Introduction
This Privacy Notice describes the usage of information provided or collected, disclosed or transferred to Zydus Lifesciences Limited (hereinafter referred to as "ZLL", “We”, “Zydus”, “Us”, “Our”) and/ or its subsidiary (ies) and / or affiliate(s) (collectively referred to as the "Company"). We follow this privacy policy in accordance with applicable law in most locations where we operate, subject to modifications basis any local applicable law.

It is important that you read this Privacy Notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are fully aware of how and why we are using your information.

How we use your data?
Purposes and Lawfulness of processing
We will only collect, store and use personal data about you where we have lawful basis. Lawful basis on which we would store and use your personal information includes obtaining consent from you for "legitimate interests" or “legitimate purpose” where processing is necessary by us to provide you with services and/or business purpose.

We use information to provide, analyse, administer, enhance and personalize our service and business efforts, to process your registration, to provide or obtain services, and to communicate with you related to below mentioned points. For example, we may use information to:

• Allow you to participate in interactive features offered through our services
• Sharing with our customer support team to resolve your queries/concerns related to your rights or services provided to you

Information use by Zydus :-

The Information supplied by you enables us to improve our services and provide you the most user- friendly experience(s). In some cases, for e.g. provision of certain product(s), or service(s), may require your contact information as well.

Any personally identifiable information provided by you will not be considered as sensitive if it is freely available and / or accessible in the public domain like any comments, messages, blogs, scribbles available on social platforms like Facebook, Twitter, LinkedIn, etc.

Any posted / uploaded conveyed / communication by users on the public sections of the websites / social media pages/s" becomes published content and is not considered personally identifiable information subject to this Privacy Notice.

In case you choose to decline to submit personally identifiable information on the Zydus website, we may not be able to provide certain services on the website to you. We will make reasonable efforts to notify you of the same. In any case, we will not be liable and / or responsible for the denial of certain services to you for lack of you providing the necessary personal information.

When you register from our website, we may contact you from time to time about updating your personal information to provide you features that we believe may benefit / interest you.

What data is collected?
The following provides the types of personal information that we may collect, use, store and transfer about you including without limiting to:
Purpose / Activity Types of Data Lawful basis for processing personal data
Employment –

for a job posting, or become an employee

1. Email

2. Phone Number

3. Resume

4. Education Details, etc. Evaluate candidate profile for suitability
Feedback/Support –

If you provide us feedback, require technical support, or if contact us for other assistance 1. Name

2. Email

3. Contact details, etc. Manage customer complaint resolution, feedbacks
Technical User Data –

to deliver relevant website content to you 1. IP address,

2. IP browser user agent, browser location

3. Browser fingerprints, etc. Information security monitoring

Retention and Disposal of Personal Data
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including the fulfilment of the contract, the initiation of a contract, or for the purposes of satisfying any legal, accounting, or other regulatory reporting requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal

information and whether we can achieve those purposes through other means, and the applicable legal requirements.

We do not sell or distribute the personal information in general or marketing purpose. We collect, store and use the personal information for business and service purpose for which the same is intended and as referred in this Notice.

Your Rights
1) Data subjects may have numerous rights in relation to their personal data.
Right to make a data subject access request (SAR): Data subjects may request in writing copies of their personal data. However, compliance with such requests is subject to certain limitations and exemptions and the rights of other individuals. Each request should make clear that a SAR is being made. You may also be required to submit a proof of your identity and any payment permitted by law, where applicable.

2) Right to rectification: Data subjects may request that we rectify any inaccurate or incomplete personal data.

3) Right to withdraw consent: Data subjects may at any time withdraw their consent to the processing of their personal data carried out by us on the basis of their previous consent. Such withdrawal will not affect the lawfulness of processing based on such previous consent.

4) Right to object: We do not make automated decisions about data subjects. However, we may rely on information provided by third parties such as website analytics agencies which may carry out profiling for business administration purposes, such as monitoring trends in User visits of our website. We will comply with valid objection requests unless we have a compelling overriding legitimate ground for the continuation of our processing, or we have another lawful reason to refuse such request. We will comply with each valid opt-out request in relation to marketing communications.

5) Right to erasure: Data subjects may request that we erase their personal data. We will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping the personal data, such as, our business record retention obligations that we have to comply with.

6) Right to Restrict: Data subjects may request that we restrict our processing of their personal data in various circumstances. We will comply, unless there is a lawful reason for not doing so, such as, a legal obligation to continue processing your personal data in a certain way.

7) Right to data portability: In certain circumstances, data subjects may request to provide a copy of their personal data in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services. We do not consider that this right applies to our Services. However, to the extent it does, we will comply with such transfer request. Please note that a transfer to another provider does not imply erasure of the data subject’s personal data which may still be retained for legitimate and lawful purposes.
These rights can be exercised by sending us an e-mail to the below e-mail ID –
Location E-mail ID
Ahmedabad, Gujarat, India dpo@zyduslife.com


Data Subject will have to attach a copy of their ID or equivalent details (where requested by us and permitted by law). If the request is submitted by a person other than you, without providing evidence

that the request is legitimately made on your behalf, the request will be rejected. Please note that any identification information provided to us will only be processed in accordance with, and to the extent permitted by applicable laws.
Please note that, we may be required to retain some of your Personal Data after you have requested deletion, to satisfy our legal or contractual obligations. We may also be permitted by applicable laws to retain some of your Personal Data to satisfy our business needs.

We hope that we can satisfy queries you may have about the way we process your Personal Data. However, if you have unresolved concerns you also have the right to complain to competent data protection authorities.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Data Protection Officer
Zydus has appointed Data Protection Coordinators at their locations in for you to contact if you have any questions or concerns about our personal data policies or practices. If you have any questions or concerns about this data privacy notice or how we handle your personal data, please contact:
Location E-mail ID
Ahmedabad, Gujarat, India dpo@zyduslife.com


Cookies/Similar Technologies, Log Files and Web Beacons
1) Cookies/Similar Technologies. We use cookies and basis the permission provided, and we also define the purposes for which we use them.
2) Log Files. We collect information in the form of log files that record website activity and gather statistics about browsing histories. These entries are generated automatically, and help us to troubleshoot errors, improve performance and maintain the security of our Websites.
3) Web Beacons. Web beacons (also known as "web bugs") are small strings of code that deliver a graphic image on a web page or in an email for the purpose of transferring data back to us. The information collected via web beacons will include information such as IP address, as well as information about how you respond to an email campaign (e.g. at what time the email was opened, which links you click on in the email, etc.). We will use web beacons on our Websites or include them in e-mails that We send to you. We use web beacon information for a variety of purposes, including but not limited to, site traffic reporting, unique visitor counts, advertising, email auditing and reporting, and personalization. The detailed cookie policy is located here.

Children’s Privacy
Zydus does not knowingly permit any person who is under 18 years of age to register with the services or to provide any other personally identifying information.
Zydus does not seek or intend to seek or receive any personal information from children. Should a parent or guardian have reasons to believe that a minor has provided Zydus with personal information without their prior consent, please contact our customer support team to ensure that the personal information is removed from the Zydus services.

Data Security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal information only to those employees, agents, contractors and business associates who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place appropriate procedures to deal with any suspected personal data breach. In the event we are required by law to inform you of any unauthorized access to your personal information we may notify you electronically, in writing, or if permitted by law, by telephone. We will also notify any applicable regulator of a breach where we are legally required to do so.

However, no method of transmission over the Internet, or method of electronic storage, is fully secure. We use and apply all reasonable efforts to protect your personal information from unauthorized access, use, or disclosure. However, we could not rule out seepage or breach which beyond control or human error or technology hindrance.

Data Transfer, Storage & Processing Globally
We operate globally and may transfer your personal information to individual entities of Zydus affiliated companies or third parties in locations around the world for the limited purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. Additionally, when using or disclosing personal information transferred from , we use standard contractual clauses approved by the applicable law.

Links to other websites
Our Website has links that redirects you to our social networking pages of Facebook, Twitter, LinkedIn, Google +, and YouTube and other sites where we may have pages in future. These pages are hosted on separate sites that are governed by their own privacy policies. Please go through their privacy policies to get information on their Privacy Practices.

Changes to Privacy Notice
The internet is an ever evolving medium. We may alter our privacy policy from time to time to incorporate necessary changes in technology, applicable law or any other variant. In any case, we reserve the right to change (at any point of time) the terms of this Privacy Policy or the Terms of Use. Any changes we make will be effective immediately on notice, which we may give by posting the new policy on the “Site”. Your use of the Site or services offered through the Site after such notice will be

deemed acceptance of such changes. We may also make reasonable efforts to inform you via electronic mail. In any case, you are advised to review this Privacy Policy periodically on the “Site”) to ensure that you are aware of the latest version.

Contact Us Support
If you require any information or clarification regarding the use of your personal information or this privacy policy or grievances with respect to use of your personal information, please contact dpo@zyduslife.com

Complaints
If you have any queries, complaints regarding the collecting, processing, transfer of personal data/information or regarding this policy please do contact our Data Protection Officer.

Redressal Mechanism
Any complaints, abuse or concerns with regards to the processing of information provided by you or breach of these terms shall be immediately informed to the designated Grievance Officer as mentioned below via in writing or through email signed with the electronic signature to dpo@zyduslife.com

We request you to please provide the following information in your complaint: -
1) Identification of the information provided by you;
2) Clear statement as to whether the information is personal information or sensitive personal information;
3) Your address, telephone number or e-mail address;
4) A statement that you have a good-faith belief that the information has been processed incorrectly or disclosed without authorization, as the case may be;
5) A statement, under penalty of perjury, that the information in the notice is accurate, and that the information being complained about belongs to you;
6) You may also contact us in case you have any questions / suggestions about the Privacy Policy using the contact information mentioned above.

Zydus shall not be responsible for any communication, if addressed, to any non-designated person in this regard.