Bayer Philippines DP Statement

A. Information on data privacy

With this document, Bayer Philippines Inc.,(hereinafter “us”, “our” or “we”) wishes to provide you with information on how we handle your personal data and to obtain your consent for specific purposes as outlined below.

1. Handling of personal data
   Bayer Philippines Inc., its employees, affiliates subsidiaries, assigns and parties acting on its behalf (collectively as “Bayer”), to collect, retain, share or transfer your personal data herein disclosed for our internal purposes including development of thought leaders, promotion of pharmaceutical products, furthering our commitment to support continuing professional development among healthcare professionals, pharmacovigilance and product technical complaint reporting and those which are necessary for Bayer to comply with our contractual obligations, subject to Bayer’s compliance with the requirement of applicable data privacy laws, The Data Privacy act of 2012. The legal basis for the handling of your personal data results from the fact that it is necessary to pursue our legitimate interest to promote our products and services.
   1. Maintain customer relationship management
      We maintain a customer relationship management system where we store personal data about you:
      • Contact Information: This category of personal data encompasses e.g. your name, address, phone/fax/mobile-number, e-mail or other online contact information. We receive Contact Information from our individual business contacts with you or from commercial data providers as well as from publicly available sources, e.g. websites. We use your Contact Information in order to promote our products and services or deliver urgent medical information regarding our products.
      • Analyze customer relations: In case you purchase products from us or make use of our services, we store your customer history. We use this information in order to be able to better understand your interests and inform you about our products and services that might interest you. Furthermore, we document and analyze our individual contacts with you in order to continuously improve your experience with our products and services. This may include the topics discussed with you and your interest in them. In this context, we may also receive data about your interests from commercial data providers.
      • Improve customer collaboration: In order to manage our collaboration with you in an effective way and to support successful market development of our products and services, we try to better understand which scientific/medical topics you are particularly interested or involved in. This category of personal data is based on our own data or experiences or provided by market research agencies or commercial data providers and encompasses e.g. information about your area of medical expertise, your scientific activities such as publication of scientific articles, participation in research projects and professional congresses.
   2. Conduct market research studies
      We work together with fully independent market research agencies, who, on our behalf, conduct market research studies globally, focused on our scientific interests and products. We may share your Contact Information with these market research agencies in order to conduct market research studies that are specific to our customers.
   3. Deliver Pharmacovigilance medical communications
      Capturing adverse events, however rare they may be in absolute terms, in the development and marketing phase from worldwide sources is of paramount importance. Such monitoring of adverse events is called Pharmacovigilance (“PV”). Our PV obligations require us to process certain personal data of a patient and/or the reporter of an adverse event that we receive in order to comply with strict obligations to perform benefit-/risk assessments of Bayer Health Products continuously and report suspected adverse reactions or events to relevant regulatory authorities. PV medical communications are subject to consent. You will find further information about how we handle personal data for PV purposes in Bayer’s Privacy Statement for PV Data.
   4. Deliver marketing/medical communications
      We may use your Contact Information to communicate with you through phone calls, direct mail, e-mail or other electronic communication (e.g., fax, chats on websites, text messages, messenger messages or remote detailing/incl. customer services on demand) in order to deliver marketing/medical communications. We might use marketing/medical communications to provide information about services, products or events related to your medical interest or to collect feedback on our products and services. This may include displaying customized advertisements tailored to your interests to you on our or other websites and apps. However, marketing/medical communications via e-mail or other electronic communications (“Electronic Marketing/Medical Communications”) as well as via phone calls are subject to you providing your consent.
   5. Analyze your use of our Electronic Marketing/Medical Communications
      In order to customize our Electronic Marketing/Medical Communications to meet your needs and preferences and subject to you providing your consent, we analyze your use of our Electronic Marketing/Medical Communications, for example whether you opened and how you used our Electronic Marketing/Medical Communication (e.g. which links you clicked).
   6. Process your purchases
      In case you place a purchase order with us, we process your Contact Information and your payment information in order to process your purchase order, including organizing shipment to you. The legal basis for the processing is the conclusion and fulfilment of the purchase contract for the ordered goods or services. If you choose to pay on account, i.e. we provide our products or services before payment, we carry out a credit check to protect us against payment defaults.
       
2. Transfer of personal data
   2.1. Commissioned Processing
   We use specialized service contractors that help us providing our services. Such service contractors are carefully selected and regularly monitored by us. Based on respective data processor agreements, they will only process personal data upon our instruction and strictly in accordance with our directives.
   2.2. Third Parties
   We transfer or give access to your personal data to third parties in the following circumstances:
   1. We may share your Contact Information with fully independent market research agencies as described above in Section 1.b.
   2. We may transfer your above-referenced personal data to other Bayer affiliates for the purposes specified above. However, other Bayer affiliates will only directly deliver corresponding marketing communications via e-mail or other electronic communications to you, if you provide your consent below.
   3. We may also transfer your above-referenced personal data to other partners that need to be involved in managing a service or communication towards you, e.g. hotels or travel agencies.
   4.   Your data may in part also be transferred and processed in countries outside Philippines wherever required, we will ensure that a sufficient level of protection is provided for your data, e.g. by concluding specific agreements with the respective data importer. Such data transfers are only carried out in accordance with applicable data privacy laws.
3. Retention period for personal data
   We only retain personal data for as long as is necessary for the purpose of a continuous customer relationship with you. As a rule, your personal data will be automatically archived in our systems for 3 years, thereafter, if after 2 (two) years, your data remains inactive, it shall be deleted and in case your data are still active, we will retain your personal data for a minimum period of ten (10) years. However, if legally required to be retained for a longer period by government regulations or to enable Bayer to fulfill its rights and obligations to you as a customer, (e.g. in connection with the performance of a contract concluded with you, a pending litigation or according to applicable tax laws), we will retain your personal data for such different retention period as required.
4.  Information regarding your rights
   The following rights are in general available to you according to applicable data privacy laws:
   1. Right to be informed that your personal data will be processed by us;
   2. Right to object to the processing of your personal data, including processing for direct marketing, automated processing or profiling.
   3. Right to reasonable access to your personal information and how it is being processed,
   4. Right to dispute any inaccuracy or error in your personal data and have the same rectified immediately.
   5. Right to suspend, withdraw or order the removal or destruction of your personal data from our filing systems.
   6. Right to data portability.
   7. Right to be indemnified for any damages sustained due to unlawfully obtained or unauthorized use of your personal information.

If you wish to exercise your rights, please address your request to Bayer’s Data Privacy Officer, at dpo.bpi@bayer.com.

CON-PH-00001-1

Last updated: May 17, 2021