Pensari takes your privacy seriously and are committed to ensuring that your personal data is protected. We want you to understand our practices with respect to the handling of your personal data. This document explains how we do this.

Topics:

• Participation in research
• Research process
• Storage period / deletion of data in connection with this market research study
• Maintaining your privacy
• Confidentiality and consent
• Your rights, complaints and how to contact us
• Freedom of Information inquiries

Participation in research:

You have been contacted in order to recruit participants for a market research study, which is carried out on behalf of a company in the healthcare sector. Multiple independent market research agencies, who are specialized in the medical field, may be involved in conducting this study, which has been commissioned by a pharmaceutical company. The agencies involved will, with your permission, process your contact details, participant data, AE data and survey data, as specified below, for the sole purpose of this project.

Your participant data indicate the extent to which you fulfil the eligibility requirements for this study. AE data are details mentioned by you regarding adverse events, e.g. side effects and lack of efficacy. The survey data includes all information you reveal in the context of this study before, during or after the interview in an oral or written format, including audio and video recordings in addition to your contact data.

The following market research companies are working together, with only the companies below processing your personal data: Pensari LLC and [add relevant market research agencies here]. All must adhere to the information outlined below.

Research process:

1. Establishes contact to you and informs you about legitimacy of establishing contact.
2. Informs you about this market research study in accordance with this declaration.
3. Asks for your consent to further processing of your data in accordance with this declaration and possibly further declarations.
4. Checks criteria regarding your qualification to participate in this study.
5. Schedules an appointment for your interview.
6. Processes your name and contact details.
7. Conducts the survey or qualitative interview (one-on-one or in a focus group).
8. Records the sessions, audio or video (qualitative research only).
9. Asks you to complete interview material/ processes material completed by you.
10. Might ask for details in relation to adverse events mentioned by you, if applicable.
11. rovides you with the agreed upon honoraria amounting to [insert value in appropriate currency].
12. Keeps records of the receipt you have signed/ the transfer receipt for the honorarium.
13. Will re-contact you, if necessary.
14. Is your preferred contact partner if you have any questions.

Storage period / deletion of data in connection with this market research study:

• Receipt / transfer receipt including name for tax reasons: for as long as necessary according to tax laws, deleted afterwards
• All other categories of data: 3 years, deleted afterwards.

Maintaining your privacy:

1. When processing your contact data and other survey data with personal reference the market research agencies named above and the sponsoring pharmaceutical company comply with the General Data Protection Regulation, the applicable Federal Data Protection Act and country-specific guidelines for market and social research, including ESOMAR (European Society for Opinion and Marketing Research) and EPHMRA (European Pharmaceutical Market Research Association)
2. Any details provided by you will remain confidential and will only be passed on to the client without personal reference, i.e. without the possibility of personal identification. Please facilitate this by not introducing yourself with your name or mentioning any other identifying details in the interview. Your identity will only be revealed to other third parties if higher country-specific laws apply (e.g., tax law).
3. All market research agencies mentioned above, who will have access to your contact details – as described – will link your contact data and survey data to a code number and will store your contact data separately from the survey data as early as possible.
4. During the course of this study the companies involved will collaborate with other companies, which will assist them as processors in conducting the study and will therefore be granted access to the survey data. These include simultaneous translators, analysts, technicians, viewing facility staff, IT specialists, and data destruction companies. Adherence to the Federal Data Protection Act, General Data Protection Regulation and country-specific market research guidelines is ensured.
5. For qualitative interviews:
   1. In the viewing facility, a simultaneous translator, representatives of the market research agencies involved as well as representatives of the sponsoring pharmaceutical company and their associated creative agencies/consulting agencies will be watching/listening live from an adjacent room with a one way mirror for research and quality control purposes. The sponsoring pharmaceutical company ensures that their representatives and representatives of associated creative agencies/consulting agencies will take the highest possible measures to ensure that their representatives cannot know your identity, so that everything viewed/listened remains anonymous. In all cases, the sponsor of the study has signed a declaration of obligation to comply with all relevant codes of conduct for market research and data protection laws and therefore acknowledges that you will stay anonymous to him and the associated creative agencies/consulting agencies and all information will be used for market research purposes and within the research objectives of this study only. Client representatives working in the following areas/functions will be granted access to your interview: market research, market access, forecasting.
   2. At the other end of the video/telephone line, a technician, a simultaneous translator, as well as representatives of the market research agencies involved, the sponsoring pharmaceutical companies and their associated creative agencies / consulting agencies will be listening/watching live for research and quality control purposes. Your anonymity will be guaranteed by only transmitting the voice of the simultaneous translator and by pixilating your image.
6. Your rights: Your participation in this market research is completely voluntary, and you are not obliged to provide any information. There is no legal or contractual obligation, for you to provide any information, and you providing any information is not necessary for any conclusion of a contract either. You may terminate the interview at any time and do not need to answer the questions if you so wish. In the case of early interview termination you have the right to gain allowance pro rata. Non-appearance, not answering questions and discontinuation will have no consequences for you. In accordance with the General Data Protection Regulation at any time, you have the option to see into your stored personal data and to have them corrected or deleted or to limit the processing of this data. Furthermore, you can withdraw your consent for the usage of your information provided at any time. In case of withdrawing your consent, all saved information will be deleted instantly, and no further use is allowed. However, the processing of your data prior to your withdrawal of consent remains lawful. If one of the companies involved has based the processing of your data on article 6 (1) e) or f) GDPR as a legal basis for processing your data, i.e. public interest or commercial self-interest, you can object to the processing of your data at any time. Furthermore, you have the right to transferability of your data from us to a third party, as well as the right to put in a complaint at a regulatory authority.

Your rights, complaints and how to contact us:

You have the right to access your personal data that we hold for purposes of reviewing, rectifying, or deleting. If you would like a copy of some or all of your personal information, please email info@pensari.com or write to us at the following address:

Data Protection Officer
Pensari
107 Theodora Ct.
Forest Hill, MD 21050

If you have any questions or concerns relating to the handling of your personal data, or other privacy related query, please get in touch with us using info@pensari.com. If you are in the EU, you also have a right to raise a privacy concern with the Data Protection Authority established in the relevant EU country.

Freedom of Information inquiries:

If you represent a public authority governed by the Freedom of Information Act and you wish to consult with Pensari about a potential disclosure of Pensari information pursuant to a request you have received, please get in touch using info@pensari.com, giving your name, the name of the public authority you represent, your contact details, the nature of the request and the deadline for disclosure and you will be contacted by Pensari LLC.