Privacy Policy

I.    Introduction

The basis of effective data protection is comprehensive information about the collection, processing and use of your personal data (“data processing”). Therefore, this Policy informs you of:

• When or why we process personal data

• What categories of personal data we process

• The purposes and legal bases for processing

• Who receives your personal data

• Your rights under data protection law.

The transmission of data to and from our website is protected with Transport Layer Security (TLS) encryption.
You can print or download this Policy permanently and at any time at https://www.adcytherix.com/legal/privacy-policy. You are reminded that this Policy relates to the use of personal data collected via our website. If you participate in one of our clinical trials or research studies, please do not contact us via this website but by contacting directly our Data Protection Officer (see below).

II.    General Information

1.    Data we process

We may collect, use, store and transfer the following categories of personal data:
Identity data: first name, last name, title, date of birth, and similar identifiers.
Contact data: delivery address, address, email address, telephone numbers and any other communication details.
Technical data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and device details used to access this website.
Usage data: information about how you use our website and Services (e.g. pages visited, links clicked, time spent on website).

At present, our website does not include a newsletter or subscription feature. Should this change in the future, we will update this Policy accordingly. Furthermore, our website does not currently provide an option to submit job applications directly. If this changes in the future, we will update this Policy to explain how applicant data will be collected and processed.

We may also aggregate and analyze usage data across users for statistical purposes or to assess interest in our products and services. This aggregated information is data that can not identify individuals and is not considered personal data.
Where we are legally required to collect personal data by law (e.g. for contractual purposes) and you fail to provide that data when requested, we may not be able to provide you with our Services.

2.    Legal basis for the processing of personal data
The legal bases for the processing of personal data are the following:

• Legitimate interest (Art. 6§1 f GDPR)
  where processing is necessary for our legitimate interest (e.g. to improve our Services, prevent fraud or secure our systems), unless overridden by your rights.

• Consent (Art. 6§1 a GDPR)
  Where applicable, if we offer newsletters, marketing communications or promotional updates, we will only do so after receiving your explicit consent. You can revoke your consent at any time with effect for the future. However, the processing that has taken place up to this point will not be affected by this.

• Legal obligation (Art. 6§1 c GDPR)
  where processing takes place insofar as this is necessary to comply with French or European legal obligations.

3.    Data subject rights
If personal data relating to you is processed, you are a data subject within the meaning of Art. 4 (1) GDPR. As a data subject, you are entitled to the following rights with regard to your personal data.

• Right of access (Art. 15 GDPR)
  You have a right to obtain confirmation on the processing of your personal data and to request a copy.

• Right of rectification (Art. 16 GDPR)
  You have the right to request the immediate correction of incorrect personal data and the completion of incorrect personal data.

• Right to deletion (Art. 17 GDPR)
  You have the right to request the erasure of your personal data if one of the reasons listed in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.

• Right to restriction of processing (Art. 18 GDPR)
  You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 GDPR applies.

• Right to data portability (Art. 20 GDPR)
  In accordance with the provisions of Article 20 GDPR, you have the right to request that we transfer the personal data that we have collected on you in a structured, common and machine-readable format to another organization, or directly to you, under the conditions of Art. 20 GDPR.

• Right to complain to the competent supervisory authority (Art. 77 GDPR)
  In case you think that your personal data has been unlawfully processed or that your rights have been violated, you have the right to lodge a complaint with the French Data Protection Authority Commission Nationale de l’Informatique et des Libertés (CNIL). You may contact CNIL either online (www.cnil.fr) or by post (CNIL-Complaints service, 3 Place de Fontenoy, TSA 80715, 75344 PARIS CEDEX 07).

If you would like to exercise any of these rights, please contact us at our designated channels:

Data protection officer: dpo@adcytherix.com

We will respond to your request without undue delay and in any event within one month of receipt. In certain circumstances, if for example, your request is particularly complex or if you have made multiple requests, this period may be extended by up to two further months, as per the GDPR. If such an extension is necessary, we will promptly inform you within the initial one-month period and explain the reasons for the extension.

4.    Data storage and retention

We delete your personal data as soon as the legal basis for its processing ceases to apply. In some cases, however, legal bases can also exist in parallel, or a new legal basis can take effect when a legal basis ceases to exist, such as the obligation to store certain data in order to comply with a statutory retention obligation.

Cookies and tracking technologies are stored for the durations described in the “Cookies and tracking technologies” section below.

5.    Security

We have implemented safeguards to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration and destruction.  Please be aware that despite our best efforts, no data security measures can guarantee absolute security. You should also take proactive steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared device.

6.    Data transfers outside the EEA

The personal data we collect from you through the website will not generally be transferred to third countries outside the European Economic Area. 
Should a transfer to a third country be necessary (e.g. when using international service providers), it will only take place with appropriate safeguard, such as Adequacy Decisions by the European Commission, the current Standard Contractual Clauses (SCC) or Binding Corporate Rules (BCRs).

7.    Children

Our website and Services are not designed for children under 13, and we do not intentionally collect information on our website and Services from those we actually know are under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information from our systems.

8. Third parties

Our website features links to external websites operated by third parties. The present Privacy Policy governs only the processing of personal data carried out by us through this website. We do not exercise control over and are not responsible for the privacy practices of third-party websites. Users are advised to consult the Privacy Policies of any external website they visit.

III.   Use of personal data by Adcytherix

We process your personal data for the following purposes:

• Providing and improving our Services: In order to provide and maintain our website and its Services, as well as improve them, to develop new features or services, to perform technical operations, such as updating software, as well as for other customer service and support purposes.

• Communicating with you: To communicate with you about your account and the use of our Services, to respond to your inquiries, to provide you with news and newsletters and other information we think that may be of interest toy you, as well as for other informational, marketing, or promotional purposes.

• Analytics and improvements: Monitoring usage, improving our website, developing new features.

• Legal compliance: Fulfilling regulatory or statutory obligations, such as the submission of information to authorities.

• Marketing: Where applicable, we may use your data for marketing purposes, for example if you have consented to re-marketing cookies. We do not currently send newsletters or promotional emails via this website.

IV.    Cookies and tracking technologies

Our website uses cookies and related storage technologies. Cookies may be technically necessary for the website to function or, in some cases, may be used for additional purposes, such as improving functionality or collecting statistics, where permitted.

Detailed information about the types of cookies and related technologies used, their purposes, their retention period and user options regarding consent or management can be found in the Cookie Policy.

V.    Update of this Privacy Policy

This Policy is current as of the effective date set forth below. We may update this Policy from time to time as necessary, so please make sure to check back periodically. Any changes, as well as the terms that apply to you are posted on our website. If we make any changes to this Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavour to provide you with notice in advance of such change, such as via email or prominent notice on the Site. You may save copies of different versions of this Policy for your records. If you have any question regarding our Policy or privacy aspects of our Site/Services, or would like to make a complaint, please contact us at dpo@adcytherix.com.

Effective date and date of last update: January 2026