Privacy & Data Protection

Privacy Policy

How this website handles personal data — what we collect, why, the legal basis under the EU General Data Protection Regulation (GDPR), and the rights you have.

Last updated: 31 August 2026

This policy covers oncobreast21.com — a research website describing OncoBreast 21, a deterministic, transparent reimplementation of the 21-gene breast-cancer recurrence score, provided for Research Use Only. It explains what personal data the website collects and how we look after it.

This website does not collect health or patient data. It is an informational site for researchers and clinicians. It does not ask for, receive, or store any medical records, genomic data, or other patient information. The separate OncoBreast 21 research application is access-controlled and is not part of this website.

🏢Who we are (data controller)

OncoBreast 21 is a research project of aumics Oy (in formation), headquartered in Tampere, Finland. For the purposes of the GDPR, aumics Oy acts as the data controller for personal data submitted through this website.

Contact for any privacy question or request: oncobreast21@gmail.com · Tampere, Finland.

🗂️What we collect

DataWhenWhy
Name, email address, and the message you write Only if you use the contact form or email us To read and reply to your enquiry (research, validation, or collaboration)
Standard technical data — IP address, browser/device type, pages requested, timestamps Automatically, in server logs, when any website is visited To operate the site securely, prevent abuse, and diagnose faults

We do not run advertising networks or cross-site tracking, and we do not build marketing profiles of visitors.

⚖️Legal basis for processing

  • Your enquiry (contact form / email): your consent in choosing to contact us, and our legitimate interest (GDPR Art. 6(1)(a) and (f)) in responding and maintaining a record of correspondence.
  • Security and server logs: our legitimate interest (Art. 6(1)(f)) in keeping the website secure and available.

🍪Cookies

This is a largely static informational website. It does not set advertising or cross-site tracking cookies. Any cookies used are strictly necessary for the page to function. If we add optional analytics in future, we will update this policy and ask for consent where the law requires it.

🤝Who we share it with

We do not sell your personal data. We share it only with service providers that help us run the website and reply to enquiries — for example, our website hosting and email providers — and only to the extent needed to provide those services. These providers process data on our instructions under appropriate agreements. We may also disclose data where required by law.

🌍International transfers

We process personal data within the European Union. If one of our service providers (for example, website hosting or email) processes data outside the EU/EEA, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to protect it.

How long we keep it

We keep enquiry correspondence only as long as needed to handle your request and any follow-up, and then delete it or anonymise it. Security and server logs are retained for a limited period and then rotated out. If you ask us to erase your data, we will do so unless we are legally required to keep it.

🔒How we protect it

The website is served over encrypted connections (HTTPS), and access to any stored enquiry data is limited to people who need it to reply to you. No method of transmission or storage is perfectly secure, but we take reasonable technical and organisational measures to protect the limited data this site handles.

🧑‍⚖️Your rights

Under the GDPR (and comparable laws), you have the right to:

  • Access the personal data we hold about you;
  • Rectify data that is inaccurate or incomplete;
  • Erase your data ("right to be forgotten");
  • Restrict or object to our processing;
  • Data portability — receive your data in a portable form;
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these, email oncobreast21@gmail.com. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi), or the data-protection authority in your own country.

🧒Children

This website is intended for researchers and clinicians and is not directed at children. We do not knowingly collect personal data from children.

📝Changes to this policy

We may update this policy as the project and our legal footprint evolve. The "last updated" date above shows the current version; material changes will be reflected on this page.


Questions about this policy or your data? Contact oncobreast21@gmail.com. See also our Disclaimer & Notice.