Data Protection Declaration

Responsible body within the meaning of data protection laws, in particular the EU Data Protection Ordinance (DSGVO):

Tentamus Pharma (UK)
Ltd.
Riverside Road
Pride Park
Derby DE248HY

United Kingdom

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored with us and their processing,
• Correction of incorrect personal data,
• Deletion of your data stored with us,
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
• objection to the processing of your data with us and
• Data transferability, provided that you have consented to the data processing or have concluded a contract with us.
• If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact your local supervisory authority at any time with a complaint. Your competent supervisory authority depends on your state of residence, your work or the alleged infringement. A list of supervisory authorities in Germany (for the non-public sector) with addresses can be found at:  .

We process your personal data only for the purposes stated in this data protection declaration. Your personal data will not be passed on to third parties for purposes other than those mentioned. We will only pass on your personal data to third parties if:

• you have given your express consent,
• processing is required to process a contract with you,
• the processing is necessary to fulfil a legal obligation,
• the processing is necessary to protect legitimate interests and there is no reason to believe that you have an overriding interest worthy of protection in not disclosing your data.

This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the Internet. They are processed in particular for the following purposes:

• Ensuring a trouble-free connection of the website,
• Ensuring a smooth use of our website,
• evaluation of system security and stability as well as
• for other administrative purposes.

The processing of your personal data is based on our legitimate interest from the aforementioned purposes for data collection. We do not use your data to draw conclusions about you personally. The recipients of the data are only the responsible body and, if applicable, the contract processor.

Anonymous information of this kind may be statistically evaluated by us in order to optimize our Internet presence and the technology behind it.

Your personal data is stored for the period necessary to fulfil the original purposes for which it was collected. Please note that in certain cases a longer storage period may be required or legally permissible, or to enable us to pursue our business interests, conduct audits, comply with legal obligations, enforce our agreements or settle disputes.

The criteria by which we determine our retention periods include the following:

• How long will the data be needed to provide you with our products or services or to conduct our business?
• Are we subject to a legal, contractual or similar obligation to store your data? Examples include mandatory laws to retain data in accordance with local laws, governmental orders to store data relevant to an investigation, or data that must be retained for contractual purposes or possible litigation.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

As far as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out.

The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time here . The legality of the data processing operations already carried out remains unaffected by the revocation.

For transparency reasons, we would like to point out that we use the Google…