Polpharma Biologics International AG (“Polpharma Biologics”, “we”, “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we process personal data of users of this website (the “Website”), people who contact us in the course of our activities, and people who have agreed to receive marketing content from us.

1. Data Controller

The controller of your personal data processed in connection with this Website is Polpharma Biologics International AG, Erlenring 2, 6343 Rotkreuz, Switzerland.

Where another Polpharma Biologics group company independently determines the purposes and means of processing in relation to its own activities, that company may act as a separate controller for that processing.

2. Data Protection Contact

For matters relating to the processing of personal data and the exercise of rights related to data processing, you may contact us as follows:

• by mail: Polpharma Biologics International AG, Erlenring 2, 6343 Rotkreuz, Switzerland
• by e-mail: iod@polpharmabiologics.ch

3. Scope of Processed Data

We may process the following categories of personal data:

• data provided by you for contact purposes, such as name, surname, e-mail address, telephone number and the entity on behalf of which you are contacting us;
• technical and usage data relating to your activity on the Website, such as IP address, date and time of access, name and URL of the file accessed, amount of data transferred, browser and operating system information; and
• information connected with your consent choices, including cookie and marketing preferences.

The provision of personal data is generally voluntary. However, failure to provide certain data may make it difficult or impossible to use selected Website functionalities or to contact us.

4. Purposes of Processing and Legal Basis

We process personal data for the following purposes. Where required by applicable data protection law, including the GDPR where applicable, the corresponding legal basis is indicated below:

• to enable use of the Website and perform activities related to administration of the Website – based on our legitimate interest in ensuring the proper functioning and security of the Website;
• to analyse activity on the Website and create statistics – based on your consent where required;
• to provide greater functionality and personalisation of the Website – based on your consent where required;
• to personalise advertising and marketing content – based on your consent where required;
• to respond to questions and communicate with people contacting us, including via dedicated contact forms – based on our legitimate interest in communicating with people interested in our activities;
• to establish, pursue or defend claims – based on our legitimate interest in protecting our legal position;
• to take steps to start cooperation or business relations with you – based on our legitimate interest in establishing business relations; and
• to send marketing content, such as newsletters – based on your consent.

5. Retention Period

Personal data will be stored for as long as necessary to achieve the purposes for which it was collected. The applicable retention period may vary depending on the purpose of processing.

• data processed in connection with use of the Website will be stored until our legitimate interest is fulfilled or until you effectively object to processing, whichever occurs first;
• data processed for contact purposes will be stored for the period necessary to provide a response and, where applicable, for the period necessary to establish, pursue or defend claims;
• data processed on the basis of consent will be processed until you withdraw your consent, unless the purpose of processing ceases earlier.

6. Recipients of Personal Data

We may transfer personal data to the following categories of recipients:

• service providers and external entities supporting our business, including IT, hosting, analytics, marketing, advisory and legal providers, with whom we have concluded appropriate agreements where required;
• public authorities authorised to process such data under applicable law; and
• other entities from the Polpharma Biologics group, to the extent necessary to achieve the purposes described in this Privacy Policy.

7. International Transfers

Recipients of personal data may be located in countries outside Switzerland, the European Union or the European Economic Area. Where personal data is transferred internationally, we apply safeguards required by applicable law, for example an adequacy decision or appropriate contractual safeguards. You may request information about the safeguards applied, or where they have been made available, by contacting us as indicated in section 2.

8. Your Rights

Subject to conditions and limitations under applicable data protection law, you may have the right to:

• obtain access to your personal data and receive a copy of it;
• request correction or rectification of inaccurate or incomplete data;
• request deletion of data or restriction of processing;
• withdraw consent to processing at any time, where processing is based on consent;
• object to processing based on our legitimate interests for reasons relating to your particular situation; and
• receive personal data in a structured, commonly used and machine-readable format and, where technically possible, request transmission to another controller, if processing is based on consent or contract and carried out by automated means.

To exercise your rights, please contact us using the details provided in section 2.

9. Right to Lodge a Complaint

You also have the right to lodge a complaint with the competent data protection authority. For Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Berne, Switzerland. If EU data protection law applies to a specific processing activity, you may also have the right to contact the competent EU supervisory authority.

10. Security

We apply appropriate technical and organisational security measures designed to protect personal data against unauthorised use, processing, acquisition, disclosure, alteration or loss.

Use of the Website involves the normal risks associated with using the Internet. We recommend that you exercise caution and use appropriate security software and settings, including antivirus and firewall protection where appropriate.

11. Cookies

Detailed information about cookies used on the Website can be found in our Cookie Policy.

Last update: 17.07.2026