Privacy Policy

BeiGene is committed to respecting and protecting the privacy of your personal information.

The data controller of your personal information (i.e. the entity that determines how your personal information is used) under this Privacy Policy is BeiGene, Ltd., unless:

• a different entity was identified in other privacy policies or information notices, or
• you are interacting with or providing services to another BeiGene entity.

In those instances, the other entity that was identified or you are interacting with or providing services to will be the controller.

This Privacy Policy is directed at

• visitors and users of BeiGene’s websites, products and services (excluding participants in a clinical trial or other research*), individuals within our former, current and prospective clients, partners, vendors, consultants, contractors, service providers and any members of the general public who communicate with us, who provide BeiGene, Ltd. and/or its subsidiary companies (“BeiGene”, “we”, “us”, “our”) with personal information and/or whose personal data we receive.

*- If you are a participant in a BeiGene sponsored clinical trial or other research and have questions about how your personal data is handled or your rights in relation to that research, please see the copy of the Patient Information Sheet And Informed Consent Form that you received.

This Privacy Policy describes how BeiGene uses the personal information we collect about you and how to exercise your rights.

As you read this Privacy Policy, please keep in mind the following important information about how this Privacy Policy applies:

1. This Privacy Policy contains specific sections that may not be applicable to you because of where you are located or the type of personal information we maintain about you.
2. This Privacy Policy may be complemented or supplanted by other privacy policies or information notices that tell you how your personal information is used and disclosed in certain other contexts. To the extent that those policies or notices are provided, posted and/or referenced, that different privacy policy or notice, and not this one, will apply to the processing of your personal information.
3. Our websites, web portals, mobile applications or other digital services (together, our “websites”) may contain links to third-party websites that we do not operate, control or endorse. Once you leave our websites, we are not responsible for the protection and privacy of any information you provide.  We suggest reading the privacy policies of these third-party websites and if needed, contacting those websites directly for information about their privacy practices.

We may collect and use your personal information in a variety of contexts, including when you participate in BeiGene research, take our drugs or therapies, or visit our websites or offices. Depending on your relationship or interactions with BeiGene, in the past twelve (12) months, BeiGene may have collected and processed any of the following categories of personal information about you:

The potential recipients are further described in the SHARING YOUR PERSONAL INFORMATION section of this Policy.

Certain information (such as, if applicable, your payment-related information, government-issued identification, geolocation information, health, biometric and genetic information) may be considered sensitive personal information under applicable laws. We will:

• take appropriate measures to protect and process your sensitive personal information; and
• provide notices and/or obtain your explicit consent for processing your sensitive personal information where required by applicable laws.

Furthermore, our websites automatically collect the following information through cookies and other data collection technologies:

The provision of certain types of personal information may be necessary or optional. Mandatory information will be marked as such at the moment of collection of your personal information. If you refuse to provide the mandatory information, BeiGene may not be able to process your request.

In most cases, we collect your personal information directly from you, such as when you contact us via phone or in person, complete a form or survey, provide services, register for an account or request to receive marketing materials and information.

Sometimes, we may also obtain personal information about you from other sources who you direct or authorize to share information with us, such as authorized representatives or affiliated organizations, our research partners, collaborators and service providers. We also sometime collect information from publicly accessible sources such as government records, websites, social media and other digital platforms.

In addition, if you use our websites, we may collect information from your computer or other device through our use of cookies and other data collection technologies. For more information on cookies and other data collection technologies, please read the Cookies Policy applicable to the website you are accessing.

The ways we process your personal information depend on why we collected it. Depending on your relationship and/or interactions with BeiGene, as well as, applicable laws and our own procedures & requirements, BeiGene may process your personal information for the following reasons:

We do not undertake decisions based solely on automated processing of your information, including profiling, unless we inform you as required by applicable laws.

We may share your personal information within BeiGene and with third parties with whom we have contracted or as otherwise permitted by applicable law. The type of information we share, our purposes for sharing it and the contractual measures we implement depends on the role of the third party. We do not, however, sell the personal information that we collect.

We retain your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless required by our legal obligations to retain it for longer. To determine the appropriate retention period for information, we consider the amount, nature and sensitivity of information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, whether we can achieve those purposes through other means and all applicable global legal, regulatory, and compliance requirements.

In particular, any information collected for your subscription to an email alert or newsletter will be kept until you unsubscribe and information you provide via your requests will be kept a least until their complete processing. We will keep a record of your unsubscribe request, if any, for as long as is necessary to comply with that request.

In addition to this, BeiGene will keep your personal information during:

• the statute of limitation, if needed for evidence purposes;
• the applicable legal retention periods, in particular regarding commercial, compliance and regulatory matters, or any other mandatory retention period (such as legal hold or investigation).

BeiGene operates in many countries around the world and your personal information may be accessible to or shared with our affiliates, service providers, partners, collaborators and regulators in various countries for the purposes specified in this Privacy Policy. The laws in certain countries may not provide the same level of protection as the laws in your country or region. 10 When that is the case and as required by applicable laws, we take steps to protect your transferred information, such as entering into contracts with recipients of your information or implementing additional data safeguards.

While we have established reasonable physical, electronic and managerial procedures to protect your personal information from unauthorized access and disclosure, we cannot guarantee its absolute security. You should take special care in deciding what information you transmit, upload, send or otherwise submit to us.

We take seriously our obligations under applicable laws concerning the collection of information from or about children. We do not intend to direct our websites to individuals under the age of 16 (“children”) and we do not knowingly collect personal information directly from children through our websites. We request that children do not use our websites or provide any information to us through our websites or otherwise, unless we have first obtained a parent or guardian’s consent, where applicable.

You may choose not to provide your personal information to us; however, in doing so, you may not be able to continue your relationship or interactions with us or use certain services, e.g., patient support services.

At any time, you can choose to opt out from our marketing communications by using the unsubscribe feature in any marketing email you have received. If you unsubscribe from marketing, we may still send you email communications that are relationship or transactional in nature.

Under certain laws such as GDPR, California Consumer Privacy Act of 2018 (CCPA), California Privacy Rights Act of 2020 (CPRA) or China’s Cybersecurity Law (including its implementing regulations and national standards), you may have the following rights with respect to your personal information:

• Your right of access. You may have the right to ask us to provide clear, transparent and understandable information on how we process your personal information, as well as for copies of your personal information. There are some exemptions, which means you may not always receive all the information we process.
• Your right to rectification. You may have the right to ask us to rectify information you think is obsolete or inaccurate and the right to ask us to complete information you think is incomplete.
• Your right to deletion of your personal information. You may have the right to ask us to delete your personal information in certain circumstances.
• Your right to restriction of processing. You may have the right to ask us to restrict the processing of your personal information, during a limited period of time, in certain circumstances.
• Your right to object to processing. You may have the right to object to processing, in which case, BeiGene will no longer process your personal information unless BeiGene demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, such as compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
• Your right to data portability. You may have the right to ask that we transfer the information you gave us from one organization to another or give it to you.
• Right to withdraw your consent. If we process your personal information based on your consent, you have the right to withdraw your consent, without this withdrawal affecting the lawfulness of the processing operations previously carried out.
• Right to close your account. If you receive our services through online accounts, you have the right to close your accounts. We will then delete or anonymize your personal information associated with your accounts, unless otherwise permitted under applicable laws.

Depending on your country of residence and the country where the BeiGene entity processing your personal information is established, you may have additional local rights with respect to our processing of your personal information. Please note that some of the personal information that we collect, use and disclose may be exempt from the rights outlined above.

You can submit your request by sending us an email at privacy@beigene.com.

We will respond to your requests within the time period prescribed by applicable laws. Under certain circumstances, BeiGene may ask you for specific information to confirm your identity and ensure the exercise of your rights. This is a security measure to safeguard personal information. We will notify you when your request is completed, if we deny your request to exercise your rights (because, for example, an exception applies), or if there is a fee associated with processing your request.

You may designate an authorized agent to exercise your rights on your behalf. In such case, we will also need to verify your agent’s identity and obtain proof of your authorization. We may need to deny a request from an agent whose identity or authorization we cannot verify.

If you believe that BeiGene has processed information in a manner that is unlawful or breaches your rights, or has infringed applicable laws, you may have the right to complain directly to your local data protection authority. Without limiting any rights to complain directly to an authority, we are committed to protecting personal information, and complaints may be made directly to us.

We will not discriminate against you for exercising any data subject right you have under applicable law.

GENERAL CALIFORNIA PRIVACY NOTICE

If you are a California consumer, in the past twelve (12) months we may have collected the categories of personal information about you described in the CATEGORIES OF PERSONAL INFORMATION PROCESSED BY BEIGENE section of this Policy. That information was collected for the purposes described in the WHY WE PROCESS YOUR PERSONAL INFORMATION section of this Policy and may have been shared with the third parties identified in the SHARING YOUR PERSONAL INFORMATION of this Policy.

You can exercise your data subject access rights as described in the YOUR CHOICES AND RIGHTS section of this Policy by sending us an email at privacy@beigene.com or you may also call us tollfree at (888) 344-1789. Some of the personal information that we collect, use, and disclose may be exempt from the CCPA and the CPRA because it is regulated by other federal and state laws that apply to us.

We do not sell personal data of California consumers.

We are required to comply with the European Union’s and the United Kingdom’s General Data Protection Regulations(“GDPR”), Switzerland’s Federal Act on Data Protection (FADP) and similar applicable local laws with regardsto certain personal information we collect. The data controllers of your personal information are the BeiGene entities referenced when we collect your personal information. Please contact us if you have any questions about the controller or controllers of your personal information.

Sensitive data

We process special categories of information (e.g., sensitive information that reveals racial or ethnic origin or genetic, biometric and health information) only where you give us your explicit consent, or when our processing is for scientific research purposes, necessary to meet a legal or regulatory obligation, in connection with the establishment, exercise or defense of legal claims, or is otherwise expressly permitted by law.

If we need to collect your personal information by law or under the terms of a contract we have with you and you do not provide the requested information, we may not be able to perform the contract we have, or are trying to enter into, with you.

Data transfers

BeiGene is a multi-national company with offices in the United States, China, Switzerland, Australia and elsewhere. As such, BeiGene may transfer or provide access to your personal information to affiliates, service providers or collaborators in these countries and others that do not provide the same level of protection as your own country. When we do so, in the absence of an adequacy decision concerning the recipient country, we rely on safeguards such as approved model contracts (for example the EU’s standard contractual clauses or the UK’s international data transfer agreement), after having carried out an assessment of the level of protection of your rights on the territory of the third country where the recipient of your personal information is established. For more information about BeiGene’s use of the model contracts, please contact us.

Your rights

Rights you may have under the GDPR with regards to the personal information we collect and maintain about you are described in the section YOUR CHOICES AND RIGHTS. Under the GDPR, the exercise of these rights may be limited or delayed dependent upon the legal basis for processing the data, for example:

Cookies, pixel tags, and other trackers (hereinafter “Cookies”) are small files that allow for storing or retrieving information on your browser or your device (computer, tablet, mobile, etc.) when visiting online services. Cookies are widely used by websites, mobile applications, software or emails. When you first visit our websites and again if you delete the Cookies or the Cookies expire or change, you will be asked which Cookies you consent to.

Cookies do not recognize you personally, but rather the device you use. Cookies simply give information about your browsing activities in order to recognize the device later on in order to improve the browsing experience, save your preferences or even adapt the services offered to you on the Websites. To find out 14 more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org

We may use the following types of cookies on our websites:

• Necessary Cookies, which enable the proper functioning of the Websites (security, facilitate browsing, display of the webpages…). You may disable these by changing your browser settings as described below. If you do so, you will still be able to navigate the Websites, but some of the Websites’ functions will be affected;
• Analytics Cookies, which are used to collect information about how visitors use our websites to improve the Websites by collecting information on how you interact with the Websites;
  • The cookies collect information in a way that does not directly identify anyone, rather they collect information in an aggregated or generalized statistical form, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.
  • One of the analytic cookies we use is Google Analytics. Google’s overview of privacy practices and data safeguards is available at: https://support.google.com/analytics/answer/6004245. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
• Social Media Cookies, which enable you to interact with social plugins on the Websites and share content on social networks; and
• Advertising Cookies, which enable the placement of advertisements, to measure their effectiveness and to adapt their content to your browsing and your profile.

Most web browsers allow some control of most cookies through the browser settings. For example, there are simple procedures in most browsers that allow you to delete existing cookies. If you want to set your computer or mobile web browser to reject all cookies by default, please visit the home page for your browser for instructions. If you reject all Cookies, you may still use our Websites; however, this may affect the functionality of some areas of our Websites.

In addition, your Internet Protocol (IP) address (an identifying number that is automatically assigned to your computer by your Internet Service Provider) is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use the IP addresses of all visitors to the Site to calculate Site usage levels, to help diagnose problems with the Site servers, and to administer the Sites. We may also use IP addresses to communicate with or block access by visitors who fail to comply with our Terms of Use.

We do not track our website users over time or across third party websites to provide targeted advertising. At this time, we do not respond to “Do Not Track” signals from your web browser due to the lack of an established industry standard. For more information about “Do Not Track” signals, please visit https://allaboutdnt.com/.

You may contact us at any time if you have questions or concerns about this Privacy Policy or our practices. Please send an email to privacy@beigene.com.

We will endeavor to respond to your request as soon as reasonably possible in compliance with applicable laws.

To protect your privacy and security, we take reasonable steps to verify your identity before granting access or making corrections. Note that despite any requested removal of or change to your information there may be residual information that will remain within our databases and other records.

We strive to accommodate all individuals regardless of disabilities. If you need to receive the information contained in this document in a different format, please contact us at privacy@beigene.com.

We aim to regularly update this Privacy Policy to reflect our practices. Therefore, we recommend you to periodically review this Privacy Policy. In case of material changes, we may take steps to notify you before they become effective.

BeiGene is committed to respecting and protecting the privacy of your personal data. We do not normally collect the personal information of individual patients that are prescribed our products. However, in order to meet our legal reporting obligations and to monitor the safety and quality of our products, personal information of individuals is collected in the course of a product complain or an adverse event report.

The data controllers of your personal information (i.e. the entities that determine how your personal information is used) under this Privacy Policy are:

• BeiGene, Ltd., for the purposes of managing global safety and product quality monitoring and reporting,
• the BeiGene entity or business partner supporting your country or region, and
• other BeiGene entities or business partners required to submit these reports to the regulatory authorities in other countries or regions.

This Privacy Policy is directed at any individual who provides personal data to or whose personal data is provide to BeiGene, Ltd. and/or its subsidiary companies (“BeiGene”, “we”, “us”, “our”) in the course of a product complaint or an adverse event report*.

*- If you are a participant in a BeiGene sponsored clinical trial or other research and have questions about how your personal data is handled or your rights in relation to that research, please see the copy of the Patient Information Sheet And Informed Consent Form that you received.

For more information about BeiGene personal data processing for other purposes, please refer to our Privacy Policy.

We process the personal data provided to or collected by us that is relevant to your adverse event report or the product complaint, which may include:

If you are a health care or other professional who is reporting an adverse event or product complain, we may also collect information about your professional qualifications.

The potential recipients are further described in the SHARING YOUR PERSONAL INFORMATION section of this Policy.

Furthermore, our websites automatically collect the following information through cookies and other data collection technologies

The provision of certain types of personal information may be necessary or optional. If you refuse to provide the mandatory information, BeiGene may not be able to process your report or complaint.

In some cases, we collect your personal information directly from you, such as when you contact us or one of our call centers to report a product complaint or adverse event you or someone you know may have had while taking our drugs or therapies.

Sometimes, we may also obtain personal information about you from your physician or others who collect information for us or who share information with us to report a product complaint or adverse event. Additionally, information may be collected by our business partners and vendors, who will share the information with us, and may be collected from publications, presentations or meetings, as well as from postings on websites and other social media about a potent product complaint or adverse event.

In addition, if you use our websites, we may collect information from your computer or other device through our use of cookies and other data collection technologies. For more information on cookies and other data collection technologies, please read the section below on our Cookies Policy or the Cookies Policy applicable to the website you are accessing.

Your personal data will be processed only for the purposes of dealing with, monitoring, taking into account and if needed, reporting your adverse event report or product complaint.

Such data processing is required in order for us to comply with our legal, contractual and regulatory obligations to monitor and/or report adverse events and issues with the quality of our products, as well as our legitimate interest to monitor and take into account any complaint regarding our drugs or therapies.

We may share your personal information within BeiGene and with third parties with whom we have contracted or as otherwise permitted or required by applicable law. The type of information we share, our purposes for sharing it and the contractual measures we implement depends on the role of the third party. We do not, however, sell the personal information that we collect.

We retain your personal data for as long as it is necessary for the purposes set out in this Privacy Policy, unless required by our legal obligations to retain it for longer.

In particular:

• in the case of an adverse event report, we will keep the personal data relating to your report for a period of at least 25 years.
• in the case of a complaint regarding one of our products or therapies, we will keep the personal data relating to your report for a period of at least 25 years.

In addition to this, BeiGene may keep your personal information for longer during:

• the statute of limitation, if needed for evidence purposes
• the applicable legal retention periods, in particular regarding regulatory matters, or any other mandatory retention period (such as legal hold or investigation).

BeiGene operates in many countries around the world and your personal information may be accessible to or shared with our affiliates, service providers, partners, collaborators and regulators in various countries for the purposes specified in this Privacy Policy. The laws in certain countries may not provide the same level of protection as the laws in your country or region. When that is the case and as required by applicable laws, we take steps to protect your transferred information, such as entering into contracts with recipients of your information or implementing additional data safeguards.

While we have established reasonable physical, electronic and managerial procedures to protect your personal information from unauthorized access and disclosure, we cannot guarantee its absolute security. You should take special care in deciding what information you transmit, upload, send or otherwise submit to us.

The processing of your personal information is based on our legal obligations and legitimate interests regarding the safety and quality of our products. These obligations are independent of the age of the reporter or of the patient.

We take seriously our obligations under applicable laws concerning the collection of information from or about children. We do not intend to direct our websites to individuals under the age of 16 (“children”) and we do not knowingly collect personal information directly from children through our websites. We request that children do not use our websites or provide any information to us through our websites or otherwise, unless we have first obtained a parent or guardian’s consent, where applicable.

Under certain laws such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act of 2018 (CCPA), California Privacy Rights Act of 2020 (CPRA) or China’s Cybersecurity Law (including its implementing regulations and national standards), you may have the following rights with respect to your personal information:

• Your right of access. You may have the right to ask us to provide clear, transparent and understandable information on how we process your personal information, as well as for copies of your personal information. There are some exemptions, which means you may not always receive all the information we process.
• Your right to rectification. You may have the right to ask us to rectify information you think is obsolete or inaccurate and the right to ask us to complete information you think is incomplete.
• Your right to deletion of your personal information. You may have the right to ask us to delete your personal information in certain circumstances.
• Your right to restriction of processing. You may have the right to ask us to restrict the processing of your personal information, during a limited period of time, in certain circumstances.
• Your right to object to processing. You may have the right to object to processing, in which case, BeiGene will no longer process your personal information unless BeiGene demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, such as compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
• Your right to data portability. You may have the right to ask that we transfer the information you gave us from one organization to another or give it to you.

Depending on your country of residence and the country where the BeiGene entity processing your personal information is established, you may have additional local rights with respect to our processing of your personal information. Please note that some of the personal information that we collect, use and disclose may be exempt from the rights outlined above.

You can submit your request by sending us an email at privacy@beigene.com.

We will respond to your requests within the time period prescribed by applicable laws. Under certain circumstances, BeiGene may ask you for specific information to confirm your identity and ensure the exercise of your rights. This is a security measure to safeguard personal information. We will notify you when your request is completed, if we deny your request to exercise your rights (because, for example, an exception applies), or if there is a fee associated with processing your request.

You may designate an authorized agent to exercise your rights on your behalf. In such case, we will also need to verify your agent’s identity and obtain proof of your authorization. We may need to deny a request from an agent whose identity or authorization we cannot verify.

If you believe that BeiGene has processed information in a manner that is unlawful or breaches your rights, or has infringed applicable laws, you have the right to complain directly to your local data protection authority. Without limiting any rights to complain directly to an authority, we are committed to protecting personal information, and complaints may be made directly to us.

We will not discriminate against you for exercising any data subject right you have under applicable law.

GENERAL CALIFORNIA PRIVACY NOTICE

If you are a California consumer, in the past twelve (12) months we may have collected the categories of personal information about you described in the CATEGORIES OF PERSONAL INFORMATION PROCESSED BY BEIGENE section of this Policy. That information was collected for the purposes described in the WHY WE PROCESS YOUR PERSONAL INFORMATION section of this Policy and may have been shared with the third parties identified in the SHARING YOUR PERSONAL INFORMATION of this Policy.

You can exercise your data subject access rights as described in the YOUR CHOICES AND RIGHTS section of this Policy by sending us an email at privacy@beigene.com or you may also call us toll-free at (888) 344-1789. Some of the personal information that we collect, use, and disclose may be exempt from the CCPA and the CPRA because it is regulated by other federal and state laws that apply to us.

We do not sell personal data of California consumers.

We are required to comply with the European Union’s and the United Kingdom’s General Data Protection Regulations (“GDPR”), Switzerland’s Federal Act on Data Protection (FADP) and similar applicable local laws with regards to certain personal information we collect. The data controllers of your personal information are the BeiGene entities referenced when we collect your personal information. Please contact us if you have any questions about the controller or controllers of your personal information.

Sensitive data

We process special categories of information (e.g., sensitive information that reveals racial or ethnic origin or genetic, biometric and health information) only where you give us your explicit consent, or when our processing is for scientific research purposes, necessary to meet a legal or regulatory obligation, in connection with the establishment, exercise or defense of legal claims, or is otherwise expressly permitted by law.

Data transfers

BeiGene is a multi-national company with offices in the United States, China, Switzerland, Australia and elsewhere. As such, BeiGene may transfer or provide access to your personal information to affiliates, service providers or collaborators in these countries and others that do not provide the same level of protection as your own country. When we do so, in the absence of an adequacy decision concerning the recipient country, we rely on safeguards such as approved model contracts (for example the EU’s standard contractual clauses or the UK’s international data transfer agreement), after having carried out an assessment of the level of protection of your rights on the territory of the third country where the recipient of your personal information is established. For more information about BeiGene’s use of the model contracts, please contact us.

Your rights

Rights you may have under the GDPR with regards to the personal information we collect and maintain about you are described in the section YOUR CHOICES AND RIGHTS. Under the GDPR, the exercise of these rights may be limited or delayed dependent upon the legal basis for processing the data, for example:

Cookies, pixel tags, and other trackers (hereinafter “Cookies”) are small files that allow for storing or retrieving information on your browser or your device (computer, tablet, mobile, etc.) when visiting online services. Cookies are widely used by websites, mobile applications, software or emails. When you first visit our websites and again if you delete the Cookies or the Cookies expire or change, you will be asked which Cookies you consent to.

Cookies do not recognize you personally, but rather the device you use. Cookies simply give information about your browsing activities in order to recognize the device later on in order to improve the browsing experience, save your preferences or even adapt the services offered to you on the Websites. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.

We may use the following types of cookies on our websites:

• Necessary Cookies, which enable the proper functioning of the Websites (security, facilitate browsing, display of the webpages…). You may disable these by changing your browser settings as described below. If you do so, you will still be able to navigate the Websites, but some of the Websites’ functions will be affected;
• Analytics Cookies, which are used to collect information about how visitors use our websites to improve the Websites by collecting information on how you interact with the Websites;
  • The cookies collect information in a way that does not directly identify anyone, rather they collect information in an aggregated or generalized statistical form, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.
  • One of the analytic cookies we use is Google Analytics. Google’s overview of privacy practices and data safeguards is available at: https://support.google.com/analytics/answer/6004245. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
• Social Media Cookies, which enable you to interact with social plugins on the Websites and share content on social networks; and
• Advertising Cookies, which enable the placement of advertisements, to measure their effectiveness and to adapt their content to your browsing and your profile.

Most web browsers allow some control of most cookies through the browser settings. For example, there are simple procedures in most browsers that allow you to delete existing cookies. If you want to set your computer or mobile web browser to reject all cookies by default, please visit the home page for your browser for instructions. If you reject all Cookies, you may still use our Websites; however, this may affect the functionality of some areas of our Websites.

In addition, your Internet Protocol (IP) address (an identifying number that is automatically assigned to your computer by your Internet Service Provider) is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use the IP addresses of all visitors to the Site to calculate Site usage levels, to help diagnose problems with the Site servers, and to administer the Sites. We may also use IP addresses to communicate with or block access by visitors who fail to comply with our Terms of Use.

We do not track our website users over time or across third party websites to provide targeted advertising. At this time, we do not respond to “Do Not Track” signals from your web browser due to the lack of an established industry standard. For more information about “Do Not Track” signals, please visit https://allaboutdnt.com/.

You may contact us at any time if you have questions or concerns about this Privacy Policy or our practices. Please send an email to privacy@beigene.com.

We will endeavor to respond to your request as soon as reasonably possible in compliance with applicable laws.

To protect your privacy and security, we take reasonable steps to verify your identity before granting access or making corrections. Note that despite any requested removal of or change to your information there may be residual information that will remain within our databases and other records.

We strive to accommodate all individuals regardless of disabilities. If you need to receive the information contained in this document in a different format, please contact us at privacy@beigene.com.

We aim to regularly update this Privacy Policy to reflect our practices. Therefore, we recommend you to periodically review this Privacy Policy. In case of material changes, we may take steps to notify you before they become effective.

BeiGene is committed to respecting and protecting the privacy of your personal information.

The data controller of your personal information (i.e. the entity that determines how your personal information is used) under this Privacy Policy is BeiGene, Ltd., unless:

• a different entity was identified in other privacy policies or information notices, or
• you are interacting with or providing services to another BeiGene entity.

In those instances, the other entity that was identified or you are interacting with or providing services to will be the controller.

This Privacy Policy is directed at health care professionals and other medical professionals such as pharmacists, statisticians, staff and other representatives of medical offices, hospitals and academic and medical centers with whom we interact (altogether, “HCPs”), who provide BeiGene, Ltd. and/or its subsidiary companies (“BeiGene”, “we”, “us”, “our”) with personal information and/or whose personal data we receive.

This Privacy Policy describes how BeiGene uses the personal information we collect about you and how to exercise your rights.

As you read this Privacy Policy, please keep in mind the following important information about how this Privacy Policy applies:

1. This Privacy Policy contains specific sections that may not be applicable to you because of where you are located or the type of personal information we maintain about you.

2. This Privacy Policy may be complemented or supplanted by other privacy policies or information notices that tell you how your personal information is used and disclosed in certain other contexts. To the extent that those policies or notices are provided, posted and/or referenced, that different privacy policy or notice, and not this one, will apply to the processing of your personal information.

3. Our websites, web portals, mobile applications or other digital services (together, our “websites”) may contain links to third-party websites that we do not operate, control or endorse. Once you leave our websites, we are not responsible for the protection and privacy of any information you provide. We suggest reading the privacy policies of these third-party websites and if needed, contacting those websites directly for information about their privacy practices.

In the past twelve (12) months, BeiGene may have collected and processed any of the following categories of personal information about you when:

• You interact with BeiGene staff members or representatives;
• You participate in, or request to be considered for, BeiGene-related activities, such as clinical trials, compassionate use programs, advisory boards or consultancies;
• You register for a BeiGene-sponsored event;
• You contact us regarding medical information, adverse events, safety, quality or other matters; and
• Our service providers or collaborators share information about you with us in compliance with applicable laws.

The potential recipients are further described in the SHARING YOUR PERSONAL INFORMATION section of this Policy.

Certain information (such as, if applicable, your payment-related information, government-issued identification) may be considered sensitive personal information under applicable laws. We will:

• take appropriate measures to protect and process your sensitive personal information; and
• provide notices and/or obtain your explicit consent for processing your sensitive personal information where required by applicable laws.

Furthermore, our websites automatically collect the following information through cookies and other data collection technologies:

The provision of certain types of personal information may be necessary or optional. Mandatory information will be marked as such at the moment of collection of your personal information. If you refuse to provide the mandatory information, BeiGene may not be able to process your request.

In most cases, we collect your personal information directly from you, such as when you contact us via phone or in person, complete a form or survey, provide services, register for an account or request to receive marketing materials and information.

Sometimes, we may also obtain personal information about you from alternative sources including, but not limited to: our research partners and collaborators, specialty pharmacies, health insurance companies or publicly accessible sources (such as websites, social media and other digital platforms, publication databases, journals, societies, editorial board websites, national registries, professional directories and third party healthcare professional databases), or third party vendors and service providers acting on our behalf, mainly in order to contact you due to your professional expertise or to better understand treatment practices in your area of specialty.

In addition, if you use our websites, we may collect information from your computer or other device through our use of cookies and other data collection technologies. For more information on cookies and other data collection technologies, please read the Cookies Policy applicable to the website you are accessing.

The ways we process your personal information depend on why we collected it. Depending on your relationship and/or interactions with BeiGene, as well as, applicable laws and our own procedures & requirements, BeiGene may process your personal information for the following reasons:

We do not undertake decisions based solely on automated processing of your information, including profiling, unless we inform you as required by applicable laws.

We may share your personal information within BeiGene and with third parties with whom we have contracted or as otherwise permitted by applicable law. The type of information we share, our purposes for sharing it and the contractual measures we implement depends on the role of the third party. We do not, however, sell the personal information that we collect.

We retain your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless required by our legal obligations to retain it for longer. To determine the appropriate retention period for information, we consider the amount, nature and sensitivity of information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, whether we can achieve those purposes through other means and all applicable global legal, regulatory, and compliance requirements.

In particular, any information collected for your subscription to an email alert or newsletter will be kept until you unsubscribe and information you provide via your requests will be kept a least until their complete processing. We will keep a record of your unsubscribe request, if any, for as long as is necessary to comply with that request.

In addition to this, BeiGene will keep your personal information during:

• the statute of limitation, if needed for evidence purposes;
• the applicable legal retention periods, in particular regarding commercial, compliance and regulatory matters, or any other mandatory retention period (such as legal hold or investigation).

BeiGene operates in many countries around the world and your personal information may be accessible to or shared with our affiliates, service providers, partners, collaborators and regulators in various countries for the purposes specified in this Privacy Policy. The laws in certain countries may not provide the same level of protection as the laws in your country or region. When that is the case and as required by applicable laws, we take steps to protect your transferred information, such as entering into contracts with recipients of your information or implementing additional data safeguards.

While we have established reasonable physical, electronic and managerial procedures to protect your personal information from unauthorized access and disclosure, we cannot guarantee its absolute security. You should take special care in deciding what information you transmit, upload, send or otherwise submit to us.

You may choose not to provide your personal information to us; however, in doing so, you may not be able to continue your relationship or interactions with us or use certain services, e.g., patient support services.

At any time, you can choose to opt out from our marketing communications by using the unsubscribe feature in any marketing email you have received. If you unsubscribe from marketing, we may still send you email communications that are relationship or transactional in nature.

Under certain laws such as GDPR, California Consumer Privacy Act of 2018 (CCPA), California Privacy Rights Act of 2020 (CPRA) or China’s Cybersecurity Law (including its implementing regulations and national standards), you may have the following rights with respect to your personal information:

• Your right of access. You may have the right to ask us to provide clear, transparent and understandable information on how we process your personal information, as well as for copies of your personal information. There are some exemptions, which means you may not always receive all the information we process.
• Your right to rectification. You may have the right to ask us to rectify information you think is obsolete or inaccurate and the right to ask us to complete information you think is incomplete.
• Your right to deletion of your personal information. You may have the right to ask us to delete your personal information in certain circumstances.
• Your right to restriction of processing. You may have the right to ask us to restrict the processing of your personal information, during a limited period of time, in certain circumstances.
• Your right to object to processing. You may have the right to object to processing, in which case, BeiGene will no longer process your personal information unless BeiGene demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, such as compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
• Your right to data portability. You may have the right to ask that we transfer the information you gave us from one organization to another, or give it to you.
• Right to withdraw your consent. If we process your personal information based on your consent, you have the right to withdraw your consent, without this withdrawal affecting the lawfulness of the processing operations previously carried out.
• Right to close your account. If you receive our services through online accounts, you have the right to close your accounts. We will then delete or anonymize your personal information associated with your accounts, unless otherwise permitted under applicable laws.

Depending on your country of residence and the country where the BeiGene entity processing your personal information is established, you may have additional local rights with respect to our processing of your personal information. Please note that some of the personal information that we collect, use and disclose may be exempt from the rights outlined above.

You can submit your request by sending us an email at privacy@beigene.com.

We will respond to your requests within the time period prescribed by applicable laws. Under certain circumstances, BeiGene may ask you for specific information to confirm your identity and ensure the exercise of your rights. This is a security measure to safeguard personal information. We will notify you when your request is completed, if we deny your request to exercise your rights (because, for example, an exception applies), or if there is a fee associated with processing your request.

You may designate an authorized agent to exercise your rights on your behalf. In such case, we will also need to verify your agent’s identity and obtain proof of your authorization. We may need to deny a request from an agent whose identity or authorization we cannot verify.

If you believe that BeiGene has processed information in a manner that is unlawful or breaches your rights, or has infringed applicable laws, you may have the right to complain directly to your local data protection authority. Without limiting any rights to complain directly to an authority, we are committed to protecting personal information, and complaints may be made directly to us.

We will not discriminate against you for exercising any data subject right you have under applicable law.

GENERAL CALIFORNIA PRIVACY NOTICE

If you are a California consumer, in the past twelve (12) months we may have collected the categories of personal information about you described in the CATEGORIES OF PERSONAL INFORMATION PROCESSED BY BEIGENE section of this Policy. That information was collected for the purposes described in the WHY WE PROCESS YOUR PERSONAL INFORMATION section of this Policy, and may have been shared with the third parties identified in the SHARING YOUR PERSONAL INFORMATIONof this Policy.

You can exercise your data subject access rights as described in the YOUR CHOICES AND RIGHTS section of this Policy by sending us an email at privacy@beigene.com or you may also call us toll-free at (888) 344-1789. Some of the personal information that we collect, use, and disclose may be exempt from the CCPA and the CPRA because it is regulated by other federal and state laws that apply to us.

We do not sell personal data of California consumers.

We are required to comply with the European Union’s and the United Kingdom’s General Data Protection Regulations (“GDPR”), Switzerland’s Federal Act on Data Protection (FADP) and similar applicable local laws with regards to certain personal information we collect. The data controllers of your personal information are the BeiGene entities referenced when we collect your personal information. Please contact us if you have any questions about the controller or controllers of your personal information.

Sensitive data

We process special categories of information (e.g., sensitive information that reveals racial or ethnic origin or genetic, biometric and health information) only where you give us your explicit consent, or when our processing is for scientific research purposes, necessary to meet a legal or regulatory obligation, in connection with the establishment, exercise or defense of legal claims, or is otherwise expressly permitted by law.

If we need to collect your personal information by law or under the terms of a contract we have with you and you do not provide the requested information, we may not be able to perform the contract we have, or are trying to enter into, with you.

Data transfers

BeiGene is a multi-national company with offices in the United States, China, Switzerland, Australia and elsewhere. As such, BeiGene may transfer or provide access to your personal information to affiliates, service providers or collaborators in these countries and others that do not provide the same level of protection as your own country. When we do so, in the absence of an adequacy decision concerning the recipient country, we rely on safeguards such as approved model contracts (for example the EU’s standard contractual clauses or the UK’s international data transfer agreement), after having carried out an assessment of the level of protection of your rights on the territory of the third country where the recipient of your personal information is established. For more information about BeiGene’s use of the model contracts, please contact us.

Your rights

Rights you may have under the GDPR with regards to the personal information we collect and maintain about you are described in the section YOUR CHOICES AND RIGHTS. Under the GDPR, the exercise of these rights may be limited or delayed dependent upon the legal basis for processing the data, for example:

Cookies, pixel tags, and other trackers (hereinafter “Cookies”) are small files that allow for storing or retrieving information on your browser or your device (computer, tablet, mobile, etc.) when visiting online services. Cookies are widely used by websites, mobile applications, software or emails. When you first visit our websites and again if you delete the Cookies or the Cookies expire or change, you will be asked which Cookies you consent to.

Cookies do not recognize you personally, but rather the device you use. Cookies simply give information about your browsing activities in order to recognize the device later on in order to improve the browsing experience, save your preferences or even adapt the services offered to you on the Websites. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.

We may use the following types of cookies on our websites:

• Necessary Cookies, which enable the proper functioning of the Websites (security, facilitate browsing, display of the webpages…). You may disable these by changing your browser settings as described below. If you do so, you will still be able to navigate the Websites, but some of the Websites’ functions will be affected;
• Analytics Cookies, which are used to collect information about how visitors use our websites to improve the Websites by collecting information on how you interact with the Websites;
  • The cookies collect information in a way that does not directly identify anyone, rather they collect information in an aggregated or generalized statistical form, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.
  • One of the analytic cookies we use is Google Analytics. Google’s overview of privacy practices and data safeguards is available at: https://support.google.com/analytics/answer/6004245. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
• Social Media Cookies, which enable you to interact with social plugins on the Websites and share content on social networks; and
• Advertising Cookies, which enable the placement of advertisements, to measure their effectiveness and to adapt their content to your browsing and your profile.

Most web browsers allow some control of most cookies through the browser settings. For example, there are simple procedures in most browsers that allow you to delete existing cookies. If you want to set your computer or mobile web browser to reject all cookies by default, please visit the home page for your browser for instructions. If you reject all Cookies, you may still use our Websites; however, this may affect the functionality of some areas of our Websites.

In addition, your Internet Protocol (IP) address (an identifying number that is automatically assigned to your computer by your Internet Service Provider) is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use the IP addresses of all visitors to the Site to calculate Site usage levels, to help diagnose problems with the Site servers, and to administer the Sites. We may also use IP addresses to communicate with or block access by visitors who fail to comply with our Terms of Use.

We do not track our website users over time or across third party websites to provide targeted advertising. At this time, we do not respond to “Do Not Track” signals from your web browser due to the lack of an established industry standard. For more information about “Do Not Track” signals, please visit https://allaboutdnt.com/.

You may contact us at any time if you have questions or concerns about this Privacy Policy or our practices. Please send an email to privacy@beigene.com.

We will endeavor to respond to your request as soon as reasonably possible in compliance with applicable laws.

To protect your privacy and security, we take reasonable steps to verify your identity before granting access or making corrections. Note that despite any requested removal of or change to your information there may be residual information that will remain within our databases and other records.

We strive to accommodate all individuals regardless of disabilities. If you need to receive the information contained in this document in a different format, please contact us at privacy@beigene.com.

We aim to regularly update this Privacy Policy to reflect our practices. Therefore, we recommend you to periodically review this Privacy Policy. In case of material changes, we may take steps to notify you before they become effective.

BeiGene is committed to respecting and protecting the privacy of your personal information.

The data controllers of your personal information (i.e. the entities that determine how your personal information is used) under this Privacy Policy are:

• BeiGene, Ltd., for the purposes of managing this global BeiGene Career portal, and
• the BeiGene entity that you are applying to, the name of which will be provided to you as part of the job description or other information provided to you.

This Privacy Policy is directed at individuals who provide BeiGene, Ltd. and/or its subsidiary companies (“BeiGene”, “we”, “us”, “our”) with personal information, in order to seek BeiGene work opportunities (“job applicants”).

This Privacy Policy describes how BeiGene uses the personal information we collect about you and how to exercise your rights.

As you read this Privacy Policy, please keep in mind the following important information about how this Privacy Policy applies:

1. This Privacy Policy contains specific sections that may not be applicable to you because of where you are located or the type of personal information we maintain about you.
2. This Privacy Policy may be complemented or supplanted by other privacy policies or information notices that tell you how your personal information is used and disclosed in certain other contexts. To the extent that those policies or notices are provided, posted and/or referenced, that different privacy policy or notice, and not this one, will apply to the processing of your personal information.
3. Our websites, web portals, mobile applications or other digital services (together, our “websites”) may contain links to third-party websites that we do not operate, control or endorse. Once you leave our websites, we are not responsible for the protection and privacy of any information you provide. We suggest reading the privacy policies of these third-party websites and if needed, contacting those websites directly for information about their privacy practices.

In the past twelve (12) months, BeiGene may have collected and processed any of the following categories of personal information about you:

The potential recipients are further described in the SHARING YOUR PERSONAL INFORMATION section of this Policy.

Certain information (such as, if applicable, your payment-related information, government-issued identification) may be considered sensitive personal information under applicable laws. We will:

• take appropriate measures to protect and process your sensitive personal information; and
• provide notices and/or obtain your explicit consent for processing your sensitive personal information where required by applicable laws.

Furthermore, our websites automatically collect the following information through cookies and other data collection technologies:

The provision of certain types of personal information may be necessary or optional. Mandatory information will be marked as such at the moment of collection of your personal information. If you refuse to provide the mandatory information, BeiGene may not be able to process your request.

In most cases, we collect your personal information directly from you, such as when you contact us via phone or in person, complete a form or survey, provide services, register for an account or request to receive marketing materials and information.

Sometimes, we may also obtain personal information about you from authorized third-party sources who you direct or authorize to share information with us, such as your employer, other references or other authorized representatives or affiliated organizations.

In addition, if you use our websites, we may collect information from your computer or other device through our use of cookies and other data collection technologies. For more information on cookies and other data collection technologies, please read the Cookies Policy applicable to the website you are accessing.

The ways we process your personal information depend on why we collected it. Depending on your relationship and/or interactions with BeiGene, as well as, applicable laws and our own procedures & requirements, BeiGene may process your personal information for the following reasons:

We do not undertake decisions based solely on automated processing of your information, including profiling, unless we inform you as required by applicable laws.

We may share your personal information within BeiGene and with third parties with whom we have contracted or as otherwise permitted by applicable law. The type of information we share, our purposes for sharing it and the contractual measures we implement depends on the role of the third party. We do not, however, sell the personal information that we collect.

We retain your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless required by our legal obligations to retain it for longer. To determine the appropriate retention period for information, we consider the amount, nature and sensitivity of information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, whether we can achieve those purposes through other means and all applicable global legal, regulatory, and compliance requirements.

In particular, the information collected via the job application process is retained for use in future searches and applications and for use if you are recruited or if you integrate BeiGene’s pool talent. If you want your information deleted, please reach out to BeiGene at privacy@beigene.com. We will keep a record of your unsubscribe request, if any, for as long as is necessary to comply with that request. We may also retain certain job application information if required to do so by applicable law or to defend or prosecute our legal rights.

In addition to this, BeiGene will keep your personal information during:

• the statute of limitation, if needed for evidence purposes;
• the applicable legal retention periods, in particular regarding commercial, compliance and regulatory matters, or any other mandatory retention period (such as legal hold or investigation).

BeiGene operates in many countries around the world and your personal information may be accessible to or shared with our affiliates, service providers, partners, collaborators and regulators in various countries for the purposes specified in this Privacy Policy. The laws in certain countries may not provide the same level of protection as the laws in your country or region. When that is the case and as required by applicable laws, we take steps to protect your transferred information, such as entering into contracts with recipients of your information or implementing additional data safeguards.

While we have established reasonable physical, electronic and managerial procedures to protect your personal information from unauthorized access and disclosure, we cannot guarantee its absolute security. You should take special care in deciding what information you transmit, upload, send or otherwise submit to us.

You may choose not to provide your personal information to us; however, in doing so, you may not be able to continue your relationship or interactions with us or use certain services.

Under certain laws such as GDPR, California Consumer Privacy Act of 2018 (CCPA), California Privacy Rights Act of 2020 (CPRA) or China’s Cybersecurity Law (including its implementing regulations and national standards), you may have the following rights with respect to your personal information:

• Your right of access. You may have the right to ask us to provide clear, transparent and understandable information on how we process your personal information, as well as for copies of your personal information. There are some exemptions, which means you may not always receive all the information we process.
• Your right to rectification. You may have the right to ask us to rectify information you think is obsolete or inaccurate and the right to ask us to complete information you think is incomplete.
• Your right to deletion of your personal information. You may have the right to ask us to delete your personal information in certain circumstances.
• Your right to restriction of processing. You may have the right to ask us to restrict the processing of your personal information, during a limited period of time, in certain circumstances.
• Your right to object to processing. You may have the right to object to processing, in which case, BeiGene will no longer process your personal information unless BeiGene demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, such as compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
• Your right to data portability. You may have the right to ask that we transfer the information you gave us from one organization to another, or give it to you.
• Right to withdraw your consent. If we process your personal information based on your consent, you have the right to withdraw your consent, without this withdrawal affecting the lawfulness of the processing operations previously carried out.
• Right to close your account. If you receive our services through online accounts, you have the right to close your accounts. We will then delete or anonymize your personal information associated with your accounts, unless otherwise permitted under applicable laws.

Depending on your country of residence and the country where the BeiGene entity processing your personal information is established, you may have additional local rights with respect to our processing of your personal information. Please note that some of the personal information that we collect, use and disclose may be exempt from the rights outlined above.

You can submit your request by sending us an email at privacy@beigene.com.

We will respond to your requests within the time period prescribed by applicable laws. Under certain circumstances, BeiGene may ask you for specific information to confirm your identity and ensure the exercise of your rights. This is a security measure to safeguard personal information. We will notify you when your request is completed, if we deny your request to exercise your rights (because, for example, an exception applies), or if there is a fee associated with processing your request.

You may designate an authorized agent to exercise your rights on your behalf. In such case, we will also need to verify your agent’s identity and obtain proof of your authorization. We may need to deny a request from an agent whose identity or authorization we cannot verify.

If you believe that BeiGene has processed information in a manner that is unlawful or breaches your rights, or has infringed applicable laws, you may have the right to complain directly to your local data protection authority. Without limiting any rights to complain directly to an authority, we are committed to protecting personal information, and complaints may be made directly to us. 10

We will not discriminate against you for exercising any data subject right you have under applicable law.

GENERAL CALIFORNIA PRIVACY NOTICE

If you are a California resident and a prospective employee of BeiGene. The information we collect about you in these circumstances is exempt from the consumer rights that are described in the YOUR CHOICES AND RIGHTS Section of this Policy.

When you are a prospective employee of BeiGene, we may collect, use and share the following information from you:

We collect and share this information for a number of purposes including: managing your job application, conducting pre-employment screening and background checks, fulfilling our legal obligations, improving our recruiting process and website, and for our everyday business purposes such as processing payroll, safeguarding BeiGene property and defending against fraud. We may also use your personal information in the event of a sale or transaction including some or all of BeiGene’s assets.

We do not sell personal data of California job applicants.

If you have questions about this summary, you can contact privacy@beigene.com.

We are required to comply with the European Union’s and the United Kingdom’s General Data Protection Regulations (“GDPR”), Switzerland’s Federal Act on Data Protection (FADP) and similar applicable local laws with regards to certain personal information we collect. The data controllers of your personal information are the BeiGene entities referenced when we collect your personal information. Please contact us if you have any questions about the controller or controllers of your personal information.

Sensitive data

We process special categories of information (e.g., sensitive information that reveals racial or ethnic origin or genetic, biometric and health information) only where you give us your explicit consent, or when our processing is for scientific research purposes, necessary to meet a legal or regulatory obligation, in connection with the establishment, exercise or defense of legal claims, or is otherwise expressly permitted by law.

If we need to collect your personal information by law or under the terms of a contract we have with you and you do not provide the requested information, we may not be able to perform the contract we have, or are trying to enter into, with you.

Data transfers

BeiGene is a multi-national company with offices in the United States, China, Switzerland, Australia and elsewhere. As such, BeiGene may transfer or provide access to your personal information to affiliates, service providers or collaborators in these countries and others that do not provide the same level of protection as your own country. When we do so, in the absence of an adequacy decision concerning the recipient country, we rely on safeguards such as approved model contracts (for example the EU’s standard contractual clauses or the UK’s international data transfer agreement), after having carried out an assessment of the level of protection of your rights on the territory of the third country where the recipient of your personal information is established. For more information about BeiGene’s use of the model contracts, please contact us.

Your rights

Rights you may have under the GDPR with regards to the personal information we collect and maintain about you are described in the section YOUR CHOICES AND RIGHTS. Under the GDPR, the exercise of these rights may be limited or delayed dependent upon the legal basis for processing the data, for example:

Cookies, pixel tags, and other trackers (hereinafter “Cookies”) are small files that allow for storing or retrieving information on your browser or your device (computer, tablet, mobile, etc.) when visiting online services. Cookies are widely used by websites, mobile applications, software or emails. When you first visit our websites and again if you delete the Cookies or the Cookies expire or change, you will be asked which Cookies you consent to.

Cookies do not recognize you personally, but rather the device you use. Cookies simply give information about your browsing activities in order to recognize the device later on in order to improve the browsing experience, save your preferences or even adapt the services offered to you on the Websites. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org

We may use the following types of cookies on our websites:

• Necessary Cookies, which enable the proper functioning of the Websites (security, facilitate browsing, display of the webpages…). You may disable these by changing your browser settings as described below. If you do so, you will still be able to navigate the Websites, but some of the Websites’ functions will be affected;
• Analytics Cookies, which are used to collect information about how visitors use our websites to improve the Websites by collecting information on how you interact with the Websites;
  • The cookies collect information in a way that does not directly identify anyone, rather they collect information in an aggregated or generalized statistical form, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.
  • One of the analytic cookies we use is Google Analytics. Google’s overview of privacy practices and data safeguards is available at: https://support.google.com/analytics/answer/6004245. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
• Social Media Cookies, which enable you to interact with social plugins on the Websites and share content on social networks; and
• Advertising Cookies, which enable the placement of advertisements, to measure their effectiveness and to adapt their content to your browsing and your profile.

Most web browsers allow some control of most cookies through the browser settings. For example, there are simple procedures in most browsers that allow you to delete existing cookies. If you want to set your computer or mobile web browser to reject all cookies by default, please visit the home page for your browser for instructions. If you reject all Cookies, you may still use our Websites; however, this may affect the functionality of some areas of our Websites.

In addition, your Internet Protocol (IP) address (an identifying number that is automatically assigned to your computer by your Internet Service Provider) is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use the IP addresses of all visitors to the Site to calculate Site usage levels, to help diagnose problems with the Site servers, and to administer the Sites. We may also use IP addresses to communicate with or block access by visitors who fail to comply with our Terms of Use.

We do not track our website users over time or across third party websites to provide targeted advertising. At this time, we do not respond to “Do Not Track” signals from your web browser due to the lack of an established industry standard. For more information about “Do Not Track” signals, please visit https://allaboutdnt.com/.

You may contact us at any time if you have questions or concerns about this Privacy Policy or our practices. Please send an email to privacy@beigene.com.

We will endeavor to respond to your request as soon as reasonably possible in compliance with applicable laws.

To protect your privacy and security, we take reasonable steps to verify your identity before granting access or making corrections. Note that despite any requested removal of or change to your information there may be residual information that will remain within our databases and other records.

We strive to accommodate all individuals regardless of disabilities. If you need to receive the information contained in this document in a different format, please contact us at privacy@beigene.com.

We aim to regularly update this Privacy Policy to reflect our practices. Therefore, we recommend you to periodically review this Privacy Policy. In case of material changes, we may take steps to notify you before they become effective.