Legal
Privacy policy
This privacy policy explains how personal data is processed when you visit biocus.co, join the waitlist or get in touch with us.
1. Controller
Joshua David Ruha, Biocus, Paul-Lincke-Ufer 39-40, 10999 Berlin, Germany. Email: info@biocus.co
2. Data we process
Contact and sign-up data, such as your email address and, if you give it, your name.
Usage and technical data, such as your IP address, browser and device type, access times and the pages you visit.
3. Purposes and legal bases
To send you updates about the first House, future membership and The Integration, Joshua’s weekly note, after you join the waitlist. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with the unsubscribe link in every email.
To reply to messages you send us. The legal basis is Art. 6(1)(b) GDPR where your message is about a future membership, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering you.
To run, secure and improve the website. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a secure website that works well.
To understand how the website is used, but only if you agree to it in the cookie banner. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG.
4. Hosting
The website is built and hosted with Framer. When you visit it, technical data such as your IP address is processed on Framer’s servers so the site can be delivered securely, using TLS/SSL encryption.
5. Waitlist and emails
When you join the waitlist, your details are stored with Flodesk, the email service we use to send updates. The sign-up form is loaded from Flodesk, so your IP address is shared with Flodesk when the page loads. Flodesk is based in the United States, so your data may be processed there.
We keep your details until you unsubscribe, and then delete them unless the law requires us to keep them.
6. Cookies and consent
Cookies the website needs to work are set without asking. Anything else, such as analytics, is only used if you agree in the cookie banner. You can withdraw your consent at any time by clearing this site’s cookies in your browser, and the banner will then ask you again.
7. Google Tag Manager and Google Analytics
If you agree in the cookie banner, we use Google Tag Manager and Google Analytics, services of Google Ireland Limited, to understand how the website is used. Google processes usage data such as your IP address, device and browser information and how you use the site. Data may be transferred to the United States. Google is certified under the EU-US Data Privacy Framework.
8. Video
The video at the top of the homepage is delivered by Cloudinary. When it loads, your IP address and technical browser data are sent to Cloudinary’s servers, which may be outside the EU. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in showing the website as it was designed.
9. Transfers outside the EU
Where data is transferred to countries outside the EU or EEA, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission or the EU Standard Contractual Clauses.
10. How long we keep data
We keep personal data only as long as we need it for the purposes above, or as long as the law requires. After that it’s deleted or anonymised.
11. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to object to processing based on Art. 6(1)(f) GDPR, and to data portability. Where processing is based on your consent, you can withdraw it at any time. This doesn’t affect processing that happened before you withdrew it. To use any of these rights, email info@biocus.co.
12. Right to complain
You can complain to a data protection supervisory authority. In Berlin that’s the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
13. Changes to this policy
We may update this policy when our services or the law change. The current version is always on this page.
Last updated: October 2026