Privacy Policy

1. Who we are (data controller)

“Onyx BioPartners” SIA
Zvanu iela 8-13, Riga, LV-1048, Latvia
Company registration number: 40203686136
VAT number: LV40203686136
Email: info@onyx-biopartners.com

We are the data controller for personal data collected through this website (www.onyx-biopartners.com).

2. What data we collect and why

Contact form

When you use the contact form on our website, we collect the following data you voluntarily provide:

• First name and last name
• Email address
• Company name (optional)
• The content of your message

In addition, our form processor (Netlify Forms) automatically records technical data including your IP address, browser user-agent, and the date and time of submission.

Legal basis: Article 6(1)(f) GDPR — processing is necessary for our legitimate interest in responding to your enquiry. We do not use contact form submissions for marketing without your separate, explicit consent.

Website traffic

We do not use any analytics, tracking pixels, or third-party scripts that monitor visitor behaviour. No cookies are set for analytics purposes.

3. Who we share your data with

We do not sell, rent, or trade your personal data. We share data only with the following sub-processors, strictly for the purposes described above:

• Netlify, Inc. (USA) — website hosting and form processing. Netlify is self-certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing adequate protection. See netlify.com/gdpr-ccpa.

Your data is not transferred to any other third country unless an adequate protection mechanism is in place.

4. How long we keep your data

Contact form submissions are retained in Netlify Forms for 6 months from the date of receipt, after which they are permanently deleted. If your enquiry results in an ongoing business relationship, data relevant to that relationship is retained for as long as legally required.

5. Cookies

This website does not use cookies for analytics or marketing purposes. The CMS administration area (/admin/) uses session cookies for authentication; these are only set for authorised administrators and are not visible to ordinary website visitors.

6. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — request deletion of your data where no legal basis for retention exists.
• Right to restriction — ask us to restrict processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — if processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@onyx-biopartners.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Latvian data protection supervisory authority:

Datu valsts inspekcija (Data State Inspectorate)
Blaumaņa iela 11/13-11, Rīga, LV-1011, Latvia
www.dvi.gov.lv

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be noted by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

8. Contact

For any questions about this Privacy Policy or our data practices, please contact us at info@onyx-biopartners.com.