Legal Basis for the Processing of Your Personal Information. Note that in Canada, we rely on your consent to process your Personal Data, unless otherwise permitted under applicable laws. When applicable law requires your express consent, you will be asked to grant Regeneron the right to process your Personal Data in accordance with the identified purposes. In some cases, your consent may be “implied”, meaning that your agreement is assumed based on your action or inaction at the point of processing your Personal Data. Cookies. To the extent permitted under applicable law, we may use automated technologies such as cookies to personalize, advertise, and market our products, as well as the co-branded products we offer with our partners. For example, we may use your Personal Data to provide you with special offers, assess the effectiveness of our marketing programs, improve our products and services; and develop a better understanding of our relationship with you. You may adjust your cookie preferences in the browser of your computer or device to, for example, opt-in to our use of certain cookies and opt-out of others. While you may still use the Regeneron Sites if you reject our cookies, your ability to use some areas of the Regeneron Sites may be limited.If you would like more information on how you may opt-out of our use of certain cookies contact us using the information provided in the Updates and Contacting Us section of the Notice. How We Safeguard Your Information. The safeguarding measures we have put in place to ensure the protection of your Personal Data from loss and unauthorized, access, use and disclosure, include: A privacy governance program comprised of policies and procedures regarding the protection of Personal Data through its lifecycle and which defines the roles and responsibilities of Regeneron’s personnel regarding the handling of Personal Data. Technical safeguards, such as encryption, firewalls, passwords and antivirus software, to protect Personal Data collected, used or stored in electronic format. A designated Data Protection Privacy Officer accountable for Regeneron’s compliance with applicable privacy laws. Employee privacy and data security training. Procedures for receiving, investigating and responding to complaints or inquiries regarding Regeneron’s information handling practices. Contractual provisions and other measures to require our service providers with whom we share Personal Data to maintain adequate privacy protections and standards. International Transfers of Personal Data. As part of the data processing activities described in this Notice, we may transfer your personal information outside of Quebec and Canada, including to the United States. As such, your Personal Data may be subject to foreign laws and may be accessible by foreign governments, courts, law enforcement and regulatory agencies. Consumer Health Data Privacy Policy. This Consumer Health Data Privacy Policy describes how we collect and process your Consumer Health Data (as defined below). 1.Categories of Consumer Health Data collected and how it is used: We may collect the below categories of consumer health data ( “Consumer Health Data”): Individual health conditions, treatment, diseases, or diagnosis; Social, psychological, behavioral, and medical interventions; Health-related surgeries or procedures; Use or purchase of prescribed medication; Bodily functions, vital signs, symptoms, or measurements related to health; Diagnoses or diagnostic testing, treatment, or medication; Genetic data;Reproductive or sexual health information; Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies; Data that identifies a consumer seeking health care services; Health-related data that have been derived or inferred from the above. We use the above-mentioned categories of Consumer Health Data for the following purposes: Performing the services or providing the goods reasonably expected by an average consumer who requests those goods or services (including offering benefits to employees and their beneficiaries); Ensuring security and integrity to the extent the use of your Personal Data is reasonably necessary and proportionate for these purposes; Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us; provided that we will not disclose your Personal Data to a third party and/or build a profile about you or otherwise alter your experience outside the current interaction with the business; Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage or providing similar services on our behalf; Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for or controlled by us, and to improve, upgrade or enhance the service or device that is owned, manufactured, manufactured for or controlled by us; Marketing and analytics purposes, including communicating with you and promoting our products and services and analyzing interest in and use of our products and services. 2.Categories of sources from which Consumer Health Data is collected:We collect Consumer Health Data directly from you, as well as the following sources: Healthcare providers (including specialty pharmacies); Health insurance companies (health plans) and other payors; Authorized/legal representatives, family members, and caregivers; Consumer reporting agencies and other third parties who verify the information you provide; Advertising partners who provide digital marketing services; Third parties and processors who provide website and online security services; Third parties and processors who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services; Third parties and processors who help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records; Third parties and vendors that provide access to information you make publicly available, such as social media platforms; Third parties and processors who provide us with supplemental consumer data or data analytics and market research services, such as data aggregators; and We also draw inferences from the information we collect from and about you, such as your preferences, characteristics, attributes, and abilities. 3.Categories of Consumer Health Data that is shared: We share all of the categories of Consumer Health Data that we collect, as disclosed above in Section 1. 4.List of third parties and affiliates with whom Consumer Health Data is shared: We may share Consumer Health Data to third parties such as: Other entities of Regeneron (including Regeneron Ireland Unlimited Company, Regeneron UK Limited, Regeneron GmbH, Regeneron Belgium BV, Regeneron France SAS, Regeneron Italy S.r.l, Regeneron Japan KK, Regeneron Spain, S.L.U. Regeneron Switzerland GmbH, Decibel Therapeutics, Inc., Regeneron Canada Company, Regeneron NL B.V., Regeneron Healthcare Solutions and Regeneron India Private Limited). Regeneron’s collaborators and alliance and co-promotional partners. Providers of health-related services. Health Insurance companies. Authorized/legal representatives, family members, caregivers; Third parties who provided benefits verification, program enrollment and product fulfillment services in connection with our products; Third parties who assist with our information technology; Third parties as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings); Our lawyers, auditors, and consultants; and Legal and regulatory bodies and other third parties as required by law. 5.How to exercise your rights: You may exercise your data subject rights, including obtaining access to and requesting changes to your Consumer Health Data via the following methods: Emailing DataProtection@Regeneron.com. Calling: 1-844-835-4137. Webportal: https://secure.ethicspoint.com/domain/media/en/gui/70931/index.html. Supplement to Consumer Health Data Privacy Policy for Nevada Consumers. This Supplement applies to Nevada Consumers for purposes of providing additional disclosures required by Nevada’s Consumer Health Data privacy law. Capitalized terms used in this Supplement are defined terms under Nevada’s Consumer Health Data privacy law and shall have the meanings set forth therein. Purposes & Manner of Processing. We Collect, use, Process, and Share Consumer Health Data for the purposes and in the manners described in our Consumer Health Data Privacy Policy, which also provides additional disclosures relevant to Nevada Consumers. Review & Revision of Consumer Health Data. If you would like to review and/or revise your Consumer Health Data, you may submit a request to us via the methods listed in our Consumer Health Data Privacy Policy. We will respond to your requests to exercise your rights in accordance with applicable law, but in any case no later than 45 days after receiving your request. We may extend this period up to 45 days only where doing so is permitted under applicable law. Changes to this Supplement. We will notify you before making any changes to our privacy practices with respect to your Consumer Health Data by posting an updated notice on this page, with an updated effective date. Third Party Collection of Consumer Health Data. Please note that some Third Parties may collect Consumer Health Data about you over time and across different websites or online services you may visit.