DATA PRIVACY STATEMENT

This data privacy statement explains which of your personal data NBE-Therapeutics AG https://nbe-therapeutics.com/ (“we” or “NBE-Therapeutics AG”) processes – on this website and elsewhere if you have contact with us and our employees – and the purpose of doing so.

Responsibility for processing your personal data lies with:

NBE-Therapeutics AG

Hochbergerstrasse 60C

4057 Basel

E-mail: email hidden; JavaScript is required

A. Summary

We would like to begin by briefly summarising which of your data we process, for what purpose and how. You can find more information in the following detailed data privacy statements.

• We collect data from you when we provide our services (such as contracts, responding to inquiries), provide advice and when you visit our website, as well as data from public sources and databases (see B.I).

• We use your personal data to provide services, advise and inform you on the basis of the data collected in accordance with your interests, preferences and wishes, meet our statutory reporting requirements and exercise our rights (see B.I).

• To do so, we also work with service providers and other Boehringer companies that process the data for the purposes specified here (see B.II).

• Your data protection rights: you can revoke consent at any time. You can also assert further rights to access and the right to object at any time (see B.IV and B.V).

B. Detailed data privacy statement

I. What kinds of personal data do we collect, and for what purposes do we use these data?

1. Requested and agreed services

We collect your data in order to perform the agreed or requested services:

• If you register on our websites or apps;

• If we enter into contracts with you for consulting services, presentations or in other cases;

• If you participate in further training or events;

• If you send us inquiries on products or potential side effects.

We process your personal data for the purposes outlined above and, depending on the situation, in particular based on the following legal bases:

• Processing personal data is required to perform a contract with you;
• You have consented to the processing of your personal data;
• Processing personal data is required to comply with a legal obligation;
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• We have a legitimate interest in processing the personal data.

2. Provision of information

If we contact you to provide advice or send you information, we also collect personal data to adapt our information and advice to your preferences and wishes:

• After face-to-face meetings and consultations, our employees take note of areas where you would like further information and which topics you may be less interested in. If field sales employees show you information on tablets during visits, the tablet also stores the length of time for which you were shown which pages/information (you can object to this at any time, please inform our field sales employees).

• E-mail newsletter: If you receive the e-mail newsletter, we store data on whether and when you open this newsletter and which links you click on and when. You can object to this separately at any time, including through our field sales employees.

• We save your inquiries sent to us by e-mail, through our website or through other channels.

The legal basis for this processing of personal data is our legitimate interest in providing our services and sending you information on our services, continuously further improving our services, evaluating and improving our newsletter and processing your inquiries.

3. Data we collect when using our websites and apps

a) Log data and cookies required to use the website

Certain data, including data sent by your browser (e.g. IP address, cookies, further websites, date and time, content displayed), are temporarily stored when using the website. We use this data so that you can use our website and, where necessary, to clarify damage events or violations of statutory provisions, our terms and conditions of use or third party rights and to assert rights.

We use cookies and similar technologies such as pixel tags, web beacons and clear GIFs (hereinafter referred to as “cookies”). We use cookies for technical reasons such as to restore a user’s session when logging in if the previous session timed out due to inactivity. These cookies are not used to analyse use of our website.

The legal basis for the temporary storage of log data and data processing when using necessary cookies is our legitimate interest in providing a sufficiently high-quality website and continually improving this.

b) Analytics

We also use cookies from Google Analytics, a web analysis service of Google Analytics LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google Analytics”). Google Analytics uses "cookies", which are text files placed on users' computers, to help the website analyse how users use the site. The information generated by the cookie about the use of this website by users is usually transmitted to a Google server in the U.S. and stored there.

In the event that IP anonymization is activated on this website, however, Google will truncate the user's IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by users, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Third-party vendors, including Google, serve ads on websites on the Internet. Third-party vendors, including Google, use stored cookies to serve ads based on a user's previous visits to this website.

Google will not associate your IP address with any other data held by Google. You can object to the collection and storage of data at any time with effect for the future. You can disable the use of cookies by Google by selecting the appropriate settings on your browser software.

For more information about Google's use of data for advertising purposes, settings and opt-out options, please visit Google's websites: https://www.google.com/intl/de... ("Data use by Google when you use our partners' websites or apps"), http://www.google.com/policies...("Data use for advertising purposes"), http://www.google.de/settings/... ("Manage information Google uses to show you ads") and http://www.google.com/ads/pref... ("Determine what ads Google shows you").

As an alternative to the browser add-on or within browsers on mobile devices, please install the Ghostery app.

By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

The analyses help us improve our services by allowing us to analyse which of our services are well or less well received. We obtain your consent for this in advance. Accordingly, your personal data are processed for analysis purposes based on cookies on the basis of your consent.

c) Usage data on websites, apps, online seminars

If you have granted separate consent, we store usage data when you visit our websites, apps or online seminars as a registered user. Usage data are data collected when using these services: pages viewed, clicks, materials downloaded and the time and duration.

You can revoke consent at any time with future effect.

4. Data from public sources and information obtained from third parties (for master data management and consulting)

a) SM Marketing Services AG

To inform and advise you, we maintain your contact details and information on your areas of specialisation using the database from SM Service Marketing AG, Industriestrasse 13, 6010 Kriens, a database of up-to-date contact and specialisation information on medical specialists.

b) Publicly available information sources (publications, websites, memberships)

We collect personal data on health professionals from public or external information sources, in particular to verify their professional qualifications and identity. The data also help us communicate and advise you in line with your interests and preferences:

In addition, we collect publicly available data on your publications, seminars attended, memberships in scientific or professional associations, whether you have a website and how this is designed.

The legal basis for this processing of personal data is your consent and our legitimate interest in verifying your professional qualifications and identity and providing advice.

5. Optimal consulting for you: how do we use your data for this?

Our goal is to offer you added value with our information and offers – in line with your interests, preferences and wishes. We would like to explain here how we intend to do this:

• Our consulting services are provided through our field sales employees, who use their records to further tailor their advice to you.

• We use the additional information to select the best content, communication channels and method of communication. This relates to questions such as: What is your field of expertise? Do you use our online services, or do you prefer meeting in person? Do you publish a lot? How involved are you in scientific associations? What materials are you more/less interested in, etc.? Do you attend seminars? Which ones? We evaluate the data collected so that our approach going forward aligns with these findings. This way, you receive information and offers that match your interests, preferences and wishes.

6. Reporting requirements to authorities

As a pharmaceuticals company, Boehringer Ingelheim/NBE-Therapeutics AG is subject to specific regulations, for example on pharmacovigilance. Some of these laws require us to send reports to regulatory authorities or other authorities worldwide. We provide personal data to authorities only if we are legally obliged to do so.

II. Who do we transmit personal data to?

Under some circumstances, we may share personal data with third parties.

1. Reporting requirements to regulatory authorities and asserting rights

As a pharmaceuticals company, Boehringer Ingelheim/NBE-Therapeutics AG is subject to specific regulations, for example on pharmacovigilance. Some of these laws require us to send reports to regulatory authorities or other authorities worldwide (including to countries where the level of data protection may differ from that of Switzerland). We provide personal data to authorities only if we are legally obliged to do so.

To protect our rights and the rights of third parties, we can also send data to copyright holders, consultants and authorities in accordance with statutory provisions.

2. Service providers

We engage service providers to process your personal data for the purposes described in these data privacy statements. These service providers process the data only on our behalf, as per our instructions and under our control in accordance with this data privacy statement.

One example of these service providers is Google Analytics LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which provides data and web analysis services.

3. Boehringer companies

As part of a global group, we work with other Boehringer companies that help us process data. These Group companies process the data exclusively for the purposes described in this data privacy statement.

4. Data transfer to recipients outside the EU

In some cases, these service providers and Boehringer companies process personal data outside Switzerland/the EU. If we transfer data to a country that does not have an adequate level of statutory data protection, we ensure an adequate level of protection through the use of appropriate contracts under the law (on the basis of standard contractual clauses of the European Commission) or by applying the statutory exceptions of consent, contract performance, establishment, exercise or enforcement of legal claims, overriding public interest, published personal data or because it is necessary to protect the integrity of the data subjects.

III. How long do we store personal data?

Subject to any legal obligations (such as statutory retention periods) or our overriding interests, we retain personal data only for as long as is necessary for the specific business purpose or purposes for which they were collected.

We retain personal data resulting from a contractual relationship with you for at least the duration of the contractual relationship, statutes of limitation for potential claims or contractual retention requirements.

IV. What are your rights?

1. Right to revoke consent

If data processing is based on your consent, you can revoke this at any time after giving your consent with effect for the future. However, this does not affect the lawfulness of processing based on consent until the time at which consent is revoked.

2. Right of access, erasure, etc.

You may request information about the data stored on your person. If you have provided personal data on the basis of a contract or consent, you are entitled to receive these data in a commonly used electronic form.

In justified cases, you can also request the erasure, rectification or restriction of processing of your data, object to our data processing and request certain personal data be handed over so that they can be transferred elsewhere (known as data portability). If your personal data are transferred to a country outside Switzerland that does not provide adequate protection, you can request a copy of the contract ensuring the adequate protection of personal data.

3. Right to opt out of marketing

If we use your personal data on the basis of the balancing of interests, you can object to the use of your data. In this case, we will no longer use your data unless this is outweighed by our interests. You can object to the use of your data for direct marketing purposes, e.g. to receive e-mails on the basis of your consent, at any time without further consideration.

V. Contact

If you have any questions on our use of personal data or this data privacy statement or wish to assert your rights, you can contact us at any time at the address provided above in this data privacy statement.

If you have any questions or concerns regarding data processing, you can also contact the competent data protection authority.

VI. What happens if we amend this data privacy statement?

We will occasionally update this data privacy statement. We will inform you of all changes to our data privacy statement by publishing the new data privacy statement here. If there are any material amendments, we will clearly state this on our website or send you an e-mail. Where necessary, please provide your prior consent. You should regularly review this data privacy statement for changes.

VII. Additional data privacy statements

Please note that, as we see fit, we may provide additional data privacy statements in addition to this data privacy statement (for example, in connection with contracts for clinical studies).

Last Update: 01.09.2023