This Notice explains how Novo Nordisk Pharma (Thailand) Ltd. processes (e.g., collects, uses, stores, and shares) your personal data in accordance with this Notice and applicable legal requirements.

1. HOW DO WE COLLECT PERSONAL DATA ABOUT YOU?

We can get your personal data from one of the following sources:

• From you directly
• From other Novo Nordisk entities
• From business partners or other external parties
• From publicly available sources

2. WHY DO WE PROCESS YOUR PERSONAL DATA?

We process personal data about you for the following purposes:

• To coordinate a conference or event
• To deliver marketing and events communication

3. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

For the purposes described above in Section 2, we may process the following types of personal data:

• Contact information (name, address, telephone number, email address, workplace)
• Information on education and/ or professional experience
• OTHER – workplace

4. HOW DO WE SHARE YOUR PERSONAL DATA?

For the purposes described above in Section 2, we may share your personal data with:

• Other Novo Nordisk entities (e.g., Novo Nordisk headquarters or affiliates in other countries)

5. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

We will keep your personal data for the period of time relevant to meet the purpose of processing and to comply with applicable law, but not less thenlonger than 31st December 20205 and will delete it when no longer needed.

6. QUESTIONS OR CONCERNS ABOUT YOUR DATA.

You can always contact Novo Nordisk Pharma (Thailand) Ltd. at 66 6-5524-9469 or PPQY@novonordisk.com with questions or concerns about how we process your personal data.