Updated：December 18，2024
Effective：December 25，2024

Dear Users,

Thank you for visiting the Official Website of Abogen Biosciences (http://www.yumkoi.com.cn, hereinafter referred to as “Official Website”). The Official Website of Abogen Biosciences is operated by Suzhou Abogen Biosciences Co., Ltd. and relevant personal information handlers include Suzhou Abogen Biosciences Co., Ltd. and its Affiliates (hereinafter referred to as “Abogen Biosciences” or “We”). We are fully aware of the importance of personal information to you and will do our best to ensure the security of your personal information. We will protect your personal information in accordance with the requirements of national laws and regulations, adhering to the principles of legality, legitimacy, necessity, and good faith. In order to help you understand what personal information We have collected through the Official Website and how We use, store, share, and transfer this information when you visit our Official Website, We have prepared " Personal Information Protection Policy of Abogen Biosciences Official Website" (hereinafter referred to as “This Policy”). Please read This Policy carefully, especially the content in bold. If you have any questions, comments, or suggestions, you can contact us through the contact information in Section 11 of This Policy.

This Policy will help you understand the following:

I.Scope of This Policy
II.How We Collect and Use Your Personal Information
III.Exceptions to Obtaining Authorization and Consent
IV.How We Use Cookies
V.How We Store Your Personal Information
VI.How We Share, Transfer, and Disclose Your Personal Information
VII.How We Protect Your Personal Information
VIII.Your Rights
IX.Protection of Personal Information of Minors
X.Changes and Revisions to This Policy
XI.How to Contact Us
XII.Effectiveness of This Policy

I. Scope of This Policy

This Policy applies to the services We provide to you through our Official Website. It is important to note that This Policy does not apply to services provided to you by third parties. For example, services or websites linked through our Official Website are independently provided by third parties, who will bear sole responsibility for processing your personal information in accordance with their own policies or user agreements.

We may develop specific personal information protection policies, statements, or notices (hereinafter referred to as “Specific Policies”) for particular online or offline services or products. In cases where Specific Policies contain specific provisions, those policies will take precedence. For matters not covered by the Specific Policies, This Policy will apply.

II. How We Collect and Use Your Personal Information

“Personal information” refers to any information, recorded electronically or otherwise, that can identify a specific natural person or reflect the activities of a specific natural person, either alone or in combination with other information.

When you use the "Join Us" – "More job opportunities" feature on our Official Website, you will be redirected to a recruitment page provided by a third party, Moka and its affiliates (“Moka”), which We have engaged. If you log in, browse job positions, or submit applications on that page, you will need to review and agree to the privacy policy provided by Moka. Upon receiving your authorization and obtaining your job application information through our commissioned website, We will strictly require ourselves and the third parties We engage to process your employment-related information solely for the purposes you have authorized. We will also require these third parties to implement protective measures that meet or exceed the level of information security stated in This Policy.

Please note that We also collect, use, and share aggregated data, such as statistical or structural data. Aggregated data may originate from your personal information but is not considered personal information, as it does not relate to an identified or identifiable natural person. We are entitled to use such data for any lawful purpose (e.g., aggregating your usage data to determine the number of users accessing a specific website feature, study consumer and market preferences, improve existing products and services, or conduct financial forecasting and modeling). If We combine or associate aggregated data with your personal information in a way that enables direct or indirect identification of you, We will treat the combined data as personal information and process it in accordance with This Policy.

III. Exceptions to Obtaining Authorization and Consent

According to relevant laws and regulations, the collection and use of your personal information in the following circumstances do not require your authorization and consent:

1.When necessary for us to fulfill legal or regulatory obligations;

2.When related to national security or defense security;

3.When related to public safety, public health, or significant public interests;

4.When related to criminal investigations, prosecutions, trials, or enforcement of judgments;

5.When it is necessary to protect the significant legal rights and interests, such as life and property, of the individual whose information is being collected or other individuals, yet obtaining your consent is difficult;

6.When necessary to enter into or perform a contract at your request;

7.When the personal information collected has been disclosed by you to the public;

8.When personal information is collected from information that has been legally disclosed, such as lawful news reports or government disclosures;

9.When necessary to ensure the safe and stable operation of the products or services provided, such as detecting or addressing product or service malfunctions;

10.When necessary for lawful news reporting;

11.When necessary for statistical or academic research conducted in the public interest by academic institutions, provided that personal information included in the research results shared with the public is de-identified;

12.Other circumstances stipulated by laws, regulations, or national standards.

IV. How We Use Cookie

To ensure the proper functioning of our products, We store small data files known as Cookie on your computer or mobile device. Cookie typically contain identifiers, site names, and some numbers and characters. With the help of Cookie, our Official Website can store data such as your preferences. We will not use Cookie for any purpose other than those described in This Policy. You can manage or delete Cookie according to your preferences. For more details, please refer to Aboutcookies.org. You can clear all Cookie stored on your computer, and most web browsers provide the option to block Cookie. However, if you choose to block Cookie, you will need to manually adjust your user settings each time you visit our Official Website. For more information on how to change your browser settings, please consult the relevant links for your browser.

V. How We Store Your Personal Information

(1) Storage Location

Personal information collected and generated within the People's Republic of China will be stored within the People's Republic of China. If required by laws and regulations, or if We have obtained your express consent, We may provide your personal information to entities outside of the People's Republic of China after fulfilling the obligations stipulated by laws and regulations. We will ensure that your personal information is protected at a level no less than that specified in This Policy through contracts or other means.

(2) Storage Period

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in This policy, unless a longer retention period is required by law. We determine the storage period for personal information based on the following criteria, and the longest applicable period will apply:

1.Completion of the business functions you have consented to;

2.Ensuring the security and quality of the services we provide to you;

3.A longer retention period to which you have agreed;

4.Any other special agreements regarding retention periods.

After the retention period has elapsed, We will delete or anonymize your personal information in accordance with applicable laws. If We cease operation of the Official Website and related services, We will promptly stop collecting your personal information and notify you of the cessation through a public announcement. We will also delete or anonymize the personal information We have stored.

VI. How We Share, Transfer, and Disclose Your Personal Information

(1) Sharing

We will not share your personal information with any corporation, organization, or individual, except in the following circumstances:

1. We will share your personal information with third parties under your express consent;

2. We may share your personal information with external parties to comply with legal and regulatory requirements, for litigation or dispute resolution purposes, or as required by administrative or judicial authorities in accordance with the law;

3. Within the scope permitted by laws and regulations, We may share your personal information when necessary to protect the interests, property, or safety of ourselves, our affiliates or partners, you, other Abogen Biosciences users, or the public from harm.

(2) Transfer

We will not transfer your personal information to any other corporation, organization, or individual, except in the following circumstances:

1. We have obtained your express consent or authorization in advance;

2. It is necessary to provide your personal information in accordance with applicable laws and regulations, legal procedures, or mandatory administrative or judicial requirements;

3. It is provided in accordance with agreements you have signed (including electronic agreements signed online and relevant platform rules) or other legal documents;

4. With the growth of our business, We and our affiliates may conduct mergers, acquisitions, asset transfers, or other similar transactions. If the relevant transaction involves the transfer of your personal information, We will require the new entity holding your personal information to continue being bound by This Policy. Otherwise, We will require the corporation, organization, or individual to obtain your reauthorization and consent.

(3) Public disclosure

We will only disclose your personal information publicly under the following circumstances:

1. After obtaining your express consent;

2. We may publicly disclose your personal information when required by law, legal proceedings, litigation, or compulsory requirements by government authorities.

VII. How We Protect Your Personal Information

We greatly value the security of your personal information, and We have taken security measures compliant with industry standards to protect the personal information you provided to prevent unauthorized access, public disclosure, use, modification, damage, or loss of data.

1. Abogen Biosciences has specifically appointed a personal information security department，which is responsible for handling various affairs relevant to users’ personal information that may be involved in Abogen Biosciences products and services, as well as drafting and establishing company policies, reviewing user agreements for each product, and supervising work principles and information processing mechanism for each product. The contact information of the department responsible for personal information security is as follows:

Department responsible for personal information security: Information Security Department

Contact Information: 0512-69150735

We ensure the security of information by establishing special management systems, processes, organizations, and other management measures. For example, We have established an overall principle and a security strategy for information security work, developed security management systems at various levels, and clarified the responsibilities, division of duties, and professional requirements of various different departments and positions within the security management organization.

2. We deploy an access control mechanism on the server end and adopt the principle of minimum sufficient authorization for staff who may have access to your personal information.

3. We will conduct account auditing and monitoring of server operations. If We discover in an external announcement that a server operating system has security breach, We will update the server security as soon as possible to ensure the security of all server systems and applications.

4. We have established an emergency response protocol for cybersecurity incidents, and We have allocated sufficient resources to ensure the implementation of the emergency response protocol. If our physical, technical, or management protection measures are unfortunately compromised, We will promptly activate the emergency protocol to prevent the expansion of security incidents, report to the competent national government agencies in accordance with the requirements of laws and regulations, and promptly adopt reasonable and effective methods such as pushes and announcements to inform you of the basic situation of the security incident, possible impact, measures that have been taken or measures to be taken, etc.

VIII. Your Rights

During your use of the Official Website, you can access and manage your personal information in the following ways:

1. Inquire about and correct your personal information

You can contact us to inquire about and correct your personal information through the contact information in Section 11.

2. Delete your personal information

You have the right to request us to delete your personal information under the following circumstances:

2.1 We collected your personal information illegally without your consent;

2.2 Our processing of your personal information violates the requirements of laws and regulations;

2.3 Our usage and processing of your personal information violate our agreement with you;

2.4 You no longer use our products or services;

2.5 We have stopped providing services to you.

You can contact us to request the deletion of your personal information through the methods provided in article 11 of This Policy, and We will reply within 15 business days. After We delete your personal information from the server, We may not delete the corresponding data from the backup system immediately, but We will delete such information when the backup is updated.

Please note that if the retention period stipulated by laws and administrative regulations has not expired or the deletion of personal information is technically difficult to achieve, We may not be able to delete your personal information, but We will stop processing your personal information in a timely manner.

3. Withdraw your authorization and consent

Each business function requires some basic personal information to be completed. For the collection and use of additional personal information, you can give or withdraw your authorization and consent at any time. Your withdrawal of consent does not affect our previous processing activities of your personal information, but We will not continue processing your personal information. You can contact us through the contact information in article 11 to change the scope of your authorization.

IX. Protection of Personal Information of Minors

Our products, websites, and services are mainly designed for adults. Without the consent of their parents or guardians, minors under the age of 14 are not allowed to use our products or services.

In cases where We collect personal information of minors with the consent of their parents, We will only use or disclose such information when legally permitted, with the express consent of the parents or guardians, or when necessary to protect the minors.

If We discover that We have collected minors’ personal information without obtaining verifiable parental consent, We will try to delete the relevant data as soon as possible.

X. Changes and Revisions to This Policy

Our personal information protection policy may change. Without your express consent, We will not restrict your rights in accordance with This Policy.

For material changes to This Policy, We will provide significant notice. You can also browse the Official Website to check the latest policy at any time.

The material changes referred to in This Policy include but are not limited to the following:

1.Our service model has undergone material changes, such as the purpose of processing personal information, the type of personal information processed, the way of using personal information, etc;

2.Significant changes have taken place in our control or other aspects, such as ownership changes caused by mergers and acquisitions, etc;

3.Changes in the main objects of personal information sharing, transfer, or public disclosure;

4.Material changes of your right to participate in the processing of personal information and how to exercise it;

5.Changes in our administering department, contact information, and complaint channels for handling personal information security;

6. When the personal information security impact assessment report shows that there is a high risk.

If you continue using our website after such changes and revisions, it will be deemed that you agree to the changes and revisions of This Policy.

XI. How to Contact Us

Suzhou Abogen Biosciences Co., Ltd. is the operator of the Official Website of Abogen Biosciences. Together with its affiliates, Suzhou Abogen Biosciences Co., Ltd. is also the controller of your personal information. The registered address of Suzhou Abogen Biosciences Co., Ltd. is Building 19, Zone C, Phase 5, Biopharmaceutical Industrial Park, 21 Chaogian Road, Suzhou Industrial Park. If you have any questions, comments, suggestions, or complaints about our policies and the handling of your personal information, please call 0512-69150735 to contact us.

Under normal circumstances, We will respond to your request within 15 business days. Due to reasons such as material review, business verification, and operational procedures, the processing time of your request may exceed the aforementioned timeframe. If you are not satisfied with our response, especially if our personal information processing has harmed your legitimate rights and interests, you may also file a complaint or report to the supervisory departments of Jiangsu Internet, Telecommunications, Public Security, Industry and Commerce where We are located. You may call our local government hotline (for example, 12345) for complaints or reports or file a lawsuit with a court with jurisdiction in our location (Suzhou, Jiangsu). You may call the Jiangsu Municipal Court’s consultation telephone number 12368 to inquire about the lawsuit. We sincerely hope that you can conduct friendly consultations with us before you file a complaint with the government or the court. We welcome and thank you for your supervision and suggestion.

XII. Effectiveness of This Policy

This Policy is established on November 29, 2021, updated on December 18, 2024 and will officially become effective on December 25, 2024.