This Privacy Policy, provided in accordance with Articles 13 of Regulation (EU) 679/2016 (“GDPR”), describes how LEO Pharma (“we” or “us”) processes your personal data when you use uae.chronic-hand-eczema.com (“The Website”) or register for one of our services.

The data controller is LEO Pharma A/S, Industriparken 55, 2750 Ballerup, CVR no. 56759514] (“LEO Pharma”).

What is personal data?

Personal data covers any information relating to you. It can be a name, an identification number, an email address or any other kind of information that can be used to identify you.

Use of your personal data

We process personal data for different reasons and purposes through the use of our Website. We collect personal data for the following reasons specified below in detail:

When you use the Website, we collect personal data about your behavior for the purpose of marketing, optimizing the Website and our services.

We may process the following personal data about you:

We collect the personal data directly from your use of the website.

We process your personal data for the purposes above when the processing is necessary for:

• Profiling and tracking of your use of the Website through cookies for marketing-related purposes based on your consent (article 6.1.a GDPR). The profiling does not produce legal effects concerning you or similarly significantly affect you, but it may result in you seeing different content or marketing materials tailored to your interests.
• You may withdraw or change your consent at any time by clicking on the cookie-icon at the bottom left of the Website.
• Pursuit of our legitimate interests in providing you with an interesting website that works optimally (article 6.1.f GDPR) through the use of analytic tools. Our legitimate interests are to improve our website functionality, understand how visitors use our services, and enhance user experience. We have assessed that these interests are not overridden by your interests or fundamental rights and freedoms.

If you register for one of our services or sign up to a newsletter, we collect your personal data.

We process the following personal data about you: • Information you provide to us for the purpose of registering for one of our services or a newsletter. It may include your name, email address, postal address etc.

We process your personal data for the purposes above when the processing is necessary for:

• Providing you with a service or a newsletter will be based on your consent. You may withdraw or change your consent at any time by following the opt-out instructions provided when you give the consent.

We collect the personal data directly from you. If you do not provide the requested personal data, we will not be able to provide you with the service or newsletter you have requested.

When you use our website, we use cookies to collect information about your visit (for example, pages viewed, interactions, and device settings) to improve performance and user experience.

We use a server-side analytics setup where your browser sends data to a LEO Pharma-controlled server first, rather than directly to Google. This LEO-managed server acts as a secure filter that decides which identifiers are stored or changed, replaces them with hashed or session-only versions, and removes them entirely if you haven't given consent. When you consent to analytic cookies, we replace direct identifiers with pseudonymised labels we control through a hashing process (coded values that don't directly identify you), and only then share analytics with Google Analytics from our server in pseudonymised form. We do not send raw browser identifiers to Google.

If you do not give consent, our server does not use Google Analytics client identifiers at all. Instead, we generate temporary identifiers based solely on technical, non-personal inputs (such as page encoding, language, browser type, screen resolution) combined with a short timestamp. These non-consent identifiers are session-only and cannot be used to recognise you across different visits.

This setup ensures that Google has no access to the hashing inputs or raw identifiers, non-consented visitors are never tracked across sessions, and all transformations happen entirely within LEO's infrastructure. The data leaving LEO's servers is either pseudonymised or anonymous, meeting both analytical needs and data protection principles.

For the full details on cookie types, retention, and your choices, see our Cookie Policy. Where consent is not given, our server-side analytics setup will not store information or gain access to information stored in your devices.

Our purpose of collecting and processing personal data in relation to the activities listed in this privacy policy is not to collect or process personal data about minors (people under 18 years old).

If you have any questions or concerns in this regard please contact us by using the contact information listed below.

You will have the option to go to other sites by using links on our website, e.g., to visit patient support groups. We will have no control over the processing of your personal data on these websites.

If you decide to enter one of the external websites a pop-up message will occur with a message ensuring you are informed that you are entering an external website over which LEO Pharma has no control of the processing of your personal data.

Transfer of personal data to third parties

Where necessary, LEO Pharma may share your personal data with:

• LEO Pharma affiliates, meaning any affiliate, company, corporation, firm, partnership or other entity controlling or controlled by LEO Pharma (“LEO Pharma Affiliates”);
• Google Ireland Limited (acting as our data processor), the purpose of enabling LEO Pharma to store and analyze web traffic data;
• Third party providers setting cookies on our website as described in our Cookie Policy; and
• Suppliers and vendors that we work with to assist our company, meaning service providers, technical support, supply services, and financial institutions.

Transfers of personal data to countries outside the EU/EEA

In order to provide some of our services, we may transfer your personal data to a supplier, vendor or LEO Pharma Affiliates located in countries outside of the EU/EEA. Such transfers will only take place on the basis of appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (i.e. model contracts for the transfer of personal data to third countries), which can be found here, or a decision by the European Commission deeming the third country to have an adequate level of protection of personal data.

You can always request a copy of applicable transfer agreements, which includes the transfer of personal data, by contacting us. If you want more information about whether your personal data will be transferred to a country outside the EU/EEA, please contact us by email at dataprivacy@leo-pharma.com.

Storage of data

Personal data will be retained as long as necessary to fulfill the purpose(s) described above and for providing you with the service you have registered for, unless we are required under applicable law to keep your personal data for a longer period or if it is necessary for us to retain the information for handling and defending a claim or a dispute. The retention time for cookies can be found in our Cookie Policy.

Security of your personal data

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

Your rights

As part of our processing of your personal data, you have the following rights:

• You are entitled to request access to, rectification or erasure of your personal data.
• You are also entitled to oppose the processing of your personal data and to request restriction of the processing of your personal data.
• You have in particular an unconditional right to oppose the processing of your personal data for direct marketing purposes.
• If the processing of your personal data is based on your consent, you are entitled to revoke such consent at any time. Revocation of your consent will not affect the lawfulness of the processing carried out prior to your revocation of consent.
• You are entitled to receive personal data which you have provided to us in a structured, commonly used and machine-readable format (data portability).
• You can issue instructions regarding the processing of your personal data after your death and request that we retain, erase or communicate your personal data to a specifically designated third party, it being specified that once we become aware of your death and in the absence of instructions from you, we undertake to destroy your personal data, unless its retention is necessary for evidentiary purposes or to comply with a legal obligation.

Further, you have a right to object to the following processing:

• You have a right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on art. 6.1.e GDPR or art. 6.1.f GDPR, including profiling based on those provisions.
• When your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing.

You may exercise these above rights to us by writing to the e-mail address under our Contact information below.

Furthermore, you have the right to and can always lodge a complaint with a local data protection authority if available.

Contact information

If you have any requests or questions about this privacy policy or our processing of your personal data, please e-mail us at DPO@leo-pharma.com

You can contact our Data Protection Officer in the following ways:

• By e-mail: DPO@leo-pharma.com
• On the phone: +45 7227 3002
• By letter: LEO Pharma A/S, Industriparken 55, 2750 Denmark, c/o Data Protection Officer

We may update this policy from time to time to reflect changes in our data practices or applicable regulations. Any updates will be posted on the Website with an updated revision date.