Privacy Notice

Version 1.0 - last updated 25 April 2023

Content

1. Who are we?

2. General information about this Privacy Notice

3. What personal data do we collect?

4. Why do we process your personal data?

5. How do we secure your personal data?

6. With whom do we share your personal data?

7. How long do we keep your personal data?

8. What are your rights?

9. Cookies and tracking

10. External links

11. How can you contact us for queries and complaints?

Welcome to the website of Excilor®. This is the Privacy Notice applicable to Excilor's website, accessible via the following link (the "Website"). Excilor is a trademark owned by Versailles B.V. ("Versailles”)

This Website is operated and managed by COOPERATION PHARMACEUTIQUE FRANCAISE en abrégé COOPER ("Cooper”) a limited liability company organized and existing under the laws of France, having its registered office at Place Lucien Auvert, 77020 Cedex, France, with company number 399 227 636 (RCS Melun).

Cooper and Versailles are part of the Cooper Consumer Health Group, a group of companies primarily active in the development, registration, manufacturing and marketing of consumer health medicines in Europe.

You can contact us by using the contact information provided in point 11 of this Privacy Notice.

• Purpose - This Privacy Notice is intended to inform the users of the Website ("you" or "your") about why and how we process your personal data, who your personal data may be shared with and what rights you have;
• Personal data - Through your visit to this Website, we may collect and process information about you as an identified or identifiable natural person ("personal data");
• Scope - This Privacy Notice applies to all processing of personal data carried out by or on behalf of Cooper in relation to the Website. Cooper is not responsible for websites of other companies of the Cooper Consumer Health Group;
• Role - Cooper is the data controller (within the meaning of the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, (the “GDPR”)) of the personal data collected and processed in the context of the services provided on this Website;
• Applicable data protection legislation - We understand that your privacy is very important. Therefore, we process your personal data only in accordance with the applicable privacy and data protection legislation;
• Governing law and jurisdiction - This Website and this Privacy Notice shall be governed by the laws of England. Any disputes arising out of or in connection with this Website and this Privacy Notice shall be submitted to the competent English courts;
• Changes - This Privacy Notice may be amended from time to time to possibly accommodate feedback or to reflect changes in our processing operations. It will always be the latest version of our Privacy Notice that applies. We therefore invite you to always check the latest version of this policy on our Website.

By using this Website, your personal data may be collected and processed by us, this will be the case when a) you choose to provide us with this information yourself; or b) by analysing your browsing behaviour on our Website.

Personal data provided by you

When you contact us

If you contact us via e-mail, contact forms or other means of communication, we may use your contact details, such as your name, e-mail address, telephone number or other relevant information, to respond to your request, question or comment.

We will only use your contact details to communicate with you and process your request. We may also store a copy of your communication for internal administrative purposes or to comply with legal obligations.

We will not share your contact details with third parties without your explicit consent, unless required by law. By contacting us, you consent to us using your contact details to contact you.

Special categories of personal data

Unless specifically requested or requested by us, please do not send or disclose to us sensitive personal data (also referred to as "special categories of personal data", e.g. data relating to racial or ethnic origin, political opinions, religion or philosophical beliefs, health or medical conditions, sex life or sexual orientation, criminal background, trade union membership, or biometric or genetic data).

If you send any sensitive data with us, please limit this to what is strictly necessary. We will only process this data on the basis of your explicit consent, the substantiation of a legal claim, or if necessary for reasons of substantial public interest or healthcare reasons and always in accordance with applicable data protection law.

When you subscribe to our newsletter or participate in promotional offers

If you subscribe to our newsletter or other promotional e-mails, we may use your e-mail address to periodically send you information, offers and updates on our products, services or events.

We will not share your email address with third parties for direct marketing purposes without your express consent. You may unsubscribe from receiving such emails at any time by following the unsubscribe link included in the emails you receive from us or by emailing us at the email address provided below.

Personal data relating to your browsing behaviour

The Website uses Google Analytics, a web analytics service. Google Analytics uses cookies, which are small text files placed on your device, to help us analyse the use of our Website. The information generated by the cookie about your use of the Website also falls under the concept of personal data.

You can find more information about our use of cookies and other tracking technologies under point 9. Cookies and tracking.

We process your personal data for the purposes described below and on the following legal bases:

Legitimate interests

We process your personal data if this is necessary to pursue our legitimate interests as a company. In doing so, we always ensure that there is a fair balance between the legitimate interest and your rights to privacy. In this case, you can always exercise your right to object to such processing (see point 8. below).

This includes processing operations carried out for the purpose of:

• Having to be able to function as a business
  • testing, evaluating, analysing and optimising our Website to improve the user experience and detect technical problems;
  • understand how our Website is used by collecting general statistical data (e.g. IP address, likely place of consultation, hour and day of consultation, which pages were visited) regarding the use of our services and the Website;
  • taking note of and responding to your requests, questions and comments for evidence purposes, quality control, coaching and training of our staff;
• Conducting internal audits and research on our products, services and to improve communication with our customers;
• Exercising and defending our rights (e.g. in legal disputes) and compiling evidence.

Execution of an agreement

We process some data because it is necessary in the context of the conclusion or performance of a contract. For example, when you visit our Website, we process certain personal data to allow you to use our Website or when the processing takes place in the context of providing the services you have requested (e.g. when you contact us to place an order).

Legal obligations

In certain cases, we may process your personal data based on a legal obligation. For example, based on tax and accounting legislation or to meet our legal obligations with regard to public health, we may be required to retain certain information.

Consent

In certain cases, we process your personal data on the legal basis of consent. This is in cases where that none of the previous legal bases can be used. You can withdraw your consent at any time (see point 8 below).

We will seek your consent for:

• sending our newsletter, you can unsubscribe from this at any time, this can be done on simple request by email or at the bottom of each email via the 'opt-out' choice;
• placing cookies or other tracking technologies on our Website to track your click and browsing behaviour (if not based on legitimate interests). (For more information on Cookies, see section 9. Cookies and tracking);
• You may also be asked for permission to process certain personal data in the context of certain promotional campaigns, providing feedback or if you use the contact form on our Website.

We take the security of your personal data very seriously, which is why we apply technical and organisational measures to protect the confidentiality, integrity and availability of your personal data and to prevent its unwanted loss, misuse, alteration or destruction, depending on the nature of the processing, the risk and the security means available..

1. In certain cases, we will partner with other companies, organisations or public authorities to perform our services. We may share your personal data with:
2. other entities in the Cooper Consumer Health Group;
3. Ceuta Healthcare Ltd who manages all our Customer Service queries for the UK. They will only keep your personal details for the duration needed to handle your query.
4. our third-party service providers to provide services such as website hosting, data analytics, Cloud providers, IT service providers, email service, auditing, legal service providers and other services;
5. service providers that support us in analysing your browsing behaviour on our Website (e.g. Google Analytics);
6. other companies we partner with for certain products or services;
7. in the event of a possible (partial) reorganisation, acquisition, merger, sale, joint venture, assignment, or other disposition of Cooper’s business (or any affiliated companies thereof), it may be that your personal data will be shared with an interested third-party acquirer or other third parties to the extent necessary to study, evaluate, negotiate and, if applicable, implement any reorganisation, acquisition, merger, sale, joint venture, assignment, or other disposition;
8. competent authorities authorised to retrieve your personal data or to whom we need to transfer your personal data, for example as a result of legal proceedings or court proceedings.
9. to the extent necessary in the context of medical surveillance, your personal data may be communicated to service providers and subcontractors in charge of managing medical surveillance files, as well as to third parties if we are obliged to do so by a law or a regulatory provision, and in particular: the health experts involved in medical vigilance, the national, Community and foreign public bodies in charge, in the exercise of their duties as defined by laws and regulations, of medical surveillance (the information collected may therefore be transmitted outside the European Economic Area for important reasons of public interest), the legal representatives of the products commercialised by Cooper or any affiliated companies thereof, and third-party laboratories whose products might be at stake, except for the identity of the non-health professional making the notification.
11. When we cooperate with external service providers who perform certain services on our behalf, we share only the personal data necessary to perform those services. We require these service providers to always take the necessary measures to store and process your personal data in a secure manner. Third parties with whom we share your personal data may only act on the basis of our instructions and may under no circumstances use your personal data for their own purposes.
12. We generally do not intend to transfer your personal data to countries outside the European Economic Area (this is European Union and additionally Iceland, Norway and Liechtenstein) or the list of countries that have received an adequacy decision by the European Commission (e.g. the United Kingdom). If we should nevertheless transfer your personal data to other countries that do not offer an adequate level of protection, we will take appropriate security measures so that such transfer complies with applicable data protection legislation.

We will retain your personal data no longer than necessary for the purpose for which it was collected, in accordance with applicable law. After fulfilling the intended purpose, we will delete or anonymise the personal data, unless further retention is required by law or for archival purposes.

If and to the extent provided for in the applicable data protection legislation on data protection (which contains several exceptions), you have the right:

• to obtain confirmation whether or not your personal data are being processed and, if so, you have the right to obtain further information about such processing, as well as the right to obtain a copy of your personal data (or, in some cases, to have your personal data transferred to another controller);
• to have incorrect personal data rectified and incomplete personal data completed;
• to object to the processing of your personal data if the processing was based on legitimate interests;
• to withdraw your consent if the processing was based on your consent (note that this does not affect the lawfulness of the processing that took place before the withdrawal of consent);
• to obtain the erasure of personal data that are not or no longer lawfully processed; and
• to suspend ("restrict") the processing of personal data in certain cases (e.g. while we assess whether we should indeed rectify or stop processing your personal data).

In the case of data collected to fulfil our legal obligations, you have no right to portability, deletion of your data or the right to object to processing.

You can find more information on how to exercise these rights under point 11.

Finally, you can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

1. During your visit to our Website, cookies or other tracking tools may be placed on your device. A cookie is a text file placed by a website's server in your computer's browser or on your mobile device when you consult a website.
2. Our Cookie Notice provides a more detailed explanation of our use of cookies (e.g. which cookies are used, their purposes, how to delete them, etc.) and can be accessed via this link

This Privacy Notice does not apply to external links within this Website to websites operated by third parties. We have no control over the content of these third-party websites or how these websites process your personal data. When you visit other websites, we recommend that you always read their Privacy Notice.

For questions or comments on this Privacy Notice or to exercise your rights under applicable data protection legislation, please contact us by sending an email to: donneespersonnelles@cooperconsumerhealth.com or by sending a letter to our address: Coopération Pharmaceutique Française – Direction Juridique – Place Lucien Auvert 77020 Melun Cedex, France.