Servier Centro América y Caribe S.A, a company with capital of 121,000 USD, registered office: Ph Dream Plaza, Floor 9, Av Centenario, Costa del Este, Panama City, Panama, registered with the Panama Public Registry under number 610466, VAT number: 1230561-1-610466 DV02

We respect and value the privacy of everyone who uses our website , which is why we collect and use personal data in the manner described here and in compliance with our obligations and your rights in accordance with applicable regulations. This personal data protection policy only applies to the use you make of our site.

1. What data do we collect?

We may collect some or all of the following personal data from Users of the Site:

• Data you provide to us through the Contact Us section of the Site: name, surname, email address, physical address, country.

• Data we automatically collect for statistical purposes via cookies: pages visited, dates and times of connection, preferred content, operating system, browser type, device type, etc. It is important to note that statistical cookies do not allow the identification of a specific individual.

According to the General Data Protection Regulation (GDPR), personal data refers to any information that can identify you directly or indirectly.

2. How do we use your personal data?

Under the GDPR, we must always have a legal basis for using personal data. This could be because the data is necessary and it is in our legitimate business interest to use it.

Your personal data may be used for the following purposes:

• Conduct statistical analysis, particularly regarding traffic to the Site.

• Ensure the management and improvement of the Site to provide Users with an optimal browsing experience.

• Respond to Users' questions and inquiries, providing technical assistance when necessary.

• Facilitate the follow-up of questions related to our products and services.

• Enable the processing of pharmacovigilance notifications related to our products and services.

• Enable the processing of reports of counterfeiting of our products and services.

• Enable the processing of quality defects in our products and services.

• Enable recruitment management through applications submitted via the Join Servier form.

• Comply with the regulatory and legal obligations applicable to Servier Centro America y Caribe S.A.

We do not process the data for purposes that are incompatible with the objectives described above.

3. What are your rights?

You have the right to request access and receive information about your personal data, update, correct, or delete your personal data, and limit or object (on legitimate grounds) to the processing of your personal data by contacting the Data Protection Officer ("DPO") of SERVIER:

• By email at: it.cac@servier.com

• By postal mail at the following address:

Data Protection Officer

Servier CentroAmerica y Caribe S.A

PH Dream Plaza, Floor 9, Av. Centenario, Costa Del Este, Panama City, Panama

If you have any reason to make a complaint regarding our use of your personal data, you have the right to submit a complaint to the relevant data protection authority in your country.

4. How long do we retain your personal data?

Your personal data collected by SERVIER is retained in a form that allows for fair identification during the time necessary for the purposes for which the personal data is processed. Specifically:

• Personal data collected for audience measurement purposes is retained for 24 hours.

• Personal data collected for research activities is retained in the information systems of the data controller, the participating center, or the healthcare professional involved in the research until the product studied is marketed, or up to 2 years after the last publication of the research results, or if no publication occurs, until the final research report is signed. The data is then archived in paper or electronic format for a period compliant with current legislation and regulations.

• Personal data collected for pharmacovigilance activities is retained for 10 years after the related marketing authorization ceases to exist; the data is then deleted or archived in anonymous form, unless otherwise indicated by applicable local regulations.

• Personal data collected for the management of medical information is retained for 3 years after your request.

• Personal data collected for scientific-medical contacts with healthcare professionals is retained for 5 years after the last interaction with SERVIER, then archived for 5 years and destroyed.

• Personal data collected for the management of relationships with healthcare professionals in connection with clinical studies is retained until the studied product is marketed or until the final research report or the publication of research results. It is then archived in paper or electronic format for a period compliant with applicable legislation and regulations.

• Personal data collected for communication and relationship management activities (contact with healthcare professionals) is retained for 5 years after the last interaction with SERVIER, then archived for 5 years and destroyed.

• Personal data collected for transparency management is retained, archived, and destroyed in accordance with current legislation and regulations.

• Personal data used for any other type of correspondence will be retained for 13 months.

  
  

5. How do we protect your personal data?

We have implemented appropriate and commercially reasonable technical and organizational security measures to keep your personal data confidential and to protect it against unauthorized or unlawful disclosure or access, accidental loss, destruction, alteration, or damage, taking into account the latest technological advances and the cost of their implementation.

6. Do we share your personal data?

Your personal data processed by Servier Centro America y Caribe S.A will only be accessible to a limited list of recipients on a need-to-know basis or as required by law, including but not limited to:

• The services and staff of Servier CentroAmerica y Caribe S.A and other legal entities of the Servier Group who need to know them;

• The providers and service providers of Servier CentroAmerica y Caribe S.A, particularly those responsible for hosting and managing the Site, who may need to access Users' personal data strictly for the purpose of fulfilling their mission;

• Competent authorities, such as health authorities, in certain cases defined by law.

  
  

7. Jurisdiction and law

This policy is governed by Panamanian law. The courts of Panama City (Panama) have exclusive jurisdiction to resolve any disputes arising from or related to this policy.