Privacy Statement and Handling of Personal Data

I. Handling of data received during navigation on AUROBAC THERAPEUTICS’ Website

The Website aurobac-tx.com (hereinafter the “Website”) is provided by AUROBAC THERAPEUTICS SAS. For further information regarding the provider of the Website, please refer to the Legal Notice.

1. Access to the Website

When you visit the Website, your browser transfers certain data to our web server. This is done for technical reasons and required to make the requested information available to you. To facilitate your access to the Website, the following data are collected, used, and stored for 13 months:

• • IP address
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of request

2. Use of forms on our Website

Our Website contains contact details and contact forms that allow you to contact us directly for any questions or inquiries you may have, for subscribing to our mailing list and receiving our news, or if you would like to get in touch about a possible collaboration. In the event that you would like to contact us, please read and follow the instructions below.

We will collect, process, and use the information provided by you via our email addresses or our contact forms exclusively for the processing of your specific request.

Apply for a job / Submit your unsolicited application

You can apply for a job or submit your unsolicited application by email at jobs@aurobac-tx.com. The data communicated by you will be collected and processed by our human resources department and Managers to examine your application as part of the recruitment process of our future employees. The legal basis for this processing is the execution of pre-contractual measures.

In order to meet this purpose, only personal information strictly necessary to assess your ability to occupy the job offered or to measure your professional skills will be requested during the selection phase. To this end, we will ask you for data relating to your identity, your contact details, the diplomas you have obtained, your professional experience, your professional skills and aptitudes in relation to the position offered. These data may be communicated to us via your CV and/or motivation letter you can send by email to jobs@aurobac-tx.com. They can also be communicated during the selection interview. Failure to provide these data will make it impossible for you to participate in the recruitment process.

Your personal data will be kept for the time necessary to complete the recruitment process. Data concerning selected candidates may be stored in an intermediate archive for evidentiary purposes in order to protect against possible actions for discrimination, for a maximal period of 6 months from the end of the recruitment process. At the end of this period, the data will be destroyed. Personal data relating to unsolicited applications that are not accepted will be destroyed as soon as we have informed you that your application has been unsuccessful.

Subscription to our mailing list / Partnering

You can subscribe to our mailing list and receive AUROBAC THERAPEUTICS’ public information, or submit partnership project to us by completing dedicated contact form on our Website. Based on your prior consent, we will collect via these forms the following information: first name, last name, email address, company name and type. This information will be used by our Business Development team to process your request as quickly as possible. We will use the indicated email address to provide you with our newsletters and public information. Nevertheless, you may, after subscribing, and at any time and without having to justify yourself, unsubscribe freely by writing to contact@aurobac-tx.com.

External services or content on our Website

We include third-party services and/or content on our Website. When you use such third-party services or when third-party content is displayed, communication data are exchanged between you and the respective provider for technical reasons.

The respective provider of the services or content may also process your data for own additional purposes. To the best of our knowledge, we have configured the services and content of providers known to process data for own purposes in such a way that either any communication for other purposes than to present their services or content on our Website is blocked, or communication only takes place once you have actively opted to use the respective service. However, since we have no control over data collected and processed by third parties, we are not able to provide binding information regarding the scope and purpose of such processing of your data.

For further information regarding the scope and purpose of such collection and processing of your data, please consult the privacy statements of the providers whose services and/or content we include and who are responsible for the protection of your data in this context:

• • Twitter
  • LinkedIn

Use of cookies on our Website

A cookie is a data file that is stored on your computer or mobile device by a website’s server; only that server will be able to retrieve or read the contents of that cookie.

Each cookie is unique and contains some anonymous information (e.g., a unique identifier, the site name, some digits, and numbers).

Most browsers allow cookies. However, users can block the use of cookies or remove cookies that are already installed on their browser if they wish. Disabling cookies may prevent you from accessing certain features on our Website.

AUROBAC Website uses:

• • Essential cookies that are required to provide certain basic features. You cannot disable these essential cookies.
  • Functionality cookies that record information about choices you’ve made and allow us to tailor the Website to you.
  • Performance cookies that help us improve our Website and provide you with a better user experience, by tracking your use.
  • Social media cookies that are used to advertise and re-target content on social media. Such cookies are subject to your prior consent. You will be asked to renew your consent to cookies every year, when connecting to our Website.

For more information about cookies, please visit allaboutcookies.org

II. Transfer of data for commissioned processing

For the processing of your data, we may use specialized service contractors. Such service contractors are carefully selected by AUROBAC THERAPEUTICS and meet strict requirements, formalized in executed contracts. They will only process your personal data upon our instructions and strictly in accordance with our directives and in accordance with the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”).

III. Processing data outside the UE/the EEA

Your data may also be processed in countries outside the European Union (“EU”) or the European Economic Area (“EEA”), which may have a lower data protection level than European countries. In such cases, AUROBAC will ensure that a sufficient level of protection is provided for your data, e.g., by concluding specific agreements with our contractual partners, or we will ask for your explicit consent to such processing.

IV. Information regarding your rights

In accordance with the applicable data protection regulation (“GDPR”), you have the following rights on your data:

• • Right of information about and access to your personal data we store.
  • Right to request the correction, deletion, or restricted processing of your personal data.
  • Right to object to the processing of your personal data, if you have chosen to subscribe to our mailing list. In this objective, you can withdraw your consent as specified in section 3 above.
  • Right to data portability.
  • Right to file a complaint with a data protection authority.

Subject to proof of identity, you can exercise your rights by contacting our company Data Protection Officer at the following address:

AUROBAC THERAPEUTICS
Attn: Data Protection Officer
29 Avenue Tony Garnier
69007 Lyon
France
or by email to: dpo@aurobac-tx.com

In the event of failure to comply with the above provisions, the user may file a complaint with the CNIL (Data Protection Authority in France):

Commission Nationale de l’Informatique et des Libertés
Service des plaintes
3 Place Fontenoy
TSA 80715
75334 Paris cedex 07
France

V. Amendment of our privacy statement and processing personal data

We are committed to a policy of continuous improvement of our privacy policy and the processing of personal data, especially in compliance with the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”). Thus, during this process of continuous improvement, we will be able to update this policy. Any amendments become effective upon publication on our Website. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.

Version of 21/09/2023