SCOPE INFORMATION WE COLLECT AND HOW WE USE IT COOKIES AND SIMILAR TECHNOLOGIES REASONS YOUR INFORMATION IS SHARED HOW LONG WE KEEP YOUR INFORMATION HOW WE SECURE YOUR INFORMATION TRANSFER OF PI INTERNATIONALLY CHILDREN’S INFORMATION YOUR RIGHTS AND CHOICES HOW TO CONTACT US HOW TO SUBMIT A COMPLAINT LINKS TO THIRD PARTY WEBSITES CHANGES TO OUR PRIVACY PRACTICES GENERAL PRIVACY AND COOKIE POLICY Scope Your privacy is important to us. This Privacy and Cookie Policy (“Privacy Statement”) is intended to let you know what information Eli Lilly and Company Limited (“Lilly” or “we”) may process (e.g. collect, record, organize, structure, store, adapt or alter, retrieve, consult, use, disclose by transmission, disseminate or otherwise make available, align or combine, restrict, erase or destroy), how we protect it, and your rights and choices with respect to your Personal Information (“PI”). This Privacy Statement applies to websites that link to this statement when you click on "Privacy Statement" in the website footer, as well as mobile applications and digital services that link to or post this Privacy Statement. In this Privacy Statement, we will refer to the websites, Apps, and Digital Services that may link to or post this Privacy Statement as “websites.” Information We Collect and How We Use It Summary: This website may collect PI that either directly identifies you or could be used in combination with other information to identify you. Examples of PI that directly identify you include your name, contact information, email address, and other information in combination with identifiers. Our websites may also collect PI that does not directly identify you by name or contact information but which may be used to identify that a specific computer or device has accessed our website. Through this website we may collect the following information about you: Contact information: This might include information such as your name, address, telephone number, e-mail address, and other similar information. We collect this information so that we can communicate with you. You may always refuse to provide PI to us, but then we may not be able to provide you with certain information, products, or services. Additional Information: Certain areas of our websites allow you to share additional PI with us. For example, you may subscribe to one of our mailing lists or newsletters. We may use the information you provide to send your requested information, respond to your inquiry, improve our websites, verify your relationship with us, and take other actions that may be necessary to respond to your request. Interests and preferences: This information lets us better understand how to best serve you based on your interest in our products and services. This information may include your preferences about how to contact you, further develop a business or professional relationship, understand product preferences, languages, marketing preferences and some demographic data. Some of this information we collect with your consent and some of this information we collect automatically for our legitimate business purposes. Website Usage: We use this information to manage and secure our websites, network systems and other assets. This may include information about your IP (“Internet Protocol”) address, the date and time of your website session, geographic location, and how you have navigated the website, and other information collected through our weblogs, cookies or in other ways. This may also include information that does not directly identify you but which corresponds to your device. It is possible that your IP Address, or a cookie that we use, may contain information that may be considered PI. How we use Cookies and other technologies is described in more detail below. This information is collected automatically, for our legitimate business purposes. We may also use the information to meet legal or regulatory obligations, such as adverse event reporting or to enforce our rights; and for company record retention, website management, research and product development that are in the legitimate interest of Lilly. If you are a caregiver or a Healthcare Professional, Lilly recommends that you inform patients when you report an adverse event/product complaint relating to them. Where permitted by law, we may also enhance or merge information about you, including PI, with information about you obtained from third parties for the same purposes shared above. Your information may also be used for profiling for the same purposes shared above. You may object to profiling via automated decision making by contacting us using the information in the “How to Contact Us” section below. Cookies and Similar Technologies Web beacons On certain web pages or in emails we send to you, we may utilize a technology called a “web beacon” (also known as an “action tag” or “clear GIF technology”), that allows the collection of web log information. A web beacon is a tiny graphic on a web page or in an e-mail message designed to track pages viewed or messages opened. Web log information is gathered when you visit one of our websites by the computer that hosts our website (called a "webserver"). We may use web beacons to help determine which email messages sent by us were opened and whether a message was acted upon. Web beacons also help analyze the effectiveness of websites by measuring the number of visitors to a site or how many visitors clicked on key elements of a site. Cookies This website may use a technology called a "cookie". A cookie is a small data file that a website can place on your computer’s hard drive, where your internet browser files are kept. A cookie saves you the trouble of reentering certain information in some registration areas because cookies can be used to enable a site to “remember” information a visitor has previously inputted. A cookie also helps deliver content used -specific information to you and track how sections of the website are used. Cookies can be placed on your computer both by us and by third parties with whom we have a relationship, such as web analytic services and advertising network services. With most Internet browsers or other software, you can change your browser settings to erase cookies from your computer hard drive, block all cookies, or receive a warning before a cookie is stored. Please check your browser instructions to learn more about these functions. If you reject cookies, functionality of the site may be limited, and you may not be able to take advantage of many of the site's features. Do Not Track There are different ways you can prevent tracking of your online activity. One of them is setting a preference in your browser that alerts websites you visit that you do not want them to collect certain information about you. This is referred to as a Do-Not-Track (“DNT”) signal. Please note that currently our websites and web-based resources do not respond to these signals from web browsers. At this time, there is no universally accepted standard for what a company should do when a DNT signal is detected. Choices about Cookies If you would like to opt-out of, or manage, cookies used for targeted advertising, you may do so by following the options provided by the Network Advertising Initiative and the Digital Advertising Alliance. Ads displayed to you using this technology will usually have an AdChoices logo in the corner, which you can also click on to begin the same opt-out process. Additionally, if you receive ads on a social media site, you can check that site’s privacy statement and terms of use to determine how to stop seeing such ads. The European Interactive Digital Advertising Alliance keeps a website where people can opt out of receiving interest- based advertising from some or all of the network advertising companies participating in the program. You can find information about the EIDAA here www.youronlinechoices.eu. Google Analytics Google Analytics may be used to help make our website work better and to help us understand what parts of the website are being utilized. Google Analytics uses technical tools such as, First-party cookies and JavaScript code, to collect information about visitors. Google Analytics service tracks visitors to the site who have JavaScript enabled. Google Analytics anonymously tracks how visitors interact with a website, including where they came from and what they did on a site. Google Analytics collects the information set forth above from users. This information is used to administer and update the website, and we will also assess whether the visitors to the site match the expected site demographics and determine how key audiences are navigating the content. First-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) will be used to report how your ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to visits to this site. A. Opt-Out Provision: Google analytics offers an opt-out provision for website visitors who do not want their data to be collected. You can receive more information about this option here: http://tools.google.com/dlpage/gaoptout B. Google's Use of Data: Google and its wholly owned subsidiaries may retain and use, subject to the terms of its Privacy Policy (located at http://www.google.com/privacy.htmlor such other URL as Google may provide from time to time), information collected in your use of the Google Analytics Information Disclosures and Sharing. Social Media Plugins Our websites may use Social Media Plugins to enable you to easily share information with others. When you visit our websites, the operator of the social media plugin that is on our website can place a cookie on your computer that lets that operator to recognize individuals on their website who have previously visited our sites. If you have previously logged into the social media website while browsing on our website, social media plugins may allow that social media website to receive directly identifiable information about you that shows you have visited our website. The social media plugin may collect this information for visitors who have logged into social networks, whether or not they specifically interact with the plugin on our website. Social media plugins also allow the social media website to share information about your activities on our website with other users of their social media website. Lilly does not control any of the content from social media plugins. For more information about social plugins from social media websites you should refer to those sites’ privacy and data sharing statements. Reasons Your Information is Shared We may share your PI with our agents, contractors or partners in connection with work that they do for, or with, Lilly, such as sending email messages, managing data, hosting our databases, providing data processing services, providing customer service, or so may enhance or add data about you from these other entities. These agents, contractors or partners are restricted from using this data in any way other than to provide services for us, or services for the collaboration in which they are engaged with us (for example, some of our products are developed and marketed through joint agreements with other companies). We will share PI to respond to subpoenas or other lawful information requests of governmental authorities, including to meet national security or law enforcement requirements, to provide Internet security, or where required by law. In exceptionally rare circumstances where national, state or company security is at issue, we reserve the right to share our entire database of visitors and customers with appropriate governmental authorities. We may also provide your PI to a third party in connection with the sale, assignment, or other transfer of the business of a website to which the information relates, in which case we will require any such buyer to agree to treat PI in accordance with this Privacy Statement. How Long We Keep Your Information Your PI will be saved for a period of time needed to fulfill legitimate and lawful business purposes in accordance with our records retention policies and applicable laws and regulations. How We Secure Your Information We provide reasonable physical, electronic, and procedural safeguards to protect PI collected via this website. For example, we limit access to this information to authorised employees, service providers, and contractors who need access to perform the activities described in this notice. Although we strive to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches. Transfer of PI Internationally Lilly may transmit PI about you to other Lilly affiliates worldwide. These affiliates may in turn transmit PI about you to other Lilly affiliates. Some of Lilly’s affiliates may be located in countries that do not ensure an adequate level of data protection. Nevertheless, all of Lilly’s affiliates are required to treat PI in a manner consistent with this notice. To obtain additional information regarding the basis for transfers that Lilly has in place for cross-border transfers of PI (which may include consent, Standard Contractual Clauses, existing adequacy decisions, etc.), please contact us at privacy@lilly.comor visit https://www.lilly.com/privacy Children’s Information This site is not intended for or designed for individuals under the age of 18. We do not knowingly collect PI from any person under the age of 18 unless a parent or guardian provides consent. Your Rights and Choices Upon verification of your identity, and as applicable by law, you have the right to: request: information from us on how your PI is being processed, and with whom it is being shared to see and get a copy of the PI that we have about you that we correct, restrict the processing of, and/or erase/delete your PI to have your information transmitted to another entity or person in a machine-readable format, in limited circumstances object to the processing of your PI. object to profiling via automated decision-making, if such profiling is conducted. There may be exceptions that apply to your request. To exercise your rights, you or your authorized representative may submit a request to: datarights@lilly.com. You will not be discriminated against for exercising any of your rights. How to Contact Us You may make any of the above requests by contacting us at: Global Business Solutions Center Eli Lilly Cork Limited Island House Eastgate Road Eastgate Business Park Little Island Co. Cork, Ireland Phone: +353-21-423-2400 Kinsale Manufacturing Operations Eli Lilly Kinsale Limited Dunderrow Kinsale Co. Cork Ireland Phone: +353-21-477-2699 Sales and Marketing Eli Lilly and Company (Ireland) Limited Lilly House Basing View Basingstoke Hampshire RG21 4FA, UK Phone: +44 (0) 1256 315000 You may also contact us at the above if you have questions about this Privacy Statement. How to Submit a Complaint If you wish to raise a complaint on how we have handled your PI, you can contact our Data Protection Officer at privacy@lilly.comwho will investigate the matter. If you are not satisfied with our response or believe we are processing your PI not in accordance with the law you can register a complaint with a Data Protection Authority (DPA). Links to Third Party Websites As a convenience to our visitors, this website may contain links to other sites owned and operated by third parties that we believe may offer useful information. The policies and procedures we describe here do not apply to those sites. We are not responsible for the collection or use of PI at any third party sites. Therefore, we disclaim any liability for any third party's use of PI obtained through using the third party web site. We suggest contacting those sites directly for information on their privacy, security, data collection, and distribution policies. Changes to Our Privacy Practices We may update this Privacy Statement from time to time. When we do update it, for your convenience, we will make the updated statement available on this page. We will always handle your PI in accordance with the Privacy Statement in effect at the time it was collected. We will not make any materially different use or new disclosure of your PI to another entity using your PI for its own purposes unless we notify you and give you an opportunity to object. PP-MG-IE-0055 Aug 2021 Copyright © 2021 Eli Lilly and Company Terms and Conditions Accessibility Statement