Commitment to Transparency Yuventis Pharmaceuticals is committed to transparency and accountability in our data handling practices. We regularly review and update our policies to ensure compliance with evolving legal and regulatory requirements, and we provide clear information to individuals about their privacy rights and how their personal data is processed. General Definitions Yuventis Pharmaceuticals is committed to complying with the provisions of the Act and the Rules, thereby ensuring transparency and accountability in our data handling practices. This privacy policy is published on our website as mandated by law, providing you with clear insights into how we protect your privacy rights. Information Collected Employees, suppliers, clients, prospects, or consultants of Yuventis Pharmaceuticals are duly informed about the purpose for which any information is being collected at the time of such collection. This ensures that individuals have a clear understanding of how their data will be utilized and empowers them to make informed decisions regarding their privacy preferences. Data Sharing Yuventis Pharmaceuticals may disclose your PI/SPDI to employees, consultants, authorized vendors, or governmental authorities on a 'need to know' basis under a Non-Disclosure Agreement. Additionally, in response to subpoenas, court orders, or other legal processes, your PI/SPDI may be disclosed as required by law, with appropriate measures taken to protect your rights and interests. Consequences of Violations Safeguard computer systems processing personal data from unauthorized access or manipulation, including unauthorized reading, copying, alteration, deletion, or removal of data. Adhere strictly to Yuventis Pharmaceuticals' internal logical and physical security policies and procedures. Ensure that access to personal data within data-processing systems is restricted to authorized users based on their access rights. Maintain meticulous records of any communication of personal data, noting the recipients and the time of communication. Refrain from disclosing personal data to third parties without prior consultation with their manager or the Human Resources Department. Process personal data on behalf of clients only in accordance with the prescribed manner stipulated by the respective client. Ensure the secure communication and transfer of personal data, preventing unauthorized access or tampering during transmission or storage. Promptly report any vulnerabilities or breaches related to privacy or security, including potential risks, as soon as they become aware of them. Attend mandatory training sessions on security and data privacy to stay abreast of evolving best practices and regulations. Non-compliance with this policy and applicable laws can have severe consequences, exposing both Yuventis Pharmaceuticals and the individual involved to potential damages, criminal fines, and penalties. We take any instances of non-compliance very seriously and may initiate appropriate disciplinary actions, including but not limited to employee dismissal or relevant individual termination. At Yuventis Pharmaceuticals, we uphold the highest standards of integrity and accountability in safeguarding personal data, ensuring the trust and confidence of our clients, partners, and employees alike. Retention Criteria At Yuventis Pharmaceuticals, we adhere to specific records management and retention policies to ensure that personal data is retained only for as long as necessary. Our retention criteria are structured to balance business needs with privacy considerations: Ongoing Relationship: We retain personal data for individuals with whom we have an ongoing relationship, particularly those with active accounts or utilizing our services. Active Account Status: Personal data is kept as long as an individual's account remains active or for the duration required to deliver services effectively. Legal and Contractual Obligations: We retain personal data for the duration necessary to comply with global legal and contractual obligations. Data Destruction and Anonymization: Once Yuventis Pharmaceuticals no longer requires personal data for the specified purposes, we ensure its appropriate and secure destruction or anonymization in accordance with relevant laws and regulations. Transactional data related to services is retained for a period of three years, after which it is securely disposed of or anonymized to protect individual privacy rights.