our website (Art. 6(1)(f) GDPR).

5. Email delivery

To deliver notifications of incoming transport enquiries we use Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France, as a processor. The details you provide in the contact form are transmitted to Brevo in order to deliver the message to our operations mailbox.

Brevo is a French company and processes the data on servers within the European Union. No transfer to a third country therefore takes place as part of email delivery. A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo.

6. Contact and transport enquiries

If you contact us via the contact form, by email or by telephone, your details — in particular company, name, position, email address, phone number, pickup and delivery location, radiopharmaceutical or material, transport frequency, temperature requirement, type of enquiry and any further information you provide — will be stored for the purpose of processing your enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry serves to initiate a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in efficiently handling enquiries addressed to us.

The mandatory fields are required so that we can assess and answer your transport enquiry. Please do not submit any patient-related data through this form.

7. Cookies and analytics

This website uses no cookies beyond those that are technically necessary. We use no analytics or tracking services, no advertising networks and no social media plugins. For this reason no cookie banner is required and no profiling takes place.

A technically necessary cookie (NEXT_LOCALE) may be set for the language selection. It stores only your chosen language and permits no conclusions about you as a person.

8. Your rights as a data subject

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification or erasure (Art. 16, 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent already given, with effect for the future (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR); the competent authority is the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information

9. Storage period

We store personal data only for as long as necessary to fulfil the respective purpose, or for as long as required by statutory retention periods, in particular under German commercial and tax law.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services. Your renewed visit will then be subject to the new privacy policy.

Note: This privacy policy has been adapted to the technology actually in use. It should be reviewed by a qualified data protection professional before publication.