1. Introduction
taVNS AB ("taVNS", "we", "us", or "our") operates the website www.cymbathera.com (the "Website") and related research, communication and business activities (the "Services").
We are committed to protecting your privacy and processing personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).
If you do not agree with this Policy, please do not use our Website or Services.
By using our Website or Services, you acknowledge that your personal data may be processed in accordance with this Privacy and Cookie Policy.
We do not sell your personal data to third parties.
You may visit our Website without submitting personal data.
2. What Personal Data We Collect
You may visit our Website without submitting personal data.
A. Information You Provide Voluntarily
You may visit our Website without submitting personal data.
We may collect personal data in the following situations:
A. Information You Provide Voluntarily
When you:
- Sign up for our newsletter or updates
- Join a waiting list
- Contact us via a contact form or email
- Engage with us as a partner, investor, or collaborator
We may collect:
- Name
- Email address
- Organization (if applicable)
- Country
- Any information you include in your message
B. Automatically Collected Information (Log Data)
When you visit the Website, we may automatically collect:
- IP address
- Browser type and version
- Device type
- Pages visited
- Time and date of visit
- Referring website
- Time spent on pages
This information is used for:
- Website security
- Performance monitoring
- Analytics and improvements
3. Legal Basis for Processing
Under GDPR, we process personal data on the following legal grounds:
Consent
- Newsletter subscriptions
- Marketing communications
- Use of non-essential cookies
You may withdraw consent at any time.
Legitimate Interest
- Improving our Website and Services
- Analyzing usage patterns
- Responding to inquiries
- Preventing misuse and ensuring security
We ensure that such processing does not override your fundamental rights.
Performance of a Contract
If you engage with us in a commercial or partnership relationship.
Legal Obligation
Where processing is required to comply with legal or regulatory obligations.
4. How We Use Your Information
We use personal data to:
- Provide requested information
- Respond to inquiries
- Send newsletters or research updates (if subscribed)
- Improve Website functionality
- Conduct internal analytics
- Maintain security and prevent fraud
We do not use your personal data for automated decision-making or profiling.
5. Cookies and Tracking Technologies
Our Website uses cookies to improve functionality and user experience.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website.
Types of Cookies We Use
1. Essential Cookies
Necessary for the Website to function properly.
2. Analytics Cookies
Used to understand how visitors interact with the Website. We use Google Analytics 4 (GA4), operated by Google LLC, for this purpose. GA4 collects aggregated and anonymized data such as page views, session duration, and traffic sources.
As Google LLC is a US-based company, data collected by GA4 may be transferred to and processed in the United States. Such transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission. For more information, see Google's Privacy Policy at https://policies.google.com/privacy.
3. Marketing Cookies (if applicable)
Used to measure effectiveness of campaigns or newsletter engagement.
We only place non-essential cookies with your explicit consent via our cookie banner.
Managing Cookies
You can:
- Accept or decline cookies via our cookie banner
- Change your browser settings to block cookies
- Withdraw consent at any time
Please note that disabling certain cookies may affect Website functionality.
6. Data Retention
We retain personal data only as long as necessary to:
- Fulfill the purpose for which it was collected
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
Newsletter subscriber data is retained until you unsubscribe. You may request deletion at any time.
7. Sharing of Personal Data
We may share data with trusted third-party service providers that assist us with:
- Website hosting
- Email distribution — we use Mailchimp (The Rocket Science Group LLC), a US-based email marketing platform, to manage our newsletter list and send communications. Data shared with Mailchimp is governed by Standard Contractual Clauses (SCCs). For more information, see Mailchimp’s Privacy Policy at https://www.intuit.com/privacy/statement/.
- Analytics services — we use Google Analytics 4 (see Section 5)
- IT and security services
These providers process data only on our behalf and under data processing agreements in accordance with GDPR.
We do not sell personal data.
We may disclose data if required by law.
8. International Transfers
Some of our third-party service providers, including Google LLC (Google Analytics 4) and The Rocket Science Group LLC (Mailchimp), are based in the United States. When personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by the European Commission
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against:
- Unauthorized access
- Alteration
- Disclosure
- Destruction
However, no method of transmission over the Internet is completely secure.
10. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion ("right to be forgotten")
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise your rights, please contact us at: contact@cymbathera.com
11. Children's Privacy
Our Website and Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.
12. Links to Third-Party Websites
Our Website may contain links to external websites. We are not responsible for the privacy practices of those websites. We recommend reviewing their privacy policies.
13. Newsletter Consent
When you sign up for our newsletter or updates, you will be asked to actively opt in by checking a consent box. By doing so, you confirm that you have read and accept this Privacy and Cookie Policy, and that you consent to receiving communications from taVNS AB.
Your email address and any other information you provide will be stored in Mailchimp and used solely for the purpose of sending you the communications you have subscribed to. You may unsubscribe at any time by clicking the unsubscribe link in any email you receive from us.
14. Changes to This Policy
We may update this Privacy and Cookie Policy from time to time. Updates will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.
15. Contact Information
If you have questions regarding this Privacy and Cookie Policy or our data practices, please contact:
taVNS AB
Email: contact@cymbathera.com
Organization number: 559422-5699