Roche Diagnostics Corporation US Supplemental Privacy Notice

Contact Information

Data elements in this category may include:

• Full name, or unique pseudonym

• Honorifics and titles, preferred form of address

• Postal address

• Email address

• Phone number

• Contact information for related persons, such as authorized users of your account

• Company ID number (e.g. customer number, account number, subscription number, rewards program number)

• System identifiers (e.g., usernames or online credentials)

• Social security number*, Driver’s License*, State Identity Card*, Passport ID*

• Service Request ID number

Physical Characteristics, Demographics, or Description

Data elements in this category include:

• Height

• Weight

• Hair & eye color

• Age

• Gender

• Marital and family status*

• Race and Ethnicity*

• Citizenship status*

• Religion*

• Languages spoken

• Information concerning sexuality or sex life*

• Disability*

• Household demographic data

Commercial and Financial Information

Data elements in this category may include:

• Products or services you have purchased

• Records of products or services purchased, obtained, or considered

• Records of program enrollment and activity

• Health Insurance information*, such as health insurance carrier, account numbers, beneficiary information, policy number, benefits data, reimbursement and co-pay data, and claims history

• Financial account information*, such as bank account number and details* (if you use automated payments), payment card information*, payment and reimbursement amounts

Transaction and Interaction Information

Data elements in this category include:

• Personal preferences, such as your shopping preferences

• Subscription program data

• Data from social media profiles, such as Facebook, Twitter, LinkedIn and similar platforms

• Hobbies and interests

• Information regarding professional activities and interests

Inferred and Derived Information

Data elements in this category include:

• Propensity scores obtained from third parties, such as likelihood that you may be interested in certain purchases or experiencing life events

• Propensities, attributes and/or scores generated by internal analytics programs and used for marketing

• Propensities, attributes and/or scores generated by internal analytics programs and used for information security and fraud purposes

• Preferred language

• Inferences reflecting an individual’s wellness, health, preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes*

Internet and Online/ Electronic Technical Information

Data elements in this category include:

• IP Address

• Device Identifiers, including MAC Address, SSIDs or other device identifiers or persistent identifiers

• Device characteristics (such as browser information)

• Web Server Logs

• Application Logs

• Browsing and search history

• Viewing Data (site and app usage)

• Cookie IDs and/or Ad IDs in First Party or Third Party Cookies

• Web beacons, clear gifs and pixel tags

• Internet service provider name

• Referring/exiting URL

• Request/response date and time

• Clickstream data

• Ads and web pages viewed

• Time spent on a web page or mobile app

• Other information regarding your interactions with our websites, applications, emails, and advertisements

Audio Visual Information

Data elements in this category include:

• Photographs

• Video images

• Voice recordings

• CCTV recordings

• Call center recordings and call monitoring records

• Voicemails

Health Information

Data elements in this category include:

• Information about physical or mental health, disease state or information, medical history, medical treatment or diagnosis, medicines taken or devices used*

• General disease or product interest*

• Information on payment for healthcare services (EOB forms, HSA statements. claims data, claims assistance records)*

• Information needed to accommodate disabilities*

• Health values and sensor readings data, such as steps taken, blood glucose levels, heart rate, and blood pressure*

• Medical appointment dates*

• Genetic Data including sequencing data*

Electronic and Sensor Data

Data elements in this category include:

• Smart device records

• IoT products

• Non-health sensor readings data

Geolocation Data

Data elements in this category include:

• Precise location data*

• Geofencing data

Children’s Data*

Data elements in this category include:

• Child’s name*

• Child’s age*

• Product usage data*

• Health information*

Compliance Data

Data elements in this category include:

• Compliance program data, including customer screening records, and other records maintained to demonstrate compliance with applicable laws and regulations, such as those promulgated by FDA, and such as tax laws, ADA.

• Occupational and environmental safety records

• Records relating to complaints and internal investigations, including compliance hotline reports

• Records of privacy and security incidents , including any security breach notifications

Professional and Educational Information

Data elements in this category include:

• Employer and job title

• Specialty or practice area

• Information from a resume or CV, including education and certification credentials

• Information included in a payment recipient’s IRS 1040 form

Sensitive Personal Data

(Sensitive Personal Information is marked with an asterisk (*) throughout this chart.)

Some of the Personal Information we collect may be considered “Sensitive Personal Data” under certain data protection laws. Sensitive Personal Data, may include biometric information, genetic information, health information, financial account information, specific geolocation, ethnic or racial origin, information concerning your sex life or your sexual orientation, social security number, driver’s license, state identification card, passport number.

You may make choices about your Sensitive Personal Information as set forth in “Your Rights Regarding Your Personal Data” section, below.

For more information about how we collect, disclose, and share Sensitive Personal Information, please see the chart below that represents your relationship with Roche.

Written Signature

Data elements in this category include:

• Your physical or electronic signature

Contact Information

We collect this type of information from:

• You

• Those authorized to provide on your behalf such as your caregiver or authorized representative.

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Consumer reporting agencies and other third parties who verify the information you provide.

• Third parties who help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records.

We use and disclose this type of information:

• To identify you and personalize our communications with you.

• To provide to you and to manage our products, programs, events, and services.

• For advertising, including targeted advertising, and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful.

• For record-keeping and reporting, including for data matching, metrics, and analytics.

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• To conduct internal business analysis and market research.

• To engage in joint marketing initiatives.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• If you visit our physical sites, to provide access to, monitor, and secure our facilities, equipment, and other property.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers such as companies who help manage and coordinate events

• Third parties who deliver our communications, such as the postal service and couriers

• Other third parties (including government agencies) as required by law, such as pursuant to legally binding subpoenas, court orders, and similar instruments

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Behavioral advertising companies (see Behavioral Advertising below)

• Third parties who assist with fraud prevention, detection and mitigation

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Authorized/legal representatives, family members, and caregivers.

• Third parties with whom we have joint marketing and similar arrangements.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.

• Other third parties as necessary to complete transactions and provide our products/services, including delivery companies, agents, and manufacturers.

• Service Providers who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Consumer reporting agencies.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Physical Characteristics, Demographics, or Description

We collect this type of information from:

• You

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Third parties that provide access to information you make publicly available, such as social media platforms.

• Third parties who provide us with supplemental consumer data or data analytics and market research services, such as data aggregators.

We use this type of information:

• If you visit our physical site, to help manage emergency incidents that occur on campus or involve company property

• To determine and verify program, product, and service eligibility and coverage.

• To administer, manage, analyze, and improve our programs, products, and services.

• To better enable us to conduct advertising and product promotion activities

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• For marketing, sales, and advertising purposes

• To conduct internal business analysis and market research.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Emergency personnel

• Service Providers which use the data only to assist in incident management and reporting

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Authorized/legal representatives, family members, and caregivers.

• Behavioral advertising companies (see Behavioral Advertising below)

• Third parties with whom we have joint marketing and similar arrangements.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Other third parties as necessary to complete transactions and provide our products/services.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Commercial, Financial, and Insurance Information

We collect this type of information from:

• You

• Authorized/legal representatives, family members, and caregivers.

• Third parties that provide access to information you make publicly available, such as social media.

• Third parties that provide information that helps us understand our customers, including data aggregators and public records providers.

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Consumer reporting agencies and third parties who assist with fraud prevention, detection, and mitigation.

• Payment processors and other financial institutions.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Other third parties who facilitate, process, and complete transactions for us, such as resellers, sales agents, and program partners.

We use this type of information:

• To better understand you and to understand our customers generally

• To design products, services and programs including subscription and special offer programs

• For internal business purposes, such as quality control, training and analytics

• To enroll you in our programs and provide our products and services to you.

• When you utilize health tests

• To determine and verify program, product, and service eligibility and coverage.

• To fulfill our business relationship with you, including processing payments, issuing refunds, billing support, and collections

• For recordkeeping and compliance, including dispute resolution

• Reimburse customers, satisfy warranty obligations, and fulfill payment obligations.

• To administer, manage, analyze, and improve our programs, products, and services.

• To communicate with you regarding our programs, products, and services.

• To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• To conduct internal business analysis and market research.

• To engage in joint marketing initiatives.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Third parties with whom we have joint marketing and similar arrangements

• Service Providers, including companies who assist us in program administration

• Our lawyers, auditors and consultants

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Authorized/legal representatives, family members, and caregivers.

• Third parties with whom we have joint marketing and similar arrangements.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.

• Other third parties as necessary to complete transactions and provide our products/services.

• Behavioral advertising companies (see Behavioral Advertising below)Consumer reporting agencies

• Legal and regulatory bodies and other third parties as required by law.

Transaction and Interaction Information

We collect this type of information from:

• You

• Third parties that provide access to information you make publicly available, such as social media.

• Automatically, such as when you interact with our websites or mobile apps.

We use this type of information:

• To fulfill our business relationship with you, including customer service

• For recordkeeping and compliance, including dispute resolution

• For marketing, sales, and advertising purposes

• For internal business purposes, such as finance, quality control, training, reporting and analytics

• For risk management, fraud prevention and similar purpose

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Third parties with whom we have joint marketing and similar arrangements

• Behavioral advertising companies (see Behavioral Advertising below)

• Service providers, including third parties as needed to complete the transaction, including delivery companies, agents and manufacturers

• Our lawyers, auditors and consultants

• Customers, in connection with their audits of Roche

• Other third parties as required by law

Inferred and Derived Information

• We create inferred and derived data elements by analyzing our relationship and transactional information.

• We draw inferences from the information we collect from and about you, such as your preferences, characteristics, attributes, and abilities.

• Third parties who provide digital marketing, and analytics services for us

We combine inferred data with other relationship information and use this type of information:

• To better understand you and to understand our customers generally

• To design products, services and programs that delight our customers, including subscription programs

• To identify prospective customers

• For internal business purposes, such as quality control, training and analytics

• To administer, manage, analyze, and improve our programs, products, and services

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• For advertising and product promotion, and sales, including to inform us when we contact you regarding programs, products, services, and topics that may be of interest or useful.

• To engage in joint marketing initiatives.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To comply with legal and regulatory obligations

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including those who analyze data on our behalf and who help execute programs

• Our lawyers, auditors and consultants

• Third parties with whom we have joint marketing and similar arrangements

• Behavioral advertising companies (see Behavioral Advertising below)Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Legal and regulatory bodies and other third parties as required by law.

Internet and Online/ Electronic Technical Information

We collect this type of information from:

• You and from your computer or devices when you interact with our platforms, websites and applications. For example, when you visit our websites, our server logs record your IP address and other information.

• Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites.

• Third parties, including computer security services and advertising partners

• We also associate information with you using unique identifiers collected from your devices or browsers.

• Third parties who provide website and online security services.

We use this type of information:

• For system and account administration, technology management, including optimizing our websites and applications,

• For information security and cybersecurity purposes, including detecting threats

• For recordkeeping, including logs and records that are maintained as part of Transaction Information

• To identify you or your device, including to associate you with different devices that you may use

• For online behavioral advertising purposes and general advertising and product promotion

• To administer, manage, analyze, and improve our programs, products, and services.

• To conduct internal relationship and business analysis and market research.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers including companies who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected

• Service providers who assist with fraud prevention, detection and mitigation

• Behavioral advertising companies (see Behavioral Advertising below)Our lawyers, auditors and consultants

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Legal and regulatory bodies and other third parties as required by law

Audio Visual Information

We collect this type of information from:

• You

• Automatically, such as when we record calls to our call center and use CCTV cameras in our facilities.

• Companies conducting non-clinical research such as market research companies.

• Third parties that provide access to information you make publicly available, such as social media.

We use this type of information:

• For internal business purposes, such as call recordings used for training, coaching or quality control

• For advertising, marketing, product promotion, and relationship purposes, such as use of photos and videos for social media

• If you visit our physical facilities, for premises security purposes and loss prevention

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including companies who assist with our information technology and security programs, and our loss prevention programs

• Service providers, including companies who conduct advertising, marketing, or market research on our behalf

• Our lawyers, auditors and consultants

• Other third parties as required by law

Health Information

We collect this type of information from:

• You

• Healthcare providers

• Health insurance companies We may infer health information about you based on other information, including and lifestyle factors.

• Healthcare providers (including specialty pharmacies).

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services

We use this type of information:

• To determine and verify program, product, and service eligibility and coverage.

• To enroll you in our programs and provide our products and services to you.

• To administer, manage, analyze, and improve our programs, products, and services.

• To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• To conduct marketing, product promotion, advertising, and internal business analysis and market research.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments

• Our lawyers, auditors and consultants.

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Other third parties as necessary to complete transactions and provide our products/services.

• Legal and regulatory bodies and other third parties as required by law.

Electronic and Sensor Data

We collect this type of information automatically when you use our internet-enabled products such as mobile apps and connected devices from:

• You (directly from participant).

• Your mobile devices and other internet-connected devices and applications (automatically).

• Third parties that provide access to information you make publicly available, such as social media platforms.

We use this type of information:

• To enable product functionality

• For internal business purposes, such product development, security, and quality control

• To administer, manage, analyze, and improve our programs, products, and services.

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• To provide access to, monitor, and secure our facilities, equipment, and other property.

• To identify you and your device(s) for any/all purposes identified above, including to monitor your use of and interactions with programs, products, services, and advertisements for such purposes

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including companies who assist with our information technology and security programs, including network security services and cybersecurity

• Service providers, including companies who assist with fraud prevention, detection and mitigation

• Behavioral advertising companies (see Behavioral Advertising below)Our lawyers, auditors and consultants

• Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Third parties who assist with our information technology and security programs.

• Third parties who assist with fraud prevention, detection, and mitigation.

• Other third parties as necessary to complete transactions and provide our products/services.

• Other third parties as required by law

Geolocation Data

We collect this type of information automatically, when enabled on your mobile device and computer, when you visit or interact with our websites, applications, and online platforms.

We use this type of information:

• For information security and fraud prevention

• For our Everyday Business Purposes

• To administer, manage, analyze, and improve our programs, products, and services.

• To conduct internal business analysis and market research.

• For advertising and product promotion

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Third parties who assist with our information technology and security programs

• Third parties who assist with fraud prevention, detection and mitigation

• Our lawyers, auditors and consultants

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Legal and regulatory bodies and other third parties as required by law.

Children’s Data

We collect this type of information from children when they use our apps and from parents or guardians. This is done in accordance with applicable laws.

We use this type of information:

• To provide the information, products or services requested by the child or by the child’s parent or guardian

• If you visit our physical facilities, so that we know who is visiting our facilities

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including those who help administer our call center hosting platforms and phone systems

• Service providers who host our websites and mobile apps

• Other third parties as required by law

• Our lawyers, auditors and consultants

Compliance Data

We collect this type of information from:

• You

• Third parties, including companies that help us conduct internal investigations.

• Third parties, such as consumer reporting agencies and data aggregators who conduct background screening for us.

We use this type of information:

• To comply with and demonstrate compliance with applicable laws

• For legal matters, including litigation and regulatory matters, including for use in connection with civil, criminal, administrative, or arbitral proceedings, before regulatory or self-regulatory bodies, including service of process, investigations in anticipation of litigation, execution or enforcement of judgments and orders

• For internal business purposes, such as risk management, audit, internal investigations, reporting, analytics

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Our lawyers, auditors and consultants.

• Customers, in connection with their audits of Roche

• Other third parties (including government agencies, courts and opposing law firms, consultants, process servers and parties to litigation) in connection with legal matters

Written Signature

We collect this type of information from:

• You (directly from participant).

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

We use this type of information:

• To determine and verify program, product, and service eligibility and coverage.

• To enroll you in our programs and provide our products and services to you.

• To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• To comply with legal and regulatory obligations

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments

• Authorized/legal representatives, family members, and caregivers.

• Third parties with whom we have joint marketing and similar arrangements.

• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.

• Other third parties as necessary to complete transactions and provide our products/services.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Contact Information

We collect this type of information from:

• You

• Consumer reporting agencies and other third parties who verify the information you provide.

• Third parties who help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records.

We use and disclose this type of information:

• To identify you and personalize our communications with you

• To provide to you and to manage our products, programs, events, and services

• For marketing, sales, and product and service promotion purposes

• For record-keeping and reporting, including for data matching, metrics, and analytics

• To analyze and better understand your needs, preferences, and interests

• To conduct internal business analysis and market research.

• To engage in joint marketing initiatives.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• If you visit our physical sites, to provide access to, monitor, and secure our facilities, equipment, and other property.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers such as companies who help manage and coordinate events

• Third parties who deliver our communications, such as the postal service and couriers

• Other third parties (including government agencies) as required by law, such as pursuant to legally binding subpoenas, court orders, and similar instruments

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Behavioral advertising companies (see Behavioral Advertising below)Third parties who assist with fraud prevention, detection and mitigation

• Third parties with whom we have joint marketing and similar arrangements.

• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.

• Other third parties as necessary to complete transactions and provide our products/services, including delivery companies, agents, and manufacturers.

• Service Providers who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Consumer reporting agencies.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Physical Characteristics, Demographics, or Description

We collect this type of information from:

• You

• Third parties that provide access to information you make publicly available, such as social media platforms.

• Third parties who provide us with supplemental data or data analytics and market research services, such as data aggregators.

We use this type of information:

• If you visit our physical site, to help manage emergency incidents that occur on campus or involve company property

• To determine and verify program, product, and service eligibility and coverage.

• To administer, manage, analyze, and improve our programs, products, and services.

• To better enable us to conduct advertising and product promotion activities

• To analyze and better understand your needs, preferences, and interests

• To conduct internal business analysis and market research.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Emergency personnel

• Service Providers which use the data only to assist in incident management and reporting

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Behavioral advertising companies (see Behavioral Advertising below)

• Third parties with whom we have joint marketing and similar arrangements.

• Other third parties as necessary to complete transactions and provide our products/services.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Commercial, Financial, and Insurance Information

We collect this type of information from:

• You

• Third parties that provide access to information you make publicly available, such as social media.

• Third parties that provide information that helps us understand our customers, including data aggregators and public records providers.

• Consumer reporting agencies and third parties who assist with fraud prevention, detection, and mitigation.

• Payment processors and other financial institutions.

• Other third parties who facilitate, process, and complete transactions for us, such as resellers, sales agents, and program partners.

We use this type of information:

• To better understand you and to understand our customers generally

• To design products, services and programs including subscription and special offer programs

• For internal business purposes, such as quality control, training and analytics

• To enroll you in our programs and provide our products and services to you.

• To determine and verify program, product, and service eligibility and coverage.

• To fulfill our business relationship with you, including processing payments, issuing refunds, billing support, and collections

• For recordkeeping and compliance, including dispute resolution

• Reimburse customers, satisfy warranty obligations, and fulfill payment obligations.

• To administer, manage, analyze, and improve our programs, products, and services.

• To communicate with you regarding our programs, products, and services.

• To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• To conduct internal business analysis and market research.

• To engage in joint marketing initiatives.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Third parties with whom we have joint marketing and similar arrangements

• Service Providers, including companies who assist us in program administration

• Our lawyers, auditors and consultants

• Third parties with whom we have joint marketing and similar arrangements.

• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.

• Other third parties as necessary to complete transactions and provide our products/services.

• Third party network advertising partners.

• Consumer reporting agencies

• Legal and regulatory bodies and other third parties as required by law.

Transaction and Interaction Information

We collect this type of information from:

• You

• Third parties that provide access to information you make publicly available, such as social media.

• Automatically, such as when you interact with our websites or mobile apps.

We use this type of information:

• To fulfill our business relationship with you, including customer service

• For recordkeeping and compliance, including dispute resolution

• For internal business purposes, such as finance, quality control, training, reporting and analytics

• For risk management, fraud prevention and similar purpose

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Third parties with whom we have joint marketing and similar arrangements

• Service providers, including third parties as needed to complete the transaction, including delivery companies, agents and manufacturers

• Our lawyers, auditors and consultants

• Customers, in connection with their audits of Roche

• Other third parties as required by law

Inferred and Derived Information

• We create inferred and derived data elements by analyzing our relationship and transactional information.

• We draw inferences from the information we collect from and about you, such as your preferences, characteristics, attributes, and abilities.

• Third parties who provide digital marketing, and analytics services for us

We combine inferred data with other relationship information and use this type of information:

• To better understand you and to understand our customers generally

• To design products, services and programs that delight our customers, including subscription programs

• To identify prospective customers

• For internal business purposes, such as quality control, training and analytics

• To administer, manage, analyze, and improve our programs, products, and services

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• For advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful.

• To engage in joint marketing initiatives.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including those who analyze data on our behalf and who help execute programs

• Our lawyers, auditors and consultants

• Third parties with whom we have joint marketing and similar arrangements

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Legal and regulatory bodies and other third parties as required by law.

Internet and Online/ Electronic Technical Information

We collect this type of information from:

• You and from your computer or devices when you interact with our platforms, websites and applications. For example, when you visit our websites, our server logs record your IP address and other information.

• Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites.

• Third parties, including computer security services and advertising partners

• We also associate information with you using unique identifiers collected from your devices or browsers.

• Third parties who provide website and online security services.

We use this type of information:

• For system and account administration, technology management, including optimizing our websites and applications,

• For information security and cybersecurity purposes, including detecting threats

• For recordkeeping, including logs and records that are maintained as part of Transaction Information

• To identify you or your device, including to associate you with different devices that you may use

• For online behavioral advertising purposes and general advertising and product promotion

• To administer, manage, analyze, and improve our programs, products, and services.

• To conduct internal relationship and business analysis and market research.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers including companies who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected

• Service providers who assist with fraud prevention, detection and mitigation

• Behavioral advertising companies (see Behavioral Advertising below)Our lawyers, auditors and consultants

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Legal and regulatory bodies and other third parties as required by law

Audio Visual Information

We collect this type of information from:

• You

• Automatically, such as when we record calls to our call center and use CCTV cameras in our facilities.

• Companies conducting non-clinical research such as market research companies.

• Third parties that provide access to information you make publicly available, such as social media.

We use this type of information:

• For internal business purposes, such as call recordings used for training, coaching or quality control

• For advertising, marketing, product promotion, and relationship purposes, such as use of photos and videos for social media

• If you visit our physical facilities, for premises security purposes and loss prevention

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including companies who assist with our information technology and security programs, and our loss prevention programs

• Service providers, including companies who conduct advertising, marketing, or market research on our behalf

• Our lawyers, auditors and consultants

• Other third parties as required by law

Electronic and Sensor Data

We collect this type of information automatically when you use our internet-enabled products such as mobile apps and connected devices from:

• You (directly from participant).

• Your mobile devices and other internet-connected devices and applications (automatically).

• Third parties that provide access to information you make publicly available, such as social media platforms.

We use this type of information:

• To enable product functionality

• For internal business purposes, such product development, security, and quality control

• To administer, manage, analyze, and improve our programs, products, and services.

• To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• To provide access to, monitor, and secure our facilities, equipment, and other property.

• To identify you and your device(s) for any/all purposes identified above, including to monitor your use of and interactions with programs, products, services, and advertisements for such purposes

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including companies who assist with our information technology and security programs, including network security services and cybersecurity

• Service providers, including companies who assist with fraud prevention, detection and mitigation

• Behavioral advertising companies (see Behavioral Advertising below)Our lawyers, auditors and consultants

• Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Third parties who assist with our information technology and security programs.

• Third parties who assist with fraud prevention, detection, and mitigation.

• Other third parties as necessary to complete transactions and provide our products/services.

• Other third parties as required by law

Geolocation Data

We collect this type of information automatically, when enabled on your mobile device and computer, when you visit or interact with our websites, applications, and online platforms.

We use this type of information:

• For information security and fraud prevention

• For our Everyday Business Purposes

• To administer, manage, analyze, and improve our programs, products, and services.

• To conduct internal business analysis and market research.

• For advertising and product promotion

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Third parties who assist with our information technology and security programs

• Third parties who assist with fraud prevention, detection and mitigation

• Our lawyers, auditors and consultants

• Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.

• Legal and regulatory bodies and other third parties as required by law.

Professional and Education Data

We collect this type of information from:

• you directly.

• our business partners and other third parties that provide access to information you make publicly available, such as social media platforms.

• Third parties who provide us with supplemental data or data analytics and market research services, such as data aggregators.

• your employer or principal.

We use this type of information:

• to provide you with our Products and Services

• to communicate with you

• to administer our relationship with your organization

• to send you updates

• to administer and manage your registration and participation at events

• to fulfill business relationships with you, including processing payments and notifying you of your order status or any associate order status issues

• to identify and authenticate you

• to ensure the appropriate use of our Products and Services

• to improve our Products and Services

• to improve our Online Services

• for short-term, transient use

• for administrative purposes

• for quality assurance

• for marketing, internal research, and development

• to customize content for you

• to procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations

• advertising and product promotion, including to contact you regarding programs, products, services and topics that may be of interest or useful

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

We may disclose this type of information to our Affiliates and Service Providers and to:

• other Healthcare Providers

• your patients

• third parties who assist with fraud prevention, detection and mitigation

• third parties who assist with our information technology and security programs

• Roche’s lawyers, auditors and consultants

• partners that assist us in providing the Products and Services or help us improve our marketing or administration

Compliance Data

We collect this type of information from:

• You

• Third parties, including companies that help us conduct internal investigations.

• Third parties, such as consumer reporting agencies and data aggregators who conduct background screening for us.

We use this type of information:

• To comply with and demonstrate compliance with applicable laws

• For legal matters, including litigation and regulatory matters, including for use in connection with civil, criminal, administrative, or arbitral proceedings, before regulatory or self-regulatory bodies, including service of process, investigations in anticipation of litigation, execution or enforcement of judgments and orders

• For internal business purposes, such as risk management, audit, internal investigations, reporting, analytics

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Our lawyers, auditors and consultants.

• Customers, in connection with their audits of Roche

• Other third parties (including government agencies, courts and opposing law firms, consultants, process servers and parties to litigation) in connection with legal matters

Written Signature

We collect this type of information from:

• You (directly from participant).

• Healthcare providers (including specialty pharmacies).

• Health insurance companies (health plans) and other payors.

• Authorized/legal representatives, family members, and caregivers.

• Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.

We use this type of information:

• To determine and verify program, product, and service eligibility and coverage.

• To enroll you in our programs and provide our products and services to you.

• To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• To comply with legal and regulatory obligations

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments

• Authorized/legal representatives, family members, and caregivers.

• Third parties with whom we have joint marketing and similar arrangements.

• Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.

• Other third parties as necessary to complete transactions and provide our products/services.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Contact Information

We collect this type of information from:

• You

• Your employer or principal

• Service providers such as companies that provide employment recruiting services to us, including third parties that provide access to information you make publicly available, such as via social media platforms.

• Consumer reporting agencies and other third parties who verify the information you provide.

• Third parties who help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records.

We use and disclose this type of information:

• To identify you and communicate with you

• For our internal business, administrative, and candidate recruiting and employment-related purposes

• For record-keeping and reporting, including for data matching, metrics, and analytics

• To conduct marketing of the company and market research.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• If you visit our physical sites, to provide access to, monitor, and secure our facilities, equipment, and other property.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers such as companies who help manage recruiting events and activities

• Third parties who deliver our communications, such as the postal service and couriers

• Other third parties (including government agencies) as required by law, such as pursuant to legally binding subpoenas, court orders, and similar instruments

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Behavioral advertising companies (see Behavioral Advertising below)

• Third parties who assist with fraud prevention, detection and mitigation

• Other third parties as necessary to complete transactions and provide our products/services, including delivery companies, agents, and manufacturers.

• Service providers who provide employment recruiting services, data analytics services, and third parties such as business and social media platforms used to deliver our ads, website/email optimization providers, and email marketing vendors.

• Consumer reporting agencies.

• Our lawyers, auditors, and consultants.

Physical Characteristics, Demographics, or Description

We collect this type of information from:

• You

• Service providers such as companies that provide employment recruiting services to us, including third parties that provide access to information you make publicly available, such as via social media platforms.

• Third parties who provide us with supplemental data or data analytics and market research services, such as data aggregators.

We use this type of information:

• If you visit our physical site, to help manage emergency incidents that occur on campus or involve company property

• To determine and verify program eligibility.

• For our internal business, administrative, and candidate recruiting and employment-related purposes

• To analyze and better understand your needs, preferences, and interests

• For our company marketing and market research purposes.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Emergency personnel

• Service Providers which use the data to assist in incident management and reporting

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Service providers who provide employment recruiting services, data analytics services, and third parties such as business and social media platforms used to deliver our ads, website/email optimization providers, and email marketing vendors.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.

Inferred and Derived Information We collect this type of information from:

• Inferred and derived data elements we create by analyzing our relationship and transactional information.

• We draw inferences from the information we collect from and about you, such as your preferences, characteristics, attributes, and abilities.

• Third parties who provide digital marketing, and analytics services for us

We combine inferred data with other relationship information and use this type of information:

• For company marketing and market research purposes, such as quality control, training and analytics

• For our internal business and administrative purposes, candidate recruiting and employment-related purposes

• To analyze and better understand your needs, preferences, and interests, as well as those of other applicants.

• To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including those who analyze data on our behalf and who help execute programs

• Our lawyers, auditors and consultants

• Service providers who provide employment recruiting services, data analytics services, and third parties such as business and social media platforms used to deliver our ads, website/email optimization providers, and email marketing vendors.

• Legal and regulatory bodies and other third parties as required by law.

Internet and Online/ Electronic Technical Information

We collect this type of information from:

• You and from your computer or devices when you interact with our platforms, websites and applications. For example, when you visit our websites, our server logs record your IP address and other information.

• Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites.

• Third parties, including computer security services and advertising partners

• We also associate information with you using unique identifiers collected from your devices or browsers.

• Third parties who provide website and online security services.

We use this type of information:

• For system and account administration, technology management, including optimizing our websites and applications,

• For information security and cybersecurity purposes, including detecting threats

• For recordkeeping, including logs and records that are maintained as part of Transaction Information

• To identify you or your device, including to associate you with different devices that you may use

• For online behavioral advertising purposes and general advertising and company promotion

• For our internal business, administrative, and candidate recruiting and employment-related purposes

• For company marketing and market research purposes.

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers including companies who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected

• Service providers who assist with fraud prevention, detection and mitigation

• Behavioral advertising companies (see Behavioral Advertising below)

• Our lawyers, auditors and consultants

• Service providers who provide employment recruiting services, data analytics services, and third parties such as business and social media platforms used to deliver our ads, website/email optimization providers, and email marketing vendors.

• Legal and regulatory bodies and other third parties as required by law

Audio Visual Information

We collect this type of information from:

• You

• Automatically, such as when we record calls to our call center and use CCTV cameras in our facilities.

• Companies conducting non-clinical research such as market research companies.

• Service providers such as companies that provide employment recruiting services to us, including third parties that provide access to information you make publicly available, such as via social media platforms.

We use this type of information:

• For our internal business, administrative, and candidate recruiting and employment-related purposes

• For advertising, marketing, product promotion, and relationship purposes, such as use of photos and videos for social media

• If you visit our physical facilities, for premises security purposes and loss prevention

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers, including companies who assist with our information technology and security programs, and our loss prevention programs

• Service providers, including companies who conduct advertising, marketing, or market research on our behalf

• Our lawyers, auditors and consultants

• Other third parties as required by law

Professional and Education Data

We collect this type of information from:

• You

• Your employer or principal

• Service providers such as companies that provide employment recruiting services to us, including third parties that provide access to information you make publicly available, such as via social media platforms.

We use this type of information:

• For our internal business, administrative, and candidate recruiting and employment-related purposes

• To identify and authenticate you

• For company marketing, market research purposes

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• For our everyday business purposes

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers such as companies who help manage recruiting events and activities

• Third parties who deliver our communications, such as the postal service and couriers

• Other third parties (including government agencies) as required by law, such as pursuant to legally binding subpoenas, court orders, and similar instruments

• Service providers, including those who host our data centers, help administer our call center hosting platforms and phone systems, and provide parts of our physical and electronic infrastructure

• Behavioral advertising companies (see Behavioral Advertising below)

• Third parties who assist with fraud prevention, detection and mitigation

• Service providers who provide employment recruiting services, data analytics services, and third parties such as business and social media platforms used to deliver our ads, website/email optimization providers, and email marketing vendors.

• Consumer reporting agencies.

• Our lawyers, auditors, and consultants.

Written Signature

We collect this type of information from:

• You (directly from participant).

We use this type of information:

• To identify and authenticate you

• For our internal business, administrative, and candidate recruiting and employment-related purposes

• To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.

• To comply with legal and regulatory obligations

• For our everyday business purposes.

We may disclose this type of information to our Affiliates and Service Providers and to:

• Service providers who provide employment recruiting services, data analytics services, and third parties such as business and social media platforms used to deliver our ads, website/email optimization providers, and email marketing vendors.

• Our lawyers, auditors, and consultants.

• Legal and regulatory bodies and other third parties as required by law.