Pfizer California Health Care Professionals Privacy Notice

We collect and disclose for our business purposes the following categories of personal information:

• Name, Contact Information, and Identifiers, such as your alias, telephone numbers, email address, physical address, online identifier, Internet Protocol address, account login credentials and passwords, or other similar identifiers. Financial and Banking Records, such as information that you provide to us to pay you for services and provide reimbursement for professional fees, travel, accommodation and out of pocket expenses.
• Protected Classifications, such as characteristics of protected classifications under applicable state or federal law such as race, color, sex, gender, age, national origin, disability, and citizenship status.
• Commercial Information, such as health care topics about which you request information from us and your travel preferences.
• Usage Data, such as internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement.
• Audio/Visual Information, such as professional photographs as well as your image and voice for both online and recorded events.
• Professional/Employment-Related Information, such as data related to your licensures, specialties, professional affiliations (e.g., memberships in medical societies or HCP networks), publications, credentials, and other professional achievements.
• Education Information, such as information about where you attended school.
• Sensitive Information, such as your social security number, passport number, or other similar government identifier, and your account login credentials and passwords.
• Profiles and Inferences, such as inferences drawn to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

We disclose the above categories of personal information to Pfizer Inc.’s subsidiary companies and service providers for our business purposes.

In the course of your business relationship with Pfizer, we may collect the categories of personal information described above directly from you, automatically through your use of our online products and services, and from third parties:

Information We Collect Directly From You. We collect personal information you choose to provide, e.g., when we meet with you; when you participate in our programs, activities, industry events, or trade shows; or in connection with your inquiries and communications with us. For example, HCPs may choose to provide information relating to their specialties and professional affiliations.

Information We Collect Automatically. We automatically collect personal information when you access online products or services that Pfizer offers, such as the information described above as “Usage Data.”

Information We Collect From Other Sources. We may collect personal information about you from third parties, such as data companies providing information services in the healthcare sector; publicly accessible sources of professional information; and joint marketing partners. For example, we may use such third party information to confirm contact or financial information or to verify your license.

We may use the categories of your personal information described above for the following business purposes:

• For Business Administration Purposes. We use your information to manage our relationship with you, to provide and maintain our products and services, to conduct training and ensure quality control, and for other business administration purposes. For example, we may use your information to manage the terms and conditions that govern our relationship with you (e.g., medical events face-to-face or online, publications, advisory meetings, etc.). We may also use your information to, where applicable, pay you for defined or agreed upon services or to reimburse your expenses.
• To Interact and Engage With You. We may use your information to process and fulfill your requests, to communicate with you about your interaction with us, and to respond to your inquiries. For example, we may use your information to create and maintain an HCP database, so that we can identify and engage with you as a scientific expert or key opinion leader in various health care fields based on your professional expertise and opinions. We may also use your information to invite you to attend congresses/panels, HCP professional meetings and educational activities, or to reach out to you for your professional expertise by communicating information about our products through our professional representatives or in the context of surveys relating to pharmaceutical products or services.
• To Improve Our Services. We may use your information for purposes of analyzing and predicting HCP preferences in order to identify aggregated trends to develop, improve or modify our products, services, and business operations.
• Identification and Authentication Purposes. We use your information for identification and authentication purposes. For example, we may use your information to verify your eligibility to access certain products, services, and data that may be provided only to licensed HCPs, or to otherwise conduct background checks to ensure that we are not precluded from working with you. We may also use your information for authentication purposes when you enter your login ID and/or password to enter one of our registration or login portals.
• Marketing and Promotional Purposes. We may use your information to tailor the content and information that we send or display to you to your professional area and interests, and to otherwise personalize your experience when you interact with us. We may also use your information to send you news and newsletters, event updates, and to communicate with you about scientific and health matters, including by providing you with tailored advertising on third-party digital properties.
• To Comply With Legal Obligations. We may use your information where we believe necessary to comply with our legal obligations or to exercise or defend our rights or the rights of a third party, including complying with law enforcement or government authority requests and participating in compliance audits. For example, we use your information to comply with our regulatory monitoring and reporting obligations, including those related to adverse events, product complaints, and product safety, as well as to comply with our anti-corruption and transparency obligations.
• To Protect Us and Others. We may use your information where we believe necessary to investigate, prevent, or take action regarding suspected or actual illegal activities, misconduct, fraud, situations involving potential threats to the safety of any person or to otherwise protect and enforce our rights, privacy, safety or property, and/or those of our affiliates, you, and others.
• In Aggregated or Deidentified Form. We may aggregate and/or de-identify data about you and use it for any purpose, including product and service development and improvement activities. To the extent we deidentify any data originally based on personal information, we will maintain and use such data only in deidentified form and will not attempt to reidentify the data.

We may disclose each of the categories of personal information described above for our business purposes as follows:

• Affiliates. We may disclose the information we collect about you to our subsidiaries and affiliated entities for the purposes set forth in this Notice.
• Service Providers. We may disclose the information we collect about you to service providers, contractors, and agents who perform functions and business operations on our behalf, for the purposes set forth above. For example, we engage service providers to help us with customer service and support, auditing, email and SMS, data analytics, web hosting and development, fulfillment, and data technology and related infrastructure that allows us to organize and stream online conferences. We may also disclose your information to data companies that provide information services in the healthcare sector to help us confirm that your data remains up-to-date and accurate.
• Business Partners. We may disclose your information to our business partners, including companies with which we collaborate regarding joint development, distribution, and/or marketing of particular products and services.
• Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected about you to the other company. As part of the business transfer process, we may disclose certain of your information to lenders, auditors, and third party advisors, including attorneys and consultants. We may also disclose your information to companies that were formerly wholly or partly included in the Pfizer family of companies to whom we provide services during a transition period following separation.
• In Response to Legal Process. We may disclose your information where we believe necessary to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.
• To Protect Us and Others. We may disclose your information where we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Notice, or as evidence in litigation in which we are involved.
• Aggregate and Deidentified Information. We may disclose aggregate, anonymized, or deidentified information about you for any purpose permitted under applicable law.

When you visit our digital properties (e.g., Pfizer Pro), we may disclose (1) identifiers, such as device identifiers and your IP address; (2) commercial information, such as health care topics about which you request information from us; and (3) usage data, such as information associated with your online browsing activities, with advertising and joint marketing partners to deliver tailored advertising to you on third-party digital properties. These disclosures may be considered a “sale” of personal information or “sharing” of personal information for cross-context behavioral advertising, as those terms are defined under applicable California law. You may opt out of such disclosures by clicking Do Not Sell or Share My Personal Information in the PfizerPro.com footer located at the bottom of the webpage and disabling marketing cookies. We do not knowingly “sell” personal information or “share” personal information for cross-context behavioral advertising for individuals under 16 years old. We do not use or disclose sensitive personal information for purposes other than permitted under applicable local law.

Subject to certain exceptions, you have the right to make the following requests, at no charge:

• Copy: You may request, up to twice every 12 months, a copy of the specific pieces of personal information that we have collected, used or disclosed about you in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows you to transmit this information to another entity without hindrance.
• Correct: You may request correction of your personal information that we have collected about you if it is inaccurate or incomplete.
• Deletion: You may request deletion of your personal information that we have collected about you.
• Know: You may request that we provide you certain information about how we have handled your personal information, including the:
  • categories of personal information collected;
  • categories of sources of personal information;
  • business and/or commercial purposes for collecting your personal information;
  • categories of third parties/with whom we have disclosed or shared your personal information; and
  • categories of personal information that we have disclosed or shared with a third party for a business purpose.
• Opt-Out: You may request to opt-out of disclosures that would be considered “sales” or “sharing” under applicable California law.

You have the right to be free from unlawful discrimination for exercising your rights under applicable state law.

Submitting Requests

You may submit requests to delete, correct, access a copy and/or know personal information we have collected about you by accessing our webform at www.pfizer.com/individualrights, or by contacting us at 833-991-1933 (toll free). You will be asked to provide certain personal information when submitting your request including your relationship with Pfizer, first and last name, email address, telephone number and postal address in order for us to determine if your information is in our systems.

We will further verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you, such as your date of birth or government identifier, in order to protect against fraudulent or spoofed requests. If you want to make a request as an authorized agent on behalf of an individual under applicable local law, you may use the submission methods noted above. As part of our verification process, we may request that you provide us with proof that you have been authorized by the individual on whose behalf you are making the request under applicable local law, which may include signed permission provided by such individual.

If you would like to exercise your right to opt out of “sales” or “sharing,” please click here: Do Not Sell or Share My Personal Information and disabling marketing cookies. We also recognize the Global Privacy Control (GPC) to allow you to exercise these opt out rights. For more information on the GPC, how to enable it, and how to use a browser or browser extension incorporating the GPC signal, see https://globalprivacycontrol.org/. If you visit our websites with a browser transmitting GPC, we will opt you out of “sales”/“sharing”. If you visit our website using a browser that does not transmit GPC or using a browser or device that you have not associated with an opt-out preference, click the Do Not Sell or Share My Personal Information link above to register your opt-out preference.

You may update your personal information and your preferences. Different programs and services may offer different phone numbers, links or preference managers that allow you to inform us of your updates and choices, including opting out of particular communications. These contact options are typically in the emails or texts we send, but you may always contact our Privacy Officer for assistance at Privacy.Officer@pfizer.com if you have any difficulty finding these tools or otherwise updating your data or preferences. Please remember that limited communications may be necessary in order to complete your transaction or for you to participate in a particular program or service.

We will retain your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and as outlined in this Notice. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position (such as in regard to the enforcement of the contractual terms and conditions that govern our relationship with you, applicable statutes of limitations, litigation or regulatory investigations).

If you have questions about this Notice, please contact us by emailing privacy.officer@pfizer.com, or write to the following address:

Pfizer Inc.
Privacy Officer
66 Hudson Boulevard East
New York, NY 10001

This Notice is current as of the Effective Date set forth above. We may change this Notice from time to time, so please be sure to check back periodically. If we make any changes to this Notice that materially affect our practices with regard to the information, we have previously collected about you, we will endeavor to provide you with notice in advance of such change by highlighting the change on the Pfizer website or by sending you an email.