WEBSITE PRIVACY NOTICE

This website (the "Site") is operated by Mundipharma International Limited (“Mundipharma”) and its network of independent associated companies (referred to here as "Mundipharma", "we" or "us") use your personal data., also referred to in this Site as "we" or "us" or “our”. This Site is intended for use by members of the general public and healthcare professionals.

Please read the following carefully.

Mundipharma takes the privacy of your personal data very seriously. In the event that you send us any of your personal data, we are committed to collecting, maintaining, and securing personal data about you in accordance with our internal data protection policies and local laws.

This Privacy Notice describes how we will process your information when you use this website, or otherwise provide personal data to us through the means described in this Privacy Notice. This Privacy Notice supplements other privacy notices that we may provide on our website or through other means from time to time when we process your information.

Please note this Privacy Notice does not cover any third-party sites referred to or accessed using links or buttons on this Site. These third-party sites may have their own terms and conditions and privacy policies. We are not responsible for the terms and conditions, privacy policies or content of any website referred to or accessed through this Site.

This Site isn’t intended for use by children (under 16 years old), however the legal representative of a child may exercise the rights set out in this Privacy Notice on behalf of the child.

To read more about how we use your personal data, please review the topic of interest below.

CONTENTS:
1) PERSONAL DATA COLLECTED USING THIS SITE
- Website and Cookies
2) PERSONAL DATA COLLECTED FROM OTHER SOURCES
3) THE BASIS FOR USING YOUR INFORMATION
4) SHARING YOUR PERSONAL DATA
5) TRANSMISSIONS USING THE INTERNET
6) DATA RETENTION
7) AUTOMATED DECISION MAKING
8) YOUR RIGHTS
9) CONTACT US

If you have any queries regarding this Privacy Notice, please contact us using the email address: privacy@mundipharma.com

This Privacy Notice is reviewed and updated from time to time. If we update the terms, we will provide notice through our home page, or by other means, so you can review the changes. Please check back if you continue to use this Site or interact with Mundipharma.

1) PERSONAL DATA COLLECTED USING THIS SITE

Mundipharma is the data controller for the purposes of using this Site. Mundipharma may collect personal data when you provide it to us, including:

your name and other contact details
records of your correspondence if you contact us, such as emails
details of your use of this Site
other technical data, such as IP address, browser type and operating system

The personal data you provide to us through this Site will be used for the following purposes:

providing you with information, including in response to queries regarding our products, therapy areas and/or services
understanding our business needs and improving our products and/or services
technical support, and to ensure that content from this Site is presented effectively for you and your computer or device

as well as the use(s) set out in the other Sections of this Privacy Notice.

We may also use your personal data to comply with applicable laws, or other purposes for which you have given your consent.

In some circumstances, you may provide your personal information directly to Mundipharma, for example if you use the details found on the Contact Us page. If you do so, your personal information will be collected and processed for the purposes as set out above.

Website and cookies
When you visit this Site, Mundipharma automatically collects information using cookies, such as your browser type and operating system, websites you visited before and after visiting our websites, standard server log information, and Internet Protocol (IP) addresses.

An IP address is an assigned number, similar to a telephone number, which allows your computer to communicate over the Internet. We pool this information and may combine it with other information to produce anonymous, aggregated statistical information which is helpful to us in improving our products and/or services. This information includes:

the total number of visits to our websites and mobile applications
the number of visitors to each page of our websites and mobile applications
the domain names of our visitors' internet service providers.

For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

2) PERSONAL DATA COLLECTED FROM OTHER SOURCES

There may be other purposes for which we use your personal data, and a separate information notice will be available about this use. For details in relation to reporting adverse events and transparency reporting, please see the information notices located on our Sites. More information about our data processing activities can be found in the privacy notice(s) on our Sites.

3) THE BASIS FOR USING YOUR INFORMATION

Before we process your personal data, we need a legal basis for doing so. Our internal records document this legal basis. In general, we will use your personal data using one or more of the following basis:

Use	Legal Basis
Improving our products, services and digital communications, including the use of data analytics to improve the way we do things	Our legitimate interests, except where we need your consent
Responding to your queries or requests, accommodating certain personal requirements or preferences and handling complaints
Complying with our legal and ethical obligations, internal company policies and industry standards, for example, disclosing information about payments or other transfers of value to you to meet our transparency obligations	To comply with our legal obligations, where the processing is in the public interest, or for our legitimate interests. We may seek your consent to disclose payments made to you on an individual basis.
Detecting and investigating harmful behaviour, including any abuse or attacks on our networks, allegations of misconduct or other behaviour that is harmful to our business, and taking proactive measures to prevent such behaviours
Due diligence, conflict checks, and information disclosure exercises in conjunction with legal proceedings, the purchase or disposal of business assets or operations, or to respond to requests for information from government or regulatory authorities

4) SHARING YOUR PERSONAL DATA

We share your personal data with Mundipharma companies located inside and outside the United Kingdom and European Economic Area who provide IT support and other services such as HR, Finance and Corporate Communications, as well as to the following recipients:

Our agents, service providers and business partners where they have a need to know for the purposes of providing services to Mundipharma, such as:

Technology suppliers who help with the hosting, development, management and support of our online platforms and services, for example SheShe Ltd;

Government authorities, regulators and other public bodies;

The general public in the context of our transparency obligations;

Our legal advisors, auditors, accountants, lenders, insurers, consultants and others providing similar services;

Another corporate, partnership or other commercial enterprise (and their advisors) in the context of a business transfer, asset purchase or change in ownership of relevant Mundipharma entities.

International transfers: Where we transfer personal your personal data from the United Kingdom or European Economic Area, we will use suitable measures, such as standard contractual clauses and (where appropriate) supplementary measures, to protect your personal data being shared outside of your country to countries that do not offer a suitable level of protection. We may need to share your personal data with a government authority, regulator or to otherwise comply with our legal obligations.

5) TRANSMISSIONS USING THE INTERNET

Unfortunately, the transmission of information via the Internet is not completely secure. Although Mundipharma will use reasonable commercial efforts to protect your personal data, we cannot guarantee the security of your data transmitted using the Internet. Anything you send by email or using the internet is at your own risk. Once Mundipharma has received your personal data, we will secure your information in accordance with our security procedures and controls to try to prevent unauthorised access, alteration or loss.

6) DATA RETENTION

We will retain your personal data in accordance with our Records Retention Policy. Generally, we will only retain personal data for the period necessary to fulfil the purposes for which the personal data was collected, unless a longer retention period is required or permitted by law or we have justifiable reasons for doing so.

7) AUTOMATED DECISION MAKING

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

8) YOUR RIGHTS

You have the following rights:

To ask about the processing of your personal data;
To request a copy of your personal data, its correction and/or deletion;
If you have provided consent for us to process your personal data, you may withdraw it with limited exceptions.
The withdrawal of consent shall not affect any processing based on consent before its withdrawal;
If you provided your personal data for a contract or with your consent, or it is processed by automated means, you can also request receipt or transmission of your personal data to another organisation in a machine-readable form;
You can object to the processing where the processing is for direct marketing purposes, a task in the public interest, or for our legitimate interests. This right is not absolute;
In certain cases you can request a restriction on the processing of your personal data, for example where your wish to verify the accuracy of your personal data or where you object to the processing.

If you would like to exercise any of these rights, you can get in touch with using the contact information in the “Contact us” section of this notice.

If you are unhappy with how we process your personal data, you can complain to your local supervisory authority. In Ireland, this is the Data Protection Commission (https://ico.org.uk/). We would, however, appreciate the chance to deal with your concerns, so please contact us in the first instance.

9) CONTACT US

You may contact us at privacy@mundipharma.com; or c/o Legal and Compliance, Mundipharma International Limited, Unit 196 Cambridge Science Park, Milton Road, Cambridge, CB4 0AB in case of any questions or concerns regarding the processing of your personal data. Please explain your relationship and/or interactions with us, as well as the specifics of your query when contacting us.

If you are unhappy with how we process your personal data, you have a right to complain to your local supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

Date of Preparation March 2025.