Privacy Policy

The controller responsible for the processing of personal data on this website within the meaning of Art. 4(7) GDPR is TruGxP GmbH, Tarpen 3, 22419 Hamburg, Germany. You can reach us for all data protection matters at compliance@trugxp.com.

This Privacy Policy explains how we process personal data when you visit this pre-launch website, join our onboarding waitlist, or contact us. It does not yet cover the TruGxP platform itself, which will be governed by its own data protection documentation upon launch on December 31, 2026.

Waitlist registration. When you join the waitlist, we collect the data you provide in the form: name, company, professional role, email address, and optionally your phone number.

Server log data. When you visit the website, our hosting infrastructure automatically processes technical data such as your IP address, date and time of access, requested pages, browser type, and operating system. This data is required to deliver the website securely.

Cookies. We use strictly necessary cookies and — only with your consent — optional cookies for functionality, analytics, and marketing. See section 5 below.

Communication. If you contact us by email, we process the data you share with us to handle your request.

We process personal data on the following legal bases under Art. 6(1) GDPR:

Art. 6(1)(b) GDPR (pre-contractual measures) — managing your waitlist registration and contacting you about Early Access onboarding at your request.

Art. 6(1)(f) GDPR (legitimate interests) — securely operating, protecting, and improving this website, including server logs and abuse prevention.

Art. 6(1)(a) GDPR (consent) — optional functional, analytics, and marketing cookies. You may withdraw your consent at any time with effect for the future.

Strictly necessary cookies are set on the basis of our legitimate interest in operating the website (Art. 6(1)(f) GDPR and § 25(2) TDDDG). All other cookies are only set after you have given your consent via our cookie banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Your choice is stored in a consent cookie for up to 12 months. You can review or withdraw your consent at any time via Cookie Settings.

We share personal data only where necessary: with service providers who support the operation of this website (e.g. hosting and email infrastructure) acting as processors under Art. 28 GDPR, or where we are legally obliged to do so. We do not sell personal data.

Where service providers process data outside the European Economic Area, we ensure an adequate level of data protection through adequacy decisions of the European Commission or EU Standard Contractual Clauses (Art. 44 et seq. GDPR), supplemented by additional safeguards where required.

We store waitlist data until your registration is converted into a platform account, you ask us to remove you from the waitlist, or the pre-launch phase ends and the data is no longer needed. Server logs are retained for a short period for security purposes. Statutory retention obligations remain unaffected.

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, contact us at compliance@trugxp.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).

We protect your data with appropriate technical and organizational measures, including TLS-encrypted transmission and access controls aligned with the data integrity principles (ALCOA+) that underpin our GxP-compliant platform architecture.

We do not use your personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR on this website.

We may update this Privacy Policy from time to time, for example when the platform launches or legal requirements change. The version published on this website applies; material changes will be indicated by updating the “Last updated” date above.

TruGxP GmbH, Tarpen 3, 22419 Hamburg, Germany — compliance@trugxp.com.