Privacy Statement for Healthcare Professionals

1. Controllers for the processing

MSD Merck Sharp & Dohme AG
Bürgenstrasse 8
6005 Lucerne

MSD Animal Health GmbH
Bürgenstrasse 8
6005 Lucerne

MSD Innovation & Development GmbH
The Circle 66
8058 Zurich

(hereinafter “MSD” or “We”)

This Privacy Statement (“Privacy Statement”) for Healthcare Professionals (hereinafter “Healthcare Professionals” or “You”) describes how we process the personal data of Healthcare Professionals, how we use personal data, and any rights You have with regard to Your personal data.

2. Personal data processed by us

Personal data is any information relating to You that We collect in connection with any interactions with You, such as our meetings, Your participation in our training or information programs, events, Your inquiries and Your communication with us. We may also process personal data that You provide to us or that results from Your use of our websites or online services and those of our partners. We receive personal data from companies that provide information in the healthcare sector, sources of information open to the public, and business partners. Depending on the purpose, We process the following personal data:

• Last name, first name;
• Contact details (mailing address, telephone numbers, email address, fax number, language);
• Data about Your professional activity, including academic titles, data about Your general and professional education, specialty, specialist designation, research ac-tivity, publications, CV, roles, connections, practices, clinics, pharmacies at which You work;
• Data relating to our interactions with You and use of our services;
• Preferences with regard to the way You communicate with MSD, times when You can be reached best, and frequency of communication and response to it, specialty or main interest;
• Data about the performance of our services, such as participant and travel infor-mation;
• Financial and bank information You provide to us, credit card number, VAT number;
• Login data;
• Navigation data on our websites or online services or those of our partners (see our Global Internet Privacy Policy and our Global Online Tracking Policy in this regard), cookies (see our Data Protection Preference Center in this regard, which can be found at the bottom of our website by clicking on the “Cookie Preferences” button).

If MSD asks You to provide Your personal data, You have the right to decline. If You decline to provide data required by us to either comply with legal obligations or to provide You with a requested service or to perform contractual obligations, We will not be able to provide those services or enter into a contract with You. If that is the case, We will inform You accordingly.

3. Purpose of processing

We process Your personal data for the following purposes:

• Implementation, monitoring and evaluation of our activities on the basis of our over-riding interest (Art. 13 para. 1 DSG (Datenschutzgesetz [Data Protection Act]), Art. 31 para. 1 revDSG (revidierte Fassung des DSG [revised version of the DSG]), Art. 6 para. 1 lit. f GDPR):

• Fulfillment of our legal obligations (Art. 13 para. 2 lit. a DSG, Art. 31 para. 2 lit. a revDSG, Art. 6 para. 1 lit. b GDPR):

• Fulfillment of our contractual obligations (Art. 13 para. 2 lit. a DSG, Art. 31 para. 2 lit. a revDSG, Art. 6 para. 1 lit. b GDPR)

• Based on Your consent (Art. 4 para. 5 DSG, Art. 6 para. 6 revDSG, Art. 6 para. 1 lit. a GDPR)

4. Sharing personal data with third parties

Depending on the purpose for which Your personal data is processed, Your personal data may be shared with the following third parties:

• With MSD group companies in Switzerland and the EU, as well as with the parent company Merck & Co, Inc., Rahway, NJ, USA;
• With professional associations in the context of regulations, particularly transpar-ency regulations;
• With authorities and courts to comply with or accede to legal, regulatory or judicial requirements or orders;
• With third parties who process Your personal data as contract processors at the direction of MSD (such as database managers, email transmission and analysis, management of login data, providers, contract research organizations – CROs, etc.);
• With third parties who independently manage access to password-protected web-sites such as mymsd.ch, in particular the foundation refdata, Baarerstrasse 2, 6300 Zug, which manages “swiss-rx-login”. You should review the privacy statements of these third parties before using the functionalities. You can find the privacy state-ments of the refdata foundation here.
• With third parties who provide services in the healthcare sector;
• With other healthcare professionals in the context of projects (such as projects for optimization of patient care or monitoring of medical care);
• With entities in the context of development, distribution, co-promotion or marketing agreements, or with third parties in the context of mergers, splits, conversions, as-set transfers and liquidations.

5. Retention period of personal data

MSD will retain Your personal data for as long as it is necessary for the purposes described. As a rule, personal data may be retained for up to 11 years after termination of the interac-tion, the project or the contractual relationship with us.

6. Disclosure of personal data abroad

To ensure adequate protection of Your personal data, Merck & Co, Inc., Rahway, NJ, USA has implemented binding corporate rules to regulate the transfer of data within MSD group companies. The countries in which MSD group companies are represented can be found here.

In the event of further transfer to countries where adequate protection of personal data is not guaranteed, MSD and/or Merck & Co, Inc., Rahway, NJ, USA will contractually ensure that adequate protection is guaranteed, in particular by agreeing to the EU Commission’s Standard Contractual Clauses (SCC) which have been approved by the EDÖB ( Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter [Federal Data Protection and Information Commissioner]. The data may be processed in any country in which companies of the MSD group are represented (see above), and in particular, in the following countries: USA, the Czech Republic, Singapore, India, Switzerland, Belgium, Argentina, the Nether-lands, Germany, France, Ireland, the United Kingdom.

7. Your rights as a data subject

In accordance with the provisions of the Data Protection Act and subject to fulfilling the conditions foreseen therein, You have a right to information regarding the data concerning You, to correction, to deletion, to restriction of processing, to revocation of the consent granted and to transfer the personal data provided by You.

You also have the right to object to the processing of Your personal data, including profiling, for reasons relating to Your particular situation.

If You wish to exercise these rights, You can use the contact form provided for this purpose.

Alternatively, you may submit Your request by email to MSD_privacy_office@msd.com or by mail to the address at the top of this Privacy Statement, to the attention of the Office of the Data Protection Officer. If necessary, You may also use the unsubscribe links in the corresponding emails.

The MSD Group has appointed a data protection officer, who can be reached at the follow-ing address: euprivacydpo@msd.com.

You also have the right to file a report with the Federal Data Protection and Information Commissioner (EDÖB). You can find more information on data protection of the MSD Group here.

^{CH-NON-03544, 10/2026}