HCP Privacy Statement

• When you interact with Amgen staff members or our representatives.
• When you participate in, or request to be considered for Amgen-related activities, such as clinical trials, advisory boards, or consultancies.
• When you register for an Amgen-sponsored event (including online events); and
• When you contact us for medical information, safety, or quality issues.
• When you interact with Amgen or third-party websites or mobile applications ("Apps") where you have provided personal information in accordance with their respective privacy policies.

In addition, Amgen is regularly provided with professional information about HealthCare Professionals in the Kingdom of Saudi Arabia from a third-party service provider. Amgen takes steps to ensure that the information it receives has been collected and transferred in compliance with applicable privacy laws.

Amgen may process personal information about you on one of the following grounds: A) for legitimate business purposes, (B) where you have given your consent, (C) to comply with Amgen's legal and regulatory obligations, and (D) in connection with a contract under which you perform a task.

Depending on the purposes for which personal information is collected, Amgen may process:

• Your name
• Your contact information such as address, email, or telephone number
• Your login and password to connect to Amgen services online.
• Your curriculum vitae and professional information such as areas of specialization
• Your past collaborations with Amgen
• Dates and brief summary of interactions with Amgen’s sales representatives or medical staff; and
• Professional registration number
• National ID
• Professional and interaction preferences
• Financial and banking information, but only if necessary to pay you for services or reimburse your expenses.

Depending on the purposes for which personal information is collected, such information may be accessed by:

• Authorized staff from Amgen or its representatives acting on Amgen’s behalf, subject to applicable privacy laws.
• Regulatory authorities and ethics committees or other third parties pursuant to applicable laws.
• Third parties processing personal information as a data processor under Amgen’s instruction (for example, a travel service or a clinical research organization); and
• Third parties with which Amgen collaborates (for example, other pharmaceutical companies), but only after taking reasonable steps to ensure that we can share such information in compliance with applicable privacy laws.

Amgen is a multi-national company headquartered in the United States. Amgen maintains data centres around the world, including in the European Union and the United States. Amgen may process personal information in global databases that can be accessed by authorised Amgen personnel worldwide. Transfers outside of the Kingdom of Saudi Arabia are made in accordance with applicable privacy laws. Transfers of personal information among Amgen and its group entities follow applicable laws. For more information on the BCRs, including your ability to file a complaint about any processing of your personal information in violation of the BCRs, please visit http://www.amgen.com/bcr/. Regardless of where your personal information is collected or processed, Amgen maintains and shall ensure that third parties maintain appropriate administrative, technical, and physical safeguards to protect information about you.

Amgen process your personal data for the period necessary to fulfill the purposes outlined in this privacy notice and to preserve your personal information in accordance with the provisions of relevant laws and regulations.

The criteria followed is determined by:

• The purpose of the data collected and the fulfillment of that purpose.
• The ground on which the data are being collected: e.g. in case of consent, you can revoke it at any time.
• Mandatory retention periods provided by contractual and regulatory requirements.

If you would like to receive more information about a specific processing, please contact Amgen's Data Protection Officer at privacy@amgen.com .

If you wish to access, correct, or delete your personal information, please contact Amgen's Data Protection Officer at privacy@amgen.com or Riyadh, Al Olaya Dist. Olaya St,Centria Mall 4th Floor, Saudi Arabia.

Alternatively, you can click on the "Privacy Request" link found at the end of this paragraph. By doing so, you agree to be redirected to a secure website provided by OneTrust, which handles Amgen's privacy requests. To submit a request, click https://privacyportal.onetrust.com/webform/f56ba454-120c-4338-bbd0-0f27ae8cd5c3/e48b5cbc-7233-4637-a379-3ae61c030a48

According to the right to data portability, you have the right to request that your personal information provided to Amgen be delivered to you in a structured, commonly used and machine-readable format, subject to certain conditions and can be requested by contacting Amgen’s Privacy Compliance at privacy@amgen.com. Alternatively, you can click on the "Privacy Request" link found at the end of this paragraph. By doing so, you agree to be redirected to a secure website provided by OneTrust, which handles Amgen's privacy requests. To submit a request, click on https://privacyportal.onetrust.com/webform/f56ba454-120c-4338-bbd0-0f27ae8cd5c3/e48b5cbc-7233-4637-a379-3ae61c030a48

If you believe that your personal information has been processed in violation of any applicable law, rule, or regulation, you have the right to lodge a complaint with your local supervisory authority: support@ndmo.gov.sa

Amgen's Data Protection Officer: privacy@amgen.com