Supplier Portal Elanco Corporate Site Elanco AH Global Privacy Center Your privacy is important to us. Elanco Animal Health Incorporated and its affiliates ("Elanco") has established a comprehensive privacy program, including a Chief Privacy Officer, designed to help us respect and protect your privacy rights. This Privacy Notice will let you know what Personal Data Elanco may collect, how we use it, how we protect it, and your rights and choices with respect to your Personal Data. Print Individual Rights Links California and Nevada Do Not Sell Request California Consumer Individual Rights Request International Individual Rights Request U.S. Individual Rights Request Europe Individual Rights Request Other Links and Resources Elanco Animal Health Privacy Shield Privacy Notice Elanco Applicant Privacy Notice California Privacy Notice Elanco Office Locations and Contact Details Elanco Animal Health Global Privacy Notice 1. Information Covered by This Privacy Notice 2. Personal Data We Collect and How We Use It 3. Information Collected through Cookies and Similar Technology 4. How we collect your Personal Data 5. Why we collect your Personal Data (Legal Basis for Processing) 6. Reasons Your Personal Data is Shared 7. How Long We Keep Your Personal Data 8. Children’s Information 9. Sensitive Personal Data 10. How We Secure Your Personal Data 11. International Transfers of Personal Data 12. Privacy Shield Certification 13. Your Rights & Choices 14. How to Contact Us 15. Additional Information 16. How to Submit a Complaint 17. Links to Third Party Websites 1. Information Covered by This Privacy Notice This Privacy Notice describes the privacy practices of Elanco and applies to all Elanco operations including: websites or digital services operated by us. software applications, including mobile. social media pages that we control. email messages that we send to you and other communications you have with us. Collectively, we refer to these operations as “Services” Back to Top ^ 2. Personal Data We Collect and How We Use It Elanco may collect Personal Data that either directly identifies you or could be used in combination with other information to identify you, to provide you the best experience possible when you interact with us. The information we collect may vary by geography/region or by your preferred method of interaction with us. The categories of personal data that we may collect include: Contact and Identification Information: We may collect information such as your name, contact details (e.g. phone numbers, address, or email) professional title, employer or professional affiliations, language preferences and passport and visa information. Account Information and Marketing Preferences: We may collect your account details and credentials for Elanco programs. We may also collect information about your marketing preferences. Purchase Information: We may collect information such as the products you have purchased. Internet & Network Activity: We may collect the Internet Protocol (“IP”) address automatically assigned to your computer or device each time you interact with us online. We also use cookies and related technologies to collect information related to how you interact with our Websites, Applications, and online content. We may collect the date and time of your visit, the pages you access and the amount of time you spend on each page, the type of Internet browser you use, your device’s operating system, your search terms on the Website, the URL of any websites that you visited before and after visiting our Websites (including the advertisement that referred you to our Website), and whether you click or interact with our digital content and advertising on other sites. When you access the Application or the mobile version of the Website, we collect your device, your device’s unique identifier, your mobile network information, and the type of browser you use. For information about how Elanco uses cookies and related technologies and how to disable such cookies and related technologies, please see Section 3. Location Information: We may automatically collect information about your precise geolocation when you access our website(s) or application(s) to the extent permitted by applicable law. We may also collect information about your general location using your IP address and your zip code. Demographic Information: We may collect demographic information, such as your gender, nationality, age, and date and place of birth. Biometric Information: We may collect biometric information, such as information used for facial recognition. Audio and Visual Information: We may record our customer service calls and security footage at our facilities, which may include your voice and/or image. Preferences and Interests: We may collect information about your interests and preferences to better understand products and services that might be of interest to you or to further develop a relationship or manage rebate and loyalty programs. Device Content: With your permission, we may collect information relating to the content on your device. For more information see Information Collected through Cookies and Similar Technology in Section 3. Back to Top ^ 3. Information Collected through Cookies and Similar Technology We partner with third-party service providers to collect information to engage in analytics, auditing, research, and reporting. These third parties may use server logs, web beacons, tags, pixels, and similar technologies, and they may set and access cookies on your computer or other device. Service providers or publishers may display ads for our products or services at unaffiliated third-party websites or mobile applications based on your online activities. We support self-regulatory programs for this practice, called interest-based advertising or online behavioral advertising. Please note that third party websites, at which you might see our ads have their own privacy statements and use technologies which we do not control. We encourage you to read those policies carefully. The information we collect automatically typically does not include Personal Data, but we may maintain it or associate it with Personal Data we collect in other ways or receive from third parties. Browser or Device We collect some data through your browser or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), operating systems name and version, device manufacturer and model, language, internet browser type and version and the name and version of the Online Services you are using. We use the data to ensure that our Services function properly. Web Browser Opt-Out. To opt out in web browsers, please visit http://optout.aboutads.info/ and http://optout.networkadvertising.org. To help preserve the choices that you make in the DAA's WebChoices page, you can install the DAA's “Protect My Choices” extension that is available at http://www.aboutads.info/PMC. Applications We collect information when you download and use an application, such as application usage data, the date and time the application on your device accesses our servers, and what data and files have been downloaded to the application based on your device number. We use this data to ensure that online Services function properly. Our applications may contain software development kits (SDKs) from third parties which may collect and transmit other information to enable various features in the application. We may also collect mobile device advertising identifiers to enhance and personalize your experience and deliver relevant products, content, or ads to show you on our website, applications, or external advertising. Mobile Application Opt-Out. To opt out in mobile applications, you can adjust the advertising preferences on your mobile device (for example, in iOS, visit Settings > Privacy > Advertising > Limit Ad Tracking, and in Android, visit Settings > Google > Ads > Opt out of interest-based ads). You can also opt out for companies that participate in the Digital Advertising Alliance's AppChoices tool by downloading it here and following the instructions in the app. For more information about opting out on mobile devices, please see here. Cookies We use a technology called a “cookie” to collect certain information. A cookie is a small data file that is stored directly on the computer or mobile device that you are using. We collect information such as browser type, pages visited, referring URL, language preferences, and other aggregated traffic data. We use functional cookies to obtain data for security purposes, to facilitate navigation, to display content more effectively, to collect statistical data, to personalize your experience while using our Services and to recognize your computer to assist your use of our Services. We also gather statistical cookie data about the use of our Services to continually improve design and functionality, understand how they are used, and assist us with resolving questions. Cookies can be placed on your computer both by us and by third parties with whom we have a relationship, such as web analytic service companies (discussed further below) and internet advertising networks. Advertising cookies further allow us to select which advertisements or offers that are most likely to appeal to you and display them to you. These cookies enable certain services we use, including advertising, visitor tracking, personalization, site analytics and security services, including reCAPTCHA, and the data may be disclosed to our vendors and other third parties with whom we have a relationship for these purposes. In addition, cookies may be used to remarket employment opportunities to you in the United States. With most internet browsers or other software, you can change your browser settings to erase cookies from your computer hard drive, block all cookies or receive a warning before a cookie is stored. Please check your browser instructions to learn about these functions. If you reject cookies, functionality of the site may be limited, and you may not be able to take advantage of many of the site’s features. If you would like to opt-out of, or manage, cookies used for targeted advertising, you may do so by following the options provided by the Network Advertising Initiative at: http://www.networkadvertising.org/choices/ and the Digital Advertising Alliance at: http://www.aboutads.info/choices/. Ads displayed to you using this technology will usually have an adchoices logo in the corner, which you can also click to begin the same opt-out process. Additionally, if you receive ads on a social media site (such as Facebook or Instagram), you can check that site’s privacy statement and terms of use to determine how to stop seeing such ads. Web Beacons and other similar technologies We use web beacons (also known as pixel tags, action tags and clear GIF technology), which allows the collection of web log information. A web beacon is a tiny graphic on a web page or in an e-mail message designed to track pages viewed or messages opened. Web log information is gathered when you visit one of our websites by the computer that hosts our website (called a “webserver”). We may use web beacons to help determine whether you opened an email message sent by us and whether a message was acted upon. Web beacons also help analyze the effectiveness of websites by measuring the number of visitors to a site or how many visitors clicked on key elements of a site. Social Media Plug-Ins Our website may use Social Media Plugins to enable you to easily share information with others. When you visit our website, the operator of the social media plugin that is on our website can place a cookie on your computer that lets that operator recognize individuals on their website who have previously visited our sites. If you have previously logged into the social media website while browsing on our website, social media plugins may allow that social media website to receive directly identifiable information about you that shows you have visited our website. The social media plugin may collect this information for visitors who have logged into social networks, whether or not they specifically interact with the plugin on our website. Social media plugins also allow the social media website to share information about your activities on our website with other users of their social media website. Elanco does not control any of the content from social media plugins. For more information about social media plugins from social media websites, you should refer to those sites’ privacy and data sharing statements. Third-Party and Digital Advertising We also partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, mobile apps, and devices. They may collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Facebook cookies or Google's Advertising ID), cross-device linking, and similar technologies. For example, our advertising partners may use the fact that you visited our website to target advertising to you on other websites and mobile apps on your current device or on other devices you use. They may match your browsers or devices if you log into the same online service on multiple devices or if your devices share similar attributes that support an inference that they are used by the same person or household. This means that information about your activity on websites or apps on your current browser or device may be combined and used with information collected from your other browsers or devices. For more information about interest-based advertising and cross-device linking, please visit the Network Advertising Initiative (“NAI”) website and the Digital Advertising Alliance (“DAA”) website. The European Interactive Digital Advertising Alliance provides a website where individuals can opt out of receiving interest-based advertising by some or all of the network advertising companies participating in the program. You can find information about the EIDAA here www.youronlinechoices.eu Please note that the opt-outs described above will apply only to the specific browser or device from which you opt out, and therefore you will need to opt out separately on all of your browsers and devices. If you delete or reset your cookies or mobile advertising identifiers, change browsers (including upgrading certain browsers), or use a different device, any opt-out cookie or tool may no longer work, and you will need to opt out again. Analytics. We collect data through Google Analytics, which use cookies and technologies to collect and analyze data about use of our Services. These services collect data regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/‌partners/ and opt out by downloading the Google Analytics opt out browser add-on, available at https://tools.google.com/dlpage/gaoptout . Your IP Address. We collect your IP address, a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP). An IP address is identified and logged automatically in our server log files when a user accesses our Services, along with the time of the visit and the pages that were visited. We use IP addresses to calculate usage levels, diagnose server problems and administer the Services. We also may derive your approximate location from your IP address. Aggregated Data. We may aggregate data that we collect, and this aggregated data will not personally identify you or any other user. Do Not Track There are different ways you can prevent tracking of your online activity. For example, you can set a preference on your browser that alerts websites you visit that you do not want them to collect certain information about you. This is referred to as a Do-Not-Track (“DNT”) signal. Please note that currently our website and web-based resources do not respond to these signals from web browsers. At this time, there is no universally accepted standard for what a company should do when a DNT signal is detected. Back to Top ^ 4. How we collect your Personal Data This Privacy Notice describes Elanco’s privacy practices for Personal and Other Data that we collect through the following: Online Services. We collect Personal (or other) Data when you interact with our Services, by performing such actions as, but not limited to, browsing, purchasing goods and services from our Websites or Apps, communicating with us, or otherwise connecting with us or post to social media pages, or signing up for a newsletter or participating in a survey, contest or promotional offer. Visits and Offline Interactions. We collect Personal Data when we visit your place of business. We also collect Personal Data when you attend promotional events that we host, sponsor, or in which we participate. Customer Service Centers. We collect Personal Data when you communicate with us by email, fax or via online chat services or contact customer service. These communications may be recorded for purposes of quality assurance and training. Rebate, Reminder and Loyalty Programs. We collect Personal Data when you participate in a rebate, reminder, or loyalty program. Other Sources. We collect Personal Data from other sources, such as public databases, joint marketing partners, and other third parties. Back to Top ^ 5. Why we collect your Personal Data (Legal Basis for Processing) Purpose Description Legal Basis Customer Relationship Management Includes activities such as providing farmers, veterinarians and pet owners (“Customer”) with tools to create value, promote companionship & human-animal bonds; Customers in rebate, reminder and loyalty programs and managing Customer account programs; provide business intelligence and analytics based on past usage; ensuring access to Services; communicate to Customers about changes to programs, terms, and conditions; and handling requests, inquiries, and complaints. Performance of Contract, such as providing rebates Consent, such as honoring the mode of communication preferences (e.g., email, SMS) Legitimate Interests, such as managing choices regarding reminder and rebate programs, Legal Obligations relating to products such as the obligation to maintain records Operations & General Business Includes activities such as managing loyalty programs, processing Customer orders; performing credit checks when applicable; awarding grants and donations; administering Customer-care services to facilitate and address inquiries, comments, and complaints about any of our products or services (such as in person, through phone lines, email, or on social media); handling security and fraud prevention; conducting research and development activities; administering online services (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and the hosting of data); monitoring and analyzing usage of services and using data analytics to improve services, marketing, programs, overall customer experience, gathering feedback, carrying out pilot programs for potential new services, and both developing new and improving existing services; and facilitating mergers, acquisitions, and other reorganizations and restructurings of our business (including prospective transactions). Performance of Contract, such as ensuring that online services are functioning so that individuals can submit rebates or manage reminder and loyalty programs Legitimate Interests, such as research and development activities; responding to customer complaints and concerns Consent, such as for marketing programs Legal Obligations, relating to prescription and products, such as the obligation to maintain books and records Commercial Activity: Speaking Engagements, Conferences & Event Management Includes activities such as: communicating with Customers about speaking engagements, conferences and other events; engaging product innovation and development, preparing for and coordinating events in accordance with Customer instructions and expectations; processing payments and expenses related to such events, handling customer requests, inquiries, and complaints; and communicating with participants during events. Performance of Contract, such as collecting information regarding a planned event Legitimate Interests, such as responding to customer complaints or concerns relating to an event Legal Obligations relating to products, such as the obligation to maintain books and records Legal & Compliance Includes activities such as complying with applicable laws, including contract management, reporting adverse events, anti-corruption due diligence ; complying with legal processes; responding to requests from public and government authorities; meeting national security or law enforcement requirements; enforcing our terms and conditions; protecting our operations; protecting the rights, privacy, safety, property, or Elanco employees, visitors, and other relevant individuals; and allowing us to pursue available legal remedies and limiting the damages that Elanco may sustain. Legal Obligations, such as complying with legal processes to report transfer of value, reporting adverse events Legitimate Interests, such as enforcing terms and conditions to protect trademarks Emergency, Incident Response & Security There are a number of activities associated with this purpose, such as: ensuring the security of on-site services; responding to, handling, and documenting on-site accidents and medical and other emergencies; actively monitoring Company sites to ensure adequate incident prevention, response, and documentation (including CCTV); requesting assistance from emergency services; and sending notifications and alerts in the event of incidents or emergencies (such as via SMS, email, call, audio-visual device prompts, etc.). Performance of Contract, such as ensuring the safety of employees and facility guests through interactions with on-site security personnel Legitimate Interests, such as monitoring facilities through CCTV to ensure the safety of employees and facility guests Legal Obligations, such as documenting on‑site accidents, documenting on-site visitors Individuals’ vital interests, such as contacting medical or emergency services for an employee or facility guest Marketing, Promotions, & Contests There are a number of activities associated with this purpose, such as: communicating about products and services that may be of interest; providing personalized advertisements for products and services on selected websites; facilitating participation in rebates, sweepstakes, contests, and other promotions; and handling customer requests, inquiries, and complaints. Performance of a Contract, such as fulfilling obligations associated with a contest Consent, such as honoring the mode of communication preferences (e.g., email, SMS) Legitimate Interests, such as providing advertisements for similar products and services Legal Obligations, such as handling information consistent with rules relating to rebates or sweepstakes Back to Top ^ 6. Reasons Your Personal Data is Shared We may share your Personal Data with our agents, contractors, or partners in connection with work that they do for, or with, Elanco, for example: Elanco Affiliates: We disclose Personal Data to Elanco affiliates for the purposes described in this Privacy Notice, such as providing Services, communicating with you, facilitating programs and to accomplish our business purposes. Service Providers: We disclose Personal Data to third party service providers to provide services such as sending email messages, managing data, hosting our databases, providing data processing services, providing customer service, or we may enhance or add data about you from these other entities. These agents, contractors or partners are restricted from using this data in any way other than to provide services for us, or services for the collaboration in which they are engaged with us (for example, some of our products are developed and marketed through joint agreements with other companies). Third Party Partners: We disclose Personal Data with other pharmaceutical companies who are our co-marketing, co-distribution, or other license partners of Elanco, where pharmacovigilance obligation for an Elanco product requires such exchange of safety information. We will share Personal Data to respond to subpoenas or other lawful information requests of governmental authorities, including to report adverse events, meet national security or law enforcement requirements, to provide Internet security, or where required by law. In exceptionally rare circumstances where national, state or company security is at issue, we reserve the right to share our entire database of visitors and customers with appropriate governmental authorities. We may also provide your Personal Data to a third party in connection with the sale, assignment, or other transfer of the business of a website to which the information relates, in which case we will require any such buyer to agree to treat Personal Data in accordance with this Privacy Notice. Back to Top ^ 7. How Long We Keep Your Personal Data Your Personal Data will be saved for the time needed to fulfil legitimate and lawful business purposes in accordance with our records retention policies and applicable laws and regulations. The criteria used to determine our retention periods include: The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you are engaged in a program or keep using our Services) Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them) Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation, or regulatory investigations) Back to Top ^ 8. Children’s Information Our website is not intended for or designed to attract children under the age of 13. Moreover, we do not knowingly collect Personal Data from any person under the age of 18 without the consent of a parent or guardian, when required by law, and you must be 18 years of age or older to submit your Personal Data on our website. Back to Top ^ 9. Sensitive Personal Data Elanco collects Government Issued Identification numbers and other sensitive Personal Data in the ordinary course of its business. Elanco has implemented reasonable technical, physical, and administrative safeguards to help protect this information and other sensitive Personal Data from unlawful use and authorized disclosure. All Elanco workers are required to follow these established procedures, both online and offline. In particular: Access to Government Issued Identification numbers is limited to those workers and service providers who have a need to access the information to perform tasks for Elanco. Government Issued Identification numbers are only disclosed to third parties in accordance with Elanco’s established privacy policy. We will only disclose Government Issued Identification numbers with those service providers, auditors, advisors, and/or successors in interest who are legally or contractually obligated to protect them, or (ii) as required or permitted by law. Back to Top ^ 10. How We Secure Your Personal Data We provide reasonable physical, electronic, and procedural safeguards to protect Personal Data collected via this website. For example, we limit access to this information to authorized employees, service providers, and contractors who need access to perform the activities described in this notice. Although we strive to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches. Back to Top ^ 11. International Transfers of Personal Data Our sites are owned and operated by Elanco US, Inc. in the United States, but the Personal Data you provide may be accessible to our affiliates, vendors, and suppliers in other countries. Like most international businesses, we have centralized certain aspects of our data processing activities in accordance with applicable laws, which, in many instances, will result in the transfer of your Personal Data from one country to another. The jurisdictions where that information will be processed may or may not have laws that seek to preserve the privacy of Personal Data. Nevertheless, whenever your Personal Data is transferred within Elanco, your Personal Data will be processed in accordance with the terms and conditions of this Notice and applicable laws. A list of the Elanco Affiliates to which your Personal Data may be transferred, and the jurisdictions in which those entities are located, can be found [here]. Additionally, some of the third-party suppliers to which we transfer your Personal Data may be based in different locations, some of which may have lower standards of data protection than in your home country. When we do transfer Personal Data to such third parties, we ensure appropriate safeguards are in place, and oblige those third parties to protect your Personal Data in accordance with the terms and conditions of this Notice, with appropriate security measures. These third-parties broadly fall into two groups: (i) locally-provided suppliers supporting individual Elanco Affiliates, who may operate in any of the countries in which Elanco operates; or (ii) centrally-procured service providers, supporting Elanco as a whole, who may be located in our major business locations, in particular the United States (where we are headquartered). Where required, Elanco implements Standard Contractual Clauses approved by the EU Commission, or similar contractual clauses in other jurisdictions. This includes transfers to suppliers or other third parties. Back to Top ^ 12. Privacy Shield Certification While the EU-U.S. Privacy Shield Framework may no longer be used or relied upon for transfer of Personal Data, Elanco continues to comply with all EU-U.S. Privacy Shield Framework obligations and have certified to the EU-U.S. and Swiss-U.S. Privacy Shield frameworks , regarding the collection, use, and retention of Personal Data transferred from the EEA, Switzerland, and the United Kingdom to the United States. Our certifications can be found at: www.privacyshield.gov/list . For more information about the Privacy Shield principles, please visit: www.privacyshield.gov . Our Privacy Shield Guest Privacy Policy can be found Here. As explained in the “How to Contact Us” Section, if you have any questions or complaints about our handling of your Personal Data under the Privacy Shield or other appropriate transfer framework, or you want to view your Personal Data that Elanco U.S. processes and request the correction, amendment or deletion of such data, please contact us by completing an Individual Rights Request Form Or in the United States you call Elanco toll-free at 1-888-545-5973 Or email privacy@elancoAH.com Back to Top ^ 13. Your Rights & Choices You have the right to request information from us on how your Personal Data is being used and with whom that information is being shared. You also have the right to see and get a copy of the Personal Data that we have about you. If you believe any of this information to be inaccurate or incomplete, you have the right to request its correction or erasure. Communications and Preferences If you no longer wish to receive marketing-related emails, you can use the unsubscribe link at the bottom of any of our communications or you can submit a request using our Individual Rights Links at the top of this page. In addition, in the United States, you can opt out from marketing-related emails by calling 1-888-545-5973. How You Can Request to Access, Change, Delete, Restrict the Use or Object to the Processing of Your Personal Data If you would like to request to access, change, delete, restrict the use of, or object to the processing of your Personal Data that you have previously provided to us, or if you would like to receive an electronic copy of your Personal Data for purposes of transmitting it to another company (to the extent these rights are provided to you by law), please visit our Individual Rights Links at the top of this page.. If you have any questions about the form or our process, feel free to contact us at privacy@elancoAH.com. For your protection, we only fulfill requests for the Personal Data associated with the email address that you identify in your request, and we may need to verify your identity before fulfilling certain requests. When permitted by law, we may charge an appropriate fee to cover the costs of responding to your request. Elanco acknowledges and respects our Customers’ privacy, and we will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Notice for California Residents: Customers who reside in California and have provided their Personal Data to us can request, once per calendar year, information about our sharing of certain categories of Personal Data to third arties and within Elanco, for direct marketing purposes. Such requests can be made using the Individual Rights Links at the top of this page. California residents can make additional requests and/or further restrict processing of their Personal Data by completing and Individual Rights Request. Find more information on exercising your rights under the CCPA by reading our California Notice in the Resources section at the top of this page or by calling 1-888-545-5973. Notice for Nevada Residents: To exercise your individual rights under the Nevada Privacy Law (NRS Ch. 603A, Sec. 2(2)), please use the Individual Rights Links at the top of this page to restrict the sale of your Personal Data. Portal for US Residents (Non-California), please use the Individual Rights Links at the top of this page to exercise your privacy rights. Portal for Non-US Residents, please use the Individual Rights Links at the top of this page to exercise your privacy rights. If you have given us consent in relation to particular action or activities, you can withdraw your consent at any time by contacting us as indicated in Section 14 below. Back to Top ^ 14. How to Contact Us If you have any questions about this Privacy Notice or your individual rights, you can submit a request using one of our Individual Rights forms (link to IR Links), contact us at privacy@elancoAH.com or in the United States, call Elanco toll-free at 1-888-545-5973 Back to Top ^ 15. Additional Information DATA CONTROLLER Elanco acts as an independent Data Controller. Elanco Affiliates: have a limited right to use certain Personal Data for their own purposes and therefore qualify as independent Data Controllers in order to comply with their own legal obligations, including maintaining books & records. You can also contact our data protection officer responsible for your country or region via privacy@elancoAH.com. In your email, please indicate the country from which you are contacting us. Back to Top ^ 16. How to Submit a Complaint In compliance with the Privacy Shield Principles, Elanco Animal Health Incorporated commits to resolve complaints about our collection or use of your Personal Data. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Elanco Animal Health by completing an Individual Rights Request Or for the United States, you can call Elanco toll-free at 1-888-545-5973 Or email privacy@elancoAH.com Elanco Animal Health has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU and Switzerland in the context of the employment relationship. If, after attempting to address a privacy question or concern with Elanco directly by contacting us using the contact information listed above, you still have a specific privacy concern that has not been resolved; you may choose mediation of that concern by the neutral third party, American Arbitration Association. Submit your unresolved privacy concern to the American Arbitration Association at: American Arbitration Association Case Filing Services 877.495.4185: Toll free 877.304.8457: Fax casefiling@adr.org http://go.adr.org/privacyshield.html With respect to Personal Data originating in the EU, EEA or Switzerland, you may also have the option to select binding arbitration for the resolution of your complaint under certain circumstances. For more information on binding arbitration, see US Department of Commerce’s Privacy Shield Framework: Annex I [Binding Arbitration] at https://www.privacyshield.gov/article?id=ANNEX-I-introduction. Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection laws occurs at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080 . Back to Top ^ 17. Links to Third Party Websites As a convenience to our visitors, this website may contain links to other sites owned and operated by third parties that we believe may offer useful information. The policies and procedures we describe here do not apply to those sites. We are not responsible for the collection or use of Personal Data at any third-party sites. Therefore, we disclaim any liability for any third party’s use of Personal Data obtained through using the third-party website. We suggest contacting those sites directly for information on their privacy, security, data collection, and distribution policies. Back to Top ^ California Privacy Notice California Consumer Privacy Notice Pursuant to the California Consumer Privacy Act of 2018 (CCPA), Elanco Animal Health Inc. (“Elanco”) is providing the following additional details regarding the categories of Personal Data about California residents that we have collected or disclosed within the preceding 12 months: PERSONAL DATA WE COLLECT Elanco collects the following categories of Personal Data: A. Identifiers, such as name, nationality, passport, visa or other government-issued identification data, and online identifiers; B. Personal Data, as defined in the California safeguards law, such as name, contact information, and financial information; C. Characteristics of protected classifications under California or federal law, such as gender, age, medical conditions, primary language, national origin, citizenship, and marital status; D. Commercial information, such as transaction information, purchase history, financial details, payment methods, and reminder, rebate, or loyalty program data. In more limited circumstances Elanco may also collect the following categories of Personal Data: E. Biometric Information F. Internet or network activity information, such as browsing history and interactions with our and other websites and computer systems; G. Geolocation data, such as device location and IP location; H. Audio, electronic, visual, and similar information, such as images and audio, video or call recordings created in connection with our business activities; I. Inferences drawn from any of the Personal Data listed above to create a profile or summary about, for example, an individual’s preferences and characteristics. Elanco acquires this information directly from you, as well as from other sources, including through our Services, and Visits and Offline Interactions, Customer Service Centers, Rebate, Reminder and Loyalty Programs, Public Databases, and Joint Marketing Partners (Capitalized terms in this paragraph as used throughout this Policy are further defined in the Elanco Animal Health Inc. Global Privacy Notice). USE OF PERSONAL DATA Elanco may use this Personal Data to operate, manage, and maintain our business, to provide our products and services, for vendor management purposes, and to accomplish our business purposes and objectives, including, for example, using Personal Data to: develop, improve, and maintain our products and services; personalize, advertise, and market our products and services; conduct research, analytics, and data analysis; maintain our facilities and infrastructure; undertake quality and safety assurance measures; conduct risk and security control and monitoring; detect and prevent fraud; perform identity verification; perform accounting, audit, and other internal functions, such as internal investigations; comply with law, legal process, and internal policies; maintain records; and exercise and defend legal claims. DISCLOSURE OF PERSONAL DATA We disclosed the following Personal Data to third parties (for our operational business purposes) Category of Personal Data Disclosed Categories of Recipients Identifiers, such as name, nationality, passport, visa or other government-issued identification data, and online identifiers • Elanco Affiliates • Service Providers • Third Party Advertisers • Governmental Agencies (if required) Personal Data, as defined in the California safeguards law, such as name, contact information, employment, employment history, and financial information • Elanco Affiliates • Service Providers • Governmental Agencies (if required) Characteristics of protected classifications under California or federal law, such as gender, age, medical conditions, primary language, national origin, citizenship, and marital status • Elanco Affiliates • Service Providers • Governmental Agencies (if required) Commercial information, such as transaction information, purchase history, financial details, payment methods, and rebate, reminder memberships or loyalty program data • Elanco Affiliates • Service Providers • Third Parties (for purposes of Promotional activities). • Governmental Agencies (if required) Biometric Information • Service Providers • Governmental Agencies (if required) Internet or network activity information, such as browsing history and interactions with our and other websites and computer systems • Elanco Affiliates • Service Providers • Third Party Advertisers • Governmental Agencies (if required) Geolocation data, such as device location and IP location • Elanco Affiliates • Service Providers • Governmental Agencies (if required) Audio, electronic, visual and similar information, such as images and audio, video or call recordings created in connection with our business activities • Elanco Affiliates • Service Providers • Governmental Agencies (if required) Inferences drawn from any of the Personal Data listed above to create a profile or summary about, for example, an individual’s preferences and characteristics • Elanco Affiliates • Governmental Agencies (if required) For purposes of this Privacy Notice, “sold” or “sale” means the disclosure of Personal Data for monetary or other valuable consideration but does not include, for example, the transfer of Personal Data as an asset that is part of a merger, bankruptcy, or other disposition of all or any portion of our business. For the categories below, Elanco sells the information solely for the purposes of Marketing and Promotion. Third Party Advertising. If you opt-in to marketing and advertising cookies through our Cookie Banner, or change your cookie preferences to accept marketing and advertising cookies, we will disclose information about you (as set forth in the table above) to third party advertising companies. We use third party advertising companies to place ads on other websites, including network advertising companies with whom we work who place their own cookies on your browser when you visit our website. This enables these third-party advertising companies to collect and use data from their cookie on your browser, which may include information about your visits to this and other websites. These advertising companies use this information to deliver advertisements about our goods and services to you when you are on other websites. These advertisements will often be tailored to you. These advertisers may in turn disclose the information about you collected from their cookies to other advertisers to allow those advertisers to display ads to you as well. Under the CCPA, these additional disclosures by the third party advertising companies may be considered a sale of Personal Data. Notice of Financial Incentive. Elanco does not offer financial incentives in exchange for the collection or sale of CA Personal Data. However, we do provide discounts and incentives to individuals who use our products and services and enroll in incentive programs that we offer from time to time; enrolling in these programs requires you to provide certain of your CA Personal Data so that we may administer the programs and, in some cases, provide marketing and advertising to you. Under CCPA, this could be considered an offer of a “financial incentive” and so we provide this notice to you to describe our practice and to provide a good faith estimate of the value of your CA Personal Data that we may collect related to the programs. In the normal course of our business, we do not assign monetary or other value to personal information, but in accordance with CCPA, we make a good faith estimate that the value of the CA Personal Data collected and used is equivalent to the value of the discount or financial incentive we provide in these programs. To make this good faith estimate, we may consider among other factors, the (i) categories of CA Personal Data collected, (ii) the discount or incentive offered, (iii) the sales or use of our products and services by those who enroll versus those who do not, and (iv) the cost and expenses we incur in offering the programs. The incentive programs require you to opt-in to participate as set forth on the page where you can enroll or opt-in to the programs. You can opt-out either by contacting us at the information set forth below, or by following the terms and conditions provided when you are enrolling in the program. While we will not discriminate against you for exercising your rights under CCPA, if you request deletion of your CA Personal Data, we may not be able to delete such information if it is necessary to administer the incentive or discount you requested and still provide you such incentive or discount. Elanco does not sell your CA Personal Data and we do not sell the CA Personal Data of individuals under 16 years of age. CALIFORNIA INDIVIDUAL PRIVACY RIGHTS If you are a California resident, you may request that we: Disclose to you the following information covering the 12 months preceding your request: • The categories of Personal Data we collected about you and the categories of sources from which we collected such Personal Data; • The specific pieces of Personal Data we collected about you; • The business or commercial purpose for collecting or selling (if applicable) Personal Data about you; • The categories of Personal Data about you that we sold and the categories of third parties to whom we sold such Personal Data (if applicable); and • The categories of Personal Data about you that we otherwise shared or disclosed, and the categories of third parties with whom we shared or to whom we disclosed such Personal Data (if applicable). Right of Access | Right to Notice. If you are a California resident, you have the right to request that Elanco disclose to you: the categories of Personal Data we have collected about you, the categories of sources from which the Personal Data is collected, the business purpose or commercial purpose for collecting or selling Personal Data, the categories of third parties with whom we share Personal Data, the categories of Personal Data we have disclosed about you for a business purpose. a copy of the specific pieces of Personal Data we have collected about you in the preceding 12 months. Right to Deletion. If you are a California resident, you have the right to request that Elanco delete the Personal Data we collect from you. However, in certain situations we are not required to delete your Personal Data, such as when the information is necessary in order to complete the transaction for which the Personal Data was collected, to provide a good or service requested by you, to comply with a legal obligation, to engage in research, to secure our websites or other online services, or to otherwise use your Personal Data internally in a lawful manner that is compatible with the context in which you provided the information. Right Not to Be Subject to Discrimination. Elanco shall not discriminate against a consumer because the consumer exercised any of the consumer’s California rights described above. Authorized Agent If you would like an authorized agent to make a request on your behalf, the agent may do so us via the Individual Rights Request Form or by calling 1-888-545-5973. Upon receipt of a request by an agent, Elanco will ask the consumer for written, signed permission that the agent has been authorized by the consumer to act on their behalf. Once written authorization is provided, Elanco will open a request for the consumer in the portal. Elanco will respond directly to the individual email address provided by the authorized agent regarding the fulfillment of the request, and not in a platform or portal. Opt out of any future “sale” of Personal Data about you by clicking [Do Not Sell My Information] To exercise any of the CCPA rights described above, you can complete an Individual Rights Request Form. Or call us at 1-888-545-5973 Or email privacy@elancoAH.com. Changes to Our Privacy Practices We may update this Privacy Notice from time to time. When we do update it, for your convenience, we will make the updated notice available on this page. Elanco encourages you to review this page regularly for any changes. The continued use of this website will be subject to the then-current Privacy Notice, and we will always handle your Personal Data in accordance with the Privacy Notice in effect at the time your Personal Data was collected. Last Updated: 28 February 2021 Back to Top ^ Our Company We Are Elanco Our Journey Culture and Values Our People Healthy Purpose The Foundation Resources Contact Suppliers Our Expertise R&D Services Counterfeit Products What's Happening News Expert Insight Events Employee Blog Coronavirus Join Elanco Search Jobs Graduate Program Why Work For Elanco Wellbeing & Benefits Investor Relations Overview Stock Information Financials Filings Investor Resources Events Governance About Elanco Learn why we're a leading provider of innovative solutions that protect and enhance animal health. Read About Elanco Connect with Elanco Country selector US Privacy Statement Terms of Use Sitemap Safety Data Sheets Newly Acquired Safety Datasheets Elanco and the diagonal bar logo are trademarks of Elanco or its affiliates. © 2021 Elanco.