Privacy Policy

PRIVACY POLICY

CITY respects the privacy of its employees, its customers, those involved in the work we conduct, and visitors to its web- sites. We recognize that when You share Personal Information with us, You trust us to deal with it in a responsible manner. As a result, CITY is committed to ensuring that Personal Information that You share with us is treated appropriately.

DEFINITIONS

For the purposes of the Policy, the following definitions shall apply:

'Agent — Any third party that uses Personal Information provided by CITY to perform tasks on behalf of and under the instructions of CITY.

'CITY' — CITY LLC, its subsidiaries and affiliates around the world.

'Data Subjects or 'You' — those who share Personal Information with CITY.

'Personal Information' — any information relating to an identified or identifiable natural person which is protected from disclo- sure, use or transfer by applicable law; an identifiable person is one who can be identified, directly or indirectly, in particular reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. Examples of Personal Information include a Data Subject's name, address, telephone number or e-mail address. Personal Information does not include information that is encoded or stripped of all personal identifiable information, or which is publicly available.

'Sensitive Personal Information' — Personal Information that reveals race, ethnic origin, political opinions, religious or philo- sophical beliefs, or trade union membership, or that concerns the health or sex life of an individual. Information will be treat- ed as Sensitive Personal Information where it is received from a third party that treats and identifies it as sensitive.

CITY makes reasonable efforts to protect Personal Information. In dealing with Personal Information, CITY adheres to a variety of mandatory protections in accordance with the laws and regulations in the countries in which we operate. For example, the EU Data Protection Directive (EUDP) and the US Health Insurance Portability and Accountability Act (HIPAA). In furtherance of our commitment to protect Personal Information, CITY also complies with the US — EU Safe Harbor Framework and the US — Swiss Safe Harbor Framework as set forth by the US Department of Commerce regarding the collection, use and retention of personal information from EU member countries and Switzerland. CITY has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access and enforcement. To learn more about the Safe Harbor program, and to view CITY's certification, please visit httpitexport.gov- /safeharbort CITY's privacy program and data security activities are governed by this Policy as well as other policies and procedures.

CITY collects, processes, and stores Personal Information for the following purposes:

• With respect to our employees, we use Personal Information to: determine, implement and evaluate employment -related actions, training and programs; administer employment -related benefits and other Human Resources programs; familiarize our customers with the qualifications of our staff members; and monitor and evaluate employee performance and conduct.
• With respect to our customers and other business associates, we may use Personal Information as necessary to: main tam n business records relating to past, present and potential customers, suppliers, contractors, joint venture partners and other business associates; collect and store customer information; conduct auditing, accounting, financial and economic analyses; facilitate business communications, negotiations, transactions, conferences and compliance with contractual and legal obligations; and to provide goods and services, including clinical studies, to our customers.
• With respect to the services we provide, we may use Personal Information in: support of our clients' development programs for their products, which may include preparing and submitting filings or other documentation to regulatory agencies; developing reports or other compilations of information; and monitoring the progress of the services we provide.

SCOPE

This Policy applies to CITY International Ltd, and all of its subsidiaries and affiliates around the world, and applies to all goods and senrices provided by CITY.

DATA PRIVACY PRINCIPLES

The Privacy Principles in this Policy are based on the Safe Harbor Program's Principles.

Notice

CITY may obtain Personal Information from Data Subjects through the purposes identified above. At the time CITY collects Personal Information from You, it will inform You of the purposes for which it collects and uses such information and how to contact CITY with any enquiries or complaints. CITY will not disclose Personal Information to third parties except as described in the consent provided to You.

Choice

CITY will offer You the opportunity to choose whether your Personal Information is to be (a) disclosed to a third party or (b) used for a purpose that is incompatible with the purpose(s) for which it was originally collected or subsequently authorized by You. If your Personal Information is defined as Sensitive Personal Information by applicable law, we will provide You with a further opportunity to consent to additional disclosures to it or if it is to be used for another purpose.

Transfer to Third Parties

When transferring Personal Information to third parties, CITY applies the Notice and Choice Principles. Before transferring Personal Information to a third party that is acting as an Agent. CITY will seek agreements obligating the third party to safe- guard the Personal Information consistent with this Policy and applicable laws (the EU Data Protection Directive, Safe Harbor certification in the US by the third party, or by being subject to another European Commission adequacy finding). Alternatively, CITY may enter into a written agreement with the third party requiring that the third party provide at least the same level of privacy protection as required by the relevant principles of this Policy. Where CITY has knowledge that an Agent is using or disclosing Personal Information contrary to this Policy, CITY will take reasonable steps to prevent or stop the use or disclosure.

Security

CITY will take reasonable precautions to protect your Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction.

Data Integrity

CITY will not process your Personal Information in a way that is incompatible with the purposes for which it has been col- lected or subsequenhy authorized by You. To the extent necessary for those purposes, CITY will take reasonable steps to ensure that Personal Information is relevant for its intended use, accurate, complete and current.

Access

CITY will provide You with reasonable access to your Personal Information that it holds and will undertake reasonable steps to permit You to correct, amend or delete Personal Information, which is shown to be inaccurate or incomplete.

Enforcement, Verification and Dispute Resolution

CITY will regularly review its privacy compliance posture and will seek to verify adherence to this Policy. CITY implements a self -assessment approach to verify its compliance with these principles. Any employee that CITY determines is in violation of this Policy will be subject to disciplinary action. Any Data Subject who believes they are affected by CITY's non-compli- ance with this Policy is urged to report the non-compliance to [email protected].

Any questions or concerns regarding the use or disclosure of Personal Information should be directed to the CITY Group General Counsel at [email protected]. CITY will investigate and attempt to resolve complaints regarding use and disclo- sure of Personal Information in accordance with the principles contained in this Policy. For complaints that cannot be resolved between You and CITY, CITY has agreed to participate in the dispute resolution procedures of the panel estab- lished by the European data protection authorities to resolve disputes pursuant to the Safe Harbor Program's Principles.

Limitation on Scope of Privacy Principles

Adherence by CITY to these Privacy Principles may be limited to the extent required to meet a legal, governmental, nation- al security or public interest obligation.

INFORMATION COLLECTED AND SUBMITTED ON THE WEBSITE

CITY may collect information through its websites that can identify You (but only if openly requested from and provided by You), such as your name, address, phone number, e-mail address, company name and position. CITY may use this infor- mation to respond to your requests for information, products or services. CITY may also collect non -identifying information, such as information gathered through web logs and web browser "cookies" (see below). When You browse our websites, You do so anonymously, unless You have previously indicated that You wish CITY to remember your login and password. We do not automatically collect Personal Information, including your email address. We may lag your Internet Protocol (IP) address to give us an idea of which part of our website You visit and how long You spend there. But we do not link your IP address to any Personal Information unless You have logged in to our website.

Server Log Files

Our server log files are stored in a secure location, and can only be accessed by specified employees of CITY. This infor- mation may be kept indefinitely for historical purposes. This information is used to analyze trends, administer the site, track user movement in the aggregate and gather broad demographic information for aggregate use.

Database Storage

We make use of multiple databases to record and retrieve information sent to us through web forms (such as contact infor- mation, products and services requested and any billing/payment information, etc.). This information may be kept indefinite- ly for historical purposes.

Web Browser Cookies

When You use our sites, CITY may assign cookie files to You, which are a small amount of data we send to your web browser. Cookies enable the computers operating our websites to differentiate between visitors and to track the patterns of activities engaged in by different visitors. By tracking such activities, the computers operating our websites can recognize a visitor and customize certain features for that visitor. We may also use aggregated, non -identifiable data regarding persons who visit our site in order to learn more about the use of the site and how we can improve it.

Information Submitted Through the Website

In some areas of our websites You may be offered the opportunity to submit Personal Information.

Medical Investigators who have an interest in working with CITY in clinical studies may submit information to become part of our Investigator Database. ff You submit your name as a potential Medical Investigator, we may assess your qualifica- tions Mr such work and conduct an audit of your site by sending a questionnaire for You to complete. By completing this questionnaire, You agree that You may become part of our Investigator Database and You consent to have this information shared with our clients (Sponsors of clinical trials) who are interested in conducting clinical studies in the therapeutic areas described by the registering Medical Investigator.

Clinical Trial Subjects participating in a study managed by CITY, or those acting on their behalf, who submit unsolicited information to a CITY website, including Personal Information, may expect that we will share that information with our client who is responsible for the study, the Medical Investigator supervising the Clinical Trial Subjects participation in the study, the Institutional Review Board or Ethics Committee supervising the study and others who may have an interest in that par- ticular Clinical Trial Subject's experience in the clinical study. Ira Clinical Trial Subject sends an unsolicited email to our website regarding a clinical study, we reserve the right to use or disclose the information contained in the email to third parties without seeking any additional consent from the Clinical Trial Subject.

Our websites also contain forms for completion and submission, such as on our 'Contact Us' page and 'Career Opportuni- ties' page. Information submitted via these forms will be used Mr the purposes described on the page containing the form. You may expect that information submitted will be shared with the appropriate CITY employees and Agents necessary to take action on the information or request submitted. For example, resumes or curriculum vitaes and information related to those seeking employment will be shared with the staff of the CITY Human Resources Department and other CITY employ- ees involved in the hiring process.

Information Security

CITY takes reasonable precautions to protect Data Subjects' information, whether collected on-line or otherwise. When Data Subjects submit Sensitive Personal Information via a website, their information is protected both online and off-line.

Web Practices and Children

CITY's Web sites are not intended or designed to attract children. We do not collect information or data on our Web site from children under the age of 13 nor do we desire to receive any information or data from children who visit our Web site.

Updating Personal Information on the Website

If a Data Subjects Personal Information changes (such as zip/post code, phone, email or postal address), we provide a way to correct and update Data Subjects' Personal Information. Selecting 'Modify my account information' after logging in can usually do this.

SHARING OF PERSONAL INFORMATION

Legal Disclaimer

CITY will not transfer your Personal Information to third parties without your consent, except under limited conditions. Though we make every effort to preserve Data Subject privacy, we may need to disclose Personal Information when required by law wherein we have a good -faith belief that such action is necessary to comply with a current judicial proceed- ing, a court order or legal process. CITY is a global company; your Personal Information may be shared with other CITY offices or subsidiaries around the world. All such entities are governed by this Privacy Policy or are bound by the appropri- ate confidentiality and data transfer agreements.

Business Transitions

In the event CITY goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets, Data Subjects' Personal Information will, in most instances, be part of the assets transferred. Data Subjects will be notified via a notice on our website prior to a change of ownership or control of their Personal Information. If as a result of the business transition, the Data Subjects' Personal Information will be used in a manner different from that stated at the time of collection they will be given choice consistent with our notification of changes section.

LINKS TO OTHER SITES

This Web site contains links to other sites. Please be aware that CITY is not responsible for the privacy practices of such other sites. We encourage our data subjects to be aware when they leave our site and to read the privacy statements of other Web sites that collect Personal Information. This policy applies solely to information collected by this Web site.

NOTIFICATION OF POLICY CHANGE

Please note that this Policy may be amended, from time to time. If we decide to change our Privacy Policy, we will post those changes to this Policy, and other places we deem appropriate so our Data Subjects are always aware of what infor- mation we collect, how we use it, and under what circumstances, if any, we disclose it. We will use information in accor- dance with the Privacy Policy under which the information was collected. Any such changes will comply with the Safe Harbor Program.

CONTACT INFORMATION

If Data Subjects have any questions or suggestions about this Policy, contact us at:

CITY LLC

7 Peldu Street

Jelgava LV-3002

Latvia

[email protected]