Aurobindo Pharma Foundation (henceforth referred as ‘APF’), a philanthropic arm of Aurobindo Pharma Limited is committed to protecting the privacy and security of your information. The protection of your privacy in the processing of your personal data is an important concern to which we pay special attention during our operations. We process personal data collected during visits to our website according to the legal provisions valid for the countries in which the websites are maintained. This privacy notice describes the information about you that APF collects through this site, how that information is used, maintained, shared, protected and how you can update it. It also applies to all personal data received by APF from the European Economic Area (“EEA”) in any format, including electronic or paper. It is effective on the date posted below and applies to our use of your information after that date.

1. Personal data we collect about you

We collect personal data from you, for example, if you register for an event or request information. We may ask you to provide information such as your name, address, zip code, phone number, email address, job title, IP Address, and information about your device. Not all of the personal data APF holds about you, will always come directly from you. It may, for example, come from your employer, other organizations to which you belong. We may use a third-party service provider to assist us with some features of our site. Our service provider will receive your information on our behalf and will not be permitted to use it for any other purpose.
We may also ask you for personal data in connection with other interactions you have with this Site, including when you answer a survey and when you report a problem with this site or services offered on this site.
We may also collect personal information from third parties such as our partners, service providers, and publicly available websites, to offer services we think may be of interest and to help us maintain data accuracy, provide, and enhance the services.
We may also collect special categories of personal data such as information concerning health when you report a problem with this site or services offered by us.

2. How we use your personal data

We can only use your personal data if we have a proper reason for doing so. According to the law, we can only use your data for one or more of these reasons:

• To fulfil a contract we have with you, or
• If we have a legal duty to use your data for a particular reason, or
• When you consent to it, or

• To respond to your requests;
• To send communications to you about our or our affiliates’ current services, new services or promotions that we are developing, and opportunities that may be available to you;
• To alert you to new features or enhancements to our services
• To ensure that our site and our services function in an effective manner for you;
• To measure or understand the effectiveness of advertising and outreach.
• Marketing and events: We use personal information to deliver marketing and event communications to you across various platforms, such as email, telephone, text messaging, direct mail, and online. If we send you a marketing email, it will include instructions on how to opt out of receiving these emails in the future. We also maintain email preference centers for you to manage your information and marketing preferences. Please remember that even if you opt out of receiving marketing emails, we may still send you important Service information related to your accounts and subscriptions.
• Legal obligations: We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of a crime; loss prevention; or fraud. We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate:
• Under applicable law, which may include laws outside your country of residence;
• To respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence;

3. When we share personal data

APF shares or discloses personal data when necessary to provide services or conduct our business operations.
APF may, with your consent, disclose information about you to unaffiliated third-party customers of APF in connection with opportunities advertised on our website For example-

• We occasionally collaborate with other organizations to deliver co-branded Services, provide content, or to host events, conferences, and seminars. As part of these arrangements, you may be associated with APF and our partners, and our partners and we may collect and share information about you. APF will handle personal data in accordance with the privacy notice.

4. Our third-party service providers:

We collaborate with and are supported by service providers around the world. Personal data will be made available to these parties only when necessary to fulfil the services they provide to us, such as software, system, and platform support; cloud hosting services; advertising; and order fulfilment and delivery. Our third-party service providers are not permitted to share or use personal data we make available to them for any other purpose than to provide services to us.

• Third parties for legal reasons: We will share personal data when we believe it is required, such as: To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence.
  In the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings) To protect our rights, users, systems, and Services.

5. Where we store and process personal data

Your personal data may be stored and processed outside. We take steps to ensure that the information we collect is processed according to this Privacy notice and the requirements of applicable law wherever the data is located. APF has networks, databases, servers, systems, support, and help desks located throughout our offices around the world. We collaborate with third parties such as cloud hosting services, suppliers, and technology support located around the world to serve the needs of our business, workforce, and customers.
We take appropriate steps to ensure that personal data is processed, secured, and transferred according to applicable law. In some cases, we may need to disclose or transfer your personal data within APF or to third parties.
When we transfer personal information from the European Economic Area to other countries in which applicable laws do not offer the same level of data privacy protection as in your home country, we take measures to provide an appropriate level of data privacy protection. In other words, your rights and protections remain with your data. For example, we use approved contractual clauses, multiparty data transfer agreements, intragroup agreements, and other measures designed to ensure that the recipients of your personal information protect it.

6. How we secure personal data

APF takes data security seriously, and we use appropriate technologies and procedures to protect personal information. Our information security policies and procedures are closely aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet our organisational needs, changes in technology, and regulatory requirements.
For example:
Policies and procedures: APL employs reasonable technological, physical, and operational security procedures intended to protect your Personal data from loss, misuse, alteration, or unintentional destruction. Our security measures are periodically reviewed and updated in an effort to provide appropriate security for all the data collected about you through this Site.
We place appropriate restrictions on access to personal data
We implement appropriate measures and controls, including monitoring and physical measures, to store and transfer data securely
Training for employees and contractors
We require privacy, information security, and other applicable training on a regular basis for our employees and contractors who have access to personal data and other sensitive data
We take steps to ensure that our employees and contractors operate in accordance with our information security policies and procedures and any applicable contractual conditions.
We require, with contracts and security reviews, our third-party vendors and providers to protect any personal data with which they are entrusted in accordance with our security policies and procedures

7. Cookies

From time to time, we may, like many other commercial websites, use a standard technology called a “cookie”. A cookie is a small text file that is placed on a computer or other device and is used to identify the user or device and to collect information. Cookies are typically assigned to one of four categories, depending on their function and intended purpose: necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes. A cookie cannot retrieve any other data from your hard drive, pass on computer viruses, or capture your e-mail address. Currently, websites use cookies to enhance the user’s visit; in general, cookies can securely store a user’s ID and password, personalize home pages, and identify which parts of a site have been visited. It is possible to set your browser to inform you when a cookie is being placed. This way you have the opportunity to decide whether to accept the cookie. By showing how and when our visitors use this Web site, this information can help us to improve our site on a continual basis.

8. Children

This site is not intended to collect or maintain personally data from persons under 13 years old. IF YOU ARE UNDER 13 YEARS OF AGE, PLEASE DO NOT USE OR ACCESS THIS SITE. If APF learns that personally identifiable information of a person under 13 years old has been collected without verifiable parental consent, then APF will take the appropriate steps to delete such information.

9. Your rights and your personal data

We respect your right to access and control your information, and we will respond to requests for information and, where applicable, will correct, amend, or delete your personal information.
In such cases, we will need you to respond with proof of your identity before you can exercise these rights.

• The right to access information: At any point you can contact us to request the information we hold on you as well as why we have that information, who has access to the information and where we obtained the information from. Once we have received your request, we will respond within one month.
• There are no fees or charges for the first request but additional requests for the same data may be subject to an administrative fee.
• The right to correct and update the information: If the data we hold on you is out of date, incomplete or incorrect, you can inform us, and your data will be updated.
• The right to have your information erased: If you feel that we should no longer be using your data or that we are illegally using your data, you can request that we erase the data we hold. When we receive your request we will confirm whether the data has been deleted or the reason why it cannot be deleted (for example because we need it for our legitimate interests or regulatory purpose(s).
• The right to object to processing: You have the right to request that we stop processing your data. Upon receiving the request, we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data. Even after you exercise your right to object, we may continue to hold your data to comply with your other rights or to bring or defend legal claims.
• The right to data portability: You have the right to request that we transfer some of your data to another controller. We will comply with your request, where it is feasible to do so, within one month of receiving your request.
• The right to withdraw your consent: to the processing at any time for any processing of data to which consent was sought. You can withdraw your consent easily by email, or by post (see Contact Details below).
• The right to object to the processing: of personal data where applicable.
• The right to lodge a complaint: with the Data Protection officer at dpo@aurobindo.com
• How long do we keep your personal data?

We retain personal information for as long as we reasonably require it for legal purposes. In determining data retention periods, APF takes into consideration local laws, contractual obligations, and the expectations and requirements of our customers. When we no longer need personal information, we securely delete or destroy it.
Changes to Our Privacy notice
APF may update privacy notice from time to time. We encourage you to check our site frequently to see the current privacy notice so that you may stay informed of how APL is using and protecting your information. Whenever a change to this notice is significant, we will place a prominent notice on this site and provided an updated effective date.
Questions/Contact Information
If you have questions or comments regarding this privacy notice, please contact us, or at:
Address: Aurobindo Pharma Foundation, Galaxy, Floors: 22-24, Plot No. 1, Survey No. 83/1, Hyderabad Knowledge City, Raidurg Panmaktha, Ranga Reddy District, Hyderabad, Telangana, India – 500081
Email: dpo@aurobindo.com
Effective Date: 8th August 2023