Last Edited on [2023-05-02]

This Privacy Notice describes the personal data that Dong-A ST Co., Ltd. (hereafter “Dong-A”, “us”, “we”, “our”") collects through our website located at http://en.donga-st.com/Main.da that are specific to our product coded DMB-3115 in relation to all clinical trials and regulatory approvals in Europe and how we use and keep safe that information.

Dong-A as the Controller of the personal data has committed to comply with the General Data Protection Regulation N°EU 2016/679 (hereinafter, the "GDPR") and all EU applicable laws and regulations regarding data protection collectively referred as "Data Protection Laws". In compliance with the GDPR, we appointed Data Protection Officer listed below who performs his or her the tasks as required by the GDPR.

With this Privacy Notice, Dong-A aims at ensuring that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.

GENERAL WARNING AND USE OF SOCIAL MEDIA

Access to the Website implies the User’s full and unreserved acceptance of this Privacy Notice (hereinafter the “Notice”), as well as its general terms of use. The User acknowledges having read the information below.

The Notice is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which we may refer and whose privacy notices may differ. Dong-A cannot therefore be held responsible for any data processed on these websites or by third parties. This Notice also applies to any other website that Dong-A may operate.

We will only process your personal data in connection with specific purposes. We will keep them for no longer than necessary to fulfill the purposes for which we collected it, including any legal requirements.

Depending on each case, the processing will therefore be as follows:

We do not sell or trade your personal data to third parties.

However, Dong-A has contracted with the following Services Providers to manage the Website that may have access to your personal data:

- DA Information for Hosting.

Sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA), we are therefore committed to complying with the transfer rules under applicable Data Protection Laws and therefore ensure to:

You can contact our DPO (see contact details below) if you want to have more details about the mechanism supporting data transfer.

We process your personal data in a confidential manner and provide a sufficient and adequate level of protection of your personal data.

Your personal data is housed behind secured networks and are only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

According to the GDPR, you have the following rights:

Please note that all these rights are not absolute and will be assessed on a case-by-case basis by our Data Protection Officer (DPO).

If you would like to exercise your rights, please let us know by contacting our DPO at dong-a.dpo@mydata-trust.info.

You have also the right to lodge a complaint if you consider that your personal data is not processed in accordance with the GDPR.

If you are an EEA resident: You have the right to lodge a complaint with the Data Protection Authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement.

Please find the contact information of all Authorities in section 6 "Contacts".

This Notice is effective as of the date stated at the top of this page. We may change this Notice from time to time. Please refer back to this Notice on a regular basis.

If you have any questions or comments about this Notice or our practices regarding your personal data, please contact us.

Dong-A ST Co. Ltd., acting as Controller

64, Cheonho-Daero, Dongdaemun-Gu

Seoul 02587, Republic of Korea

email: st_ciso@donga.co.kr

telephone: +82 2 920 8254

Data Protection Officer

MyData-TRUST SA

Boulevard Initialis, 7 bt 3 – 7000 Mons (BELGIUM)

For EU Data Protection Authorities

https://edpb.europa.eu/about-edpb/about-edpb/members_en