This Privacy Policy describes how and for which purposes Boehringer Ingelheim Vetmedica GmbH (hereafter “Boehringer Ingelheim”, “we”, “our”, “us”) processes the personal data we collect about you through our Boehringer Ingelheim AHPSA (hereafter “app”).

Content

1. Purposes of Data Processing

1.1 Registration, communication

1.2 Log data

1.2.1 App optimization, analysis, advertising

1.3 Pharmacovigilance

1.4 Self-tests, self-evaluation and calculation features

1.5 Content from users

1.6 Newsletters and electronic advertising

1.7 Further purposes

2. Transfer Of Personal Data

2.1 Reporting obligations to regulatory authorities and enforcement of rights

2.2 Service provider (Processor)

2.3 Boehringer Ingelheim companies

2.4 Data transfer to recipients outside the EU

2.5 Other data transfers

3. Retention Periods

4. Your Rights

5. Contact AND QUESTIONS

6. Changes to this Privacy Policy

1. Purposes of Data Processing

1.1 Registration, communication

To meet our regulatory and legal obligations, we collect your personal information, retain it in a safe and secure structure and delete it once we no longer have to keep it. We process your personal data in order to provide you with the services on our app, for example when you register, log in, or send us messages.

This data may include your first and last name, e-mail address, title, address and telephone number, as well as the text of any enquiry or message that you provide on the app and the relevant subject context (e.g. products/press/events/general/information about your pets).

The legal basis for processing your personal data is Article 6 (1) (b) of the EU GDPR (and/or UK GDPR if you are in the UK) if you use our app, offers or services and register for them creating a contract between us. Otherwise the lawful basis for processing your personal data is our legitimate interest in providing you with our app, services and communicating with you, as per Article 6 (1) (f) of the EU GDPR (and/or UK GDPR if you are in the UK).

1.2 Log data

When you use the Boehringer Ingelheim AHPSA, we receive log data sent by your device (e.g. IP address, time and date, displayed contents, information regarding the operating system). Collecting log data is technically required to enable you to use our app and to ensure the security and stability of the app.

We process the following data to provide the functions and to ensure the security and stability of the app: IP address, time and date, displayed contents, access status/HTTP status code, amount of data transferred, operating system.

The log files and data are also processed to prevent and prosecute misuse of our websites and apps.

The log files and data will be stored for as long as necessary for the respective purpose, in principle no longer than 14 days. The legal basis for this is the performance of our contractual obligations (under Article 6 (1) ( b) of the EU GDPR (and/or UK GDPR if you are in the UK)) and/or our legitimate interests (under Article 6 (1) (f) of the EU GDPR (and/or UK GDPR if you are in the UK)), which are to ensure the integrity, stability and functionality of the app – as far as technically possible and reasonable.

1.2.1 App optimization and analysis

Based on your consent, we analyze how you're using our app. This way, we collect information about how well certain services are received and we can adjust and improve them as well our products.

1.3 Pharmacovigilance

As a pharmaceutical company Boehringer Ingelheim is required to carry out certain activities related to the detection, assessment, understanding and prevention of adverse effects or any other medicine related problem, also known as pharmacovigilance obligations. The pharmacovigilance obligations require us to process certain information, which may allow us to directly or indirectly identify a person, i.e. the animal owner and/or the reporter of the adverse event (personal data).

If you use one of the communication channels offered on our online presences (e.g. download form, online form, e-mail) for a report on our products, we may need to process following personal data:

• Full name, initials, and contact details (which may include your address, e-mail address and phone number), profession (e.g., veterinarian, pharmacist).

• Details related to the Boehringer Ingelheim product suspected to cause the reaction, such as administration information, batch number;

• Further details related to the adverse event: What did exactly happen?; course and outcome of the adverse event, start and end date, first-time user?, information on concomitant medications and/or diseases; seriousness of the event; view of reporter on possible causal relationship between Boehringer Ingelheim product and adverse event;

The contact information is requested to enable us to follow-up with the reporter to gain high quality and complete information on adverse events. If the reporter does not wish to provide his contact details to Boehringer Ingelheim or authorities, the reporter can enter “Privacy” in reporter's names field.

We may process your personal data to: (i) analyze the reported adverse event; (ii) contact the reporter for further information; (iii) collate and analyze the information about the adverse event with information about other adverse events received by Boehringer Ingelheim worldwide through our global pharmacovigilance database which is operated by Boehringer Ingelheim International GmbH; and (iv) report pharmacovigilance relevant information to health authorities worldwide.

We may also share pharmacovigilance related information which may include personal data with other pharmaceutical companies who are co-marketing, co-distribution, or other license partners of a Boehringer Ingelheim group of companies, where pharmacovigilance obligations for a Boehringer Ingelheim product require such exchange of safety information; these companies process the data only on our behalf, according to our instructions, under our control and in accordance with this Privacy Policy.

The legal basis for the processing is the fulfilment of our legal obligations (under Article 6 (1) (c) of the EU GDPR (and/or UK GDPR if you are in the UK)) and our legitimate interest to monitor and improve the security of our products (under Article 6 (1) (f) of the EU GDPR (and/or UK GDPR if you are in the UK).

We are legally obliged to archive pharmacovigilance related information which may include your personal data for the time period of the market authorization plus at least a further five (5) years after the marketing authorization has expired in any country where the relevant Boehringer Ingelheim product was placed on the market.

1.4 Self-tests, self-evaluation and calculation features

Our app may contain self-tests, self-evaluation or calculation features that allow users to obtain certain information or assessments (e.g. duration between an animals' medication application) instantly and online based on the information as described in the respective service or function in the app. Personally identifiable information provided by users is used solely to provide the functionalities of these tools. For statistical purposes and for the improvement of the tools, the information is processed exclusively in anonymised or aggregated form.

The legal basis is our legitimate interest in providing you with the above features, under Article 6 (1) (f) of the EU GDPR (and/or UK GDPR if you are in the UK) .

1.5 Content from users

The Boehringer Ingelheim AHPSA may offer the possibility as a registered user to post your own content or comments. In these cases, in addition to the content you post, we also process your IP address and data at the time of posting in order to ensure the security of our system and to be able to react in the event of unlawful content (e.g. insults or copyright infringements). This data is usually deleted after 7 days.

Personal data contained in the content or comments posted by users will be processed solely in the context of providing the posts or comments. If for any reason you input the personal data of other persons into our app, you must ensure the owner of such personal data is fully informed and consents to you doing so, otherwise, such information may be considered in contravention of the intended use of the Boehringer Ingelheim AHPSA and be removed, and your account may be terminated. Please refer further to our Terms of Use.

The legal basis for data processing is the contract on the use of our online offer/app (under Article 6 (1) (b) EU GDPR (and/or UK GDPR if you are in the UK)).

1.6 Further purposes

If necessary, we will also process your personal data for additional purposes:

• satisfying our legitimate interests (under Art. 6 (1) (f) of the EU GDPR (and/or UK GDPR if you are in the UK)), including the following:

(i) to complete a corporate transaction (e.g., corporate restructuring, sale or assignment of assets, merger);

(ii) to protect, enforce and defend our rights, property and interests;

• ensuring compliance with legal obligations, court orders or other binding decisions of public authorities (under Art. 6 (1) (c) EU GDPR (and/or UK GDPR if you are in the UK)).

2. Transfer Of Personal Data

We may share and/or disclose personal data with third parties:

2.1 Reporting obligations to regulatory authorities and enforcement of rights

In order to comply with legal reporting obligations, to protect our rights and/or the rights of third-parties, we may share and disclose personal data to rights holders, consultants, courts and competent authorities in accordance with legal provisions (e.g., mandatory reports in respect of a suspected adverse event).

2.2 Service provider (Processor)

We engage third-party service providers to process your personal data for the purposes described in this privacy policy. These service providers process the data only on our behalf, according to our instructions, under our control and in accordance with this privacy policy.

2.3 Boehringer Ingelheim companies

As part of a global group of companies, we involve other Boehringer Ingelheim companies that support us with data processing (e.g., as part of our pharmacovigilance obligations to analyze and process a reported adverse event). These group companies process the data exclusively for the purposes stated in this privacy policy as Joint Controller according to Art. 26 of the EU GDPR (and/or UK GDPR if you are in the UK).

2.4 Data transfer to recipients outside of the UK or EU

Service providers, business partners and Boehringer Ingelheim companies may process personal data outside the UK or EU. In these cases, we ensure an adequate level of data protection to comply with UK or European law as appropriate (usually through UK or EU standard contractual clauses (as appropriate) published by the UK Government or the European Commission or, if necessary, other appropriate safeguards (such as relying an ‘adequacy’ decision)). You can request a copy of the contract that implements the appropriate protection of personal data by contacting our Data Privacy Officer using the contact details set out below. If it is necessary to transfer personal data to authorities in third countries in order to comply with our legal obligations or to assert or defend legal claims, we ensure that the requirements of the UK and/or EU GDPR for this data transfer are met.

2.5 Other data transfers

Except as stated in this Privacy Policy, Boehringer Ingelheim will not transfer your data to any third parties without your express consent, unless Boehringer Ingelheim is required or allowed to do so by law, regulatory directive, or court order.

3. Retention Periods

Boehringer Ingelheim will store your personal data as long as it is necessary for the respective purposes described in this Privacy Policy. In some cases, we are obliged to store your data for longer in order to comply with statutory retention periods. In such cases, we will ensure that your data will only be used to comply with the retention obligations and not for other purposes.

We have specified retention periods for certain processing purposes.

4. Your Rights

You have the right to:

• request information about your personal data processed by Boehringer Ingelheim;

• in justified cases, request deletion, rectification or restriction of the processing of your personal data;

• in certain circumstances, request transfer of your personal data to you or another person in a commonly utilizable format;

• file a complaint with a data protection authority (for the UK this is Information Commissioner’s Office – see: Contact us ICO);

• request the deletion of your personal data if they are no longer necessary for the purposes of processing or there is no legal ground for their further processing.

• object, on grounds relating to your particular situation, to processing of your personal data at any time as far as such processing is only based on Boehringer Ingelheim’s legitimate interest (Article 6 (1) (f) of the EU GDPR (and/or UK GDPR if you are in the UK)). In this case, we will not process such personal data any longer, unless the Boehringer Ingelheim’s compelling legitimate grounds for the processing prevail or the processing is necessary for the establishment, exercise or defence of legal claims. You can object to the use of data for direct marketing purposes at any time without a weighing of interests.

Should you have given your consent to the processing of your personal data, you can withdraw it at any time with effect for the future; such withdrawal will not affect the lawfulness of the processing until such withdrawal.

5. Contact AND QUESTIONS

If you have any questions about this Privacy Policy or about how we use your personal data, please contact us at the following address:

Boehringer Ingelheim Vetmedica GmbH
- Data Protection Officer –
Binger Strasse 173, D-55216 Ingelheim am Rhein, Germany
E-Mail: datenschutz@boehringer-ingelheim.com

6. Changes to this Privacy POLICY

We may update this Privacy Policy from time to time. Updates of our Privacy Statement will be published in this app. Any amendments become effective upon publication in this app.

Last updated: July 2025