B2B Privacy Notice

Mozarc Medical (hereinafter referred to as “we”), as a leading provider of healthcare products, services and solutions, may have a need to process certain information which can identify you (“Personal Data”) during our commercial activities. This privacy notice describes Mozarc Medical’s practices regarding our collection and use of your Personal Data in relation to the B2B scenarios described in this privacy notice. We encourage you to read this privacy notice carefully.

Mozarc Medical (hereinafter referred to as “we”), as a leading provider of healthcare products, services and solutions, may have a need to process certain information which can identify you (“Personal Data”) during our commercial activities. This privacy notice describes Mozarc Medical’s pPersonal Data collected as part of our business-to-business engagements may be processed by third-party service providers, including cloud hosting providers, payment processors, cybersecurity vendors, and compliance technology partners. Mozarc Medical ensures that all third parties adhere to stringent data protection obligations under contractual agreements.

In connection with our commercial relationship with you or your company or institution, Mozarc Medical may process the following categories of Personal Data:

Contact and Account Log-in Details – When you come into contact with Mozarc Medical for commercial purposes, we may collect Personal Data to facilitate our communication and negotiations with you such as: first name, last name, academic prefix or courtesy/honorific title, email address, telephone number, postal address/zip code, profession, therapy group, primary medical specialty, hospital/clinic name, city, and country of practice. If a platform is used to facilitate our dealings, commercial transactions or the performance of our respective contractual obligations then we may also need to record your access credentials (e.g., for supplier replenishment request platforms or distributor stock management tools).

Due Diligence Information – Mozarc Medical may conduct due diligence screening of business partners, including distributors, agents or sales intermediaries, to assess their integrity, quality, credibility and compliance with laws. In such circumstances, information about you and individuals who are current or former employees, officers, directors, partners or significant owners of your business may be collected including but not limited to: name, title, business contact details, address, nationality, passport number, company ownership details, beneficial or other interests in the business, ownership or interests in other businesses, current or former positions or associations with governmental, public or international organizations (including any family member positions or associations), establishments or operations in sanctioned countries, and details of any individuals listed on restricted parties lists.

Repair/Maintenance Activities – Mozarc Medical may process certain information in connection with repair or maintenance activities carried out or paid for by Mozarc Medical including but not limited to details of B2B partner personnel submitting and performing repair/maintenance requests, and associated mileage and expenses, as applicable.

Product Complaints and Regulatory Reporting — Mozarc Medical may collect and process certain information for the purpose of required regulatory product compliant and vigilence reporting. Such information may include basic identity information, contact details, patient healthcare records, contact information for healthcare providers or healthcare organizations, and other associated information as required.

Transparency and Compliance Reporting Information – Mozarc Medical may collect certain information to track and manage reports of compliance violations, and to enable compliance with transparency requirements, in particular concerning payments to healthcare professionals and organizations. Such information may include: basic identity information, contact details, professional activities and affiliations, professional qualifications, amounts paid and products or services supplied, financial information (including bank account), physician number or nurses and allied professional number and tax ID number (if required by applicable law), and other relevant information included in compliance reports.

Details relevant to Contract Performance – We may process Personal Data in order to perform and administer our contract, including but not limited to: basic identity information, contact details, professional activities and affiliations, professional qualifications, financial information (which may include amounts owning, credit details if necessary for credit checks, or bank account or credit card information if relevant to the method of payment), details of goods provided/services performed, details of services performed by our B2B partner personnel, expenses incurred and relevant Personal Data appearing on invoices and shipping documentation.

AI and Automated Processing – Mozarc Medical may use artificial intelligence and automated processing to analyze business trends, enhance risk management, and optimize business operations. Where AI or algorithmic decision-making is used, we will provide transparency regarding its impact and, where applicable, allow for human review of decisions that may affect individuals

Meetings and Events (Including Remote Meetings that may capture Images/Video/Audio) – Your commercial interactions with Mozarc Medical may involve meetings or attendance at Mozarc Medical organized events, including remote meetings and events that make use of a platform that will facilitate interactions by transmitting your audio, video and/or image to Mozarc Medical or other participants. You will be informed if Mozarc Medical intends to capture and record any Personal Data in the form of photographs or audio or video recordings during such meetings for further use.

Training/Education and Certification – Mozarc Medical may engage in training, education and certification of third-party business partners, including personnel of our distributors, agents, and repair centers. The personal information processed for this purpose may include name, contact details, position, qualifications, organization, training completed, and the outcome of any assessments carried out.

Travel Information – To organize and facilitate in-person commercial meetings and events we may process additional Personal Data needed for travel and event management purposes such as: national ID/passport number and expiry date, nationality, dietary and travel preferences, logistics and travel details, expenses.

Professional Profiles – Mozarc Medical may also identify and compile available information regarding current and prospective B2B partners to assess the feasibility of any future contracting opportunities (this may include healthcare professional qualifications, specialties, publications and previous engagements). To manage our interactions, engagements and support services Mozarc Medical may also create and maintain commercial, professional or interest-based profiles based on identified, inferred or derived characteristics, interests or key skills of current or prospective B2B partners.

Mozarc Medical retains Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, including compliance with legal, regulatory, contractual, and business requirements. Retention periods vary depending on the nature of the data, the purposes for which it was collected, and applicable legal obligations.

We may use third parties to achieve the purposes set out in this privacy notice including:

• Enterprise Resource Planning (ERP) platform providers
• Customer Relationship Management tool providers
• Email Automation tool providers.
• Due Diligence Screening providers
• Outsourced Operations, such as Accounts Payable service providers.
• Credit Check agencies.
• Debt Collection service providers
• Connectivity Tools (e.g., video conferencing tools)
• Survey Tool providers or platforms.
• Event Organization Management tool providers
• Contract Management Platform providers (including for collection of digital signatures)
• Compliance Reporting Tool providers
• Cloud Hosting Service providers
• Postal Services, Couriers or other Freight Services providers
• Professional Advisors (e.g., consultants, legal advisor, auditors)
• Regulatory & Compliance Reporting Systems
• Healthcare Data Processors
• Clinical Trial Management Systems (CTMS)
• Medical Supply Chain & Logistics Providers
• Cybersecurity, Risk Management, and AI Vendors

Where required, we will enter into binding agreements with such third parties to ensure that your Personal Data is always processed in accordance with applicable data protection laws and regulations.