Consumer Health Data Privacy Statement Supplement

Last Updated: September 4, 2024

Please refer to our US Privacy Statement for full details about how Boehringer Ingelheim US (“Boehringer”) collects, uses, shares or otherwise processes your Personal Data.

This Consumer Health Data Privacy Statement supplements the Privacy Statement and provides additional details about how Boehringer processes Personal Data defined as Consumer Health Data under certain U.S. state laws, such as:  Washington’s My Health My Data Act (MHMDA), Nevada’s Consumer Health Data Privacy Law (NV CHDP) and Connecticut’s Data Privacy Act (CTDPA – SB 3).

A. Consumer Health Data Boehringer Collects, Uses and Shares

We may collect, use, and share the following categories of Consumer Health Data:

• Individual health conditions, treatment, diseases, or diagnosis;
• Social, psychological, behavioral, and medical interventions;
• Health-related surgeries or procedures;
• Use or purchase of prescribed medication;
• Bodily functions, vital signs, symptoms, or measurements related to health;
• Diagnoses or diagnostic testing, treatment, or medication;
• Reproductive or sexual health information;
• Biometric data;
• Genetic data;
• Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies;
• Data that identifies a Consumer seeking health care services;
• Health-related data that have been derived or inferred from the above.

We collect, use, and share the above categories of Consumer Health Data as reasonably necessary to provide you with the services you have requested or authorized, to provide and manage clinical research opportunities, patient support programs and other services we offer, to process and manage safety and quality concerns, and to conduct other legitimate business activities, as allowed by applicable law.

We may also collect, use, and share Consumer Health Data for other purposes, such as for advertising or marketing purposes. We obtain consent for such processing to the extent required by law. See the How to Exercise Your Consumer Health Data Rights section below for more details about the privacy choices you may have.

B. Sources of Consumer Health Data

We may collect Consumer Health Data directly from you or from the following sources:

• Vendors and third parties when they disclose Consumer Health Data to us
• Joint Marketing Partners
• Publicly-available Sources
• Social Media and Websites
• Online tracking technologies, such as cookie data

C. Categories of Third Parties with Whom we Share Consumer Health Data

We may share Consumer Health Data with the following:

• Third parties, including marketing partners who work on Boehringer’s behalf to provide certain services, including to communicate with you or conduct online targeted advertising.
• Business partners with whom we collaborate regarding our investigational products and programs, such as scientific advisors, joint venture partners, and strategic collaboration partners.
• Legal, regulatory, or other enforcement authorities and other third parties if required to comply with law, regulation, or judicial process, or to protect the security, rights, and property of Boehringer or of users of our Websites and Services.
• Third parties in the event Boehringer is involved in an actual or contemplated merger, acquisition, or sale of a portion of its assets, or in the unlikely event of bankruptcy. If this occurs, we will seek assurances that the Consumer Health Data will be processed in accordance with this Consumer Health Data Privacy Statement.
• Third parties to protect rights and interests, such as when needed for corporate audits, to investigate or respond to a complaint or threat, or to exercise our legal rights.
• Other third parties, with your consent or at your direction, for any of the purposes listed in Section A.

Please note that some third parties may collect Consumer Health Data about you over time and across different websites or online services you may visit.

We also share Consumer Health Data with Boehringer’s subsidiaries and affiliate companies.

**D.**How to Exercise Your Consumer Health Data Rights

You may have certain rights with respect to your Consumer Health Data including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise these rights by contacting us through any of the following methods:

•    Email. us.privacy@boehringer-ingelheim.com

•    Webform. Available by clicking here.

If your request to exercise a right you may have under applicable law is denied, you may appeal that decision by contacting us at us.privacy@boehringer-ingelheim.com.  If your appeal is unsuccessful, you may have the right to raise a concern or lodge a complaint with the attorney general for the state in which you reside.

E. Changes to this Consumer Health Data Privacy Statement Supplement

Our business, websites and services may change from time to time. As a result, we may make changes to our Privacy Statement or this Supplement at any time. If we do make such changes, we will post an updated version on this page, unless another type of notice is required by the applicable law. Additionally, when required under applicable law, we will request additional consent to collect and process your Personal and Consumer Health Data.  We encourage you to visit this page periodically and to review our most current Privacy Statement and applicable effective date.

References