COVID-19 Update for Current Intragastric Balloon Patients ORBERA® OVERSTITCH™ X-TACK™ INVESTORS CONTACT US COMPANY GDPR Privacy Policy Protecting the security and privacy of your personal data is important to Apollo Endosurgery. Therefore, Apollo Endosurgery Inc. and its subsidiaries (“APOLLO ENDOSURGERY”) operate its websites in compliance with applicable laws on data privacy protection and data security. In the following, we provide information on the kinds of data we collect on APOLLO ENDOSURGERY’s websites, the purposes for which we use such data, and the parties with which we share such data, where applicable. BY USING OUR WEB SITES, APPLICATIONS, OR SERVICES YOU AGREE TO THE TERMS OF THIS DATA PRIVACY POLICY. IF YOU SUBMIT INFORMATION TO US YOU CONSENT TO THE COLLECTION, USE AND DISCLOSURE OF THAT INFORMATION IN ACCORDANCE WITH THIS DATA PRIVACY POLICY. Collected data and purpose of processing We employ cookies on Apollo Endosurgery websites. You will find additional information on this subject in our Cookie Policy. In addition, we collect personal data (e.g., names, telephone numbers, or e-mail addresses) in connection with the operation of APOLLO ENDOSURGERY’s websites and business only when you have voluntarily provided such data to us (e.g., through registration, contact inquiries, surveys, etc.) and when we are entitled to process or use such data by virtue of permission granted by you or on the basis of a statutory provision. As a general rule, we use such data only for the purpose for which you released the data to us, such as to answer your inquiries, grant you access to certain information or offerings, or provide you with information about our products or related services. Sharing of data Insofar as you have provided your consent or when we are otherwise legally entitled to do so, we will share your personal data with other APOLLO ENDOSURGERY subsidiaries, where applicable, for the purposes indicated above. In connection with the operation of its website and the services provided by way of the website, APOLLO ENDOSURGERY works with service providers such as hosting or IT maintenance service providers, for example. These recipients may possibly be located in countries outside of the European Economic Area, in which applicable laws do not offer the same level of data privacy protection as in your home country. In such cases, APOLLO ENDOSURGERY takes measures to ensure an appropriate level of data privacy protection. Data is shared only in connection with and in compliance with applicable laws and regulations. We do not sell or otherwise market your personal data to third parties. Links to Other Websites APOLLO ENDOSURGERY’s websites may contain links to other websites. We are not responsible for the privacy practices or the content of other websites. Questions and comments APOLLO ENDOSURGERY will respond to all legitimate requests for information and where applicable, to correct, amend, or delete your personal data. If you wish to make such a request or if you have questions or comments about this Data Privacy Policy, please contact us at: GDPR@ApolloEndo.com. This Data Privacy Policy is updated from time to time. The date of the last update was May 16, 2018. Home Directions for Use Patent Notices Terms of Sale Website Terms of Use Privacy Policy MKT-01085-00R06 © 2021 Apollo Endosurgery, Inc.