DATA PROCESSING POLICY

CONFIDENTIAL: The information contained in this document is strictly confidential. This document may not be copied in any form or by any means, mechanical or electronic, nor may it be forwarded, disclosed or used in whole or in part without the written consent of Ad Scientiam.

Ad Scientiam, a company located in France, has developed the MSCopilot® Research ABA-101 mobile application used for collecting Digital Outcomes (Mobile Drawing Test, Mobile Cognition Test, Mobile Walking Endurance Test, and Mobile Vision Test) during the research conducted by Abata entitled “A Phase 1 open-label, single ascending dose study of ABA-101 in participants with progressive multiple sclerosis”.

The following personal data will be processed for each test and questionnaires: start date, end date of test or questionnaire, reason for cessation, timestamp, mobile phone sensors (accelerometer, gyroscope, relative position, voice recordings) and your responses to questions such as dominant/non-dominant hand, vision capabilities, preferred hand for test-taking, etc. and questionnaires (answers you give to the various questionnaires in the application).

When you perform the vision test, the voice recognition function of your smartphone will be used by the MSCopilot® Research ABA-101 application to determine if you have correctly identified the numbers displayed on the screen. As a result, the voice recordings will be collected and processed either by Apple if you have a smartphone with iOS, or by Google Cloud if you have a smartphone with Android. Their voice recognition tools will then convert the numbers you have spoken into text. This transcription will then be transmitted to Ad Scientiam. In this context, these voice recordings will be processed on servers located in the European Union and will only be retained for the time required to convert them into text by the voice recognition too.

Furthermore, to ensure the security and proper functioning of MSCopilot® Research ABA-101, Ad Scientiam uses a solution from Google, Crashlytics, which allows it to collect information on unforeseen technical events leading to an unexpected closure of the application (crash). These crashes are risk-free for you or your data.

Only the following data will be collected and processed:

• Device data: phone brand and model, available RAM, available disk space,
• Data related to the operating system (OS): operating system version, phone orientation, rooting,
• Crash information: time and date, application version.

Consequently, your data from MSCopilot® Research ABA-101 will be transferred to the European Union, and you may have certain rights under a law called the EU General Data Protection Regulation ("GDPR"). Abata, sponsor of the study acting as data controller, and its subcontractors, established in the United States of America will receive this data.

If you consent to participate in the study and use the application MSCopilot® Research ABA-101, Ad Scientiam will collect, store, process, and utilize your personal data for the purpose of this study, in pursuit of Abata’s legitimate interests to perform the study.

If your internet connection is adequate, the data entered in the application are immediately uploaded and stored on Ad Scientiam’s servers, hosted by Microsoft Azure, located in the European Union. After upload, data is then automatically erased from your smartphone. If data could not be sent due to inadequate connection, a message will appear indicating that data is still being sent and that you should wait to disconnect. Disconnection from the application triggers the deletion of any remaining local MSCopilot® Research ABA-101 data from your smartphone memory.

Ad Scientiam will store these processed data for up to 2 years after all participants have completed the study.

For more information about the study and data protection, please refer to the information notice provided to you.