Personal information may include any personal information you provide to Bayer directly, or collected by us from other sources, including:

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address, place of work, etc.);
• Your payment details (e.g., bank account number, bank code, credit institute, tax identification number);
• Accounting data (e.g., purchased services, bank details, customer number, tax identification number, tax category);
• Details on your profession (e.g., job title, position, personnel number, place of work, department, etc.);
• Expertise and special interest (such as degrees, therapeutic specialty, specific disease expertise, practice setting, years of practice, department); and
• Details on your professional activities and online engagement (eg. Social media and other channel engagement information).

If you are a Healthcare Professional that acts as a customer or vendor to Bayer, Bayer may process your personal information as set out in Section 6 – Processing of Information of Business Partners in order to:

• process your orders, and initiate and fulfil our contracts with you;
• receive and compensate you for your services; and/or
• perform accounting.

See Section 6 – Processing of Information of Business Partners for further details.

Additionally, we use personal information you provide to Bayer or that we obtain about you from other sources in order to manage and maintain our relationships with you, including to:

• Better understand your interests and preferences;
• Inform you about Bayer Services that might be of interest to you;
• Better provide you with support you may need; and
• To validate your eligibility to access certain Website content.

We use a variety of tools and systems to assist us with fulfilling these purposes. These tools and systems are provided by third party service providers. They include:

Customer relationship management (CRM) systems: Any personal information you provide to Bayer directly, or that is collected by us from other sources may be maintained in our customer relationship management (CRM) systems.

Data access tools: We use third party tools in order to access your personal information, where you have provided your consent for those services to share your information with us, or where otherwise authorized by law. This includes your contact information, image, information about your professional interests, activities, and online engagement. We use this information to:

• better understand your research and professional interests and activities; and
• contact you in a professional capacity.

Data analysis tools: We use third party tools and data partners to access analytics regarding your interests, preferences, and behaviour, where you have provided your consent for those services to share your information with us, or where otherwise authorized by law. We use these insights to:

• better understand your preferences regarding the manner in which Bayer engages with you; and
• better understand, in the aggregate, prescribing demographics and behaviour, in order to improve our products and other Services.

Personal information may include:

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address);
• Access credentials (e.g., login, password);
• Accounting data (e.g., purchased goods and services, bank details, customer number, tax identification number, tax category);
• Details on your profession (e.g., job title, position, place of work, department, practice, specialty, education, certification, accreditation, association); and
• Expertise and special interest (such as degrees, therapeutic specialty, specific disease expertise, practice setting, years of practice, department).

We provide Healthcare Professionals tailored content on our Website. As a result of Bayer's legal obligations, in order to access this content, Healthcare Professionals must validate their eligibility and create an account.

In this context, we process your personal information in order to:

• Validate your eligibility to access Healthcare Professional-tailored content;
• Create your account on our Website;
• Enable your log in as a registered user; and
• Administer the Services on our Website and related technical administration.

This processing is necessary for us to deliver you with the Services you request via our Website.

With your consent, we may also use your account information to provide you with marketing.

Personal Information processed for electronic marketing purposes may include:

• The information you provide to subscribe to electronic marketing lists, such as your title, name, email address and personal/ professional interests;
• Details on your profession (e.g., job title, position, place of work, department, practice, specialty, education, certification, accreditation, association);
• Expertise and special interest (such as degrees, therapeutic specialty, specific disease expertise, practice setting, years of practice, department); and
• Consumer and professional preferences and comments, including with respect to Bayer Services.

For profiling purposes, we use data that we receive from you as part of our business relationship. This includes:

• Purchase history; and
• Cookie data, including browsing data and usage data regarding your engagement with our electronic messages.

When you subscribe to receive emails or other electronic communications from us, or where we are otherwise permitted to do so by applicable law, we process your personal information to:

• Contact you via e-mail or other channels (phone, email, SMS, mail, social media messages);
• Process your subscription. If you would like to receive emails or other electronic communications from us, and provide your express consent for this purpose;
• Present you with information that could be of interest to you, and seamlessly over various channels (phone, email, SMS, mail, social media messages) without sending redundant information. For example, we may use the combination of your email address and certain browsing data to provide you with information about a product you look up on one of our websites. Based on the information we collect, we may internally indicate that you are interested in certain categories of information;
• Optimize and personalize our customer relationship management. We may use profiling procedures to optimize and personalize our customer relationship management and our promotional activities. To do so, we may create customer profiles and assign customers to specific customer segments on the basis of these customer profiles. On the basis of this segmentation, we can manage the type, content and frequency of specific promotional activities for specific target groups; and
• To measure and evaluate your interaction with our electronic communications (in particular by measuring and evaluating the open and click rate in email newsletters or other commercial messages).

The processing is based on your consent you provided to us in the course of the subscription process or otherwise a permitted by applicable law. You have the right to withdraw your consent at any time, e.g., by emailing privacycanada@bayer.com or by clicking “unsubscribe” at the bottom of an email we send you.

If you opt-out of receiving marketing-related emails from us, we may still send you important administrative messages, such as notifications regarding our business relationship with you, important notices regarding our services, or as otherwise consistent with applicable law.

Depending on the event, personal information may include:

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address);
• Details on your profession (e.g., job title, position, place of work, department, practice, specialty, education, certification, accreditation, association);
• Expertise and special interest (such as degrees, therapeutic specialty, specific disease expertise, practice setting, years of practice, department);
• Information about your travel to the event (e.g., hotel accommodation, flights, transportation); and
• Your bank account data (where you will be compensated or be reimbursed for your attendance).

Where you participate in, speak at or otherwise attend an event that we provide or for which we act as a sponsor, we may receive and process certain information about you.

We use this information to:

• Register you and enable your participation in the event;
• Administer travel arrangements for the event; and
• Administer payments to you, where you are a compensated speaker or qualify for reimbursement of your cost of participation.

Personal information you enter and submit via one of our contact forms or through your other communications to us, including:

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address) and any other information you provide when you make a complaint or inquiry;
• Details on your profession (e.g., job title, position, place of work, department, practice, specialty, education, certification, accreditation, association);
• Expertise and special interest (such as degrees, therapeutic specialty, specific disease expertise, practice setting, years of practice, department); and
• Any further information you provide to us, e.g., in the process of your request or which is otherwise required to answer your request.

When you enter and submit your data via one of our contact forms or contact us otherwise, e.g., in the context of a service request or via the contact form we provide on our Website, your personal information will be processed to:

• Handle your specific request, complaint, inquiry or feedback, e.g., by answering or forward your request to a competent department.

This processing is necessary for us to answer your inquiry in a quick and competent manner, and to provide you with customer service. Information you provide to us in this context will only be processed for the purpose of responding to your inquiry.

We may use or disclose your personal information in order to:

• Meet our obligations under applicable laws, i.e., reporting to Health Canada and other regulatory bodies. For details regarding Bayer’s treatment of personal information for global PV management and reporting, please see: https://www.bayer.com/en/privacy-statement-pv;
• Preserve and enforce our contractual rights, including our Website General Conditions of Use; and
• Protect our Services, website, users or others, where permitted or required by law.

The data we use varies broadly depending on the specific purpose for the relevant research.

Personal information of Healthcare Professionals may include

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address, date and place of birth, country of birth, nationality, etc.);
• Accounting data (e.g., purchased goods and services, bank details, customer number, tax identification number, tax category, etc.);
• Details on your profession (e.g., job title, position, place of work, department, practice, specialty, education, certification, accreditation, association);
• Expertise and special interest (such as degrees, therapeutic specialty, specific disease expertise, practice setting, years of practice, department);
• Physician level aggregated prescription data; and
• Consumer and professional preferences and comments, including with respect to Bayer Services.

Personal information of your Patients may include:

• Contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address, date and place of birth, country of birth, nationality, etc.);
• Health information (e.g., diagnosis, existence of an illness or disability, details about adverse events, treatment history, relevant health parameters, etc.); and
• Clinical trial data, including demographic, medical and health information of Patients.

This information is obtained from multiple sources including:

• Third party data service providers;
• Data that must be reported to Health Canada and other regulatory bodies;
• Sensitive health and patient data provided to Bayer through PV reporting and adverse event reports, recalls or other notifications; and
• Through Bayer chat boards, health centers, customer and professional contact forms and call centres.

Bayer conducts research in order to:

• develop and apply measures to prevent, diagnose, treat, recover, or cure diseases, illness, injuries, and other physical and mental impairments;
• test and analyze our Services for efficacy, safety and enhancements; and
• better understand the healthcare and life sciences industries and the preferences of Healthcare Professionals, Patients and Business Partners, through surveys, market analyses, and scientific research.

In this context, your personal information, and the personal information of your Patients, may be processed to:

• Contact you to ask for your feedback;
• Facilitate or administer the research or survey;
• Analyze data, identify trends and issues and create statistical reports; and
• Test and analyze our Services for efficacy, safety and enhancements.

If possible, we pseudonymize or even anonymize personal information before or in the course of our analyses.

We may also collaborate with other companies or institutes in the case of scientific research. In such cases, we enter into specific agreements with these third parties to preserve the confidentiality of your data.

In certain circumstances, we use third party data analysis tools to access analytics regarding your interests, preferences, and behaviour, where you have provided your consent for those services to share your information with us, or where otherwise authorized by law. We use these insights to:

• better understand your preferences regarding the manner in which Bayer engages with you; and
• better understand, in the aggregate, prescribing demographics and behaviour

These insights are used to improve our products and other Services.

We process your and/or your Patients' information on the basis of express consent where the information is sensitive (for instance, health information).

Personal information may include

• Your contact information (e.g., name, title, form of address or salutation, address, gender, telephone numbers, email address);
• Details on your profession (e.g., job title, position, place of work, department, practice, specialty, education, certification, accreditation, association);
• Details on the visit to our facilities (e.g., data of visit, purpose of visit, contact person at our facilities); and
• Where necessary for security purposes, images and videos.

When you visit our facilities, we might process your personal information as part of our visitor management, including to:

• Offer you a parking space;
• Provide you with internet connectivity to our Wi-Fi Network; and
• To administer and maintain a series of technical and organizational measures, including CCTV in some circumstances, to protect our facilities, preserve our rights, and detect the unauthorized external transfer of our data assets (including intellectual property) from within Bayer.