Privacy Notice

Data Privacy Statement

This data privacy notice explains which of your personal data is processed by Boehringer Ingelheim Middle East & North Africa (Scientific Office) FZ-Ltd and its group companies (hereafter "Boehringer Ingelheim", "we", "us" or "our") for which purpose - on this website and elsewhere, if you have contact with us and our employees.

A. Summary

In the introduction, we would like to briefly summarize which of your data we process, for what purpose and how. You can find more information in the following detailed data protection information.

• We collect data from you when we provide you with our services (such as contracts, answering inquiries), advise you, visit our website, from public sources and databases (see B.1).
• We use your personal data to provide you with the respective services, to advise and inform you on the basis of the data collected in accordance with your interests, preferences and wishes, to comply with our legal reporting obligations and to be able to exercise rights (see B.1).
• For this we also involve service providers and other Boehringer Ingelheim companies who process the data for the purposes specified in these instructions (see B.2).
• Your data protection rights: You can revoke your consent at any time and change your data / authorizations on the profile page. You can also assert further rights to information, objection, etc. at any time (see B.5 and B.6).

B. Detailed data protection information

1. What types of personal data do we collect and for what purposes do we use them?

1.1. Requested and agreed services

We collect your data in order to be able to provide you with the agreed or requested services:

• in case you register on our websites or apps;
• in case we conclude contracts with you for consulting services, lectures or in other cases;
• in case you take part in further training or events;
• in case you interact with us, e.g. when signing-up for an event, when accepting a speaker engagement, when communicating via email, when requesting and receiving product descriptions or other materials, when you provide data during visits from representatives (such as feedback about our products).
• in case you send us inquiries about products or possible side effects.

1.2. Providing Information

When we contact you to advise you or provide you with information, we also collect personal data in order to further adapt our information and advice to your preferences and wishes:

• Name and contact data, including first and last name, postal address, email address, phone number or other contact data.
• Credentials including passwords, security questions or other security information.
• Profession as health care professional as well as therapeutic fields.
• After personal meetings and consultations, our employees write down which topics you would like more information about and which topics you may be less interested in. If medical representatives show you information on tablets during visits, the tablet also stores how long you have been shown which pages / information (you can object to this at any time, please inform our medical representative).
• Email newsletter: If you receive an email newsletter, we save whether and when you opened it and which links you clicked on when. You can object to this separately at any time, including to our medical representatives.
• We save your inquiries, which you send to us by email, via the website or in other ways.
• Online behavior consists of data that is created during electronic interaction. It may include IP address or any browser information when navigating on our website, which links were clicked and more information about email usage.
• Communication: We store and process the content of information we receive from you. For instance, if you write us an email, we may store this email to analyze your interests.

The processing takes place on the basis of the so-called balance of interest clause of the applicable Data Protection Regulation.

1.3. Data that we collect when using our websites and apps

1.3.1. Log data and cookies for the use of the website

When using the website, certain data, including data sent by the browser (e.g. IP address, cookies, further website, time and date, content displayed) are temporarily stored. We use this data to enable you to use our website and, in the event of damage or violation of legal provisions, our terms of use and third-party rights, to clarify the cases and enforce your rights. This processing serves the fulfillment of legal obligations and is based on the so-called balance of interests clause of the applicable Data Protection regulation.

We use cookies and similar technologies such as pixel tags, web beacons and clear GIFs (hereinafter referred to as "cookies"). We use cookies for technical reasons, such as resuming a user's session when logging in if the previous session was canceled due to inactivity. These cookies are not used to analyze the use of our website

1.3.2. Analytics

We use analysis tools to continuously improve our web service and other services.

These analyses help us to improve our performance by being able to analyze which of our offers are better or less well received and are based on the so-called balance of interests clause of the applicable Data Protection Regulation.

1.3.2.1. Adobe Analytics

We also use cookies from Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited ("Adobe"). Adobe Analytics uses cookies on behalf of Boehringer Ingelheim to analyze overall traffic and usage patterns. The IP address captured by the cookies is anonymized before it is geolocated. It is also replaced by a generic IP address. Adobe will not link your IP address with other data stored by Adobe. You can prevent Adobe from collecting and using data (cookies and IP address) by using your options at http://www.adobe.com/privacy/opt-out.html.

The analyses help us to improve our performance by being able to analyze which of our offers are better or less well received and are based on the so-called balance of interests clause of the underlying Data Protection Regulation.

1.3.2.2. Google Analytics

Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies that enable an analysis of the use of the website by the user. If you access this website from the EU / the European Economic Area, your IP address will be shortened by Google before it is transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there. On behalf of Boehringer Ingelheim, Google will use this information to compile reports on website activity and to provide other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in.

1.3.2.3 Analytics from Vimeo

Pages that contain video plugins from Vimeo also drop cookies to analyze traffic and usage patterns of users on an aggregated level. These cookies are stored for up to three years. Vimeo acts as our processor and processes personal data in the USA. To ensure an adequate level of data protection, we are using EU Standard Contractual Clauses.

1.3.3. Usage data on websites, apps, online seminars

If you have given your separate consent, we store usage data when you as a registered user visit our websites, apps or online seminars. Usage data is data that is generated when you visit these services: pages viewed, clicks, materials downloaded, times and duration.

1.4. Data from public sources and information received from third parties (for the management of master data and for advice)

We collect personal data about healthcare professionals from public or external sources of information, especially to verify their professional qualifications and identity. The data also help us in our communication and advice according to your interests and preferences:

1.4.1. One Key

In order to be able to inform and advise you, we maintain your contact details and information about your specializations with the help of OneKey ™, a database operated by IQVIA Commercial GmbH & Co. OHG, Albert-Einstein-Allee 3, 64625 Bensheim, with current contact and specialization data on medical professionals.

1.4.2. Publicly available information sources (publications, websites, memberships)

We collect publicly available data about your publications, participation in seminars, memberships in scientific or professional associations, whether you operate a website and how it is designed.

The processing takes place on the basis of the so-called balance of interests clause of the applicable Data Protection Regulation.

1.5. Optimal advice for you: How do we use your data for this?

Our goal is to offer you added value with our information and offers - tailored to your interests, preferences and wishes. We would like to explain how we do this here:

• Our advice is provided on the one hand by our medical representative, who uses his records to further personalize the advice.
• We use the further information to optimally select our content, the communication channels and our type of communication. Questions like: What is your area of expertise? Do you use our online offers or do you prefer personal contact? Do you publish a lot? How committed are you in scientific associations? Which materials are you more interested in, which materials less, etc.? Do you attend seminars? Which? We evaluate the data collected in order to align our further approach to these findings. You will receive information and offers that are tailored to your interests, preferences and wishes.

This is also based on the so-called balancing of interests clause of the underlying Data Protection Regulation.

1.6. Obligation to report to authorities

As a pharmaceutical company, Boehringer Ingelheim is subject to specific provisions such as, for example, Pharmacovigilance. Some of these regulations require that we send your reports to regulators or other authorities worldwide. We only provide authorities with personal data if we are legally obliged to do so.

2. Who do we transfer personal data to?

We may share personal information with third parties.

2.1. Reporting obligations to regulators and enforcement of rights

As a pharmaceutical company, Boehringer Ingelheim is subject to specific provisions, such as Pharmacovigilance. Some of these laws require us to send your reports to regulators or other authorities worldwide (including countries that may have a different level of data protection than the EU). We only provide authorities with personal data if we are legally obliged to do so. In order to protect our rights or the rights of third parties, we can also pass on data to right holders, consultants and authorities in accordance with legal provisions.

2.2. Service Providers

We commission service providers to process your personal data for the purposes described in this privacy notice. These service providers process the data only on our behalf, in accordance with our instructions and under our control in accordance with this data privacy notice. One of these service providers is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, which provide data and web analytics services.

2.3. Boehringer Ingelheim Affiliates

As part of a global group of companies, we involve other Boehringer Ingelheim companies that support us in data processing. These group companies process the data exclusively for the purposes stated in this data privacy notice.

2.4. One Key

If we receive incorrect personal data from the OneKey database, we will notify IQVIA of this (see section B.1.4.1). After validation at IQVIA, this data is made available to other companies with which IQVIA works.

2.5. Data transfer to recipients outside of the Dubai International Finance Center in Dubai, United Arab Emirates

These service providers and Boehringer companies sometimes process personal data outside Dubai, United Arab Emirates. In these cases, Boehringer Ingelheim ensures an adequate level of data protection to comply with the requirements of local law and BI policies.

3. How long do we store personal data?

We keep personal information for as long as is necessary for the specific business purpose or the purposes for which it was collected.

This means that we store your collected data as long as we can use the data to send you information. If you revoke your consent (for example, to collect usage data on websites, apps, online seminars) or if you exercise your right to object to data processing (see below), we will delete the data collected in a timely manner.

We may have to keep some data longer (e.g. as part of pharmacovigilance). In such a case, we ensure that your data is only used to fulfill the storage obligations and not for other purposes.

4. How we secure Personal Data

We use industry standard practices to protect the confidentiality, integrity, and availability of data, e.g. by access controls. All Personal Data provided to us is secured using industry standard procedures. We strive to update our security measures on a regular basis to keep track of new industry standards.

5. Which rights do I have?

5.1. Right of withdrawal of consent

You can revoke a consent given at any time with future effect. You may modify, add, delete or update your Personal Data or request deletion of Personal Data by emailing us at METAdataprotection.AE@boehringer-ingelheim.com or by contacting us as described in Section ‎6 below.

In case you request deletion of Personal Data, you may no longer be able to use all features and functions of our services. Please note that we may be required to keep some of your Personal Data for legal reasons, for instance to comply with statutory retention periods or for tax purposes. In such cases, we will mark your Personal Data accordingly to make sure that it is not used for any other purpose than complying with the retention requirement.

6. Contact

If you have any questions about our use of personal data, this privacy notice or you would like to exercise your rights, you can contact us at any time

Boehringer Ingelheim Middle East & North Africa (Scientific Office) FZ-Ltd

Index Tower, Level 13 & 15 Floor,

Dubai International Financial Center (DIFC),

Dubai, United Arab Emirates

P.O.Box 507066

Phone +971 44230400

Fax +971 44233637

E-Mail: METAdataprotection.AE@boehringer-ingelheim.com

If you have any questions or if you have any concerns about data processing, you can also contact the relevant data protection authority responsible for us.

7. What happens if we change this privacy policy?

We will update this privacy notice from time to time. We will notify you of any changes to our privacy notice by posting the new privacy notice here. If there are significant changes, we will publish a notice on our website or send you an email. If necessary, we also ask for your prior consent. You should read this privacy notice regularly for changes.

8. Further data protection information

Please note that in certain situations, additional data protection notices apply (such as contracts for clinical studies) and then apply in addition.