Amgen Australia Privacy Statement

A. Information We Collect

When you use the Services, we collect Personal Information and Usage Data.

In this Privacy Statement, "Personal Information" means information associated with or used to identify or contact a specific person. Personal Information includes: (1) contact data (such as e-mail address, telephone number and employer); (2) demographic data (such as gender, date of birth and postcode); and (3) certain Usage Data (defined below).

Certain subsets of Personal Information, such as information about health or medical status (pursuant to all applicable laws) and Location Data (defined below), are characterised as sensitive (collectively, "Sensitive Personal Information") and may be subject to stricter regulation and consent requirements than other information. Before providing it to us, we urge you to carefully consider whether to disclose your Sensitive Personal Information. If you do provide Sensitive Personal Information to us, you consent to its use and disclosure for the purposes and in the manner described in this Privacy Statement.

"Usage Data" is information about an individual's activity on or through the Services that, by itself, does not identify the individual, such as browser type, operating system and webpages visited.

Usage Data by itself is not usually considered Personal Data because it usually does not identify an individual. If different types of Usage Data and Personal Information are linked together and, once linked, identify an individual person, Usage Data in such scenarios may be considered Personal Information.

B. Information About Participants in Clinical Trials

You may choose to participate in clinical trials of biopharmaceutical products as part of Amgen Australia's medical research and development programs. These trials are conducted by hospitals or other institutions but are funded and supported by Amgen Australia. If you participate in one of these clinical trials, you will be asked to provide express written consent to the manner in which your personal information will be collected, used, transferred, accessed and/or disclosed in connection with the research related to the trial.

The kinds of information provided to Amgen Australia about you for the purposes of conducting and auditing a clinical trial include health information about you relevant to the conduct and audit of the clinical trial, such as your medical history, medication use, results of tests and scans and reports of adverse events.

Generally, Amgen Australia only receives pseudonymised information relating to participants in clinical trial from physicians and investigators conducting the trial. Pseudonymisation means that directly identifiable information such as your name and residential address are replaced with a unique reference number (a pseudonym), referred to as a subject identification number. Amgen Australia does not have the ability to tie a subject identification number to your name.

In limited circumstances, personal identifiers, such as your name and residential address, may be collected by Amgen Australia, but only with your express consent or where required by law. These circumstances include certain clinical trials where Amgen Australia employees or its authorised contractors may view personal information at a clinical trial site to audit and/or monitor the trial and to comply with regulatory requirements.

Your personal information may be disclosed to and reviewed by members of the human research ethics committee responsible for the trial as part of their responsibility to provide oversight for the study, which includes monitoring and audit, or other institutional review boards located in other countries; your personal medical practitioner; regulatory agencies and health authorities for review and inspection and in support of regulatory filings in Australia and in other countries; a central vendor for analysis, interpretation, and reporting results back to us and/or the study doctor; and others where required or authorised by law. We may also disclose your personal information to third parties that assist us in analysing the results of the study. These third parties may be located in countries outside of Australia including the United States of America ('U.S.'), Canada and countries in Europe, Latin America and Asia-Pacific. In such cases Amgen Australia will take reasonable steps to ensure that your information is protected.

If you are a participant in a clinical trial who provides information to us through our website or any mobile phone application ('Apps') operated by us, you should also read the section titled 'F. Information About Users of Our Website'.

C. Information About Patients

If you contact Amgen regarding your experience in using one of our products, including to report an adverse event ('side effect') or a defect or quality issue with the Amgen product you received, we may ask you for specific facts, including patient initials, age, and gender, and the identity of the prescribing physician. We may use the information you provide in submitting reports to regulatory agencies as required by law (e.g., the U.S. Federal Food and Drug Administration, the European Medicines Agency, the Australian Therapeutic Goods Administration and the New Zealand Medicines and Medical Devices Safety Authority). We also may use the information to contact the prescribing physician to follow up regarding an adverse event ('side effect') involving use of our product.

You should know that we may disclose your personal information to third parties performing work on our behalf, such as our call centre operators and other entities that assist us in responding to and processing your enquiries and product experience reports. These third parties may be located outside of Australia. We may also disclose your personal information to our related affiliates in the U.S., Canada, and countries in Europe, Latin America and Asia-Pacific, who assist us in responding to your enquiries.

D. Information About Healthcare Professionals and Their Staff

If you are a healthcare professional, we may collect personal information about you in order to:

• conduct clinical trials.
• inform you of our events, products, new products and product recalls.
• fulfil our statutory pharmacovigilance reporting obligations.
• organise your travel for our events and third-party educational events sponsored by us;
• improve our products and services and marketing activities, including by conducting market research; and
• manage our relationship with you.

This personal information includes such things as your name, contact details, specialty and qualifications, professional association membership number, details of your hospital or medical and consulting room, whether you are a member of an Amgen advisory board or an advisory board of a similar organisation, and your bank details (if you provide services to us). If you attend one of our events and/or third-party educational events sponsored by us and we arrange your travel, we may also collect your passport details and airline frequent flyer numbers.

We may collect this personal information from you (such as when you register for one of the events) or your representatives, as well as customer relationship management companies and marketing agencies.

For the purposes referred to above, we may disclose your personal information to customer relationship management companies, third party event organisers, third party suppliers who assist us in providing our products and services (such as booking your travel and analysing personal information to improve sales targeting and recommendations), market research agencies, and others where required or authorised by law. If you are attending an international event, these services providers may be located in the country in which the event is located.

We also collect personal information regarding investigators and their staff involved in clinical trials. This information will be retained by Amgen Australia in a database. The database is held by Amgen Australia's parent company (Amgen Inc. in Thousand Oaks, California, U.S.) and accessible worldwide by Amgen. Amgen may use the database for purposes including but not limited to matching investigators to suitable trials, monitoring trial progress, and assessing administration and conduct of trial sites. Amgen may also share with clinical research organisations worldwide data held in the database regarding investigators where Amgen engages such organisations to assist in the conduct and management of a trial. Further we may use this information to comply with our legal and regulatory obligations, including where required, disclosure to regulatory agencies. (e.g., the U.S. Federal Food and Drug Administration, the European Medicines Agency, the Australian Therapeutic Goods Administration and the New Zealand Medicines and Medical Devices Safety Authority).

We may also disclose your personal information to third parties outside of Australia who provide us technical support and assist us in enhancing our systems. In such cases Amgen Australia will comply with applicable laws to which Amgen Australia is subject to ensure that your information is protected.

If you are a healthcare professional who provides information to us through our website, you should also read the section below titled 'F. Information about Users of Our Website'.

E. Medicines Australia Code of Conduct Financial Transparency Requirements

Amgen is committed to compliance with the Medicines Australia Code of Conduct ('Code') in reporting Transfers of Value ('ToV') to Healthcare Professionals and Healthcare Organisations. The Code requires that Amgen publicly disclose information regarding ToVs resulting from Amgen's interactions with Healthcare Professionals.

If you are engaged in activities with Amgen that result in a payment or transfer of value to you, Amgen will collect and process personal information about you in order to comply with the Code reporting obligations. Such information will include your name and profession, your business/practice address, a description of the event and service you provided to Amgen (if relevant); and the amount of ToVs you received from Amgen. In accordance with the Code, the information will be publicly available for a period of three years after the original date of public disclosure, unless a different period is legally required.

F. Information About Users of Our Website

All users of our website

We retain a record of the IP address of your computer. We will only link a particular IP address to you personally if you have provided us personally identifying information whilst using our website.

We may use the IP address of your computer to maintain communications with you as you move about our website and personalise website content.

We also collect information about your use of our website through cookies. We may use the data we obtain through the use of cookies:

• to customise your website experience by anticipating the information and services that may be of interest to you;
• to improve the functioning of our website by monitoring traffic in popular areas and to modify the services and information we provide to meet customer demand; and
• for our business purposes, including operation of our website, as well as research and product analyses to help us better market our products.

We may use third-party analytics services on our website, such as Google Analytics. The analytics providers that administer these services use technologies such as cookies, web beacons and similar technologies to help us analyse your use of the website. To learn more about Google Analytics services, please visit: https://policies.google.com/technologies/partner-sites?hl=en-US

Individuals that register to use our online information and services

If you choose to register to use our online information and services, we may collect and use the personal information you give us (such as your name and contact details) to send you an e-mail confirming your registration and to respond to your questions. Upon your request, we may send you e-mails with information that we think may be of interest to you, including information about our product and services. We will also be able to link the personal information you give us with the IP address you use and information we have collected by reference to that IP address (see section above titled 'F. Information about Users of Our Website').

Individuals that participate in our online interactive services

If you choose to participate in our online interactive services (including health questionnaires and care management tools), we will collect the personal information you choose to disclose (which may include health information) and analyse it to discover new facts that could help us better understand how Amgen products are used in coping with the diseases for which they are marketed. Although the information you provide through these interactive services may not identify you, we may link it with other information you provide us elsewhere on our website, which does identify you. We may combine this information with that from other website users to create summary data that we will use for our business purposes, including research and analysis to improve our products and help us better market our products.

If you submit health-related Personal Information through the Services to participate in a clinical trial, we may use your Personal Information to assess whether you qualify for enrolment in the trial, to contact you about potential participation in the trial, and to provide you with additional information about the trial.

You may provide information to be published or displayed ("Posted") on public areas of the Services (collectively, "User Contributions"). Your User Contributions are Posted and made available publicly at your own risk. Amgen does not control the actions of third parties with access to your User Contributions. If you are a Provider and submit Personal Information about a study subject related to his or her participation in a clinical trial, that Personal Information will be processed in accordance with this Privacy Statement. If we determine that the potential study subject is eligible for the trial, we will use the information to contact you about his or her potential participation in the trial and to provide you with additional information.

G. Information Collected Through Data Collection Tools

Amgen also automatically collects information about use of the Services through data collection tools, such as web beacons and cookies.

A "web beacon" (also known as a "pixel") is a piece of code that enables us to monitor user activity and website traffic. A "cookie" is a randomly-generated unique numeric code stored in the user's web browser settings or computer's hard drive. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the "lifetime" of the cookie (i.e., when it expires), as well as the randomly generated unique numeric code.

We use the information collected through data collection tools to monitor usage patterns, analyse our website performance, store information about user preferences and to improve the Services. For example, your Personal Information may be used to create customised offers, information, advertisements and services tailored to your interests and preferences. We may track your activities over time and across third-party websites, apps or other online services to display advertisements on third-party websites. If you do not want us to use your information in this way, please see "Your Privacy Choices" below. For more information about our digital advertising practices, please see "Digital Advertising" below.

H. Information Collected when you use an Amgen Mobile Application

When you use an App, we use data collection tools to collect information about your use of and interaction with the App, such as operating system type, browser type, domain and other system settings, search queries, and the time zone in which the mobile device or tablet is located, metadata and other information associated with other files stored on your device.

We also may collect information about the location of the mobile device or tablet used to access the Services ("Location Data"). Location Data includes: (i) the location of the mobile device or tablet derived from GPS or WiFi use; (ii) the IP address of the mobile device or tablet or internet service used to access the Services; and (iii) other information made available by a user or others that indicates the current or prior location of the user, such as geotag information in photographs.

We will inform you if a specific App or service collects precise Location Data. If you do not want us to collect Location Data from your device, please delete the App or disable the location settings on your device or tablet. Note, however, that disabling the location setting may affect your ability to access and use that App.

I. Information Collected when you Connect with Social Media through the Services

Certain Services may link with social media platforms and social media plug-ins (e.g., the Facebook "Like" button, "Share to Twitter" button) (collectively, "Social Media"). When accessing the Services through a Facebook or other Social Media account, Amgen may (depending on the applicable user privacy settings) automatically have access to information provided to or through the Social Media platform. Amgen may collect and use this information for the purposes described in this Privacy Statement or described at the time the information was collected.

J. Information About Job Applicants

You may browse jobs on our website and choose to apply for vacant positions. For further information with respect to personal information that may be collected as part of a job application, please see the associated Privacy Statement. Information About Other Individuals, Including Suppliers and Contractors

If you communicate with or request information from Amgen personnel, or supply goods or services to Amgen, the personnel you interact with may collect your name and e-mail address as well as any personal facts you choose to include in your communications with them.

K. Disclosure to Vendors and Suppliers

We have relationships with different vendors and suppliers who help us design and maintain our computer systems and security, respond to e-mail and customer inquiries, analyse our data and create special promotions. We will not authorise our vendors and suppliers to use personal information we have collected or received for any purposes unrelated to our contractual relationship with them.

L. Transfers Overseas

As previously stated, please note that any personal information that Amgen Australia may collect may be processed in Australia or in other countries—including the U.S., Canada and countries in Europe, Latin America and Asia-Pacific —in which Amgen, or one of the third parties with whom Amgen has a relationship, is located. Some countries may have different data protection standards than the country in which you live. Amgen Australia remains accountable for all personal information it transfers overseas and takes appropriate measures to ensure that the confidentiality of the personal information is safeguarded.

Amgen processes personal information for safety reporting purposes to relevant National Health Authorities in accordance with applicable law. Your information may be transferred to Amgen Inc. (in the United States) and trusted processors located outside of Australia. Transfers among Amgen and its group entities follow applicable laws and our Binding Corporate Rules (BCRs) or Standard Contractual Clauses for processors. For more information visit: http://www.amgen.com/bcr/.

Amgen Australia's website features links to other websites that we believe you might find useful and informative. Please be aware that a link to a third-party website or digital service does not mean that Amgen endorses it or the quality or accuracy of information presented on it. If you decide to visit a third-party website or service, you are subject to its privacy practices and not this Privacy Statement. We encourage you to be aware of and read the privacy policy or statement and other legal notices of each website or service that you visit. Remember, the statements in this Privacy Statement apply solely to information collected by Amgen Australia and Amgen.

We may partner with other companies to provide you with content or services on a joint or "co-branded" basis. When websites or services are co-branded, you will see both the Amgen logo and the logo of the co-branded partner displayed on your screen. To access the services available on a co-branded website you may have to complete a new on-line registration form, and this registration information may be shared with Amgen's co-branded partners. You should read the individual privacy policies of our co-branded partners, as these may differ in some respects from ours. Reading these policies will help you to make an informed decision about whether to provide your information to a given website. Remember, you may always opt-out of sharing your information with a partner website by choosing not to use the service or content provided by the co-branded website.

When you use the Services, Social Media operators can place a cookie on your computer to recognise individuals who have previously visited the Services. If you are logged into a Social Media account while using the Services, the social plugins allow that Social Media operator to receive information that you have accessed and used the Services. The social plugins also allow the Social Media operator to share information about your activities in or through the Services with other Social Media users. For example, Facebook Social Plugins allows Facebook to show your Likes and comments on our pages to your Facebook friends. Facebook Social Plugins also allows you to see your friends' Facebook activity through the Services. Amgen does not control any of the content from the Social Media plugins. For more information about Social Media plugins, please refer to the privacy statements and other legal notices of the Social Media platform.

We use third-party advertising companies to serve ads on other websites, including Social Media sites, and digital services. These companies may use information obtained from data collection tools in order to measure advertising effectiveness and to provide advertisements of interest to you.

You can opt out here so as not to receive targeted ads from use of the tools, but this will not affect any general advertisements you may receive.

Amgen Australia's website content and services are intended for users over the age of 15. The website is not designed to attract child users. If you are under the age of 15, you may use the Services only with the consent of or under the supervision of your parent or legal guardian.

If we learn that an under-15 user has volunteered personal information (including health information) on our website without first receiving his or her parent’s verified consent, or that a provider has volunteered information about a patient who is identified as younger than 15 without first receiving the patient’s parent’s verified consent, we will use that information only to respond directly to that under-15 user (or his or her parent or legal guardian) to inform the child that he or she cannot use the Services and subsequently delete such information from our active databases in accordance with our deletion practices, which is described in the section titled, 'How We Hold and Protect Personal Information' except as required to fulfil our pharmacovigilance reporting obligations.

If you believe Amgen may have any information from or about a child aged under 15, please contact our Privacy Office using the contact information at the end of this Privacy Notice.

Amgen aims to provide you with choices regarding the Personal Information you provide to us. This section describes mechanisms that we offer you to control certain uses and disclosures of your information.

• Online collection opt-in. When you access any interactive tool or service on our website, you will be asked to affirmatively choose ("opt-in") to provide the requested information. You may always choose not to provide the requested information but then you may not be able to use the service as intended.
• Accept Cookies. Your browser software can be set to reject all cookies. However, if you reject our cookies, certain functions and conveniences of our website may not work properly. To find out more about cookies, and how you can decline to accept them, please refer to your internet browser's instructions or help option or visit allaboutcookies.org.
• Access and Correct/Update Personal Information. You have a right to request to access or correct/update your personal information (including your health information). You may make such a request at any time, by contacting our Privacy Officer on the details set out at the end of this Privacy Statement, or completing the form located here. We will provide you with access to the information we hold about you, and/or correct/update that information, unless there is an exception that applies under the Australian Privacy Principles. In particular, we may not be able to amend your personal information if it was provided to us by a healthcare professional or a consumer regarding an adverse drug event.
• Remove Personal Information. You may request that Amgen delete/erase previously provided personal information (including health information) by contacting our Privacy Officer on the details set out at the end of this Privacy Statement. Legal requirements in some countries may prevent us from deleting certain personal information. In particular, we may not comply with a consumer's request to delete information that was provided to us by a healthcare professional or a consumer regarding an adverse drug event.

It is not technologically possible to remove from our servers each and every record of your information. The need to back-up our systems to protect information from inadvertent loss means that a copy of information about you (including your health-related interests) may exist in a non-erasable form that will be difficult or impossible for us to locate.

Nevertheless, when permitted by law, Amgen will delete your personal information (including health information) stored in the databases Amgen actively uses for research and daily business activities or stored in other readily searchable media. In addition, we will use reasonable efforts not to disclose any personal information stored in a non-erasable format after receiving your request for removal, except as required by law.

• How to Make a Privacy Complaint. If you wish to make a complaint about our handling of your personal information, please contact our Privacy Officer on the details set out at the end of this Privacy Statement. You will be asked to submit your complaint in writing. We will respond to your complaint as soon as practicable. If you are a participant in a clinical trial, your complaint may be referred to the principal investigator for the clinical trial.

If you are not satisfied with our response to your complaint, you may also contact the Office of the Australian Information Commissioner as follows:

Online: www.oaic.gov.au/privacy
Phone: 1 300 363 992
Email: enquiries@oaic.gov.au
Fax: +61 2 9284 9666
Mail: GPO Box 5218 Sydney NSW 2001 or GPO Box 2999 Canberra ACT 2601

We retain information as long as it is necessary and relevant for our operations. In addition, we retain Personal Information to comply with applicable law, prevent fraud, resolve disputes, troubleshoot problems, assist with any investigation, enforce our Terms of Use, and other actions permitted by law. When your Personal Information is no longer needed for Amgen’s business purposes, we dispose of it subject to applicable law.

We hold your personal information in a combination of hard copy and electronic files. Electronic files are stored in servers that are operated and maintained by Amgen and third parties under contract with Amgen.

We want your personal information to remain as secure as reasonably possible. To help ensure the integrity and security of the personal information (including health information) you provide to us, we may use encryption practices. As an added security precaution, all personal information (including health information) is kept physically behind firewalls and other network security devices to prevent intruders from gaining access.

The security of information transmitted through the internet cannot, however, be guaranteed. We are not responsible for any interception or interruption of any communications or for changes to or losses of data through the internet. Users of the Services are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of the Services. Any access to the Services through your user ID and password will be treated as authorised by you. To help protect your Personal Information, we may suspend your use of all or part of the Services, without notice, if Amgen suspects or detects any breach of security. Unauthorised access to such areas is prohibited and may lead to criminal prosecution.

If you have any questions or comments about this Privacy Statement, or wish to access or correct your personal information or make a privacy complaint, please contact our Privacy Officer at:

Attn: Privacy Officer
Amgen Australia Pty Ltd
Level 11, 10 Carrington Street
Sydney NSW 2000
Tel: +61-2-9870-1333
Email: privacy@amgen.com

Alternatively, you may click on the "Privacy Request" link at the end of this paragraph. By doing so, you acknowledge that you will be redirected to a secure website hosted by OneTrust, which processes privacy requests for Amgen. To submit a request, please click Privacy Request.