Company: SMNR
Filing Date: 2025-08-12
Form Type: S-4/A
Source: 0001193125-25-178821
Chunk: 664

Company: Semnur Pharmaceuticals, Inc.
Filing Date: 2025-08-12
Form: S-4/A
Chunk 664
---
 to which we are subject. We will only transfer personal data in accordance with the requirements of the DPA, and will apply appropriate technical and organizational information security measures designed to protect against unauthorized or unlawful processing of the personal data and against the accidental loss, destruction or damage to the personal data.

In our use of this personal data, we will be characterized as a “data controller” for the purposes of the DPA, while our affiliates and service providers who may receive this personal data from us in the conduct of our activities may either act as our “data processors” for the purposes of the DPA or may process personal information for their own lawful purposes in connection with services provided to us.**

<div align='center'>406</div>

We may also obtain personal data from other public sources. Personal data includes, without limitation, the following information relating to a shareholder and/or any individuals connected with a shareholder as an investor: name, residential address, email address, contact details, corporate contact information, signature, nationality, place of birth, date of birth, tax identification, credit history, correspondence records, passport number, bank account details, source of funds details and details relating to the shareholder’s investment activity. Who this affects If you are a natural person, this will affect you directly. If you are a corporate investor (including, for these purposes, legal arrangements such as trusts or exempted limited partnerships) that provides us with personal data on individuals connected to you for any reason in relation your investment in the company, this will be relevant for those individuals and you should transmit the content of this Privacy Notice to such individuals or otherwise advise them of its content. How the company may use a shareholder’s personal data The company, as the data controller, may collect, store and use personal data for lawful purposes, including, in particular:

| (a) | where this is necessary for the performance of our rights and obligations under any purchase agreements; |

| (b) | where this is necessary for compliance with a legal and regulatory obligation to which we are subject (such as compliance with anti-money laundering and the FATCA/Common Reporting Standard requirements); and |

| (c) | where this is necessary for the purposes of our legitimate interests and such interests are not overridden by your interests, fundamental rights or freedoms. |

**Should we wish to use personal data for other specific purposes (including, if applicable, any purpose that requires your consent), we will contact you. Why we may transfer your personal data In certain circumstances we may be legally obliged to share personal data