ABOUT US OUR SCIENCE OUR PIPELINE OUR MEDICINES MINORITY INVESTMENTS INVESTORS SEARCH NEWSROOM SCIENCE CENTER - CHISHIKI CAREERS CONTACT Privacy Notice Printable Version Table of Contents Who does this privacy notice apply to? Purpose of this privacy notice About us How to contact us What personal data we collect How we collect and receive personal data Whom we collect personal data about How we use your personal data If you fail to provide your personal data How we obtain your consent Third party links and services Sharing personal data Transfers of your personal data How long we keep your personal data Confidentiality and security of your personal data Personal data of children How to access your information and your other rights Changes to this privacy notice Privacy Notice Sosei Heptares Group Last updated: November 2020 Scope This Privacy Notice (“Privacy Notice”) sets out how Sosei Heptares processes your personal data in connection with its business including the provision of the Sosei Heptares website at https://soseiheptares.com/ (the “Site”), and provision of services (together “Services”). Sosei Heptares places great importance on the protection of your personal data and is committed to complying with all applicable data protection laws and regulations. 1. Who does this privacy notice apply to? This Privacy Notice specifically applies to the processing of personal data of clients, suppliers, shareholders, job applicants, trial participants and other third parties that we interact with during the day to day provision of our Services. If you are engaged as a worker for Sosei Heptares, please see our workplace privacy notice which sets out further information about how we may process your personal data in connection with your employment and/or engagement. This Privacy Notice applies to the processing of personal data carried out by any Sosei group company within the United Kingdom (“UK”), Japan and the European Union. 2. Purpose of this privacy notice This Privacy Notice explains our approach to any personal data that we might collect from you or which we have obtained about you from a third party, and the purposes for which we process your personal data. This Privacy Notice also sets out your rights in respect of our processing of your personal data. For more information click here. 3. About us Our Services are made available by various companies in the Sosei Heptares group of companies (each a “Group Company”). Where this Privacy Notice refers to “Sosei” “we”, “us, “our”, this means one or more of the particular Group Companies that provide the Service to you. For more information about our Group Companies, including their respective roles and responsibilities click here. 4. How to contact us If you have any questions about this Privacy Notice or want to exercise your rights set out in this Privacy Notice, you can contact us by: using the “Contact Us ” form on our Site, found under either the Contact page or the Contact IR page. for exercising your rights: sending an email to ExerciseRights@soseiheptares.com for general queries: sending an email to Feedback@soseiheptares.com writing to the address of the relevant company as set out in Section 3. 5. What personal data we collect In the course of providing you with Site and Services, we may collect the following types of personal data about you: Contact Data, such as: name; zip code address; email address; telephone number; and the name of your organisation; Health Data (to the extent you participate in a Heptares sponsored trial), such as: pre-existing medical conditions; trial results; and other relevant health data including data about lifestyle and genetics/response to medication; Payment Data, such as: bank and account details; and information relating to a particular transaction; Profile Data, such as: user interests and preferences; user contact preferences; whether you have participated in any trials; and information about any of our events that you have attended Behavioural Data, such as: data relating to your browsing activity, through the use of cookies, pixel tags and other similar technologies; and when your current or previous sessions started Technical Data, such as: IP address; browser type and operating system; geolocation, to ensure we’re showing you the correct notices and information; and any other unique numbers assigned to a device. Job Applicant Data, such as first name and last name; date of birth; gender; country; nationality; academic qualifications; employment history; remuneration package; entitlement to work information; and disability information. 6. How we collect and receive personal data We collect and receive personal data using different methods: Personal data you provide to us. For more information click here. Personal data we generate about you. For more information click here. Personal data we collect using cookies and other similar technologies. For more information click here. Personal data received from third parties. For more information click here. Publicly available personal data. For more information click here. 7. Whom we collect personal data about We collect and process personal data from the following people: Participants. For more information click here. Site visitors. For more information click here. Visitors to our offices or operations facilities. For more information click here. Event attendees. For more information click here. Personnel that work for our clients, partners and suppliers (including subcontractors and personnel who work for us as freelancers or contractors). For more information click here. Job applicants. For more information click here. Shareholders. For more information click here. 8. How we use your personal data We use your personal data for the following purposes: Provision of our Service. For more information click here. Use of our Site. We collect and maintain personal data that you submit to us during your use of our Site in the following ways. Contact us. For more information click here. Your contributions to our Site. For more information click here. Insight, analysis and retargeting through cookies. For more information click here. General enquiries. For more information click here. Hosting and managing events. For more information click here. Surveys and feedback. For more information click here. Marketing activities. We carry out the following marketing activities using your personal data: Postal marketing. For more information click here. Email marketing. For more information click here. Investor/shareholder relations. For more information click here. Recruitment. For more information click here. Receipt of services from suppliers. For more information click here. Security. For more information click here. Business administration and legal compliance. For more information click here. Any other purposes for which we wish to use your personal data that are not listed above, or any other changes we propose to make to the existing purposes, will be notified to you using the contact details we hold for you. 9. If you fail to provide your personal data Where we are required by law to collect your personal data, or we need to collect your personal data under the terms of a contract we have with you, and you fail to provide that personal data when we request it, we may not be able to perform the contract we have or are trying to enter into with you. This may apply where you do not provide the personal data we need in order to provide the Services you have requested from us or to process an application for employment with us. In this case, we may have to cancel your application or the provision of the relevant Services to you, in which case we will notify you. 10. How we obtain your consent Where our use of your personal data requires consent, you can provide such consent: at the time we collect your personal data following the instructions provided; or by informing us using the contact details set out in the “How to Contact Us ” section above. 11. Third party links and services Our Site may contain links to third party websites and services. When you use a link to go from our Site to another website (even if you don’t leave our Site) or you request a service from a third party, this Privacy Notice shall not apply to the processing of your personal data carried out by the relevant third party provider. For more information click here. 12. Sharing personal data We will only share personal data with others when we are legally permitted to do so. When we share personal data with others, we put contractual arrangements and security mechanisms in place to protect the personal data shared, including to ensure where applicable that the third parties do not use the personal data for their own purposes, and to comply with our data protection, confidentiality and security standards and obligations. For more information click here. 13. Transfers of your personal data The Sosei Group Companies are located in Japan, the United Kingdom and Ireland. Therefore, when you submit personal data to us, whether through your interactions with our Site, office, branch offices and operations facilities you acknowledge that your personal data may be transferred to a country outside the UK and the European Economic Area (“EEA”) (such as Japan) where it will be stored and processed by us and relevant third parties for the purposes set out in this Privacy Notice (see section 12). Some countries do not have the same data protection laws as the UK and the EEA. In particular, non-EEA countries may not provide the same degree of protection for your personal data, may not give you the same rights in relation to your personal data and may not have a data protection supervisory authority to help you if you have any concerns about the processing of your personal data. However, when transferring your personal data to countries outside of the UK or the EEA, we will comply with our legal and regulatory obligations in relation to your personal data, including having a lawful basis for transferring personal data and putting appropriate safeguards in place to ensure an adequate level of protection for the personal data. We will take reasonable steps to ensure the security of your personal data in accordance with applicable data protection laws. For more information click here. 14. How long we keep your personal data We will not retain your personal data any longer than necessary to fulfil the purposes the data was collected for or to fulfil our legal obligations, in line with our retention policy. The retention periods may differ depending on which group entity is data controller, in line with local requirements. If any personal data is only useful for a short period (e.g. for a specific event or marketing campaign or in relation to recruitment), we will not retain it for longer than the period for which it is used by us. If we receive your application through our “Career Page” and the application is unsuccessful, we will hold your data on file for up to 12 months after the end of the relevant recruitment process. At the end of that period, or on your request, your data will be deleted or destroyed. If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in a new privacy notice. If you have opted out of receiving marketing communications from us, we will need to retain certain personal data on a suppression list indefinitely so that we know not to send you further marketing communications in the future. If you wish to receive further specific information on the applicable retention periods, please reach out to us using the contact details provided in the “How to Contact Us ” section above. 15. Confidentiality and security of your personal data We are committed to keeping the personal data you provide to us secure and we will take reasonable precautions to protect your personal data from loss, misuse or alteration. For more information click here. 16. Personal data of children We do not specifically target our Site or our Services at children. However, due to the nature of our organisation and the Services we provide, we may from time to time collect and process personal data relating to individuals under the age of 18. Where we do so, we will comply with all applicable laws and regulations relating to the processing of personal data of minors. However, if you are under the age of 16, you must ask a parent or guardian for permission before using our Site and our products and services. If you are a parent or guardian, please supervise your child’s use of our Site and our Services. 17. How to access your information and your other rights You have the following rights in relation to the personal data we hold about you. If you would like to exercise any of these rights, please contact us using the confidential email ExerciseRights@soseiheptares.com or the relevant company addresses set out in Section 3 above. Please note that some of these rights are subject to certain exemptions and limitations. Your right of access. For more information click here. Your right to rectification. For more information click here. Your right to erasure. For more information click here. Your right to restrict processing. For more information click here. Your right to data portability. For more information click here. Your right to object. For more information click here. Your rights in relation to automated decision-making and profiling. For more information click here. Your right to withdraw consent. For more information click here. Your right to lodge a complaint with the supervisory authority. For more information click here. 18. Changes to this privacy notice We may make changes to this Privacy Notice from time to time. For more information click here. TERMS OF USE PRIVACY NOTICE COOKIE POLICY MODERN SLAVERY STATEMENT © Sosei Group Corporation 2021 Sosei Heptares is the corporate brand of Sosei Group Corporation (TSE:4565) Cookie Preference Centre We and our partners use cookies and similar technologies (“cookies”) on our website. Some of these cookies are essential, for instance helping you to see the website in your chosen language while others help us to improve your experience by providing performance and analytical insights into how the site is being used. For more detailed information on the cookies we use, please check our External Link Icon I Do Not Accept Essential Cookies Essential cookies enable core functionality. The website cannot function properly without these cookies and can only be disabled by changing your browser preferences. Analytics/Performance Cookies Analytical cookies help us to improve our website by collecting and reporting information on its usage. Analytics/Performance Cookies On Off Cookie Control