This Get Control Clinic Website (the “Website”) is intended for select AstraZeneca employees and healthcare professionals and their administrative staff only (“Authorized Users”, “you” or “your”). The Website is built, developed, maintained, and hosted by CORE Health Communications Inc. (“CORE”), a third-party service provider for AstraZeneca Canada Inc. (“AstraZeneca”).

1. WEBSITE PURPOSE

The Website provides a platform through which Authorized Users can: (i) register patients who have a diagnosis of asthma or COPD and are experiencing symptoms for a Get Control Clinic run by a Certified Respiratory Educator (CRE) or Respiratory Therapist (RT); (ii) schedule Get control Clinics where patients can be assessed with respect to their disease control and receive education and counselling on disease management; and (iii) exchange patient information (“Website Purpose”).

Use of this Website is also subject to the accompanying Terms of Use.

2. PERSONAL INFORMATION COLLECTED

In connection with the Website Purpose, personal information may be collected and processed through the Website

Account Data. AstraZeneca controls and is accountable for Account Data collected and processed through the Website. Account Data includes:

• Authorized User full name, business contact information, username, and password; and
• With respect to Authorized Users who are healthcare professionals, license number.

HCP Data. AstraZeneca acts as a service provider to healthcare professionals in respect of HCP Data. HCP Data is referred to as HCP Information under our accompanying Terms of Use. The healthcare professional controls and is accountable for the HCP Data processed on their behalf through the Website. HCP Data includes:

• Patient first and last initial, age, gender, telephone number or other contact information, and last four digits of Health Card number;
• Medical history confirming patient’s COPD or Asthma diagnosis;
• Scheduled time, date and location for Get Control Clinic;
• Patient health information recorded by the CRE/RT at the Clinic to be shared back to the patient’s referring healthcare professional.

AstraZeneca has no control over how healthcare professionals use and process HCP Data. For more information about how your healthcare professional uses or processes HCP Data, please contact them directly.

3. PURPOSES OF COLLECTION AND USES OF PERSONAL INFORMATION

AstraZeneca uses Account Data to verify Health Care Professionals (HCPs) and other Authorized Users and provide them access to the Website.

AstraZeneca uses HCP Data on behalf of the applicable healthcare professional in order to:

• Schedule Get Control Clinic events.
• Ensure only diagnosed COPD and Asthma Canadian patients are provided with CRE or RT assessments and are only assessed once through the Website

4. DISCLOSURES

AstraZeneca will disclose personal information where necessary to meet applicable regulatory requirements (such as adverse event reporting requirements), or as otherwise permitted or required by law.

Business Transactions

Personal information may be used by AstraZeneca and disclosed to parties connected with a proposed or actual financing, securitization, insuring, sale, assignment or other disposal of all or part of AstraZeneca or our business or assets, for the purposes of evaluating and/or performing the proposed transaction. Assignees or successors of AstraZeneca or our business or assets may use and disclose your personal information for similar purposes as those described in this Privacy Policy.

Service Providers

AstraZeneca may transfer personal information to outside agents or service providers (including our affiliates acting in this capacity) for reasons such as data processing, data warehousing, administrative services, conducting programs or services, and otherwise collecting, using, disclosing, storing or processing Personal Information on AstraZeneca’s behalf for the purposes described in this Privacy Notice or accompanying Terms of Use. AstraZeneca uses reasonable contractual or other means to require third parties to commit to protecting personal information to a level comparable to that provided by AstraZeneca. Some of our service providers may be located outside of Canada, including outside of Québec. Your Personal Information may be collected, used, disclosed, stored, and processed in these jurisdictions for the purposes described in this Privacy Notice or accompanying Terms of Use. While your personal information is located outside Canada it may also be subject to the laws of the jurisdiction in which it is retained, including laws that may require disclosure of personal information to foreign government authorities.

5. Security

AstraZeneca implements reasonable security safeguards to protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use or modification, regardless of the format in which the personal information is held.

The methods of protection include:

• physical measures (e.g., locked filing cabinets and restricted access to desks);
• organizational measures (e.g., security clearances and limiting access on a “need to know” basis); and
• technological measures (e.g., the use of passwords, gating and encryption).

Authorized AstraZeneca employees, agents and mandataries have access to your personal information as required to fulfill their responsibilities to AstraZeneca.

6. Access and Correction

AstraZeneca maintains a file of Account Data for Authorized Users for the purposes described in this Privacy Notice, which will be accessible at the address provided in the Contact Information section below. If you wish to request access to or correction of your personal information in our custody or control, you may write to this address, attention Privacy Officer. Your right to access or correct your personal information is subject to applicable legal restrictions. We may take reasonable steps to verify your identity before granting access or making corrections.

If you are a patient and you wish to request access to or correction of your HCP Data, please contact your healthcare professional directly.

7. Privacy Notice Changes

The Privacy Notice is effective as of the Last Updated Date below. This Privacy Notice may be revised from time to time. For our current Privacy Notice, please visit the Website. We urge you to review this Privacy Notice frequently to obtain the current version. Your continued provision of personal information or use of the Website following any changes to this Privacy Notice constitutes your acceptance of any such changes.

8. CONTACTS

If you have questions about the processing of HCP Data, please contact your healthcare professional.

Contact Information for AstraZeneca’s Privacy Office:

Accountability for compliance by AstraZeneca with privacy policies and procedures rests with AstraZeneca’s Privacy Officer, even though other individuals within AstraZeneca may be responsible for the day-to-day collection and processing of Personal Information. In addition, the Privacy Officer may, from time to time, designate one or more other individuals within the company to act on his or her behalf, including representatives from all areas of the business.

The contact information for AstraZeneca’s Privacy Officer is:

Privacy Officer

AstraZeneca Canada Inc.

Email: privacy@astrazeneca.com

For information about CORE’s privacy practices, please contact:

CORE Health Communications Inc.

Questions or Comments: Questions or comments regarding the Website should be directed by e-mail to erin@coreagency.com.

Copyright © All rights reserved.

Last Updated: October 2024