Privacy and Cookies Statement

Effective Date: October 2026

This Privacy and Cookies Statement (Privacy Statement) tells you how we collect, use, share, and protect your personal data, and applies to your use of www.ascensia.com (Website).

Our Website is operated by Ascensia Diabetes Care Holdings AG (Ascensia) of Peter Merian-Strasse 90, P.O. Box 4052 Basel, Switzerland, who is the controller of any personal data collected via the Website. This means we are responsible for deciding how and why we use your personal data.

Please read this Privacy Statement to understand how Ascensia uses personal data provided via our Website.

INDEX

1. Personal Data Collection

You are not required to provide any personal data as a condition of using our Website. Where you submit personal data to us, Ascensia will handle your personal data for the following purposes:

• Communications via our Website: If you complete an online web form, contact us with an enquiry, or similar situations in which you have chosen to provide information to us, we will use the information to respond to your request, including for customer services support.

When you communicate with us via our Website, the types of information we may collect from you include: your name, gender, date of birth, address, contact details including your email address, language preference and details of your communication.

• Information About Your Device: When you use our Website, we will automatically receive technical information, including the name of your internet service provider, the website that you used to link to our Website, the websites that you visit from our Website, the type of device you use, a unique device identifier (such as MAC address of the device’s wireless network interface), mobile network information, your operating system and software version number, IP address, the type of browser you use, the country and language code and time zone setting. We do not use this information to identify any individual.
• Job Applicants: We also collect and use your personal data if you apply for a position at Ascensia or at any of our Ascensia group of companies. See the separate recruiting privacy statement for more details.

2. Your Health-Related Information

Where you complete an online web form or contact us with an enquiry, you may choose to provide us with your health-related information for us to respond to your communication, or to help us provide customer service tailored to your needs. This health-related information may include details of your blood glucose meter, in connection with a potential adverse incident.

The Reasons for Handling your Personal Data

To enable us to perform the contract entered into between you and us and for our legitimate business interests including for statistical purposes, we will use your personal data:

• to enable us to respond to an enquiry you make when you contact us via our Website;
• to continue to develop, test and improve our Website, including to offer new functionality and features;
• to better understand how you interact with our Website, including its features, and ensure that content is presented in the most effective manner; and
• to administer any Ascensia competitions you may have entered.

For our legitimate business purposes relating to direct marketing, and where required, on the basis of your consent, we will use your personal data:

• to invite you to participate in surveys, competitions or other promotional activities concerning our products and services, including in conjunction with selected third party partners;
• to make suggestions and recommendations about products or services that may interest you, as described in the “Marketing” section below; and
• to measure and understand the effectiveness of advertising we may serve and to deliver relevant advertising.

To comply with local legal and regulatory requirements, we will use your personal data:

• as necessary if we need to issue a safety notice or corrective action related to any of our products or services; and
• to report events to governmental or regulatory authorities that are responsible for medical devices and/or telemedicine policies, including related to medical device reimbursement and funding.

For reasons of public interest in the area of public health relating to medical devices, to conduct scientific research and/or for our legitimate business purposes, we may use and disclose to third party researchers statistical, aggregated, anonymised or de-identified/pseudonymized information (this is information from which Ascensia will remove personal identifiers such as name and email address) for the purposes of:

• determining and improving the effectiveness of diabetes management therapies, treatments, and costs;
• researching and evaluating how our products and services are provided and used; and
• evaluating the performance, impact and experience of our products and services (including based on user demographics, such as geography).

As part of providing our services to you, and where appropriate, we may use artificial intelligence such as machine learning for automated analysis, for example to assist customer support in providing responses more quickly.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law, and we will not attempt to re-identify such information unless permitted by law.

With your consent, we may use your health-related information (as outlined under “Your Health-Related Information” section above) to enable us to respond to an enquiry or other request you make when you contact us via our Website or to help us understand your needs so that we can better assist you, including in connection with your use of our Contour Diabetes App.

3. Marketing

We may contact you to tell you about products and services that we feel may be of interest to you or that are similar to those that you have already purchased or enquired about.

You may be contacted by us, Ascensia Diabetes Care Holdings AG, a distributor of Ascensia products, or by one of our selected partners, in each case where you have consented to receive these communications.

You may opt out of receiving our marketing communications at any time by contacting us at dp_office@phchd.com or by using the unsubscribe link in any of our communications.

We will continue to contact you for non-marketing related purposes where we need to issue a field corrective or safety notice, or to where we need to send certain information to you under a legal, regulatory, or ethical requirement.

4. Sharing your Personal Data

We do not rent or sell your personal data to anyone. Ascensia may share your information with:

• Ascensia Diabetes Care US Inc. and Ascensia Diabetes Care Holdings AG, the details of which are listed on our Website at http://diabetes.ascensia.com/en/contact-us;
• our selected partners where you have chosen to participate in surveys, or other marketing-related initiatives relating to your use of our products and services;
• a prospective seller or buyer in the event of a sale or purchase of any Ascensia business or asset so that the buyer can continue to provide you with information and services;
• where we provide your personal data to service providers, they are required to keep your personal data confidential and secure, and to use your personal data as instructed by us; and
• our distributors, business partners, or service providers, including for marketing purposes or where you have chosen to share your personal data through various features and functionality provided via our Website.

We may also disclose your personal data where required to respond to authorized requests from government authorities or where required by law, including for national security. Where we are required by law, we may also disclose your personal data where it is necessary to enforce or apply this Privacy Statement or other agreements, to investigate or protect the rights, property or safety of Ascensia and our group companies, our products and services and our customers, distributors or business partners or to prevent or take action regarding illegal activities or fraud, situations involving potential threats to the safety of any person or as evidence in litigation. Your personal data may be subject to foreign laws and may be accessible by foreign governments, courts, law enforcement, and regulatory agencies.

5. Storing your Personal Data

Residents of the European Economic Area (EEA), United Kingdom (UK), or Switzerland: Your personal data will be stored in Europe. We may also transfer personal data to service providers located outside Europe, including where required to administer an enquiry you make via our Website or the provision of support services. Such countries may have different levels of data protection than those that apply in your country of residence and where we transfer personal data, we rely on appropriate arrangements to protect personal data, including certifications (such as the EU-US Data Privacy Framework or its successors) or signing data transfer agreements with recipients of the information (such as special contracts known as the EU Standard Contractual Clauses, and equivalents).

Ascensia will store your information for as long as we have to by law, and where there is no legal requirement, we will only store it for as long as necessary to fulfil the purposes for which it was collected as described in this Privacy Statement. To determine the appropriate period for storing personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we hold your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Keeping your Personal Data Secure

Ascensia implements appropriate administrative, technical, and physical safeguards to protect the confidentiality, integrity, and availability of your personal data. We will use strict procedures and security features, and take all steps reasonably necessary to ensure your personal data is secure.

We also impose contractual restrictions and take other reasonable steps to prevent your personal data being used to train commercial LLM models.

Please note that the transmission of information via the internet is not completely secure. Although Ascensia will do its best to protect your personal data, we cannot guarantee the security of your information transmitted via our Website and any transmission is at your own risk.

7. Use of Cookies

We use cookies and similar technologies. These are small data files that are sent to your browser and placed on your computer's hard drive when you visit a website. The information the cookie contains is set by a website's server and it can be used when the user visits the website. Cookies are designed to remember things that an internet user has done whilst on a website in the past, which can include logging in, or clicking on links.

We use the following cookies on our Website:

• Strictly necessary cookies: Required for the operation of our Website. They include, for example, cookies that enable you to move around the Website and to use its features.
• Analytical/performance cookies: Allowing Ascensia to recognize and count the number of visitors and to see how visitors interact with our Website. This helps us to improve the way our Website works, for example, by ensuring that users find what they are looking for easily. The information that these cookies collect is mostly anonymous but could include your IP address, which is a unique code assigned to every computer and device connected to the Internet. IP addresses are usually assigned in geographic blocks and may allow website operators to identify the country, state, and city in which the computer or device is based. We may collect either full or partial IP addresses to help us identify the location of our Website visitors.
• Functionality cookies: These recognize you when you return to our Website. This enables us to personalize our content for you, for example, your choice of language or region.
• Targeting cookies: These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information to make our Website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Some of these are persistent cookies that, for example, record your cookie preferences. Others are session cookies that are stored only temporarily during the browsing sessions and are deleted once the browser is closed.

We use cookies and similar technologies for the following purposes:

• to improve our Website security;
• to identify you when you use our Website and remember your preferences;
• to analyze how you use our Website by tracking specific actions on our Website, such as visits to the various pages of our Website;
• to collect anonymous statistical information on how visitors use our Website so that we can make improvements to its usability and to improve content delivery value;
• to allow you to share pages with social networks like Facebook and LinkedIn;
• to determine the effectiveness of our online campaigns in terms of both sales and user activity on our Website;
• to optimize our advertising by ensuring we can deliver relevant advertising to our Website visitors on other websites; and
• to allow us to assess the success of our advertising by identifying events on our Website which happened as a direct result of our advertising.

We also use cookies and similar technologies provided by other companies to collect web traffic information such as time, date, IP address, and browser, so that we can store your preferences and other information on your device and save you time on subsequent visits by eliminating the need to repeatedly enter the same information. In most circumstances the information captured cannot identify you as an individual. If this data could lead to your identification, we do not use it to do so.

8. Opting out of cookies

You may refuse to accept cookies by altering the settings on your internet browser (for example Internet Explorer, Chrome, and Firefox). Please note that if you choose not to permit cookies some areas of our Website may not function properly.

In general, by consulting the help menu item in your internet browser, instructions on how to disable or delete cookies is available. Most browsers are set-up to accept cookies automatically. In addition, you can deactivate the storing of cookies. You may also use self-regulation programs available in your jurisdiction to manage the way that companies advertise to you, such as Your Online Choices | EDAA.

Please note though, that if you delete your cookies we will no longer know that you've opted out of online behavioral advertising, so any banners from third-party advertisers will reappear when you visit other selected websites.

9. Children

We will not collect or use via our Website any personal data of anyone we know to be under 16 years old without the verifiable consent of his or her parent/guardian. A parent/guardian has the right, upon request, to view the information provided by their child and/or to require that it be deleted. If we discover that a child has provided us with personal data online through our Website, we will take reasonable steps to delete this data. If you are a parent/guardian with any concerns regarding your child’s personal data in connection with our Website, please contact Ascensia at dp_office@phchd.com.

10. Exercising Your Rights

Residents of the European Economic Area (EEA) or Switzerland: You have the right to: request (a) access to the personal data we hold about you; (b) request we correct any inaccurate personal data we hold about you; (c) request we delete any personal data we hold about you; (d) restrict the processing of personal data we hold about you; (e) object to the processing of personal data we hold about you; (f) make a complaint about a breach of your data protection rights and/or (g) receive any personal data we hold about you in a structured and commonly used machine-readable format or have such personal data transmitted to another company. We may ask you for additional information to confirm your identity and for security purposes, before disclosing information requested to you.

Where you have been asked to consent to the processing of your personal data, we will provide you with an opportunity to withdraw your consent. You can withdraw consent, such as by contacting us using our contact details below. In each case you will be given information about how to withdraw consent. Any withdrawal of consent will not affect the lawfulness of the processing based on your consent before the withdrawal. Please also note that where you withdraw consent, we will only stop processing your personal data that relates to the withdrawal of consent.

To exercise any of your rights in connection with your personal data, regardless of your location, please contact Ascensia by email at dp_office@phchd.com or by mail to Ascensia Diabetes Care Holdings AG, Peter Merian-Strasse 90, P.O. Box, 4052 Basel, Switzerland. We want to work with you to resolve any complaint about our use of your personal data. You can make a complaint by contacting the Data Protection Officer, using the details below. If you are not satisfied with how we handle your complaint, you can complain to the relevant supervisory authority in your country.

11. Links to Other Web Sites

Our Website may contain links to other third-party websites that are not governed by this Privacy Statement. Although we endeavor to link only to websites with high privacy standards, this Privacy Statement will no longer apply once you leave our Website.

Links to other websites are provided for information only and do not constitute endorsements of those other websites. Ascensia and/or its affiliated companies are not responsible for the content of links or third-party websites and do not make any representation regarding their content or accuracy. Your use of third-party websites is at your own risk.

12. Changes to this Privacy Statement

Any changes we make to our Privacy Statement in the future will be posted on this page and, where appropriate, notified to you by e-mail.

13. Contact Us

Questions and requests regarding this Privacy Statement should be addressed to the Data Protection Officer at dp_office@phchd.com or to Ascensia Diabetes Care Holdings AG, Peter Merian-Strasse 90, P.O. Box, 4052 Basel, Switzerland. If you contact us, we will do our utmost to address any concerns you may have about how we handle your personal data.

14. For individuals in the United States

California Privacy Rights

Our California Privacy Disclosure explains how Ascensia collects, uses, and discloses the personal information of California residents subject to the California Consumer Privacy Act, amended by the California Privacy Rights Act (“California Privacy Rights Act”). This Disclosure also applies to residents of certain other US States which have their own privacy laws, including the rights that may be available to residents of these states, as applicable.

For more information about how we collect, disclose and secure information about our customers, please refer to our Privacy Statement.

To the extent this notice conflicts with our Privacy Statement, this Disclosure takes precedence for residents of California, and other relevant US States.

California Disclosure

Personal Information under the California Privacy Rights Act: Under the California Privacy Rights Act, “Personal Information” is information that identifies, relates to, or could reasonably be linked to a particular California resident or household.

Personal Information We Collect: We collect Personal Information about California residents in a variety of contexts. The main reason we collect Personal Information about California residents is to provide products and services. However, the Personal Information that we collect, use, and disclose about a California resident will depend on our relationship with that resident. In the previous 12 months, we have collected the following types of Personal Information about California residents subject to the California Privacy Rights Act:

1. Identifiers, such as name and email address;
2. Internet or network activity information, such as browsing history and interactions with our website; and
3. Inferences drawn from any of the Personal Information listed above to create a profile about an individual’s characteristics.

How We Use Personal Information: The purposes for which we use the Personal Information that we collect about California residents depends on our relationship with the specific individual. Generally, we may use Personal Information to operate, manage, and maintain our business, to provide our products and services, and to achieve our business objectives. For example, we use Personal Information to personalize, develop, market, and provide our products and services, detect and prevent fraud, maintain our systems and infrastructure, perform security control and monitor and maintain business records. We do not use sensitive personal information, such as medical information, to provide this Website. Additional information on how we may use Personal Information can be found in the section titled “How we use your data” above.

How We Share Personal Information: We share Personal Information about California residents for our business purposes in a variety of contexts. For example, we disclose Personal Information about California residents to our service providers to market our products and services. In the past 12 months, we have disclosed to third parties, such as our distribution partners, the following categories of Personal Information about California residents that are subject to the California Privacy Rights Act:

1. Identifiers, such as name, and email address;
2. Internet or network activity information, such as interactions with our website;
3. Inferences drawn from any of the Personal Information listed above to create a profile about an individual’s characteristics, for example.

How Long We Keep Personal Information: We keep your Personal Information for as long as needed or permitted taking account of the purpose(s) for which it was collected, and we will also consider:

• if we have a continuing relationship with you;
• if retention is required by a relevant legal obligation; or
• if it is legally advisable (such as litigation or regulatory investigations, or the time available to bring a legal claim).

We may remove Personal Information for inactive accounts from our database, subject to any applicable legal or regulatory obligations. Similarly, we may delete Personal Information at any time and without providing a reason.

How to Access, Correct or Delete Your Personal Information: please see the general privacy rights section below.

We Do Not Sell Personal Information: As stated in this Disclosure, in the past 12 months we have not “sold” Personal Information about California residents. In this Disclosure, “sold” means the disclosure of Personal Information for monetary or other valuable consideration, and "shared" means the business sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, an individual’s Personal Information to a third party for cross-context behavioral advertising, whether for monetary or other valuable consideration.

Sharing Personal Information and Opt-Out Right In the past 12 months, we have shared the following types of Personal Information about California residents that are subject to the California Privacy Rights Act, with third parties for cross-context behavioral advertising:

1. Identifiers, such as name and email address;
2. Internet or other electronic network activity information, including, but not limited to, IP address, unique device identifier, browsing history and information regarding an individual’s interaction with our website.

For more information about how we collect, disclose and secure information obtained through Ascensia.com and other websites operated by us and through our social media pages and targeted advertising activities, please review our Privacy Statement.

CPRA Annual Metrics: Under the CPRA, we provide on request a copy of the Annual Report that provides requested metrics for the previous calendar year. To access the metrics, contact dp_office@phchd.com. Ascensia does not sell Personal Information and therefore does not have any statistics for Opt Out requests.

Privacy Rights – requests to access, correct and delete Personal Information

Requests for Access to and Correction of Personal Information: If you are a resident of California you may request that we provide to you the following information covering the 12 months preceding your request:

1. the categories of Personal Information that we collected about you and the types of sources of such information;
2. the business or commercial purpose for collecting Personal Information about you;
3. the categories of Personal Information about you that we disclosed to third parties for a business purpose and the categories of third party recipients (if applicable); and
4. the Personal Information we collected about you.

Residents of California can also request correction of inaccurate Personal Information that we have about you. In some cases, we may refuse your request. For example:

• If we cannot verify your identity;
• If we cannot confirm that the Personal Information that we hold relates to you; or
• If an exception under the relevant state laws applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of another.

Requests to Delete Your Personal Information: If you are a resident of California, you may also request that we delete Personal Information that we collected about you. We may refuse your request where an exception under the relevant state laws applies.

In accordance with applicable law, we will not discriminate against you for exercising these rights.

Shine the Light: To the extent we share your Personal Information for third parties’ direct marketing purposes, you may contact us at dp_office@phchd.com to request details of what we may have shared, and with whom.

If you are a resident of California, or any other US State offering similar rights, you can request access, correction, deletion, or any of your other privacy rights by contacting dp_office@phchd.com or calling (800) 522-7270. We will let you know if the rights do not apply to you.

Your request must:

• Provide sufficient information to allow us to reasonably verify you are the person about whom we hold Personal Information, or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, and respond to it.

We cannot provide you with Personal Information if we cannot verify your identity or authority to make the request or we cannot confirm the Personal Information relates to you.

Authorized Agents

If you are an authorized agent, we will request written and signed authorization from the consumer and will seek to verify the consumer as described above, or we will accept a legal Power of Attorney under the California Probate Code (or equivalent law). At a minimum, we will require evidence of your (the agent’s) identity (via passport or driver’s license submission), proof of registration with the California Secretary of State (or State equivalent), and at least one of the following evidencing proof of your legal authority to act on behalf of the individual who is the subject of this request:

• Written authorization signed by the consumer;
• Certified copy of a Power of Attorney granted under Probate Code, or legal equivalent; or
• Evidence of parental responsibility.