1.    Data we process
We may collect, use, store and transfer different kinds of personal data about you. We have collated these into groups as follows:
Your identity includes information such as first name, last name, title, date of birth, and other identifiers that you may have provided at some time.
Your contact information includes information such as billing address, delivery address, email address, telephone numbers and any other information you have given to us for the purpose of communication or meeting.
Technical data includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
We may aggregate anonymous data such as statistical or demographic data for any purpose. Anonymous data is data that does not identify you as an individual. We may aggregate profile data to assess interest in a product or service. However, if we combine or connect aggregated data with your personal information so that it can identify you in any way, we treat the combined data as personal information and it will be used in accordance with this privacy notice.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform that contract. In that case, we may have to stop providing a service to you. If so, we will notify you of this at the time.

2.    Legal basis for the processing of personal data
The legal bases for the processing of personal data are presented below. If a basis on which we process your personal information is no longer relevant, then we shall immediately stop processing your data. If the basis changes then if required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.
•    Fulfilment of contract or implementation of pre-contractual measures (Art. 6 para. 1 b) GDPR)
Processing is only carried out to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us will only take place to this extent.
•    Legitimate interest (Art. 6 para. 1 f) GDPR)
Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this data protection declaration as part of the processing description.
•    Consent (Art. 6 para. 1 a) GDPR)
Processing takes place if you have expressly consented to the type and scope of data processing. You can revoke your consent at any time with effect for the future. However, the processing that has taken place up to this point will not be affected by this.
•    Legal obligation (Art. 6 para. 1 c) GDPR)
Processing takes place insofar as this is necessary for the fulfilment of German or European legal obligations.

3.    Data subject rights
If personal data relating to you is processed, you are a data subject within the meaning of Art. 4 (1) GDPR. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.
•    Right to information according to Art. 15 GDPR
You have a right of access to your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.
•    Right of rectification according to Art. 16 GDPR
You have the right to request the immediate correction of incorrect personal data and the completion of incorrect personal data.
•    Right to deletion according to Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the reasons listed in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.
•    Right to restriction of processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.
•    Right to data portability according to Art. 20 GDPR
In accordance with the provisions of Article 20 GDPR, you have the right to request the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.
•    Right to complain to the competent supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 GDPR.

4.    Possibility of objection and removal
Insofar as the data processing is based on your consent or our legitimate interest, you have the right to object to the processing at any time or to revoke the consent you have given. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. To exercise your right of objection or revocation, you can contact us under administration[at]adcytherix.com at any time. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms.

5.    Data deletion and storage period
We delete your personal data as soon as the legal basis for its processing ceases to apply. In some cases, however, legal bases can also exist in parallel or a new legal basis can take effect when a legal basis ceases to exist, such as the obligation to store certain data in order to comply with a statutory retention obligation.

6.    Third country data transfers
The personal data we collect from you through the website will not generally be transferred to third countries outside the European Economic Area. 
Should a transfer to a third country occur in individual cases, we use the current standard data protection clauses (SCC) of the EU Commission to secure the transfer.