With the following information, we inform you about the processing of personal data when you use our website niomics.com and our LinkedIn presence.
“Personal data” means any information relating to an identified or identifiable natural person.

Last updated: January 3, 2026

1. Controller

NIOMICS LLC
5830 E 2nd St, Ste 7000
Casper, WY 82609
United States of America

Represented by: Dr. Johannes Hellwig (Managing Member)
Email: johannes@niomics.com

2. EU Representative (Art. 27 GDPR)

If and to the extent required under Art. 27 GDPR, we appoint an EU representative for data subjects in the European Union:

3. Categories of Data, Data Subjects, and Purposes

Categories of data processed

• Contact data (e.g., email address)
• Content data (e.g., the message you send us)
• Usage data (e.g., page views)
• Meta/communication data (e.g., IP address, timestamps)
• Log data (server log files)

Categories of data subjects

• Website visitors
• Prospects and communication partners

Purposes of processing

• Provision and technical operation of the website
• Security and abuse prevention
• Communication and handling inquiries
• Maintaining our LinkedIn presence

4. Legal Bases (GDPR)

• Art. 6(1)(b) GDPR (contract / pre-contractual inquiries)
• Art. 6(1)(f) GDPR (legitimate interests, e.g., secure and stable website operation, communication)
• Art. 6(1)(a) GDPR (consent), if we ask you for consent in specific cases

5. Security Measures

We implement appropriate technical and organizational measures to protect personal data. Our website uses TLS/SSL encryption (HTTPS).

6. Recipients / Service Providers (Processors)

We use service providers (e.g., web hosting) to operate this website. Where such providers process personal data on our behalf, this is done under a data processing agreement (where required by law).

7. International Data Transfers

As we are a company based in the United States, personal data may be transferred to, stored in, or processed in countries outside the EU/EEA (including the United States).
Any such transfer takes place only in accordance with the requirements of Art. 44 et seq. GDPR (e.g., Standard Contractual Clauses) or on the basis of statutory exceptions under Art. 49 GDPR.

8. Retention and Deletion

We process personal data only as long as necessary for the respective purpose. We may retain data longer if required by law or if needed to establish, exercise, or defend legal claims.

9. Your Rights

Under the GDPR, you have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20),
and to object to processing based on legitimate interests (Art. 21). You also have the right to lodge a complaint with a supervisory authority.

10. Website Provision and Web Hosting (IONOS) / Server Log Files

When you visit our website, the web server automatically processes certain information in so-called server log files. This is technically necessary to deliver the website and to ensure security and stability.

• Data processed: IP address, date/time of access, requested page/file, referrer URL, browser/operating system, status codes, transmitted data volume.
• Purpose: website delivery, technical administration, troubleshooting, prevention/defense against attacks.
• Legal basis: Art. 6(1)(f) GDPR.
• Retention: generally up to 30 days; longer if required to investigate security incidents.

Hosting provider: 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy
Information on data processing agreements: https://www.ionos.de/hilfe/datenschutz/allgemeine-informationen-zur-datenschutz-grundverordnung-dsgvo/auftragsverarbeitung/

11. Contact (Email and Contact Form / Forminator)

If you contact us by email or via our contact form, we process the information you provide (e.g., name if provided, email address, and your message) to handle your request.

• Data processed: contact data, content data; possibly technical metadata (e.g., IP address, timestamps) to the extent processed by the server/website.
• Purpose: communication and handling inquiries.
• Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contract-related inquiries) and/or Art. 6(1)(f) GDPR (general inquiries).

Spam protection: Our contact form uses a “honeypot” mechanism (no third-party CAPTCHA such as Google reCAPTCHA).

12. Cookies

We may use technically necessary cookies to ensure core website functionality (e.g., WordPress/plugin features).
If we were to use non-essential cookies or similar technologies in specific cases, we would request your consent beforehand.

13. Google Fonts (Roboto) Loaded from Google Servers

We use Google Fonts (in particular “Roboto”) to display fonts consistently. Fonts may be loaded from Google servers, which requires a connection to Google.
In this context, your IP address and technical information (e.g., browser/OS) may be transmitted.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interests) – efficient and consistent presentation of the website, including performance and maintainability.
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processing may also occur in third countries).
• Privacy policy: https://policies.google.com/privacy

14. LinkedIn Presence

We maintain an online presence on LinkedIn to communicate with interested parties and provide information about us. LinkedIn processes personal data under its own responsibility.
Data may also be processed outside the EU/EEA.

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out (retargeting): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

15. Changes to This Privacy Policy

We may update this privacy policy if our processing activities change or if legal requirements require updates.