Common use of PROCESSING AND PROTECTION OF PERSONAL DATA Clause in Contracts

PROCESSING AND PROTECTION OF PERSONAL DATA. 1. PBKM is the controller of personal data provided for the purpose of performing the Contract regarding qualification, preparation and storage of Biological Material, including sensitive (medical) data provided in the medical questionnaire related to the course of childbirth and the results of peripheral blood and biological material testing (viral and bacterial). 2. The Parents shall submit to PBKM the following personal information of the Child immediately after it becomes available: name(s), surname and Personal Identification Number (PESEL), allowing to identify the donor and the future Controller. 3. Provision of the Mother’s data is voluntary, however also necessary to conclude the Contract. Provision of the Father’s data is voluntary, but necessary should the Father be to assume the rights of a party to the Contract. Provision of the Child’s data is voluntary, however necessary for exercising the rights of a party by the Child upon reaching majority. 4. The Parents – by marking the relevant consents – agree to the processing of the Parent’s and Child’s personal data by PBKM (or a third party with respect of the Mother’s peripheral blood testing) for the purposes related to the performance of the Contract. 5. Personal data shall be processed in order to perform the Contract and based on the consent regarding special categories of data. 6. Personal data may be shared with other recipients in order to perform the Contract, in order to perform the PBKM’s legal obligation, based on consent or for the purposes arising from the legitimate interests of the controller or a third party. Moreover, the Data may be shared with personal data processors upon the order of PBKM and with their authorized employees, provided that such entities process data pursuant to an agreement with PBKM and only as instructed and subject to confidentiality obligations. In the case of the SwissSafety package, personal information shall also be made available to Famicord Suisse SA (c/o Studio Fiduciario Pagani SA, Xxxxx Xxxxxxxxxx 0, 0000 Xxxxxx, Xxxxxxxxxxx), which is the entity responsible for storage of Biological Material in the territory of Switzerland. Transfer of data outside of the European Economic Area shall be based on the decision of the European Commission deeming Switzerland to be a country with adequate level of personal data protection. 7. PBKM shall be required to store personal data in compliance with the applicable laws, including, but not limited to protect them against unauthorised disclosure, takeover by an unauthorised person, processing in violation of the law and change, loss, damage or destruction. Personal data shall be stored for a period no longer than what is required to perform the Contract, and afterwards – for the period required to perform PBKM’s contractual obligations and as required under the provisions of law. 8. The Parent shall at all times have the right to request access to their personal data and the Child’s data and the right to correct, restrict processing, remove, transfer personal data and to object against the processing. Should data processing rules be breached, the Parents may file a complaint with the President of the Personal Data Protection Office.

PROCESSING AND PROTECTION OF PERSONAL DATA. 1. PBKM is the controller of personal data provided for the purpose of performing the Contract regarding qualification, preparation and storage of Biological Material, including sensitive (medical) data provided in the medical questionnaire related to the course of childbirth and the results of peripheral blood and biological material testing (viral and bacterial). 2. The Parents shall submit to PBKM the following personal information of the Child immediately after it becomes available: name(s), surname and Personal Identification Number (PESEL), allowing to identify the donor and the future Controller. 3. Provision of the Mother’s data is voluntary, however also necessary to conclude the Contract. Provision of the Father’s data is voluntary, but necessary should the Father be to assume the rights of a party to the Contract. Provision of the Child’s data is voluntary, however necessary for exercising the rights of a party by the Child upon reaching majority. 4. The Parents – by marking the relevant consents – agree to the processing of the Parent’s and Child’s personal data by PBKM (or a third party with respect of the Mother’s peripheral blood testing) for the purposes related to the performance of the Contract. 5. Personal data shall be processed in order to perform the Contract and based on the consent regarding special categories of data. 6. Personal data may be shared with other recipients in order to perform the Contract, in order to perform the PBKM’s legal obligation, based on consent or for the purposes arising from the legitimate interests of the controller or a third party. Moreover, the Data may be shared with personal data processors upon the order of PBKM and with their authorized employees, provided that such entities process data pursuant to an agreement with PBKM and only as instructed and subject to confidentiality obligations. In the case of the SwissSafety package, personal information shall also be made available to Famicord Suisse SA (c/o Studio Fiduciario Pagani SA, Xxxxx Corso Xxxxxxxxxx 0, 0000 Xxxxxx, Xxxxxxxxxxx), which is the entity responsible for storage of Biological Material in the territory of Switzerland. Transfer of data outside of the European Economic Area shall be based on the decision of the European Commission deeming Switzerland to be a country with adequate level of personal data protection. 7. PBKM shall be required to store personal data in compliance with the applicable laws, including, but not limited to protect them against unauthorised disclosure, takeover by an unauthorised person, processing in violation of the law and change, loss, damage or destruction. Personal data shall be stored for a period no longer than what is required to perform the Contract, and afterwards – for the period required to perform PBKM’s contractual obligations and as required under the provisions of law. 8. The Parent shall at all times have the right to request access to their personal data and the Child’s data and the right to correct, restrict processing, remove, transfer personal data and to object against the processing. Should data processing rules be breached, the Parents may file a complaint with the President of the Personal Data Protection Office.

PROCESSING AND PROTECTION OF PERSONAL DATA. 1. PBKM is the controller of personal data provided for the purpose of performing the Contract regarding qualification, preparation and storage of Biological Material, including sensitive (medical) data provided in the medical questionnaire related to the course of childbirth and the results of peripheral blood and biological material testing (viral and bacterial). 2. The Parents shall submit to PBKM the following personal information of the Child immediately after it becomes available: name(s), surname and Personal Identification Number (PESEL), allowing to identify the donor and the future Controller. 3. Provision of the Mother’s data is voluntary, however also necessary to conclude the Contract. Provision of the Father’s data is voluntary, but necessary should the Father be to assume the rights of a party to the Contract. Provision of the Child’s data is voluntary, however necessary for exercising the rights of a party by the Child upon reaching majority. 4. The Parents – - by marking the relevant consents – - agree to the processing of the Parent’s and Child’s personal data by PBKM (or a third party with respect of the Mother’s peripheral blood testing) for the purposes related to the performance of the Contract. 5. Personal data shall be processed in order to perform the Contract and based on the consent regarding special categories of data. 6. Personal data may be shared with other recipients in order to perform the Contract, in order to perform the PBKM’s legal obligation, based on consent or for the purposes arising from the legitimate interests of the controller or a third party. Moreover, the Data may be shared with personal data processors upon the order of PBKM and with their authorized employees, provided that such entities process data pursuant to an agreement with PBKM and only as instructed and subject to confidentiality obligations. In the case of the SwissSafety package, personal information shall also be made available to Famicord Suisse SA (c/o Studio Fiduciario Pagani SA, Xxxxx Corso Xxxxxxxxxx 0, 0000 Xxxxxx, Xxxxxxxxxxx), which is the entity responsible for storage of Biological Material in the territory of Switzerland. Transfer of data outside of the European Economic Area shall be based on the decision of the European Commission deeming Switzerland to be a country with adequate level of personal data protection. 7. PBKM shall be required to store personal data in compliance with the applicable laws, including, but not limited to protect them against unauthorised disclosure, takeover by an unauthorised person, processing in violation of the law and change, loss, damage or destruction. Personal data shall be stored for a period no longer than what is required to perform the Contract, and afterwards – - for the period required to perform PBKM’s contractual obligations and as required under the provisions of law. 8. The Parent shall at all times have the right to request access to their personal data and the Child’s data and the right to correct, restrict processing, remove, transfer personal data and to object against the processing. Should data processing rules be breached, the Parents may file a complaint with the President of the Personal Data Protection Office.