PRIVACY POLICY

KELI Therapeutics website is owned by UAB Kelifarma, which is a data controller of your personal data.

The privacy policy informs data subjects about data collection, processing, storage duration, recipients, and data subject rights. Personal data is processed in compliance with EU regulations and national laws. Kelifarma UAB follows essential data processing principles, collecting and processing data only for legitimate purposes. Data is updated, stored securely, and accessed only by authorized employees or processors.

We have adopted this Privacy Policy, which determines how we are processing the information collected by KELI Therapeutics, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using KELI Therapeutics website.

Personal information we collect

Personal data is obtained from the data subjects themselves when they contact the company, leave comments, or fill in forms on the website. It is also obtained from other sources, such as other institutions, companies, or publicly available registers. The company processes personal data for various purposes, including ensuring continuity of activities, providing tissue bank services, managing job candidate resumes, executing practice contracts, and handling inquiries, comments, and complaints. Data is processed based on the data subject's consent or when required by legal acts or contract fulfillment.

Provision of personal data

The company ensures confidentiality of personal data and will only disclose it to third parties when necessary for contract execution or legitimate reasons. Personal data may be provided to data controllers who work on behalf of the company, ensuring compliance with data protection regulations. The company may also provide data in response to court or state authority requests, ensuring compliance with applicable laws. Personal data will not be sold or rented to third parties.

Processing of personal data of minors

The Company's website prohibits individuals under the age of 14 from submitting personal data. If someone is below this age, they must obtain written consent from a parent, guardian, or representative before providing any personal information in order to use the Company's services.

Personal data storage period

The Company stores personal data in printed documents and/or their information systems. The data is retained only for as long as necessary to achieve the purposes of processing or as required by law. Even if the data subject terminates the contract and refuses the Company's services, the Company must retain the data for possible future legal claims until the storage terms expire.

Your rights:

• The right to receive information about data processing.

• The right to access the processed data.

• The right to demand rectification of data.

• The right to request deletion of data ("Right to be forgotten"), except when other legal bases require data processing.

• The right to restrict data processing.

• The right to object to data processing.

• The right to data portability, except for manually processed data in systematized files.

• The right to object to automated data processing decisions, including profiling.

• The right to submit a complaint to the State Data Protection Inspectorate regarding personal data processing.

• The Company must facilitate the implementation of data subject rights, with some exceptions based on specific legal requirements for state security, defense, public order, criminal activities, and other specified situations.

The data subject can exercise their rights by contacting the Company through various means:

• Submitting a written request in person, by mail, through a representative, or via email: info@keli.eu.

• Making an oral request by phone: +370 690 22777.

• Sending a written request to the address: Sukilėliu pr. 15, Kaunas.

• Data subject can also contact the Company's data protection officer at: asmensdusduomenys@sdg.lt.

To ensure data protection, the Company must verify the identity of the data subject when they request data or exercise their rights.

The Company responds to the data subject's request within one month of receiving it, with a possible extension of up to two months based on the complexity and number of requests.

Responsibility of data subject:

• Informing the Company about any changes in the provided information and data to ensure accuracy and validity.

• Providing necessary information to allow the Company to verify their identity, either through documentation or electronic means, to protect their data and the rights of others. This ensures that disclosed information is only provided to the data subject.

Legal disclosure:

• By providing personal data to the Company, the data subject agrees to and accepts the Privacy Policy and agrees to abide by its provisions.

• The Company reserves the right to make unilateral changes to the Privacy Policy at any time during the improvement of its activities. Any changes will be announced on the website www.keli.eu.

• Additions or modifications to the Privacy Policy come into effect on the day of their publication on the website www.keli.eu.

Contact information

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to info@keli.eu.