Privacy Statement

This Website/App (the “Website/App”) is provided by Merck S.A, with registered address at 12 avenida 0-33 zona 2 Mixco, Guatemala

(hereinafter, “Merck”), a subsidiary company that forms part of the global divisions, subsidiaries, affiliates and/or group of companies of Merck KGaA, headquartered in Darmstadt, Germany (hereinafter, the “Merck Group”). In accordance with the terms set forth under the applicable personal data protection laws of the relevant country, Merck acts as the data controller of your personal data.

Merck is fully aware of the responsibility and trust you place in the company. For this reason, Merck is committed to ensuring the proper processing of your Personal Data and will, at all times, maintain the confidentiality of the information provided and act in compliance with all applicable national and international personal data protection regulations.

Likewise, Merck appreciates your interest in the company and remains available to address any questions or comments you may have regarding the processing of your personal data through our Data Privacy Portal, identified at the end of this document.

For the purposes of this Privacy Statement applicable to this Website/App, the term USER–DATA SUBJECT shall refer to any individual who uses a device or computer and carries out multiple operations for different purposes, through which their own Personal Data and/or Personal Data of third parties may be processed.

Please note that this Privacy Statement is exclusive to, and intended solely for, the USER–DATA SUBJECT of this Website/App who provides their own Personal Data. Accordingly, other applications and websites provided by Merck or other entities within the Merck Group are not governed by this Privacy Statement.

In compliance with Protección de datos personales (hereinafter, the “Laws”), Merck hereby informs you of this Privacy Statement.

By using the Website/App, you hereby consent to be bound by this Privacy Statement and agree to use the Website/App in accordance with all applicable laws and regulations.

RESPONSIBLE PARTY

The party responsible for the processing of Personal Data is Merck S.A with registered address at 12 avenida 0-33 zona 2 Mixco, Guatemala

PURPOSES

The purposes for which Merck may request, collect, store, process and/or use or transfer the Personal Data of users of its Websites/Apps, insofar as permitted by applicable local regulations, include, without limitation, the following:

• To establish and maintain a relationship with users, customers, patients, healthcare professionals, or any individuals interested in the products, services, or research activities carried out by Merck.

• For statistical and market analysis purposes relating to the use of products of the Merck Group.

• To respond to requests for information, products, services, complaints, inquiries, or comments.

• To create databases for research and development purposes related to products and/or services.

• To schedule follow-up visits related to the use of products and/or for the promotion of products.

• To send or receive information, magazines, industry news, communications, and advertising regarding its products.

• For pharmacovigilance purposes.

METHOD OF COLLECTING PERSONAL DATA

Personal Data are collected directly through the Website/App by means of the electronic forms made available therein. Where the USER–DATA SUBJECT is a PHYSICIAN or other Healthcare Professional, they must ensure compliance with all formalities and requirements set forth under the applicable laws and regulations of the relevant country or countries in order to be entitled to transmit and provide their Personal Data and/or, where applicable, the Personal Data of their patients.

Accordingly, if the USER–DATA SUBJECT, acting as a PHYSICIAN or other Healthcare Professional, shares Personal Data relating to their patients, they must ensure that they have obtained the patients’ prior, formal, and express consent in accordance with the applicable legislation of the relevant country. Any breach of patients’ rights, including privacy rights, shall constitute a violation of this Privacy Statement. Likewise, if the USER–DATA SUBJECT shares Personal Data to which they have access through use of the Service, such conduct shall also constitute an infringement of their patients’ rights.

If the USER–DATA SUBJECT breaches this Privacy Statement as a result of violating the rights of their patients, improper use of the Website/App, or any other violation of its terms, the USER–DATA SUBJECT shall indemnify, defend, and hold harmless Merck, its affiliates, officers, employees, and suppliers from and against any third-party claims arising from such breach, including the reasonable payment of attorneys’ fees.

The content shall remain the property of the patients and/or the USER–DATA SUBJECT, as applicable. Merck does not control, verify, or approve the content provided to the USER–DATA SUBJECT through use of the Service. Merck reserves the right to remove such content from the Service at any time.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The processing of Personal Data carried out by Merck is performed in compliance with the legal bases and requirements established under the applicable and prevailing legislation of the relevant country, such as, by way of example, the express consent of the USER–DATA SUBJECT.

CATEGORIES OF PERSONAL DATA REQUESTED

Merck may request Personal Data and, prior to their collection, the corresponding consent or Data Use Authorization for the processing of — by way of example — the following categories of Personal Data will be made available to you:

Categories of Personal Data

• Identification data.

• Contact data.

• Employment data.

In accordance with the applicable Personal Data Protection regulations, where applicable, it may be necessary to obtain your express consent in order to process your Sensitive Personal Data.

DATA STORAGE

Merck stores Personal Data for the period of time necessary to perform the service for which such data were collected and to fulfill the purposes for which they were requested. Likewise, in order to safeguard and ensure the security of the collected Personal Data, Merck may enter into agreements with third parties for the storage or hosting of such data.

DATA PROTECTION

Merck, in compliance with applicable Personal Data protection regulations, has adopted the legally required security and data protection measures and requires third parties to whom Personal Data are transferred for processing or storage purposes to implement the same measures. Likewise, Data Subjects are hereby informed that Merck has implemented additional technical means and safeguards to prevent loss, misuse, alteration, unauthorized access to, or theft of the Personal Data of the USER–DATA SUBJECT made available to Merck.

Notwithstanding the foregoing, and given that security measures may be subject to breaches resulting from acts beyond Merck’s control, Merck, without assuming liability, undertakes to notify the USER–DATA SUBJECT in the event that any breach of its security measures occurs, so that the USER–DATA SUBJECT may take the appropriate actions to protect their rights.

TRANSFER OF PERSONAL DATA

Merck may transfer Personal Data in order to maintain a relationship with the USER–DATA SUBJECT regarding the products, services, and research activities carried out by the company; for statistical and marketing control purposes related to the use of products of the Merck Group; to carry out adequate quality control and measure levels of engagement with customers and healthcare professionals; to respond to requests for information, products, services, complaints, inquiries, or comments; as well as for the creation of databases for research and development purposes related to products and/or services; to schedule follow‑up visits regarding product use and/or for the promotion of products; and for pharmacovigilance purposes.

Merck may transfer Personal Data to third‑party service providers when a legally valid services agreement is in place, provided that such service providers guarantee the protection of Personal Data.

Merck requires its service providers to ensure compliance with international regulations relating to the protection of Personal Data.

In addition to the transfers described above, Merck will not assign or transfer Personal Data to third parties outside of Merck without prior consent. However, Merck may transfer Personal Data when such transfer is permitted or required under applicable Laws. Under no circumstances will Merck sell Personal Data.

RIGHTS OF THE USER – DATA SUBJECT

The Users–Data Subjects whose Personal Data are held by Merck may, at any time, exercise their rights of access to information, rectification, deletion, or blocking of such data, in accordance with the applicable local law.

In order to exercise these rights, the USER–DATA SUBJECT must submit a request through our Personal Data Protection Rights Portal, available at:

Merck shall apply the appropriate procedure in accordance with the applicable local legislation.

COLLECTION OF INFORMATION BY THIRD PARTS

The Website/App may contain links to other websites whose information practices may differ from those applicable to this Website/App. Accordingly, the services, content, information, and/or administration of such websites are not the responsibility of Merck.

In this regard, Merck shall not be responsible for the protection and processing of Personal Data and Sensitive Personal Data that the USER–DATA SUBJECT provides to third parties with whom Merck has entered into collaboration agreements for the benefit of Data Subjects.

Therefore, it is the responsibility of the USER–DATA SUBJECT to review the privacy conditions of such third parties responsible for the processing of Personal Data. Likewise, Merck shall, under no circumstances whatsoever, be liable for the processing of the USER–DATA SUBJECT’s Personal Data carried out by websites other than this Website/App.

UPDATE AND/OR AMENDMENT OF THE PRIVACY POLICY.

Merck reserves the right to amend or supplement this Privacy Statement in order to adapt it to legislative or case law developments, as well as to industry practices. The USER–DATA SUBJECT is responsible for becoming aware of any such updates and/or amendments. Continued access to or use of this Website/App after the publication of any changes to this Privacy Statement shall constitute acceptance of such changes or amendments.

CONTACT

In case you have any questions or suggestions, please contact our Data Protection Officer through our Personal Data Protection Rights Portal, available at:

https://www.merckgroup.com/central-america/privacy-statement.html

Our Data Protection Officer has been expressly appointed by Merck to handle requests related to the processing of Personal Data.

OBLIGATIONS OF THE USER – DATA SUBJECT

By registering, using, or browsing this Website/App, the USER–DATA SUBJECT expressly consents to the processing of their Personal Data by Merck.

The USER–DATA SUBJECT undertakes to indemnify and hold Merck harmless from any potential claims, fines, or penalties that Merck may be required to bear as a result of the USER–DATA SUBJECT’s failure to comply with this Privacy Statement.

Merck reserves the right to limit, suspend, or terminate access to the Website/App in the event that the USER–DATA SUBJECT breaches the contents of this Privacy Statement, the General Terms and Conditions, or any other specific terms and conditions set forth on the Website/App. This right may also be exercised where Merck has reasonable grounds to suspect that the USER–DATA SUBJECT is violating any of the aforementioned provisions.

DATA DISCLOSURES MADE BY THE USER–DATA SUBJECT.

The USER–DATA SUBJECT is fully aware that, by using the different sections of the Website/App or by publishing or authorizing the publication of any type of material or information (data, content, messages, drawings, sound and image files, photographs, software, etc.) on the Website/App, they are allowing third parties to access their own Personal Data or even the Personal Data of third parties. In this regard, Merck shall not be responsible for any consequences or damages that the USER–DATA SUBJECT or any third party may suffer as a result of the USER–DATA SUBJECT’s free decision to share their Personal Data.

Prior to providing Personal Data relating to third parties through the Website/App, the USER–DATA SUBJECT must obtain their prior and express consent and must have informed them of the terms set forth in this Privacy Statement. In the event that Personal Data of minors are provided, the USER–DATA SUBJECT must hold parental authority or legal guardianship over the minor, or must have previously obtained the consent of the person who holds such parental authority or legal guardianship.

The USER–DATA SUBJECT undertakes to indemnify and hold Merck harmless from any potential claims, fines, or penalties that Merck may be required to bear as a result of the USER–DATA SUBJECT’s failure to comply with the obligations described in this section.

SECURITY

Merck maintains appropriate levels of security and personal data protection in accordance with current applicable regulations.

NULLITY AND UNENFORCEABILITY OF CLAUSES

If any clause included in this Privacy Statement is declared totally or partially null or unenforceable, such nullity or unenforceability shall affect only such provision or the portion thereof that is declared null or unenforceable, and this Privacy Statement shall otherwise remain in full force and effect. Any such provision shall be deemed, in whole or in part, as not included.

Last updated: April 2026