Data Integrity and Privacy Policy

NextCell Pharma AB (reg. no. 556965-8361) (“NextCell”) is the datacontroller for the processing of your personal data, unless otherwise stated.NextCell takes measures to ensure that data is protected and that processing iscarried out in accordance with applicable data protection regulations as wellas our internal policies and procedures.

This policy describes how we collect, process, and share the personal datawe hold about you. “Personal data” means any information that can be used toidentify an individual.

Why we process your personal data

We process personal data for several reasons, primarily to carry out ourbusiness activities and fulfil our obligations. The most common reasons why weprocess your personal data are because you are a customer, have contacted uswith questions, are an employee, a partner, or in a similar relationship withus.

If you have been in contact with us, we may process your personal data tofulfil contractual obligations. In addition, we process personal data to complywith legal and regulatory requirements.

How we use your personal data and the legal basis

We use your personaldata to:

Personal data and other information provided by you may be stored andprocessed in both digital and paper formats.

Your personal data may also be disclosed to third parties where necessaryto fulfil agreements with you. Examples include:

How long we retain your personal data

We keep your personal data for as long as it is necessary for the purposesfor which it was collected. For example, personal data is required to ensurequality and traceability for the services we provide, particularly in relationto quality analysis of drug products.

As long as you are a customer, the archiving period is 30 years afterthe conclusion of service provision.

How we protect your personal data

Protecting your personal data is a key part of our operations. We haveimplemented appropriate technical, organisational, and administrative securitymeasures to safeguard the data we process.

Your rights under data protection law

You have the right to:

Contact us or the supervisory authority

If you wish to exercise your rights, or if you have questions or commentsregarding this policy, please contact NextCell:

NextCell Pharma AB
Reg. no. 556965-8361
Novum, Hälsovägen 7
SE-141 57 Huddinge
Sweden
info@nextcellpharma.com

NextCell has appointed a Data Protection Officer who will respond to yourrequest.

If you are not satisfied with the way we handle your queries, you may lodgea complaint with the competent supervisory authority, currently the SwedishAuthority for Privacy Protection (IMY).