Imprint & Privacy.

Privacy Policy

How we handle your data.

We take the protection of your personal data seriously. Below we explain which data is collected when you use this website, how it is used, and what rights you have. The controller within the meaning of the General Data Protection Regulation (GDPR) is:

inContAlert GmbH
Maximilianstraße 30, 95444 Bayreuth, Germany
E-mail: info@incontalert.de

Website access and server log files

When you visit this website, your browser automatically transmits certain technical data to our server. This includes the IP address, browser type and version, operating system, referrer URL, pages accessed, and the date and time of the visit. This data is technically necessary to deliver the website and cannot be attributed to a specific individual under normal circumstances.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). Log files are generally deleted after seven days; where a longer retention is technically required for security purposes, they are stored in anonymized form.

Cookies, analytics, and spam protection

This website uses technically necessary storage to support its functionality (e.g. language preference and your consent choice), set on the basis of Art. 6(1)(f) GDPR. Beyond that we use two Google services, which we deliberately treat differently. The provider in each case is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; both services set cookies or comparable identifiers and transfer data — including your IP address — to Google, possibly to servers in the USA.

Google Analytics 4 (usage statistics) is loaded only after your explicit consent (Art. 6(1)(a) GDPR), given via our cookie banner. Before you consent, the service is not loaded and no analytics data is collected. You can withdraw your consent at any time with effect for the future by clearing your browser storage for this site.

Google reCAPTCHA v3 protects our forms (contact, newsletter, waitlist) against automated abuse. The service is not loaded when you open the website, but only when you submit a form — and only if you consented beforehand. You can give that consent in two places: in the cookie banner, where it is a separate „spam protection“ toggle apart from the statistics consent, or — if you declined in the banner — when submitting a form, where we ask again specifically. Without consent the service is never loaded and no form is processed. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); it is separate from the consent for Google Analytics and can be withdrawn at any time with effect for the future by clearing your browser storage for this site. Without this consent we cannot process form submissions, as they could otherwise be abused to send bulk email to third-party addresses — in that case you can reach us without any form by email at info@incontalert.de or by phone at +49 (0) 921 75709715.

Hosting

This website is hosted by a professional hosting provider whose servers are located in the European Union. The hosting provider processes data exclusively on our behalf and on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Social media links

This website contains links to LinkedIn, X (Twitter), and Instagram. These links are implemented as plain hyperlinks; no plug-ins or widgets that automatically transmit data to third parties are integrated. Only when you actively click a link may the respective platform receive at minimum your IP address and the URL of the page you were visiting. The processing of data by those platforms is governed by their own privacy policies.

Contact form, waitlist, and e-mail enquiries

When you use the contact form or the waitlist registration on this website, we process your name, e-mail address, your stated background (e.g. person affected, clinician, partner), and — if provided — a message. When registering for the waitlist you may additionally provide further details on a voluntary basis: gender, age, health insurer or statutory accident insurer, country, postal code, indication, treating spinal cord center or (neuro-)urologist, and how you heard about us. All of these fields are optional — registration works without them. We also store the IP address and the date and time of submission for security purposes. Waitlist details are stored with our service provider Mailjet (see the “Newsletter” section).

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR — and, for voluntarily provided health-related information (in particular indication and treating center), your explicit consent pursuant to Art. 9(2)(a) GDPR. You may withdraw consent at any time with effect for the future by writing to info@incontalert.de. Data is used solely for processing your enquiry, managing and prioritizing the waitlist, or keeping you informed about BladderMate™, and is deleted once the purpose is fulfilled, subject to statutory retention obligations.

Newsletter

If you subscribe to our newsletter or join the waitlist, we process your e-mail address and, optionally, your name. The legal basis is Art. 6(1)(a) GDPR. Sign-up uses a double-opt-in procedure: you receive a confirmation e-mail and are only added to the list after clicking the confirmation link; we log the time of confirmation as proof of consent. For sending and managing the list we use Mailjet (Mailjet SAS, Paris, France) on the basis of a data processing agreement. Data is stored on servers within the EU (Germany and Belgium); where companies of the Sinch group or individual service providers in third countries are involved (e.g. for support), this is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. You may unsubscribe at any time: via the unsubscribe link contained in every newsletter, via our unsubscribe page at /unsubscribe or by contacting us directly. An unsubscribe requested through that page is confirmed via an e-mail link, so that nobody can unsubscribe someone else’s address. That page covers the newsletter only. We delete your waitlist entry on an informal message to info@incontalert.de — those details are also kept outside our sending provider, which is why we carry out that deletion ourselves.

Sensitive personal data

Through the waitlist registration you may voluntarily share health-related information with us (in particular your indication and treating center). This constitutes a special category of personal data under Art. 9 GDPR. We process this information exclusively on the basis of your explicit consent (Art. 9(2)(a) GDPR) and only to manage and prioritize the waitlist and to keep you appropriately informed. Providing it is always optional; you may have it deleted at any time and withdraw your consent with effect for the future. Beyond this, no health-related data is collected through the standard forms of this website. If, in the context of clinical collaboration or research projects, sensitive data is processed, this is governed by a separate data processing agreement and, where applicable, explicit consent pursuant to Art. 9(2)(a) GDPR.

Third-party processors and recipients

We engage service providers (processors) for tasks such as hosting, e-mail delivery, and analytics — in particular our hosting provider (servers in the EU), Mailjet SAS (Paris, France — data stored in the EU; third-country transfers within the Sinch group are safeguarded by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework) for transactional e-mail and newsletter delivery, and Google Ireland Ltd. for Google Analytics and for reCAPTCHA (each only with your separately given consent) — see the section on cookies, analytics, and spam protection above. All processors are contractually bound to handle data in accordance with GDPR requirements. We do not sell personal data to third parties. Data may be disclosed to public authorities if legally required.

Retention periods

Personal data is stored only for as long as necessary to fulfil the purpose for which it was collected, or as required by statutory retention obligations (e.g. tax and commercial law requirements of up to ten years). Data that is no longer needed is deleted or anonymized.

Rights of data subjects

Under the GDPR you have the following rights with respect to your personal data:

• Access (Art. 15 GDPR) — you may request confirmation of whether we process data about you and, if so, a copy of that data.
• Rectification (Art. 16 GDPR) — you may request correction of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR) — you may request deletion of your data under the conditions set out in the GDPR.
• Restriction (Art. 18 GDPR) — you may request that processing be restricted in certain circumstances.
• Data portability (Art. 20 GDPR) — you may request your data in a structured, commonly used, machine-readable format.
• Objection (Art. 21 GDPR) — you may object to processing based on legitimate interests at any time.
• Withdrawal of consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Complaint — you have the right to lodge a complaint with a supervisory authority. The competent authority for inContAlert GmbH is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

To exercise any of the above rights, please contact us at info@incontalert.de.

Changes to this policy

We reserve the right to update this privacy notice when legal, technical, or organisational circumstances change. The version published on this page is always the current one. We recommend checking it periodically.

Last updated: August 2026