1 General and Legal Basis
Evercyte GmbH (hereinafter referred to as “Evercyte”) takes the protection of your personal data very seriously and complies with all applicable national and European data protection laws (GDPR, DSG 2018). All employees and third parties involved in processing are bound by confidentiality and legal data protection obligations. We continuously update our technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access. We process personal data exclusively on the basis of legal regulations (GDPR, DSG 2018, TKG). This privacy statement explains what data TAmiRNA may collect, how it is used, and what rights you have. If you wish to object to the processing of your data – either entirely or for specific measures – you may contact us at any time by email or letter using the contact details provided below.
E-Mail: office@evercyte.com, address: Evercyte GmbH, Leberstraße 20,1110 Vienna
2 Website
2.1 Provision of the Website and Creation of Log Files
2.1.1 Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
• Information about the browser type and the version used
• The user’s operating system
• The user’s Internet service provider
• The user’s IP address
• Date and time of access
• Websites that are accessed by the user’s system via our website
This data is not used to create individual user profiles, nor is it shared with third parties.
2.1.2 Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session. The log files are saved to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
2.1.3 Legal Basis for Data Processing
The legal basis for the temporary storage of the data is Art 6 para 1 lit f GDPR (legitimate interests). Our legitimate interest consists in ensuring the proper provision, functionality, optimization, and security of our website, which requires the temporary processing of certain technical data such as the user’s IP address.
2.1.4 Duration of Storage
Your data will be kept for the duration of a maximum of two (2) months.
2.2 Contact Form / Email Contact
Evercyte GmbH provides a contact form through which you can get in touch with us. You may also send general inquiries via email to office@evercyte.com. The personal data you provide, such as your name, email address, date and time of the inquiry, and, if applicable, your company name, telephone number, address, and the content of your message, will be processed for the purpose of handling your request (Art 6 para 1 lit b GDPR). The duration of data storage and any potential disclosure depend on the content of your inquiry. If your message relates to a contract, the data will be stored for the duration of the contractual relationship and in accordance with statutory retention obligations. If your inquiry is of a general nature, your data will only be stored for as long as necessary to respond to your request.
2.3 Application Process
The personal data you provide as part of your application will be used solely for the purpose of processing your application (Art 6 para 1 lit b GDPR) and will not be shared with third parties. If your application is unsuccessful, your data will be deleted seven (7) months after the conclusion of the application process, in accordance with Article 17 para 3 lit e of the General Data Protection Regulation (GDPR) and Section 29 para 1 of the Austrian Equal Treatment Act (GlBG). If you are invited to an interview, your data will be retained for three (3) years, in accordance with Article 17 para 3 lit e GDPR and Section 1486 para of the Austrian Civil Code (ABGB). If your application is successful and an employment contract is concluded with TAmiRNA GmbH, your data will be further processed for personnel administration purposes.
2.4 Newsletter
2.4.1 Description and Scope of Data Processing
You can sign up for our newsletter on the website using the double opt-in procedure. After registration, you will receive an email requesting confirmation of your registration. You can unsubscribe or change your subscription preferences at any time. By subscribing, you agree that your personal data, specifically your email address, will be stored and processed by Evercyte GmbH, Leberstraße 20, 1110 Vienna, for the purpose of sending promotional newsletters.
This consent can be revoked at any time by writing to Evercyte GmbH, Leberstraße 20, 1110 Vienna or by email to office@evercyte.com. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored for as long as the subscription to the newsletter is active.
For sending and managing our newsletters we use processors. These have committed themselves to comply with the applicable data protection regulations. A Data Processing Agreement (according to Article 28 with MailChimp) was concluded. The newsletter is sent using “MailChimp”, a newsletter delivery platform from the US provider The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. According to its own information, MailChimp can also use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties. We trust in the reliability and IT and data security of MailChimp. We have concluded a “data processing agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it in accordance with its data protection regulations on our behalf and, in particular, not to pass it on to third parties. The Rocket Science Group, LLC d/b/a Mailchimp is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection. You can find more information on MailChimp’s use of cookies at https://mailchimp.com/legal/cookies/, and you can learn more about data protection at MailChimp at https://mailchimp.com/legal/privacy/.
2.4.2 Purpose of Data Processing
The collection of the user’s email address serves to deliver the newsletter.
2.4.3 Legal Basis for Data Processing
The data processing takes place on the basis of the legal regulations of Art 6 para 1 lit a GDPR for consent, as well as Art 6 para 1 lit f GDPR for legitimate interests. The legitimate interest lies in promoting and providing information about similar products or services to existing customers. This is carried out in compliance with § 174 paragraph 4 of the Austrian Telecommunications Act 2021.
2.4.4 Duration of Storage
Generally, the data is permanently saved on MailChimp’s servers and is deleted only when you request it. You can have your contact information with us deleted, which permanently removes all your personal data for us and anonymizes you in MailChimp’s reports. You can also request the deletion of your data directly at MailChimp. Then all your data is removed from there and we receive a notification from MailChimp. After we receive the notification, we have thirty days to delete your contact from all integrations.
2.4.5 Newsletter for Existing Business Partners
If you are an existing customer or contractual partner, we may send you our newsletter about our own similar products or services based on our legitimate interest in maintaining our business relationship (Art. 6 para. 1 lit. f GDPR). This is in accordance with applicable legal requirements, which allow the use of electronic contact details for direct marketing purposes where the contact information was obtained in connection with a sale or service, and where you were clearly informed of your right to object to such use both at the time of collection and in every subsequent communication. You can opt out of receiving such communications at any time, free of charge and with immediate effect by mailing to office@evercyte.com.
2.5 Online Shopping
2.5.1 General
For the fulfillment of the agreement concluded with us, we need to store company-related data. In addition, we have two subcontractors (Unzer E-Com GmbH, WooCommerce) that we use in the execution of the online store, as well as payment options.
2.5.1.1 Purpose of Data Processing
We handle your data to fulfill (pre-)agreed obligations.
2.5.1.2 Legal Basis for Date Processing
The legal basis for the temporary storage of the data is Art 6 para 1 lit b (the necessity of the contract fulfillment).
2.5.1.3 Duration of Storage
In the case of an agreement conclusion, all data from the agreed relationship are stored until the end of product liability (currently ten (10) years).
2.5.2 Unzer E-Com GmbH
2.5.2.1 Description and Scope of Data Processing
A transmission of the data shall be made to external service providers for the purpose of debiting of the purchase price, to the transport company for the purpose of the delivery of the goods and to our tax adviser for the purpose the fulfillment of our tax obligations. These have committed themselves to comply with the applicable data protection regulations. The data passed on to our service providers in this context may only be used by them for fulfilling their duties. These Service Provider have committed themselves to comply with the applicable data protection regulations. A Data Processing Agreement (according to Article 28 of the GDPR) was concluded with Unzer E-Com GmbH.
2.5.2.2 Purpose of Data Processing
For the purpose of online purchasing and for subsequent agreement processing in the context of cookies, the IP data of the purchaser are stored, as well as name, address and credit card number. The data provided are required to fulfill the agreement and/or to carry out pre-agreed measures. Without this data we cannot conclude the agreement. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session. The log files are saved to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
2.5.2.3 Legal Basis for Data Processing
Our legitimate interest in data processing according to Art 6 para 1 lit f GDPR (legitimate interests).The data processing takes place on the basis of the legal regulations of the Art 6 para 1 lit a GDPR (consent) as well as Art 6 para 1 lit b (the necessity of the contract fulfillment). Our legitimate interest lies in ensuring the secure, efficient and reliable processing of online purchases. This includes verifying payment transactions, enabling delivery of goods, ensuring the integrity of our e-commerce processes.
2.5.2.4 Duration of Storage
Unzer E-Com GmbH stores your data depending on the duration of data processing. If the processing of your personal data is based on a granted consent, the personal data will be deleted as soon as you have revoked this consent for the future, unless their – temporary – further processing is necessary for the following purposes:
• Fulfillment of legal storage obligations, which may arise, for example, from the Business Code and the Federal Fiscal Code. The periods specified there for storage or documentation are up to ten years.
• Preservation of evidence within the framework of the legal statute of limitations.
2.5.2.5 Data Protection
If you object the data storage, Unzer E-Com GmbH will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. The objection can be made form-free and should preferably be addressed to:
Payolution GmbH, Am Euro Platz 2, 1120 Vienna, support@unzer.com
2.5.3 WooCommerce Privacy Policy
2.5.3.1 Description and Scope of Data Processing
We have integrated WooCommerce (an open-source shop system) to our website as a plugin. WooCommerce is a subsidiary company of Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). WooCommerce/Automattic collects user information when you enter into a text field on our website, such as email address, name, address, credit card or billing information. WooCommerce also sets a cookie in your browser to identify you as a user and serve interest-based ads.
Automattic Inc. is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection. At https://automattic.com/privacy you can find out more about data processing of Automattic Inc.
2.5.3.2 Purpose of Data Processing
We use WooCommerce on our website in order to offer our products in the most user-friendly way. The purpose is to improve the shopping experience and simplify order processing.
2.5.3.3 Legal Basis for Data Processing
The legal basis for this is Art 6 para 1 lit f GDPR (legitimate interests). The legitimate interest lies in enabling and facilitating the online shopping process, for which WooCommerce is used as the system.
2.5.3.4 Duration of Storage
WooCommerce will delete your data if it is no longer needed for the purposes it was saved for. Server log files for example, the technical data for your browser and your IP address will be deleted after about thirty (30) days. The data is stored on Automattic’s American servers.tech
2.5.3.5 Data Protection
You can also manage, delete or deactivate cookies individually in your browser. However, please note that deactivated or deleted cookies may have a negative impact on the functions of our WooCommerce online shop. Depending on the browser you use, managing cookies differs slightly see under section 3.6.
3 Cookies, other Tracking Tools and Web Analytics
3.1 Description and Scope of Data Processing
By using our website, you consent to our use of cookies. You can refuse to accept cookies in your browser settings. How this works in detail, please refer to the instructions of your browser manufacturer. If you decide against certain technical and / or functional cookies, the functionality of our website may be restricted. Some cookies remain stored on your device until you delete them.
3.2 Use of Cookies
Cookies are small text files that are stored in the visitor’s local browser cache. Using such cookies it is possible to recognize the visitor’s browser in order to optimize the website and simplify its use and are more user-friendly, effective and secure overall. This type of storage helps Evercyte to design our websites and our offers for you and makes it easier for you to use them in that, for example, certain input from you can be stored so that you are not required to enter this repeatedly. Data collected via cookies will not be used to determine the personal identity of the website visitor. Most browsers are set-up to accept these cookies automatically. In addition, you can deactivate the storing of cookies or adjust your browser to inform you before the cookie is stored on your computer. Because cookies allow you to take advantage of some of Evercyte’s features, we recommend that you leave them turned on. For instance, if you block or otherwise reject our cookies, you will not be able to add items to your shopping cart or proceed to checkout.
3.3 Cookies (Local Storage)
We use cookies that are implemented locally, meaning that any data collected is stored and processed exclusively on our own systems. No data is shared with third parties. The following cookies are stored locally only:
3.3.1 Google Fonts Local
3.3.1.1 Description and Scope of Data Processing
On our website we use Google Fonts, from Google Inc. (Gordon House, Barrow Street Dublin 4, Ireland). We integrated Google Fonts locally, so on our own webserver and not on Google’s servers. Through the local integration, it is possible for Evercyte to use fonts that Google provides free of charge without allowing Google servers to access our data. Thus, we do not send any data to Google Fonts. Data such as browser, operating system and IP address are stored.
Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection. You can find more details on data processing and retention in Google’s Privacy Policy: https://policies.google.com/privacy
3.3.1.2 Purpose of Data Processing
Google Fonts offers numerous fonts for free. Previously, we could use them without integrating them on our server. However, in order not to send any data to Google servers, we integrated the fonts onto our server. They now help us to make the website more user-friendly.
3.3.1.3 Legal Basis
The legal basis for this is Art 6 para 1 lit f GDPR (legitimate interests). Our legitimate interest lies in ensuring a visually consistent and user-friendly website, which improves readability, accessibility and overall user experience.
3.3.1.4 Duration of Storage
The data from the log files will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your data will be kept for the duration of a maximum of two (2) months.
3.3.2 Font Awesome Local
3.3.2.1 Description and Scope of Data Processing
On our website we use Font Awesome, of the company Fonticons (307 S. Main St., Suite 202, Bentonville, AR 72712, USA). We integrated Font Awesome locally, so on our own webserver and not on the companies’ servers. This allows Evercyte to make the website more user-friendly by using icons and fonts. Fonticons is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection.
3.3.2.2 Purpose of Data Processing
This site uses Font Awesome for consistent font rendering. In order to prevent any information transfer to different servers in this regard, we have downloaded the fonts to our server. This way we act privacy compliant and do not share data.
3.3.2.3 Legal Basis
The legal basis for this is Art 6 para 1 lit f GDPR (legitimate interests). Our legitimate interest lies in ensuring consistent and user-friendly website design, improving usability and readability of content for all visitors.
3.3.2.4 Duration of Storage
Through the local integration, it is possible for Evercyte to use without allowing servers to access our data. The data from the log files will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your data will be kept for the duration of a maximum of two (2) months.
3.3.3 WP Captcha
3.3.3.1 Description and Scope of Data Processing
WP Captcha is a WordPress plugin developed by WebFactory Ltd, located at S. Batusica 5, 10090 Zagreb, Croatia.. The free version of the plugin operates locally within the user’s WordPress installation and does not transmit data to WebFactory’s servers.
3.3.3.2 Purpose of Data Processing
The primary purpose of processing data through WP Captcha is to enhance the security of our website by preventing spam and unauthorized access. The plugin achieves this by integrating CAPTCHA mechanisms into comment forms, login pages, and other forms within the WordPress site. The data collected during the use of these CAPTCHA services is utilized to verify user interactions and protect the site from malicious activities.
3.3.3.3 Legal Basis
WP Captcha does not processes data, which does not allow identification of individual users and therefore does not constitute personal data within the meaning of the GDPR. The legal basis for the use of WP Captcha is Art 6 para 1 lit f GDPR (legitimate interests). Our legitimate interest lies in protecting our website from bot attacks.
3.3.3.4 Duration of Storage
WP Captcha does not store any data.
3.4 Third-Party Cookies
In addition to local cookies, we also use third-party cookies provided by external services. These cookies collect data about your usage of our website and share it with the respective third parties, in accordance with their own privacy policies. You can control the use of third-party cookies through the cookie banner. The following cookies are shared with third parties:
3.4.1 Borlabs
3.4.1.1 Description and Scope of Data Processing
We use BorlabsCookie (Rübenkamp 32, 22305 Hamburg, Germany). This tool stores your cookie consent and thus determines which cookies are enabled. These data are not shared with the provider of BorlabsCookie. The cookies that you have accepted are stored and used when you visit our website now and again.
3.4.1.2 Purpose of Data Processing
Borlabs allows you to manage the cookies that are set. Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered.
3.4.1.3 Legal Basis
The legal basis for this is Art 6 para 1 lit f GDPR (legitimate interests). Our legitimate interest lies in ensuring that the setting and management of cookies on our website complies with legal requirements, particularly those relating to informed user consent under data protection laws. Borlabs enables us to reliably record, store and manage consent preferences, ensuring that cookies are only set in accordance with the users choice.
3.4.1.4 Duration of Storage
Borlabs Cookie stores the data for a maximum of one (1) year.
3.4.2 LinkedIn
Our website contains only an external link to our LinkedIn profile. By clicking the link, you will leave our website and be redirected to the LinkedIn platform. Only then does the processing of your personal data by LinkedIn take place. For more information, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
3.5 Third-Party Cookies with Anonymized Data Only
Some third-party cookie providers follow the principle of storing only anonymized data. Since this data cannot be used to identify individuals, such cookies do not fall within the scope of the GDPR. Nevertheless, in the interest of transparency and user-friendliness, we aim to provide full and clear information about their use. The following cookies store anonymized data only:
3.5.1 WP Statistics Privacy Policy
3.5.1.1 Description and Scope of Data Processing
We use WP Statistics on our website from Veronalabs (5460 W Main St, Verona, NY 13478, United States). WP Statistics is a WordPress plugin that allows us to analyze visitor traffic directly on our server. Unlike many external analytics services, WP Statistics does not transmit personal data to third parties, as all data is stored locally on the web server.
The plugin can collect data such as:
• IP address (anonymized)
• country of origin, browser, operating system, and device type
• pages visited, referrer, and search queries on the website
• date and time of the visit
This information is used to evaluate how visitors use the website, in order to improve content and usability. WP Statistics only collects anonymized statistics on the use of our website. You cannot be identified as a person.
3.5.1.2 Purpose of Data Processing
The purpose of using WP Statistics is to analyze website traffic and visitor behavior to improve the site.
3.5.1.3 Legal basis
WP Statistics processes only anonymized data, which does not allow identification of individual users and therefore does not constitute personal data within the meaning of the GDPR. The use of WP Statistics is based on our interest pursuant to Art 6 (1) lit f GDPR in analyzing aggregated visitor behavior in order to detect technical issues, prevent misuse, and improve the functionality of the website. If you want to learn more about WP Analytics, you can view the company’s privacy policy at https://wp-statistics.com/privacy-and-policy/.
3.5.1.4 Duration of Storage
All data is retained locally on our web server. Your anonymized data will be stored on our web server until it is no longer needed for the purposes listed above.
3.6 Managing Cookies
You can disable all cookies that we use on our website by following these links in your browser. However, please note that deactivated or deleted cookies may have a negative impact on the functions of our website.
You may choose not to allow third- party cookies on your computer by visiting the Network Advertising Initiative opt-out page.
Please see the list below for a summary on how to manage your cookie settings.
Chrome: Cookie settings in Chrome are managed under Cookies within the Privacy section. You can delete specific cookies or clear all cookies and choose to allow or block cookies. Go to Clear, enable and manage cookies in Chrome for more information on these settings.
Internet Explorer: Cookie settings in Internet Explorer are managed by going to the Internet Options on the Tools menu, and then clicking the Privacy tab. The Privacy settings slider has six settings: Block All Cookies, High, Medium High, Medium (default level), Low, and Accept All Cookies. Visit How to Manage Cookies for more information on these settings.
Firefox: Cookie settings in Firefox are managed in the Options window’s Privacy panel. You can change your Firefox settings to allow you to approve or deny cookie storage requests, delete stored cookies automatically when you close Firefox, etc. See Settings for privacy, browsing history and do-not-track for more information on these settings.
If you would like more information about cookies, or how to control or delete them, then we recommend you visit www.aboutcookies.org for detailed guidance.
4 Your Rights
If personal data is processed by you, you are the affected person within the meaning of the GDPR and you are entitled to the rights described below.
4.1 Information
You have the right to receive free information from Evercyte at any time as well as confirmation of personal data stored about you and a copy of this data.
4.2 Correction
You have the right to rectification and/or completion if the personal data you process is incorrect or incomplete.
4.3 Restriction of Processing
You have the right to request the restriction of processing if one of the following conditions is met:
• The accuracy of your personal information is contested by you for a period of time that allows Evercyte to verify the accuracy of your personal information.
• The processing is unlawful, you refuse the deletion of personal data and instead require the restriction of the use of personal data.
• We no longer need your personal information for processing purposes, but you need it to assert, exercise or defend your rights.
• You have objection to the processing according to Art 21 para 1 GDPR and it is not yet clear whether our legitimate reasons prevail over yours.
4.4 Deletion
You have the right to have your personal data deleted without delay, if any of the following is true and if processing is not required:
• The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
• They revoke their consent on which the processing was based and lack any other legal basis for the processing.
• You object to the processing in accordance with Art 21 para 1 GDPR, and there are no legitimate reasons for the processing, or you object to the processing in accordance with Art 21 para 2 GDPR.
• The personal data were processed unlawfully.
• The deletion of personal data is required to fulfill a legal obligation under EU or national law to which we are subject.
4.5 Data Portability
You have the right to receive personally identifiable information you provide Evercyte in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance. In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by Evercyte to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
4.6 Objection
You have the right to object at any time to the processing of personal data relating to you which is “only” based on legitimate interests of Evercyte or third parties (Art 6 para 1 lit f GDPR). In the event of an objection, we will no longer process personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
4.7 Revocation of Consent
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
4.8 Right to File a Complaint
You also have the right to file a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at).
Please contact Evercyte regarding your rights under office@evercyte.com or write to: Evercyte GmbH, Leberstraße 20, 1110 Vienna.
Basically, we do not process data of people aged below 14. By submitting your consent, you confirm that you have reached the age of 14 or that the consent of your legal representative has been obtained.
4.9 Changes to this Privacy Policy
We may need to update this policy from time to time. We will do our best to notify you about significant changes by placing a prominent notice on our site.
5 Contact
If you have any problems, questions or suggestions, please feel to contact us:
Otto Kanzler, CEO
Leberstraße 20, 1110 Vienna, Austria
phone.: +43 699 107 09 401
mailto: office@evercyte.com
© Evercyte GmbH, Vienna, Austria, Last Update 18th of September 2025
previous privacy policy versions
07/2021 – 01/2023 Version July2021
02/2023 – 06/2023 Version February2023
07/2023 – 07/2023 Version July2023
08/2023 – 08/2024 Version Aug2023
09/2024 – 08/2025 Version Sep2024
09/2025 – Version Sep2025