CONFIDENTIALITY AGREEMENT

(including Personal Data Consent)

Effective Date: March 25, 2022

Contract term: 25 years from the Effective Date

By and between: Caucasus Medical Center, 23 Kavtaradze Street, 0186 Tbilisi, Georgia (the “Party 1”), and

Cromos Pharma Georgia LLC , Z.Panaskerteli str. 6, app. 62, 0160 Tbilisi, Georgia (the “Party 2”).

The parties have concluded this Confidentiality Agreement (hereinafter referred to as the "Agreement") as follows:

1 For the purpose of this Agreement, confidential information shall mean information in oral, written, graphic,
electromagnetic or other form, including but not limited to past, present and future business, financial and
commercial information, business concepts, prices and pricing methods, marketing and customer information,
financial forecasts and projections, technical data and information, formulae, analyses, trade secrets, ideas,
methods, processes, know-how, computer programs, products, equipment, product road maps, prototypes,
samples, designs, data sheets, schematics, configurations, specifications, techniques, drawings and any other
data or information delivered by either of the parties to the other or to which the other party has acquired
access by way of inspection or observations, including any information disclosed by either party to another prior
to execution hereof (further referred to as "Confidential Information").

2 Information shall not be deemed as confidential if:

(A) the receiving party can demonstrate by written records that information was known to, or held by it
prior to disclosure by the other party, or

(B) information has been legally made available to the public and became part of public knowledge prior to
the Effective Date hereof, or

(C) information was independently developed by the receiving party without use of Confidential
Information of the disclosing party, or properly acquired from a third party having no obligation of
confidentiality towards the disclosing party, or

(D) information is required to be disclosed in compliance with applicable legislation.

3 The party receiving Confidential Information of the other party agrees:

 (A) not to disclose Confidential Information, not to submit it to third parties for any purposes voluntary or
expressly without prior written consent of the disclosing party;

(B) in the cases an order is issued to the receiving party by court, administrative, or other government
body to disclose Confidential Information, to immediately notify the disclosing party prior to disclosure
in order to obtain further instructions and recommendations;

(C) to maintain the safety of Confidential Information by limiting access to Confidential Information,
establishing procedures aimed at its non-disclosure (including marking or identifying in other way all
Confidential Information);

(D) to use the Confidential Information only for the purposes of conducting negotiations and/or fulfilling
the parties’ mutual obligations, and only with respect to the parties’ mutual interest, and abstain from
illegal use or gathering of the Confidential Information, and

(E) to return or destroy all the materials, documents and other media containing Confidential Information,
which have been provided by the other party on the first demand of such party.

4 The receiving party is entitled to disclose Confidential Information to its subsidiaries/affiliated companies,
employees, authorized agents, and consultant, ensuring that they are bound by a confidentiality agreement
imposing obligations substantially similar to the provisions hereof.

5 By sharing Confidential Information, the disclosing party does not give up any other rights that it may have
under copyright, patent, or other intellectual property laws, and the receiving party does not get any rights to
Confidential information of the disclosing party.

6 The parties are liable for disclosure, illegal use or illegal gathering of Confidential Information in violation of the
Agreement and/or the applicable legislation.

7 Exchange of scan copies of signed Agreement via e-mails shall be considered as construing a legally valid and
binding Agreement between the parties.

For and on behalf of Party 1 For and on behalf of Party 2

Signature of the authorized representative Signature of the authorized representative

____________________ ____________________

Name: Sopio Aspanidze Name: Tsira Jibladze

Position: Director of Clinic Position: Country Head Cromos Pharma Georgia

 Personal Data Consent

Dr. Marine Toidze

Caucasus Medical Center

23 Kavtaradze Street, 0186 Tbilisi, Georgia

I acknowledge that on the course of rendering services for

Cromos Pharma Georgia LLC , Z.Panaskerteli str. 6, app. 62, 0160 Tbilisi, Georgia.

further – the “Cromos Pharma”, I will disclose certain personal data to Cromos Pharma.

This Personal Data Consent means freely given, specific, informed and unambiguous indication of my agreement to the
processing of personal data relating to me.

1 I have read Cromos Pharma Privacy Policy (as available at http://cromospharma.com/), I fully understand my
rights in the sphere of my personal data protection, and accept the Privacy Policy (the version in force as of the
date of signing hereof). I understand that in order to exercise my data subject rights, including obtaining
information of my personal data, limiting the processing of my personal data, withdrawing my consent,
updating or making amendments, etc. I can contact Cromos Pharma representatives by e-mail
privacy@cromospharma.com.

2 I consent that Cromos Pharma will be the controller of my personal data that I have disclosed, or will disclose, in
connection with the services I am engaged in, and I agree to the following types of personal data processing to
be conducted by Cromos Pharma:

(A) support of internal record keeping, sending and receiving correspondence, conducting audits and
inspections, negotiations and other actions required to execute and perform contract(s) concluded with
me;

(B) providing information to (sub)controllers and (sub)processors, namely, the Sponsors and their
authorized representatives under the services I am engaged in, ethics committees, health regulatory
authority(-ies), tax bodies, and other state bodies and organizations, as may be specifically required
under applicable laws and regulations;

(C) providing information to (sub)controllers and (sub)processors, namely, the Cromos Pharma group
companies and affiliates, as well as partner firms, authorized representatives and contractors working
on behalf of Cromos Pharma, or engaged in joint or partnership activities with Cromos Pharma (such as,
but not limited to, external data centers and IT vendors) in the scope not exceeding scope necessary to
 execute and perform contract(s) concluded with me;

(D) public disclosure of my name and, if applicable, my association as an investigator, by posting online on
Cromos Pharma’s website, the European Clinical Trials Database, ClinicalTrials.gov, and similar sites,
and in printed materials;

(E) storage of my personal data in one or more Cromos Pharma databases during and after the rendering
services I am engaged in for the purposes of determining my potential involvement in future activities,
and for contacting me in relation to these activities;

(F) evaluation of personal information for proposing further collaboration;

(G) any other purposes specifically required by applicable legislation.

3 I agree that processing of my personal data as set out above may require my personal data to be transferred
throughout the world, and specifically agree that my personal data may be transferred for the purposes of
processing as stated in section 2 hereof outside the European Union on condition Cromos Pharma adopts all
necessary safeguards to ensure safety of personal data (including usage of Standard Contractual Clauses as set
forth by EU Commission, implementation of technical and organizational security measures, and other
reasonable measures).

4 I agree that my personal data may be retained by Cromos Pharma for 25 years after termination of the last
contract, unless otherwise provided by the applicable legislation or requested by me in writing.

5 I understand that in the event Cromos Pharma decides to reorganize or divest a business through sale, merger,
or acquisition, Cromos Pharma may share my personal data with actual or prospective successors or purchasers.

6 I have been informed that at any time I have the right to access my personal data, or request its erasure or
withdraw, for which purpose a written request must be sent to Cromos Pharma to
privacy@cromospharma.com. Furthermore, I have been informed that I have the right to rectify my personal
data if the data is incomplete or inaccurate.

NOTE: Cromos Pharma respects the confidentiality of your personal data and will not disclose your personal
data other than as described above. The validity of this form is 25 (fifteen) years. The request sent to
privacy@cromospharma.com should contain sufficient information to enable representative of Cromos Pharma
to identify you and should specify the particular information that is being sought. Cromos Pharma will endeavor
to provide the information to you as soon as practicable; however Cromos Pharma also reserves the right to
validate all requests for the authenticity of the request. Please note that provisions of this consent may be
amended in accordance to applicable laws and regulations. You will be informed by the responsible
representative Cromos Pharma as soon as practicable. This consent is also governed by our Privacy Policy, the
current version of which is available at our official web-site http://cromospharma.com/.

Name: _____________________________ (printed name of the person giving consent)

Signature: _____________________________ (signature of the person giving consent)

Date of signature: ________________________ (dd-month-yyyy)