GENERAL PRIVACY NOTICE

This Privacy Notice explains how Boehringer Ingelheim México S.A. de C.V. (hereinafter BIM) handles the processing of personal data that BIM collects in questionnaires, consents granted by telephone, on a written or electronic form, through the filling out of documents, websites, corporate social media, controlled by BIM that link to this Privacy Notice (jointly referred to as "BI Sites"),  as well as by any other means allowed by law. This Privacy Notice applies to personal data collected by BIM within the United Mexican States but does not apply to other third-party sites with possible links from the BI Sites. Use of the BIM Sites is subject to this Privacy Notice and the Internet Terms of Use.

Please read this Privacy Notice before using the BIM Sites or providing us with Personal Data.

WHAT ARE "PERSONAL DATA" ACCORDING TO THIS PRIVACY NOTICE?

"Personal Data" means any information concerning an identified or identifiable natural person that is processed by BI.

WHAT IS PERSONAL DATA PROCESSING?

The collection, use, disclosure or storage of personal data, by any means. The use includes any action of access, handling, exploitation, transfer or disposition of Personal Data.

WHO IS RESPONSIBLE FOR THE PROCESSING AND PROTECTION OF YOUR PERSONAL DATA?

BIM, with registered office at Acueducto 660, Colonia La Concha, Xochimilco, C.P.16200, Mexico City, Mexico, is responsible for the Processing of your Personal Data in accordance with the Federal Law on the Protection of Personal Data in Possession of Private Parties published in the Official Gazette of the Federation on July 5, 2010 and its Regulations Published in the Official Gazette of the Federation on December 21, 2011.

HOW TO CONTACT US?

Via e-mail  to the address: datospersonales.mex@boehringer-ingelheim.com or to the BIM address at Acueducto 660, Colonia La Concha, Xochimilco, C.P.16200, Mexico City, Mexico.

FOR WHAT PURPOSES DO WE COLLECT AND PROCESS YOUR PERSONAL DATA?

Your Personal Data will be processed for one or more of the following purposes: (i) compliance with BIM's internal policies and procedures, (ii) compliance with applicable legislation in force and requirements of the competent authority; (iii) preparation of studies, statistics, metrics, programs, reports and projects; (iv) assess the quality of services; (v) sending of advertising and promotional material; (vi) sending of information about products, patient programs, commercial programs, and their updates; (vii) registration of users, customers and vendors; (viii) receiving, documenting, and following up on complaints; (ix) access and security logging; (x) compliance with pharmacovigilance provisions; (xi) compliance with obligations to customers and vendors; (xii) provide services and products; and (xiii) inform about changes or new products or services; (xiv) allow you access to our facilities; (xv) to integrate databases in accordance with the other purposes described herein (xvi) so that the information is transferred by BIM to its parent company, affiliates, related companies, and/or third parties hired by BIM for any of the purposes provided herein, (xvii) to carry out any procedure before a public authority or a private person or entity, in respect of which the information is relevant.

WHAT PERSONAL DATA DO WE COLLECT AND FROM WHERE?

For the purposes outlined in this Privacy Notice, we may collect your Personal Data in several ways: when you provide it to us directly, when you visit any of the BIM Sites or use our online services, and when we obtain information from other sources allowed by law.

Examples of Personal Data we will collect will be one or more of the following: (i) name; (ii) address; (iv) date of birth; (v) government identification number; (vi) sole population registry code; (vii) Federal Taxpayers´ Registration; (ix) telephone and/or mobile; (x) email; (xv) photo or image, among others.

WHAT ARE "SENSITIVE PERSONAL DATA" ACCORDING TO THIS PRIVACY NOTICE?

We inform you that, in order to comply with the purposes set forth in this Privacy Notice, Sensitive Personal Data may be collected and processed, data which refer to intimate information of the owner thereof, or whose improper use may give rise to discrimination, or entail a serious risk therefor. Specifically, those data that may reveal aspects such as racial or ethnic origin, present and future state of health, racial or ethnic origin, genetic information, religious, philosophical and moral beliefs, union membership, political opinions or sexual preference are considered sensitive.

We undertake to process the data under the strictest security measures that guarantee their confidentiality.

In accordance with the provisions of Article 9 of the aforementioned Law, we require your express written consent for the processing of your Sensitive Personal Data.

HOW CAN YOU LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA?

You may limit the use or disclosure of your Personal Data by requesting it through the procedure for requesting ARCO Rights, revocation of consent or refusal to use Personal Data for secondary purposes that is mentioned later in this document. As soon as we receive your request, we will register you in the appropriate opt-out list for the use and disclosure of Personal Data to comply with your request.

HOW CAN YOU ACCESS, RECTIFY OR CANCEL YOUR PERSONAL DATA, OR OBJECT TO THEIR USE?

You are entitled to know what Personal Data we hold about you, what we use them for and the conditions of processing we give them (Access). You are also entitled to request the correction of your personal information if it is outdated, inaccurate or incomplete (Correction). You also have the right to have it deleted from our records or databases at any time (Deletion), as well as to object to the processing of your Personal Data for specific purposes (Objection). These rights are known as ARCO rights.

PROCEDURE FOR APPLYING FOR ARCO RIGHTS

The method that has been implemented to use the ARCO rights is by sending a request to the email datospersonales.mex@boehringer-ingelheim.com or else in person at the address mentioned in this Privacy Notice. In your email or personal application, you must meet all of the following requirements:

1. Provide the following information:

a. Name and surname;

b. Address or other means of communicating the response to your request. It can be your email;

c. Contact telephone number;

d. City & State;

2. Attach a copy of the official documents that prove your identity (voter's card, passport) or, where applicable, those that prove the legal representation of the holder in accordance with the legislation on the matter.

3. Provide a clear and precise description of the Personal Data in respect of which you seek to use any of your ARCO rights, revocation of consent, or refusal of data use for secondary purposes.

4. Provide any other element, information or document you may have and that makes the location of your Personal Data easier:

a. Relationship you have had with BIM;

b. Name of BIM area or person who contacted you;

c. Means by which BIM contacted you; or

d. Name of the product, service, event, or program for which you were contacted.

The deadline to provide you with a response to the determination made with respect to your ARCO request is twenty (20) business days from the time you received your duly completed request.

The aforementioned period may be extended only once for an equal period when the circumstances of the case so require.

HOW CAN YOU REVOKE YOUR CONSENT TO THE USE OF YOUR PERSONAL DATA?

You may revoke the consent that, if any, you have given us for the Processing of your Personal Data. However, it is important that you bear in mind that we will not always be able to respond to your request or conclude the Processing immediately, as it is possible that due to some legal obligation, we need to continue Processing your Personal Data. You should also consider that, for certain purposes, the revocation of your consent will mean that we will no longer be able to provide you with the service you requested, or the termination of your relationship with us.

To revoke your consent, you must submit your request through the ARCO rights application procedure.

CAN YOUR DATA BE TRANSFERRED OR SHARED WITH OTHERS?

Your Personal Data may be transferred and Processed inside and outside the United Mexican States by persons other than BIM. Accordingly, your information may be shared with other BIM companies, their parent company, affiliates, related companies, vendors, authorities, distributors, collaborators, business partners, or agents to conduct the processing authorized by law and to carry out the purposes set out in this Privacy Notice.

We undertake not to transfer your personal information to third parties other than those indicated above, without your consent, save for the exceptions provided for in article 37 of the Federal Law on the Protection of Personal Data in Possession of Private Parties, as well as to conduct this transfer under the terms established by Law.

Except in the cases of article 37 of the Law, if you fail to object to the transfer of your personal data, it will be understood that you have given your consent to do so.

For the transfer of Sensitive Personal Data, we require your express written consent.

HOW DO WE USE TRACKING TECHNOLOGIES IN OUR DIGITAL MEDIA?

We inform you that on the BIM Sites we use cookies, web beacons or other technologies through which it is possible to monitor your behavior as an internet user, as well as to provide you with a better service and experience when browsing the BI Sites:

Cookies

Cookies are text files that are automatically downloaded and stored on the hard drive of the user's computer when browsing a specific Internet site, which allow the Internet server to remember some data about this user.

The information we collect through these types of technologies will be used for the following purposes: preparation of studies, statistics, metrics, programs, reports and projects.

Information we obtain from these tracking technologies is as follows: session identifiers, username and password, user's preferred language, region in which the user is located, browser type, type of user's operating system, client or application used to receive email, date and time of the start and end of a user's session,  web sites visited by a user, searches made by a user, number of times viewed by a digital medium, IP address.

These cookies, and other technologies, can be disabled. To learn how to do this, please consult the help or technical support of your Internet browser or communication device. If you would like to know more about cookies, you can visit the following site: www.allaboutcookies.org.

WHO WILL HAVE ACCESS TO MY PERSONAL DATA?

A restricted number of employees of BIM, its parent company, affiliates, subsidiaries and/or related companies, and/or third parties engaged by BIM may access your Personal Data. To this end, we train our employees on the importance of privacy and on how to process Personal Data properly and securely. In addition, BIM usually requires its vendors or contractors to Process Personal Data in accordance with the Law.

HOW LONG WILL BIM KEEP MY PERSONAL DATA?

BIM will retain your Personal Data for as long as necessary to comply with the Processing purposes set out in this Privacy Notice, and in the applicable laws, contracts, internal policies and procedures of BI, unless you revoke your consent to the Processing in advance.

MODIFICATIONS TO THE PRIVACY NOTICE

This Privacy Notice may be modified, changed or updated as a result of new legal requirements, our own needs as to the products or services we offer, our privacy practices, changes in our business model, or otherwise.

We agree to keep you informed of any changes to this Privacy Notice through this BI Site (www.boehringer-ingelheim.com.mx) or directly to your e-mail, when you request it in writing by the following means: through our e-mail, by mail, or in person at our address mentioned in this Privacy Notice.

PRIVACY NOTICE FOR HEALTHCARE PROFESSIONALS

Boehringer Ingelheim México, S.A. de C.V. ("BIM"), with registered office at Acueducto 660, Colonia La Concha, Xochimilco, C.P.16200, Mexico City, Mexico, will be responsible for the Processing of your Personal Data, in accordance with the provisions of the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations (the "Law"). Your Personal Data will be processed in accordance with the provisions of the Law and this Privacy Notice. Capitalized terms used within this Privacy Notice will have the meaning attributed to them in the Law.

Personal Data Processed by BIM may include the following:

• full name, gender, marital status, date of birth, address of your office(s) or institution(s) where you work and the position you hold in said institution(s), email, landline and mobile, social media and autograph signature;
• medical institutions membership;
• agreements with insurers;
• details of your official identification (passport, INE (voting card));
• data included in your immigration documents such as visas and passport;
• educational accreditations, specialty(ies) and sub-specialty(ies), professional degree(s) and Resume;
• tax data, such as TIN;
• CURP (sole population registry code);
• details of your bank accounts for payment purposes, in the understanding that BIM will not have access to your financial data, such as balances or movements in said accounts.

BIM may collect your Personal Data by any legitimate means.

Processing Purposes: (i) to comply with the provisions set forth in the General Health Law and its regulations; (ii) to prepare statistical studies, market studies, programs, reports and projects inherent to BIM activities; (iii) to enter into contracts for the provision of services related to BIM activities and make the corresponding payment for such services; (iv) to comply with national and international pharmacovigilance and product complaint standards; (v) to schedule the visit of BIM's medical representatives; (vi) to hand over medical samples, educational, medical, scientific and promotional material in strict compliance with the current legislation; (vii) to send you invitations to medical, scientific and/or promotional events and record your attendance, in strict compliance with the current legislation; (viii) to invite you to participate in research projects, clinical trials, roundtables, symposia, and expert group meetings; and (ix) to send information regarding BIM programs and products by various means, including, without limitation, all existing and future digital platforms.

BIM may contact you through any means; including, without limitation, personal visits, phone calls, emails, virtual links through any communication device, digital platforms, websites, video calls, text and multimedia messages, mail service, social media and printed media.

It is BIM's policy not to process Sensitive Personal Data if this is not essential for its activities. Please do not provide BIM  your Sensitive Personal Data by any means.

BIM, as the Data Controller of your Personal Data, will observe at all times the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility provided for in the Law. In addition, BIM will at all times comply with the administrative, technical and physical security measures to protect Personal Data against damage, loss, alteration, destruction or unauthorized use, access or processing of such Personal Data.

BIM may share some or all of your Personal Data with companies that are part of its economic group in Mexico or abroad, as well as with external advisors and service providers who act as Processors in name and on behalf of BIM, when necessary to comply with the purposes described in this Privacy Notice. BIM will ensure that such third parties maintain adequate administrative, technical and physical security measures to safeguard your Personal Data, as well as that such third parties use your Personal Data solely and exclusively for the purposes they were hired for and in accordance with this Privacy Notice and the Law.

You may request BIM to revoke and limit your consent at any time and to access, rectify, cancel and object the Processing of your Personal Data ("ARCO Rights"), by sending an email to datospersonales.mex@boehringer-ingelheim.com. Such mail will contain the following:

(i) full name, email address, or other means for communicating you the response to your request; (ii) documents proving the Owner’s identity;

(iii) a clear and precise description of the Personal Data in respect of which the ARCO Rights are to be used; and

(iv) any other element or document that makes location of the Owner's Personal Data easier.

In the event that any of the Owner's Personal Data is inaccurate or incomplete, the Owner, in addition to indicating the above, must indicate the modifications to be made and provide the necessary documentation to support their request.

BIM will not be bound to cancel Personal Data in any of the cases set forth in Article 26 of the Law.

By providing your Personal Data to BIM by any means, you accept and consent to their use as described herein. In case you disagree with this Privacy Notice, please do not provide your Personal Data to BIM.

BIM, in order to comply with the Law or with any other applicable provision, may modify or update this Privacy Notice at any time without prior notice. BIM will make available to you, in a timely manner, any modifications to this Privacy Notice in www.boehringer-ingelheim.com.mx.

Date of the last update to this Privacy Notice: November 2020.

PRIVACY NOTICE FOR VENDORS

Boehringer Ingelheim México, S.A. de C.V. ("BIM"), with registered office at Acueducto 660, Colonia La Concha, Xochimilco, C.P.16200, Mexico City, Mexico, will be responsible for the Processing of your Personal Data, in accordance with the provisions of the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations (the "Law"). Your Personal Data will be processed in accordance with the provisions of the Law and this Privacy Notice. Capitalized Terms used within this Privacy Notice will have the meaning attributed to them in the Law.

Personal Data Processed by BIM may include the following:

·       Identification data: full name, gender, marital status, date of birth, age, valid official identification (INE, Passport), driver's license, signature;

·       Contact details: landlines/mobiles, e-mail, home address;

·       Tax data: TIN, CURP;

·       Bank Accounts: Account Number, Bank, Full Name of Holder, Account Type;

·       Social Security Data

·       Education: School degree, specialty, professional degree, when applicable

·       Personal Photograph

·       Health Insurance or Major Medical Expenses Insurance

BIM may collect your Personal Data by any legitimate means.

Processing Purposes: (i) for contracting to provide services directly to BIM; (ii) to make payments derived from the provision of services; (iii) to issue credentials to access to BIM facilities; (iii) to access to BIM work tools; (iv) to prepare metrics, statistics, reports and projects; (v) to generate internal consultation database, (iii) to follow-up joint projects in process or under implementation; (iv) to require compliance with contractual obligations.

BIM may contact you through any means; including, without limitation, personal visits, phone calls, emails, virtual links through any communication device, digital platforms, websites, video calls, text and multimedia messages, mail service, social media and printed media.

It is BIM's policy not to process Sensitive Personal Data if this is not essential for its activities. Please do not provide BIM  your Sensitive Personal Data by any means.

BIM, as the Data Controller of your Personal Data, will observe at all times the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility provided for in the Law. In addition, BIM will at all times comply with the administrative, technical and physical security measures to protect Personal Data against damage, loss, alteration, destruction or unauthorized use, access or processing of such Personal Data.

BIM may share some or all of your Personal Data with companies that are part of its economic group in Mexico or abroad, as well as with external advisors and service providers who act as Processors in name and on behalf of BIM, when necessary to comply with the purposes described in this Privacy Notice. BIM will ensure that such third parties maintain adequate administrative, technical and physical security measures to safeguard your Personal Data, as well as that such third parties use your Personal Data solely and exclusively for the purposes they were hired for and in accordance with this Privacy Notice and the Law.

You may request BIM to revoke and limit your consent at any time and to access, rectify, cancel and object the Processing of your Personal Data ("ARCO Rights"), by sending an email to datospersonales.mex@boehringer-ingelheim.com. Such mail will contain the following:

1. full name, email address, or other means for communicating you the response to your request;
2. documents proving the Owner’s identity;

(iii)   a clear and precise description of the Personal Data in respect of which the ARCO Rights are to be used; and

(iv)   any other element or document that makes location of the Owner's Personal Data easier.

In the event that any of the Owner's Personal Data is inaccurate or incomplete, the Owner, in addition to indicating the above, must indicate the modifications to be made and provide the necessary documentation to support their request.

BIM will not be bound to cancel Personal Data in any of the cases set forth in Article 26 of the Law.

By providing your Personal Data to BIM by any means, you accept and consent to their use as described herein. In case you disagree with this Privacy Notice, please do not provide your Personal Data to BIM.

BIM, in order to comply with the Law or with any other applicable provision, may modify or update this Privacy Notice at any time without prior notice. BIM will make available to you, in a timely manner, any modifications to this Privacy Notice in www.boehringer-ingelheim.com.mx.

Date of the last update to this Privacy Notice: November 2020.

PRIVACY NOTICE FOR CUSTOMERS

Boehringer Ingelheim México, S.A. de C.V. ("BIM"), with registered office at Acueducto 660, Colonia La Concha, Xochimilco, C.P.16200, Mexico City, Mexico, will be responsible for the Processing of your Personal Data, in accordance with the provisions of the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations (the "Law"). Your Personal Data will be processed in accordance with the provisions of the Law and this Privacy Notice. Capitalized Terms used within this Privacy Notice will have the meaning attributed to them in the Law.

The Personal Data Processed by BIM may include the following:

·       Identification data: full name, gender, marital status, date of birth, age, valid official identification (INE, Passport), driver's license, signature;

·       Contact details: landlines/mobiles, e-mail, home address;

·       Tax data: TIN, CURP;

·       Bank Accounts: Account Number, Bank, Full Name of Holder, Account Type;

BIM may collect your Personal Data by any legitimate means.

Processing Purposes: (i) Registration of the client in our systems; (ii) Establishment of credit facilities; (iii) Assurance and enforcement of collections; (iv) Background checking to ensure compliance with obligations, regulations and laws; (v) Assurance of compliance with BI policies; (vi) Sale and delivery of products and/or services; (vii) Sending of information about products and/or services.

BIM may contact you through any means; including, without limitation, personal visits, phone calls, emails, virtual links through any communication device, digital platforms, websites, video calls, text and multimedia messages, mail service, social media and printed media.

It is BIM's policy not to process Sensitive Personal Data if this is not essential for its activities. Please do not provide BIM  your Sensitive Personal Data by any means.

BIM, as the Data Controller of your Personal Data, will observe at all times the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility provided for in the Law. In addition, BIM will at all times comply with the administrative, technical and physical security measures to protect Personal Data against damage, loss, alteration, destruction or unauthorized use, access or processing of such Personal Data.

BIM may share some or all of your Personal Data with companies that are part of its economic group in Mexico or abroad, as well as with external advisors and service providers who act as Processors in name and on behalf of BIM, when necessary to comply with the purposes described in this Privacy Notice. BIM will ensure that such third parties maintain adequate administrative, technical and physical security measures to safeguard your Personal Data, as well as that such third parties use your Personal Data solely and exclusively for the purposes they were hired for and in accordance with this Privacy Notice and the Law.

You may request BIM to revoke and limit your consent at any time and to access, rectify, cancel and object the Processing of your Personal Data ("ARCO Rights"), by sending an email to datospersonales.mex@boehringer-ingelheim.com. Such mail will contain the following:

1. full name, email address, or other means for communicating you the response to your request;
2. documents proving the Owner’s identity;

(iii)   a clear and precise description of the Personal Data in respect of which the ARCO Rights are to be used; and

1. any other element or document that makes location of the Owner's Personal Data easier.

In the event that any of the Owner's Personal Data is inaccurate or incomplete, the Owner, in addition to indicating the above, must indicate the modifications to be made and provide the necessary documentation to support their request.

BIM will not be bound to cancel Personal Data in any of the cases set forth in Article 26 of the Law.

By providing your Personal Data to BIM by any means, you accept and consent to their use as described herein. In case you disagree with this Privacy Notice, please do not provide your Personal Data to BIM.

BIM, in order to comply with the Law or with any other applicable provision, may modify or update this Privacy Notice at any time without prior notice. BIM will make available to you, in a timely manner, any modifications to this Privacy Notice in www.boehringer-ingelheim.com.mx.

Date of the last update to this Privacy Notice: November 2020.

PRIVACY NOTICE FOR PATIENTS

Last Updated: November 2020

Boehringer Ingelheim México, S.A. de C.V. ("BIM"), with registered office at Acueducto 660, Colonia La Concha, Xochimilco, C.P.16200, Mexico City, Mexico, will be Responsible for the Processing of your Personal Data and Sensitive Personal Data, in accordance with the provisions of the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations ("Law"). Your Personal Data and Sensitive Personal Data will be Processed in accordance with the provisions of the Law and this Privacy Notice. Capitalized Terms used within this Privacy Notice will have the meaning attributed to them in the Law.

This Privacy Notice includes Sensitive Personal Data, data which refer to intimate information of the owner thereof, or whose improper use may give rise to discrimination, or entail a serious risk therefor. In particular, those that may reveal aspects such as racial or ethnic origin, present and future state of health, racial or ethnic origin, genetic information, religious, philosophical and moral beliefs, union membership, political opinions or sexual preference are considered sensitive.

Your Personal Data and/or Sensitive Personal Data will be collected, used, stored and, where appropriate, transferred in accordance with the provisions of the Law and this Privacy Notice.

1. Information collected and purpose of the Processing of Personal Data and/or Sensitive Personal Data

The Personal Data and/or Sensitive Personal Data that will be Processed by BIM may include the following:

• Full name;
• Address (street, number, neighborhood, state, zip code);
• Telephone and/or mobile;
• Gender;
• Email;
• Age;
• Date of birth;
• Information on past, present, and future health status.

BIM will only be able to process your Sensitive Personal Data if you sign this Privacy Notice.

Your Personal Data and/or Sensitive Personal Data may be used for the following: (i) to comply with the obligations set forth in the General Health Law and its regulations; (ii) to participate in clinical studies, prepare statistical analyses, programs, reports and projects inherent to BIM activities; (iii) to comply with national and international pharmacovigilance standards; (iv) to respond to complaints regarding BIM and/or its products, in compliance with the respective national and international standards; (v) to create databases to monitor registration of adverse event reports (vi) to provide information in response to your requests; (vii) to establish communication and contact with the You so you may participate in the patient programs (viii); so you may participate and/or collaborate in various health-related events or forums, whether face-to-face or digital; (ix) to provide and/or send you health-related information; (x) to perform statistical analysis, generation of information models and/or profiles of current and predictive behavior (xi) to participate in surveys and (xii) to give you access to our facilities.

2. Security Measures in the Processing of Personal Data and/or Sensitive Personal Data

BIM, as the Data Controller of Personal Data and/or Sensitive Personal Data, will observe at all times the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility provided for in the Law. Likewise, BIM will comply at all times with the administrative, technical and physical security measures that allow the protection of Personal Data and/or Sensitive Personal Data against damage, loss, alteration, destruction or unauthorized use, access or Processing of said Personal Data and/or Sensitive Personal Data.

3. Transfer of Personal Data and/or Sensitive Personal Data

BIM may share some or all of your Personal Data and/or Sensitive Personal Data with BIM-related companies, external professional advisors and/or other service providers acting as Processors in name and on behalf of BIM when necessary to fulfill the purposes described in this Privacy Notice.

BIM will ensure that such Processors maintain adequate administrative, technical and physical security measures to safeguard your Personal Data and/or Sensitive Personal Data, and that such Processors use your Personal Data and/or Sensitive Personal Data solely and exclusively for the purposes they were hired for and in accordance with this Privacy Notice and the Law.

Your Personal Data and/or Sensitive Personal Data may be transferred outside of Mexico for processing, by itself or through third parties acting on behalf of BIM and its related companies, and only for the purposes stated in this Privacy Notice.

BIM may transfer your Personal Data and/or Sensitive Personal Data to third parties in the cases provided for by Law.

4. Means to Limit the Use or Disclosure of Your Personal Data and/or Sensitive Personal Data

You may limit the use or disclosure of your Personal Data and/or Sensitive Personal Data by requesting it through the ARCO Rights request procedure, revocation of consent or refusal to use personal data for secondary purposes mentioned later in this document. As soon as we receive your request, we will register you in the corresponding opt out list for the use and disclosure of Personal Data and/or Sensitive Personal Data to comply with your request.

5. Means to exercise the ARCO Rights

The Owner may request BIM to revoke and limit their consent at any time and to access, rectify, cancel and object the Processing of their Personal Data and/or Sensitive Personal Data ("ARCO Rights"), by sending their request to the following email address: datospersonales.mex@boehringer-ingelheim.com.

The application for ARCO Rights must contain and be accompanied by the following:

1. Name of the owner and address or other means for communicating you the response to your request;
2. Documents that prove the identity or, where applicable, the legal representation of the owner;
3. Clear and precise description of the Personal Data and/or Sensitive Personal Data in respect of which any of the ARCO Rights are to be used; and
4. Any other element or document that makes the location of the owner's Personal Data and/or Sensitive Personal Data easier.

The deadline to provide you with a response to the determination regarding your ARCO request is twenty (20) business days from the time your duly completed request is received.

The aforementioned period may be extended only once for an equal period, provided that the circumstances of the case so require.

In the event that any of the owner's Personal Data and/or Sensitive Personal Data are inaccurate or incomplete, the owner, in addition to indicating the above, must state the modifications to be made and provide the necessary documentation to support their request.

BIM will not be bound to cancel the Personal Data and/or Sensitive Personal Data in any of the cases set forth in Article 26 of the Law.

6. Modification to the Privacy Notice

BIM, in order to comply with the Law or with any other applicable legal provision, may modify or update this Privacy Notice at any time, so in such case, BIM will make available any modification to this Privacy Notice, which may be consulted at www.boehringer-ingelheim.com.mx.

7. Owner´s Consent

In accordance with the provisions of Article 9 of the Law, we require your express written consent for the use and Processing of your Sensitive Personal Data.

Finally, by consenting to this Privacy Notice, you agree to submit only to the jurisdiction and legislation applicable in the United Mexican States, regardless of your nationality and/or country where you are a resident.

I expressly declare that I have read and understood this Privacy Notice and I give my consent for the Processing of my Personal Data and Sensitive Personal Data in the terms and purposes indicated in this document.

Full name and signature: __________________________________________________________________________

Date:_________________

(When applicable) I, the undersigned _________________________________________ in my capacity as legal representative of: ______________________________________, declare that I have read and understood this Privacy Notice and declare that I have sufficient legal representation of the owner of the Personal Data and Sensitive Personal Data to consent to the purposes of the Processing therein indicated:

Full name and signature: __________________________________________________________________________

Date:_________________