Privacy Policy

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Privacy Notice Guidelines, the following Privacy Notice (the "Notice") is issued as follows:

1. IDENTITY OF THE CONTROLLER OF PERSONAL DATA.

These terms and conditions (the "Terms" or "Terms and Conditions of the Site") regulate the access or use by any person of the applications and web pages made available by Compound AS (the "Company"), including its subsidiaries or affiliates, as well as its content, products, and services. These include (but are not limited to) the services mentioned below and those offered through the website located at https://www.compound.as, domains, and subdomains (the "Platform"). Therefore, anyone who wishes to access or use the Platform or use the services offered therein must read these Terms carefully. The Company reserves the right to unilaterally modify, add or delete, at any time and without prior notice, these Terms and the configuration of the Platform and/or the services offered therein. Access or use of the Platform, the Applications (as defined below), as well as the use or access to the services offered on the Platform, constitutes the person doing so as a user of the Company, the Platform, or the Applications (the "User" or "Users," as appropriate). By accessing and using the Services and/or the Platform, the User agrees to be legally bound by these Terms and Conditions of the Platform, which establish a contractual relationship between the User and the Company. Notwithstanding the above, the User acknowledges that the contracting of some services may be subject to certain specific conditions that, as the case may be, replace, complement or modify these Terms (the "Specific Agreements"). Therefore, before accessing and using such Services, the User must review in detail the corresponding Specific Agreements that from time to time are made known to Users through the Platform. For information about the personal data protection practices and general information applied by the Company, please refer to our Privacy Notice for the treatment of personal data on the Platform. These policies explain how the Company handles your information and how it protects your privacy when using the Services. The Privacy Notice explains how personal data collected directly by the Company through your use of the Services will be treated.

2. PROCESSING OF CLIENTS' PERSONAL DATA.

These Terms are applicable to access, use, or entry to the Platform, as well as the Services provided by the Company to any User, unless otherwise expressly indicated. By accessing and using the Platform and/or opening an account, the User expressly declares acceptance of these Terms. The User declares to be of legal age and in full use and exercise of their faculties to contract and assume all kinds of obligations, stating that they will be responsible for the same and no one else. The User accepts and acknowledges that the acceptance of these Terms does not create any partnership, mandate, franchise, or employment relationship between the Company and the User.

3. CONSENT.

The Company will provide services consisting of (i) collecting information provided by the User (the "Information"), (ii) managing and analyzing the Information as indicated from time to time by the User through the Platform, (iii) making available to the User, or the persons designated from time to time (the "Authorized"), or any other electronic means owned by the Company for the purpose of obtaining data from the Authorized or the User, (iv) connecting the User with manufacturers, distributors, wholesalers, and buyers of pharmaceutical products and medical devices, (v) making available to Users the technology platform contained on the Site compound.as for the publication, sale, purchase and redistribution of pharmaceuticals and medical devices; (vi) any other similar service, and, in consideration, the User agrees to pay a consideration to the Company (the "Services") if specified. The Company will collect Information from Users through various questionnaires, and the Company will make available to the User various analyses of the Information as requested by the User from time to time through the Platform. The Company will act as a liaison between Users. The Company will support the User in managing the publication process of products and sale and purchase of said products chosen by the User. The Company will make available to the User the Platform https://www.compound.as for the opening and registration of a Compound Profile, as well as the possibility of purchasing and selling certified and regulated products from other certified users (GDP and GMP certified) through the platform. The User agrees to be solely responsible for the use of and transactions executed by this Profile in accordance with these Terms. The Company does not transport, store, or handles any products purchased or sold through the platform, acting as a technological intermediary between the platform user, and thus does execute activities regulated or supervised by any authority. Therefore, the User declares under oath and agrees that the transactions done through their Compound Profile are their responsibility, stating that they fully understand the provisions relating to the attempted transaction of illicit products and their consequences. Furthermore, they agree not to register the Compound Profile within the Platform for the creation of a user on behalf or account of any third party, whether individual or legal entity, and will always act on their own behalf or on behalf of the party which they directly represent. The User accepts and agrees that they are solely responsible for all Information and content they publish on the Platform. The User agrees that the Company assumes no responsibility regarding the data collected and subsequently provided to the User, and thus the User hereby waives any legal or extrajudicial claim that may arise from the data provided by the Company. By using the Platform or the Services, the User agrees that any legal remedy or liability they seek to obtain for actions or omissions of other Users or third parties will be limited to a claim against the Users or third parties responsible for the damages. The User agrees not to attempt to impose liability on the Company or seek any legal remedy from the Company for such actions or omissions. The Company will charge for the Services or any additional service according to the transactions/agreements executed within the platform and the plan chosen by the User through the Platform or the Applications. The User authorizes the charge for the consideration for the Services or any additional service to the provided account or card provided through the Platform or by one of the payment methods described on the Platform. In the event that the User owes any amount to the Company, the Company may (but is not obligated to) invoice the payee the amount owed from any payment due to the User and offset this amount with the amount owed by the User to the Company. If the Company proceeds as indicated above, the payment obligation assumed by the User towards the Company will be extinguished to the extent of the invoiced amount, and the Company will no longer have any obligation towards the User (including any payment obligation towards the User) regarding the invoiced amount. The Company may ask the User to provide usual billing information such as name, Organization number, billing address. The User and the Company will be responsible for paying their taxes in accordance with applicable legislation. Additionally, the Company will not be responsible for any obligation the User must fulfill for the payment of their taxes. The User acknowledges and agrees to provide the corresponding information. When applicable, or at the User's request, the Company may issue an invoice covering the provision of the respective Services. The consideration mentioned in the previous paragraphs may be waived by the Company at its sole discretion without the need to give any notice.

4. PERSONAL DATA TO BE COLLECTED AND PURPOSE.

Primary Purposes

Secondary Purposes

If the Clients do not want their Personal Data to be used for secondary purposes, they may revoke consent for secondary purposes as indicated in the section "Revocation of Consent for the use of your Personal Data." The Personal Data that will be used for these purposes are: Name or Corporate Name; Surname; Official Identification (Passport og ID); Unique Population Registry Key (Personnummer); Organization number (); Bank account number; Proof of address; Delivery address; Office phone; Cell phone; Valid email address; Biometric data; Autograph signature; Electronic signature; Tax information. In the absence of the aforementioned data, the Client acknowledges that the Controller would not be able to comply with the Terms and Conditions.

5. MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA.

The Controller has sufficient physical, technical, and administrative security measures to protect the Personal Data provided by the Clients. To limit the use and disclosure of personal information, Clients can request it via the following email address: [post@compound.as], notwithstanding the electronic mechanisms that may be established in the messages Clients receive.

6. EXCLUSION OF LIABILITY FROM THE WEBSITE.

The Website may contain hyperlinks, links, banners, buttons, and/or search tools on the "World Wide Web" (WWW), or worldwide computer network, which when used by Clients transport them to other websites or Internet sites that could be owned by third parties. Personal Data that Clients may provide through these websites or Internet sites are not covered by this Notice and their Processing is not the responsibility of the Controller. Clients may find on the Website: pages, promotions, microsites, virtual stores, surveys, job boards, and other services that may be shared with third parties and may request their Personal Data ("Third-Party Sites"). Any information related to the Personal Data provided through Third-Party Sites will be subject to the respective privacy notices contained therein, unless the Controller states otherwise. The Controller warns its Clients that some services on the Website could include, but not be limited to, discussion forums, personal Internet pages, classifieds, emails, chat rooms, among others, and therefore, the Personal Data disclosed through these means could in some cases be accessible to third parties. The Controller will not be responsible for the use, publication, disclosure, and/or dissemination of Personal Data used, published, disclosed, and/or disseminated through the means listed in the previous paragraph. Consequently, Clients are required to be careful and responsible with all personal or institutional information they provide through such means. The Website is owned by the Controller, which holds all intellectual property rights reserved, so Clients' Personal Data is collected on a secure server.

7. TRANSFER OF PERSONAL DATA.

The Controller may disclose, and/or transfer, within Norway or abroad, the Personal Data provided by Clients as permitted by applicable legislation, including but not limited to, its subsidiaries, affiliates, and/or related companies, suppliers, contractors, managers, and/or business partners to maintain and fulfill the legal relationship between the Client and the Controller. Third parties receiving information related to Clients' Personal Data are required to comply with this Notice as well as applicable Norwegian legislation. The Client, the owner of the Personal Data provided through the Website, expressly accepts their transfer under the terms described in this Notice and in accordance with applicable legislation.

8. MEANS TO EXERCISE THE RIGHTS OF PERSONAL DATA HOLDERS.

To exercise any of the GDPR rights and revoke consent for the processing of Personal Data, Clients must submit a request to the Controller and include at least the following: The name and surname of the holder of the Personal Data, or Corporate Name, official identification, address, phone number, and email address to communicate the response to their request; Documents proving identity or, where applicable, the public instrument or power of attorney signed before two witnesses by the holder when acting through the legal representation of the holder of Personal Data; Official documentation issued by the competent authorities, when necessary for the services provided by the Controller; A clear and precise description of the Personal Data for which any of the aforementioned rights is to be exercised (in the case of rectification, indicate the modifications to be made and provide the documentation supporting the request); Any other element or document that facilitates the location of the Personal Data. For this purpose, the Controller provides Clients with the following email address: [post@compound.as]. The Controller will respond to Clients' requests within no more than 30 business days from the date of receipt of the corresponding request, through the email address provided by the Clients for this purpose. The exercise of the aforementioned rights by Clients must comply with the applicable and current legislation in Norway. Regarding the exercise of the right of access, the Controller will send the electronic documents and information requested through the email provided by the Client for such purposes. If the Client exercises their rights of cancellation, opposition, or revocation of Personal Data, the Controller may, at its discretion, terminate the Terms and Conditions.

9. REVOCATION OF CONSENT FOR THE USE OF PERSONAL DATA.

The Client can revoke the consent they have given to the Controller for the Processing of their Personal Data. However, it is important to consider that the Controller may not be able to respond to their request or immediately terminate the use in all cases, as it may be necessary to continue processing the Personal Data due to a legal obligation. Additionally, the Client should consider that for certain purposes, revoking their consent will imply that the Controller