This Privacy Notice has been prepared to explain when and why we collect personal data about people who visit our website, how we use and keep such data secure, and the circumstances under which we may disclose such data to others.

Hovione is committed to protecting your privacy, handling your data with care and integrity, and to the requirements of applicable laws and regulations relating to privacy and protection of personal data.

Personal data means any information which may be used to identify you either directly (such as your name) or indirectly (such as a telephone number or identification number).

When we say “Hovione”, “we” or “us” in this Privacy Notice, we are referring to the Hovione group companies.

Hovione may amend the contents of this Privacy Notice from time to time, and any such changes will be updated on our website.

1. What types of personal data do we collect?

Hovione may collect and process your personal data if you access or register to use our website, complete an online form, or send us any correspondence. This may include:

• Your name;

• Your address;

• Your email address;

• The country you are located in;

• Your telephone number;

• Your job title and/or the company you work for;

• Details of your visits to our website and the resources that you access; or

• Anonymized technical, usage or cookie data.

2. How do we use your personal data?

Any personal data collected may be used and processed only for the purposes of:

• Managing and improving our relationship with you, including by providing you with information, products, or services that you request from us or which we think may be of interest to you based on your preferences;

• Managing and improving our business operations and processes, including but not limited to managing our workforce, network and information systems effectively, keeping records and responding to reports relating to our products or services, and analyzing trends and activities relating to our products and services;

• Hiring purposes, such as submitting a CV application;

• Notifying you about changes to our services; or

• Complying with any applicable regulatory requirements.

3. How long do we keep your personal data?

Hovione will store your personal data only for the period necessary to fulfil the purposes described in the previous paragraphs and to comply with our legal requirements.

4. Who will have access to your personal data?

We will share your personal data on a need-to-know basis and in compliance with applicable laws and regulations (such as the General Data Protection Regulation in the European Union (the “GDPR”)). To the extent necessary, we share your personal data with Hovione team members so that they can do their jobs.

In some instances, we may be required by law to disclose your personal data to governmental authorities, statutory bodies or third parties. In such instances Hovione’s control over how your personal data is protected is more limited.

5. Who is responsible for your personal data?

The controller of your personal data is Hovione FarmaCiencia S.A., enrolled in the Commercial Registry of Loures under the unique number of registration and legal person 500135495, with registered office at Quinta São Pedro, Sete Casas, 2674-506 Loures (“Hovione”).

6. How do we protect your information?

Hovione is committed to treating your personal data with due care and integrity, and ensuring your personal data is secure. We have established suitable privacy and security measures intended, to the extent reasonably achievable, to safeguard against unauthorized access or disclosure of your personal data.

7. What are your rights regarding your personal data?

You have rights relating to the collection and use of your personal data. These rights vary depending on the reasons for any data collection or processing and the applicable laws and regulations in your jurisdiction (such as the GDPR). While certain exceptions may exist to your rights relating to the use of your personal data, we encourage you to contact us if you wish to exercise any of your rights, which may include the following:

• Of access: to obtain information regarding the processing of your personal data or a copy of such data;

• Of rectification: to correct and update any inaccurate or incomplete personal data;

• Of erasure: to obtain the erasure of personal data, to the extent permitted by law;

• Of restriction: to obtain the restriction of processing of personal data, to the extent permitted by law;

• Of objection: where legally applicable, to object to the processing for reasons connected with your particular situation, as well as where personal data are processed for direct marketing purposes, including profiling related to such marketing;

• Of withdrawal of consent: possibility to withdraw consent previously given;

• Of data portability: where legally applicable, to receive your previously provided personal data, as well as have the personal data transmitted directly from one controller to another, where technically feasible;

• Not being subject to automated individual decision-making: not to be subject to a decision taken exclusively on the basis of automated processing, including profiling, which produces legal effects concerning you or significantly affects you, to the extent permitted by law; and

• To lodge a complaint with a supervisory authority.

If you wish to exercise any of your rights set out above, you may do so free of charge through the email DP@hovione.com, or by registered letter addressed to the Hovione Data Privacy Team, located at Campus do Lumiar, Edifício R, Estrada do Paço do Lumiar, 1649-038 Lisboa.

8. How do we protect your information?

Hovione is committed to treating your personal data with due care and integrity, and ensuring your personal data is secure. We have established suitable privacy and security measures intended, to the extent reasonably achievable, to safeguard against unauthorized access or disclosure of your personal data.

9. Transfers of personal data outside the European Economic Area

Hovione does not transfer personal data internationally other than under the protection of appropriate measures, including applicable data transfer agreements which apply standard data protection clauses to such transfers.

10. Use of cookies:

Our website may also use cookies (or other similar technologies) in order to distinguish you from other users. This helps us to improve our website and ensure users receive a good experience when browsing our site. For more detailed information about our use of cookies please consult our Privacy Notice – Cookies & Website/Application Data on our website.

11. Contact:

If you have any questions regarding the use of your personal data, or regarding this Privacy Notice, please contact us at DP@hovione.com