CPC Biotech Privacy Policy

To the extent permitted by applicable law, CPC Biotech may also use your personal information as we believe to be necessary or appropriate:

• Under applicable law, including laws outside your country of residence;
• To comply with legal process;
• To respond to requests from public and government authorities, including public and government authorities outside your country of residence, where strictly required, necessary, and proportionate;
• To investigate and resolve complaints, grievances or misconduct allegations;
• Health and safety purposes;
• Defending legal claims;
• To enforce our terms and conditions;
• To protect our rights, privacy, safety or property, and/or that of our Affiliates, you or others; and
• To allow us to pursue available remedies or limit the damages that we may sustain.

You can choose not to provide us with your personal information, but in some instances, we may not be able to provide our services to you if you do not share your personal information.

If you are in the US, we use Sensitive Personal Information for legitimate business purposes, including to (i) perform services or provide goods reasonably expected by an average person; (ii) detect security incidents; (iii) resist malicious, deceptive or illegal actions; (iv) ensure the physical safety of individuals; (v) for short-term, transient use; (vi) perform or provide internal business services; or (vii) verify or maintain the quality or safety of a service or device. We do not sell or share (as defined under California law) any Sensitive Personal Information. If you are based in the EEA/UK, we confirm that we do not process any Sensitive Personal Information, unless you express consent to such processing or under exceptional circumstances as listed in the table above.

Cookies and Other Technologies

We collect certain information through our use of cookies and similar technologies. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy at https://www.cpc-bio.com/cookie-policy/. You have options with respect to which non-essential cookies you accept. You can make your choices using our cookie tool. Some web browsers have “Do Not Track” or similar features that allow visitors to tell each website they visit that they do not want their activities on that website tracked. There is no uniform standard for implementing and recognizing “Do Not Track” signals. For that reason, at present, our website does not respond to “Do Not Track” signals.

Global Privacy Control (GPC) allows individuals to automatically signal their privacy preferences to websites and other online services through their browser or through an extension. If we receive a GPC signal to opt out of website tracking, we will honor such requests.

3. Marketing

Where required by local law, we will obtain your prior consent:

• In order to send you marketing communications about CPC Biotech, and
• In order to provide your personal information to affiliated companies within the CPC Biotech family of companies for their marketing purposes, and
• In order to provide your personal information to other partners for joint marketing efforts.

Please note that you always have the right to withdraw your consent. If you would like to unsubscribe or opt-out from our marketing, please contact us via e-mail at info@cpc-bio.com or you can call us at +1 (651) 645-0091. Otherwise, we may contact you by email, phone, fax, mail, or other means unless you direct us not to do so.

We may use your personal information for our own marketing purposes, including but not limited to notifying you of new services, offers or other information via mail, email, telephone, text message, and other means. We will only do this with your consent where required.

If you have previously consented but no longer want us to use your personal information for marketing purposes or to provide your personal information to CPC Biotech Affiliates or other partners for their marketing purposes, you may opt out of such uses by notifying us in accordance with the procedure set forth below under Sections 11 to 13 of this Notice.

4. Disclosures of Personal Information for Business Purposes

We may disclose your personal information to third-party service providers (including contractors who provide services to us) to assist with any of the uses of personal information described above. Additionally, your personal information may be provided to marketing automation platforms that we use to assist us in understanding who is visiting our website. For further information, see our Cookie Notice at https://www.cpc-bio.com/cookie-policy/.

We may also disclose your personal information to third parties if disclosure is required to comply with applicable laws or regulations; comply with legal process or a court order; to respond to requests from public and government authorities; or if disclosure is necessary to enforce our Terms of Use; to protect your safety or security; to protect our rights, the safety and security of our site and property or that of CPC Biotech Affiliates or third parties; to allow us to pursue available remedies or limit the damages we may sustain. We may disclose or transfer your personal information to a third party if CPC Biotech enters into, or is involved in, a business transaction such as a merger, acquisition, reorganization, or sale of some or all of its assets.

No Sale of Personal Information: We do not sell your personal information.

5. Security and Confidentiality

We are committed to ensuring that your personal information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the personal information we collect online. However, data security incidents and breaches can occur due to a variety of factors that cannot reasonably be prevented; therefore, we cannot guarantee the security of your data. Additionally, we are not able to guarantee the confidentiality of non-confidential data such as feedback, questions, comments or ideas that you voluntarily provide to us (e.g., via the “Contact Us” link on our home page or similar features on the Site). We reserve the right to use and disclose such non-confidential information as we deem appropriate in compliance with applicable law.

6. How Long Will We Hold Your Personal information

As a general rule, your personal information will only be retained for the period necessary for the accomplishment of the purposes for which such information was collected. We will retain your personal information for as long as:

• We have a relationship with you.
• We are required by law.
• We need to in order to protect ourselves as a business or protect any other third party.

If you have any questions about our retention policy, please contact us using the details set out above.

7. Transfers of Personal Information

As a global organization, we may transfer your personal information across borders. CPC Biotech is based in the US, although our Affiliates are located in countries worldwide. This means that if you interact with our UK or EEA Affiliates, your personal information could be transferred to our company in the US. Where we are required to protect a transfer of personal information across borders, we will implement appropriate safeguards (such as European Commission-approved Standard Contractual Clauses or an intercompany agreement with appropriate contractual protections) to protect that personal information. Please contact us using our details above should you require further information about the contractual protections we use.

8. Links to Other Websites

The CPC Biotech website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any personal information which you provide whilst visiting such sites, and such sites are not governed by this Notice. You should exercise caution and look at the privacy statement applicable to the website in question.

Our Site also uses plug-ins from these social media platforms: LinkedIn and YouTube. You can read more regarding how these social media platforms process your data at the following links:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• YouTube: https://policies.google.com/privacy?hl=en-GB

We have a fan page or a company page on LinkedIn that you can use or visit. For that page, we act as a joint controller with the social media platform for the collection of your personal information.

You can read more regarding our joint controllership with the platforms at the following link:

• LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum

9. Personal Information of Minors

We do not knowingly collect or allow the collection of personal information from persons under the age of 18. If you are the parent or guardian of a person under the age of 18 and believe that the person has provided personal information to us, please contact us via e-mail at info@cpc-bio.com or you can call us at +1 (651) 645-0091.

10. Contact Us

Any inquiries about this Notice, updates to your personal information, requests (including those regarding the exercise of your rights), and questions can be directed to us via e-mail at info@cpc-bio.com, or you can call us at +1 (651) 645-0091.

11. Updates to This Notice

We may update this Notice by posting a new version on our website. If we update this Notice in a way that significantly changes how we use your personal information, we will bring these changes to your attention where reasonably possible. Otherwise, we recommend that you periodically review this Notice to be aware of any other revisions.

12. Additional California Privacy Disclosures

These Additional California Privacy Disclosures supplement the information contained in the Notice. These Disclosures apply only to individuals residing in California.

The types of personal information we collect, the manner in which we collect it, and the parties to whom we disclose it can be found in the “Personal Information We Collect: Sources, Purposes, Categories, and Third-Party Disclosures” section of the Privacy Notice.

We may use and disclose personal information for the business and commercial purposes detailed in the “How We Use Your Personal Information” and “How We Disclose Personal Information” sections of the Privacy Notice.

We retain your information as described in the “How Long Will We Hold Your Personal Information” section of the Privacy Notice. We do not knowingly sell the personal information of minors under the age of 18.

A. Summary of Privacy Rights

California law provides Californians with the following rights and choices regarding their Personal Information.

(i) Correct: Californians have the right to request the correction of their inaccurate Personal Information.

(ii) Delete: Californians have the right to request the deletion of their Personal Information unless an exception applies, including but not limited to:

• The data is necessary to complete a transaction for that person.
• The data is necessary to fulfill a warranty or support a product recall.
• The data is necessary to provide goods or services requested by that person.
• The data is necessary to perform a contract between CPC Biotech and that person.
• The data is reasonably used within the context of the ongoing business relationship between CPC Biotech and that person.
• CPC Biotech uses the data to identify and repair issues with our Services.
• CPC Biotech must retain the data to comply with a legal obligation.

(iii) Do Not Sell/Share: If CPC Biotech sold or shared Personal Information, Californians have the right to opt out of CPC Biotech’s sale/sharing of their Personal Information.

(iv) Freedom from Discrimination: CPC Biotech may not discriminate against Californians who exercise their privacy rights.

(v) Limit: Californians may have the right to limit CPC Biotech’s use or disclosure of their Sensitive Personal Information as defined under California law if Sensitive Personal Information is used for purposes other than those expressly permitted by law.

(vi) Know: Californians have the right to know what Personal Information is or has been collected by CPC Biotech.

B. Exercising Your Rights and How We Will Respond

To exercise any of the rights above, or to ask a question, contact us via e-mail at info@cpc-bio.com, or you can call us at +1 (651) 645-0091.

C. Verification of Identity – Access, Correction, or Deletion Requests

We will ask you for identifying information and attempt to match it to information that we maintain about you. We will only use the Personal Information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to your request. We will notify you to explain the basis of the denial.

D. Authorized Agents

You may designate an agent to submit requests on your behalf. The agent must be a natural person or a business entity.

If you would like to designate an agent to act on your behalf to request or delete Personal Information, you and the agent will need to comply with our verification process: If the agent submits requests to access, know or delete your Personal Information, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with California law pertaining to powers of attorney.

E. California Shine the Light Law

California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents that have an established business relationship with a business to annually request, free of charge, information about certain categories of Personal Information a business has disclosed to third parties for those parties’ direct marketing purposes in the preceding calendar year. For information and to make a request, contact us via e-mail at info@cpc-bio.com, or you can call us at +1 (651) 645-0091.

13. Additional U.S. State Privacy Disclosures

These Additional U.S. State Privacy Disclosures supplement the information contained in the Privacy Notice. These Disclosures apply only to residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Consumer Privacy Rights

You may have the following rights, subject to any applicable exemptions or limitations:

• Right to Access. You have the right to confirm whether we are processing your Personal Information and to access such Personal Information, including in some states, obtaining a specific list of third parties to which we disclose personal information.
• Right to Correct. You have the right to request that we correct inaccurate Personal Information that we maintain about you.
• Right to Delete. You have the right to request that we delete your Personal Information under specific circumstances.
• Right to Opt-out. You may have the right to object or opt out of certain types of processing, including: (1) processing for the purpose of targeted advertising, (2) processing for the purpose of the sale of Personal Information, and (3) processing for the purpose of certain types of profiling and automated decision-making.
• Right to Data Portability. You have the right to request a copy of your Personal Information in an accessible format.
• Right to Equal Service. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of our websites, services, or properties.
• Right to Appeal. If we do not grant your consumer request, you may have the right to appeal that denial.

You can exercise your privacy rights as described in “Submitting a Privacy Rights Request,” below.

Submitting a Privacy Rights Request

To exercise any of the state rights above, please submit a request to us via e-mail at info@cpc-bio.com or you can call us at +1 (651) 645-0091.

.Making a consumer request does not require you to create an account with us. Applicable law may limit the number of times that you can submit a particular request within a 12-month period.

You can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable law.

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use the Personal Information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

14. ADDITIONAL INFORMATION FOR RESIDENTS OF EEA AND UK

If you are based in the EEA/UK, you have the following rights over your Personal Information: