Privacy Policy

Aurobindo Pharma Limited and its subsidiaries (APL) hereby adopts the following privacy policy, :

This Privacy Notice outlines Aurobindo Pharma Limited's (APL) practices regarding the use of your personal information and your data protection rights, including the right to object to certain processing activities. It explains what personal information we collect, how we collect it, its usage, and the measures we take to protect and secure it.

• Visitors to APL's main website and other directly linked websites or apps
• Members of the general public interacting with APL
• Employees and representatives of businesses and organizations APL interacts with (e.g., vendors, healthcare professionals, and customers)
• Any individual receiving this Notice who has not received a more specific notice

Please review this Notice carefully to understand our policies and practices concerning your personal information. If you disagree with our policies, please contact us to request that we cease processing your personal information. We will take appropriate action, but please note that this may affect our ability to provide you with requested information, goods, or services

Our websites may contain links to external sites beyond our control. APL is not responsible for the privacy practices of these external websites. We may also link to other APL-operated or affiliated websites with separate privacy policies. When accessing these sites via our websites, review their specific privacy policies to understand how they handle your information.

When linking to another website or using a third-party service, we recommend always reading that site's privacy notice before providing any personally identifiable information

APL may collect, use, store, and transfer various categories of personal data about you, including:

• Identity Data: Name, maiden name, username, marital status, title, date of birth, and gender
• Contact Data: Billing address, delivery address, email address, and telephone numbers
• Financial Data: Bank account, payment card details, and payroll information
• Transaction Data: Payment details and information about products and services purchased
• Technical Data: IP address, login data, browser information, time zone, location, and device information
• Profile Data: Website and intranet username and password, purchase history, preferences, feedback, and survey responses
• Usage Data: Information on how you use our website, intranet, products, and services
• Marketing and Communications Data: Marketing preferences and communication preferences
• Special Categories of Personal Data: Information about race, ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, and genetic and biometric data

APL collects information about healthcare professionals through direct interactions and from third-party sources, including:

• Publicly available sources such as registers of healthcare professionals, published journals, and event materials
• Websites of healthcare professionals or their employers
• Third-party data providers to enhance knowledge of the healthcare sector

This data may include:

• Professional role(s)
• Qualifications
• Specialty
• Employer
• Experience
• Publications
• Other profession-related information

APL only collects and processes publicly available data when the purposes are compatible with the initial purposes for which the data was made public
Aurobindo Pharma Limited (APL) processes personal data for legal obligations and legitimate interests, including:

• Complying with regulatory, tax, and pharmacovigilance requirements
• Responding to government information requests
• Managing medical inquiries and quality-related matters
• Fulfilling transparency and disclosure obligations

• Promoting products and services
• Educating and training staff
• Responding to queries and correspondence
• Analyzing engagement with APL's sites and services
• Optimizing communication and site performance
• Detecting and preventing illegal activities
• Conducting conflict of interest checks
• Developing relationships within the healthcare sector
• Providing product and event information
• Tailoring communications based on expertise
• Assessing professional interests and experience
• Conducting market and scientific research
• Managing business relationships with suppliers and customers
• Handling complaints and investigating misconduct
• Performing due diligence for trading accounts or mergers and acquisitions

APL maintains records of consents and preferences to ensure compliance with data protection laws

APL generally does not rely on consent as a legal basis for processing personal data, except for certain circumstances like direct marketing communications via email or as required by law. If consent is needed, APL will contact you separately. You may withdraw consent by contacting APL as described in the "how do you contact us" section. Withdrawal of consent will not affect previous processing.

APL takes data security seriously, and we use appropriate technologies and procedures to protect personal information. Our information security policies and procedures are closely aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet our business needs, changes in technology, and regulatory requirements. For example: Policies and procedures: APL employs reasonable technological, physical and operational security procedures intended to protect your Personal data from loss, misuse, alteration, or unintentional destruction. Our security measures are periodically reviewed and updated in an effort to provide appropriate security for all the data collected about you through this Site. We place appropriate restrictions on access to personal data We implement appropriate measures and controls, including monitoring and physical measures, to store and transfer data securely Training for employees and contractors We require privacy, information security, and other applicable training on a regular basis for our employees and contractors who have access to personal data and other sensitive data We take steps to ensure that our employees and contractors operate in accordance with our information security policies and procedures and any applicable contractual conditions. We require, with contracts and security reviews, our third-party vendors and providers to protect any personal data with which they are entrusted in accordance with our security policies and procedures

From time to time, we may, like many other commercial websites, use a standard technology called a “cookie”. A cookie is a small text file that is placed on a computer or other device and is used to identify the user or device and to collect information. Our websites use cookies to enhance the user’s visit; in general, cookies can securely store a user’s ID and password, personalize home pages, and identify which parts of a site have been visited. It is possible to set your browser to inform you when a cookie is being placed. This way you can decide whether to accept the cookie. By showing how and when our visitors use this Web site, this information can help us to improve our site on a continual basis.

APL discloses personal data to the following categories of recipients when necessary:

• APL staff, advisors, and agents
• Other APL group companies providing support services
• Third-party service providers bound by confidentiality obligations
• Government authorities and regulatory agencies, if required by law
• Relevant regulators for healthcare professionals
• Third-party sources for data accuracy confirmation
• Service providers for business operations
• Potential buyers in case of business sale or integration

While APL's products and services are not specifically targeted towards minors, if personal data of such individuals is collected, it will be done lawfully by seeking parental consent and taking appropriate measures as required by applicable regulations.

Personal data is retained for the duration of contracts and for an appropriate period afterward, in accordance with applicable laws. Otherwise, it is retained for two years or as necessary for the stated purposes.
APL has implemented security measures to prevent unauthorized access, use, or disclosure of personal data. Access is limited to those with a legitimate need to know, and procedures are in place to handle suspected data security breaches.

As an Aurobindo Pharma Limited (APL) customer in Europe, you may have the following rights regarding your personal data:

1. Access: Request a copy of your personal data held by APL.
2. Rectification: Ask for incomplete or inaccurate information to be corrected.
3. Erasure: Request deletion of your personal data in certain circumstances.
4. Object: Oppose processing based on legitimate interests or for direct marketing.
5. Restriction: Ask APL to limit the processing of your data in specific situations.
6. Portability: Request transfer of your data to another organization.

To exercise these rights, please contact APL using the information provided in this Privacy Notice.

APL operates globally and may transfer your information to recipients in countries outside your own and the European Economic Area, including India. For data transfers from the EEA, UK, and Switzerland, APL typically relies on European Commission-approved standard contractual clauses to ensure adequate protection. Information about the specific transfer mechanism used can be provided upon request

APL may update privacy notice from time to time. We encourage you to check our site frequently to see the current privacy notice so that you may stay informed of how APL is using and protecting your information. Whenever a change to this notice is significant, we will place a prominent notice on this site and provided an updated effective date.

If you have questions or comments regarding this privacy notice, please contact us at:
Email: dpo@aurobindo.com