This Privacy Notice describes how A. Menarini GmbH, Thurgauerstrasse 36/38, 8050 Zurich, Switzerland, dataprivacy@menarini.ch (“Data Controller” or “Company”) may process the personal data of the following categories of individuals, with whom the Company may lawfully interact in the course of its activities:

• 1. Representatives and officials, including elected officials (mayors, etc.), managers, executives and other officers / employees of public agencies and institutions (e.g., government agencies, public health authorities, etc.)
• 2. Representatives, managers, officials or members of private institutions (e.g., private health organisations, other companies, charities, industry associations, patients’ associations, press agencies, etc.);
• 3. Other contact people (e.g., secretaries, collaborators, expert patients, etc.) and spokespersons of the public and private organisations mentioned at the previous point. In some cases (e.g., organisation of events, such as conferences, visits to company premises, etc.), these may include accompanying guests (e.g., family members) of said individuals.

The purposes and legal basis, if required, of the processing are as follows:

• Enable the Company to engage in public and institutional relations activities connected to its mission. The legal basis for the processing is the legitimate interest of the company to engage in such public relation activities. These may include: scheduling meetings, appointments, organising company visits, conferences, and other activities;
• Ensure the lawfulness of the Company activities (e.g., under Anticorruption and Antitrust Law), which may imply, for example, to trace all contacts with the members or representatives of said organisations to monitor all interactions take place in compliance with all applicable laws and with the ethical standards of the Company and the Menarini Group. The legal basis for the processing is the Company’s and society’s legitimate interest to ensure the lawfulness of all Company activities, including by enforcing the Menarini Group’s Code of Conduct and Company’s Organisation Managament and Control Model, as well as the interest of the Company to defend itself in the context of legal proceedings, where it might be called to prove the lawfulness of its activities. The personal data may include: name, surname, contact information, contact history, communications, and other information as required from time to time.

The personal data will be accessible to the concerned Company functions, by internal audit and compliance functions, IT services, as well as providers (such as providers of electronic communications, consultants, lawyers, etc.), other companies of the Menarini Group for the same purposes as those outlined above. The personal data may be transferred abroad, including to countries that do not protect the right to data privacy to the same extent as the Swiss / EU laws. In such cases, the Company will put in place adequate measures – such as concluding standard contractual clauses with the recipients - to ensure these latter commit to afford an adequate level of protection to the transf

The personal data may be kept for as long as necessary to fulfil the purposes for which they were collected. This period may span between ten years (minimum) up to the time when the Company is dissolved (maximum).

The data subjects may exercise their right to know whether the Company processes or not their personal data, obtain a copy thereof, rectify, update, their personal data, object to the processing, ask their erasure / destruction, by contacting the Company (see contact details indicated above) or the Data Protection Officer (DPO) of the Menarini Group at dpo@menarini.ch. The DPO will also be happy to address any complaint raised by the concerned individuals regarding the use of the personal data described in this document. Data subjects may also lodge a complaint with the competent data protection authority (for Switzerland at the Swiss Federal Data protection and Information Commissioner, FDPIC).