Privacy Notice

PRIVACY NOTICE

Updated August 13, 2021

Coherus BioSciences, Inc. (“Coherus”) recognizes the importance of and is committed to respecting and protecting your privacy. This online Privacy Notice explains how Coherus handles personal information about you provided to us through our three websites, coherus.com, coherusCOMPLETE.com and Udenyca.com, (collectively “Site”), third parties, services and products controlled by Coherus, and any other online or offline interaction with Coherus, that link to this Privacy Notice.

Please read this Privacy Notice carefully to understand how Coherus processes personal information. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY NOTICE, THEN PLEASE DO NOT USE ANY OF THE SERVICES. By accessing and using the “Services,” you agree and consent to the collection, use and disclosure of your Personal Information as outlined in this Privacy Notice. Pursuant to the California Consumer Privacy Act (“CCPA”), Coherus has developed a California Privacy Notice for consumers who reside in California.

Because Coherus is committed to the protection of your personal information, we evaluate our privacy policies and procedures to implement improvements from time to time. If we make material changes to this Privacy Notice, we will notify you by means of a prominent notice on this Site prior to the change becoming effective.

CCPA PRIVACY NOTICE

Information for California Residents

In addition to our full Privacy Policy at https://www.coherus.com/privacy-policy/, this CCPA Privacy Notice applies to certain California residents (“Consumers”) from whom we collect personal information as a business under the California Consumer Privacy Act of 2018 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (“CCPA”).

For the purposes of this CCPA Privacy Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the CCPA.

Personal Information does not include information that is:

Lawfully made available from government records;
Deidentified or aggregate information; or
Otherwise excluded from the scope of the CCPA.

Consumer does not include a natural person acting as a job applicant to, employee of, owner of, director of, officer of, medical staff member of, or contractor of Coherus BioSciences, Inc. (“Coherus”) to the extent such person’s Personal Information is collected within the context of the person acting in such role. Persons acting in those roles should review the applicable CCPA Limited Privacy Notice made available by Coherus.

California Consumers' Rights and Choices

If you are a Consumer, the CCPA may permit you to request information regarding the:

Categories of Personal Information (as defined by the CCPA) collected, sold or disclosed by us;
Purposes for which categories of Personal Information collected by us are used;
Categories of sources from which we collect Personal Information;
Categories of third parties with whom we share Personal Information; and
Specific pieces of Personal Information we have collected about you and in some cases your Household.

In addition, if you are a Consumer, you may:

Opt out of the sale of your Personal Information, in some circumstances;
Opt out of receiving marketing communications from us; however, you may still receive administrative communications regarding our services;
Opt in to certain financial incentive programs we may offer related to the collection, retention, or sale of your Personal Information; and
Request that we and our service providers delete Personal Information we have collected from you, in some circumstances.

Further, the CCPA provides Consumers with the right not to receive discriminatory treatment by a business for the exercise of these CCPA privacy rights, subject to certain limitations.

Collection of Personal Information from California Residents

We have listed below the personal information we may have collected from California residents in the past 12 months.

Category of personal information we may collect: Identifiers

Categories of sources from which we may obtain your “Identifiers” include:

Directly from consumers, Public records from government entities, consumer data resellers

The purposes for collecting your “Identifiers” include:

To provide programs and services to you.
To validate your ability to access and use certain products or services.
To respond to your requests and inquires.
To provide you informational, educational, marketing, or promotional materials.
To conducting surveys and questionnaires.
To perform market research or understand purchase history related to our products and services.
To tailor content and information we send or display to you through our Website(s) and portals.
To perform an action based on your consent, including: processing payment, conducting clinical trials, providing patient assistance and reimbursement support programs related to our products.
To collect and respond to health and safety or product complaints issues related to our pharmaceutical products.
To comply with regulatory approval requirements.
To provide employment or consulting opportunities; and to comply with applicable laws, regulatory matters, and legal affairs including contractual obligations.

Category of personal information we may collect: Personal Characteristics

Categories of sources from which we may obtain your “Personal Characteristics” include:

Directly from consumers

The purposes for collecting your "Personal Characteristics" include:

To conduct clinical trials of our products.
To perform employment analytics.

Category of personal information we may collect: Commercial Information

Categories of sources from which we may obtain your “Commercial Information” include:

Directly from consumers, consumer data resellers

The purposes for collecting your “Commercial Information” include:

To perform commercial analytics, including reviewing purchase histories, market trends, consumer inquiries, and financial forecasts.
To tailor offers, products, and services to consumers.
To track, manage, and understand payer coverage related to our products and services.
To comply with contractual and legal obligations.

Category of personal information we may collect: Internet/Electronic Activity

Categories of sources from which we may obtain your “Internet/Electronic Activity” include:

Directly from consumers

The purposes for collecting your “Internet/Electronic Activity” include:

To improve service.

Category of personal information we may collect: Geolocational Data

Categories of sources from which we may obtain your “Geolocational Data” include:

Directly from consumers

The purposes for collecting your “Geolocational Data” include:

To store the traffic source or campaign that explains how the user reached our Website(s).

Category of personal information we may collect: Sensory Information

Categories of sources from which we may obtain your “Sensory Information” include:

Directly from consumers, cookies

The purposes for collecting your “Sensory Information” include:

To record phone calls made to our Medical Information Call Center.

Category of personal information we may collect: Professional Information

Categories of sources from which we may obtain your “Professional Information” include:

Directly from consumers, Public records from government entities, cookies

The purposes for collecting your “Professional Information” include:

To run background checks and evaluate employment or consulting opportunities with our company.
To educate, market or promote our products to healthcare professionals.
To perform market research, commercial analytics, research and development, and clinical trials.
To comply with regulatory compliance and government reporting obligations.
To comply with regulatory approval requirements.

Category of personal information we may collect: Educational Information

Categories of sources from which we may obtain your "Educational Information" include:

Directly from consumers, Public records from government entities, consumer data resellers

The purposes for collecting your “Educational Information” include:

To run background checks and evaluate employment or consulting opportunities with our company.
To perform market research and commercial analytics.
To perform government reporting obligations. To comply with regulatory approval requirements.

Category of personal information we may collect: Health-Related Information

Categories of sources from which we may obtain your “Health-Related Information” include:

Directly from consumers, consumer data resellers

The purposes for collecting your “Health-Related Information” include:

To provide patient support programs, payer reimbursement support programs, and track and respond to adverse event and product complaint issues related to our products and services.

Category of personal information we may collect: Remuneration Information

Categories of sources from which we may obtain your “Remuneration Information” include:

Directly from consumers

The purposes for collecting your “Remuneration Information” include:

To comply with healthcare, fraud and abuse, false claims, and financial transparency laws.

Category of personal information we may collect: Financial Information

Categories of sources from which we may obtain your “Financial Information” include:

Directly from consumers

The purposes for collecting your “Financial Information” include:

To process payments, assess credit worthiness, manage equitable securities, comply with contractual obligations, and prevent fraud, waste, and abuse.

Here is information on whether we sell or share your personal information.

Selling/sharing your personal information

Categories of third parties we may sell your personal information to

We do not sell personal information to third parties.

Categories of third parties we may otherwise share your personal information with

Internet service providers, Data analytics providers, Government entities, Operating systems and platforms

Privacy Requests

If you are a Consumer, you can make requests to know what personal information we have collected from you in the past 12 months or requests to delete your personal information via http://www.requesteasy.com/5ee3-7108 or 1-888-728-0419.

Please be aware that we do not accept or process requests through other means (e.g., via fax or social media).

We will review the information provided and may request additional information to ensure we are interacting with the correct Consumer. If you have a password-protected online account with us, you may be required to log-in to your account for identity verification. If you do not have an account with us, additional information to verify your identity may be required by law before we may take action upon such a request. This additional information may vary depending on the nature of your request and/or the nature of the information about which your request relates. In some cases, we may also be required by law to obtain a signed declaration under penalty of perjury from you that you are the subject of the request being made. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic.

After submitting your request online, you will receive a follow-up email outlining the estimated amount of time it will take to complete your request and giving further instructions. That email may also include a link you must click on in order to verify your identity. If you do not click on that link, we will be unable to complete your request due to lack of verification. It is important that you provide a valid email address in order for us to be able to process your request.

By law, we are not required to collect Personal Information that we otherwise would not collect in the ordinary course of our business, retain Personal Information for longer than we would otherwise retain such information in the ordinary course of our business, or reidentify or otherwise link information that is not maintained in a manner that would be considered Personal Information. If we have not requested specific additional information from you to verify your request, please do not send such information.

We generally will aim to avoid requesting additional information from you for the purposes of verification. However, if we cannot reasonably verify your identity or more information is needed for security or fraud-prevention purposes, we may consider any of the following factors, alone or in combination, in requesting additional information:

The type, sensitivity, and value of the Personal Information collected and maintained about the Consumer, as applicable law requires a more stringent verification process for sensitive or valuable personal information;
The risk of harm to the Consumer posed by any unauthorized access or deletion;
The likelihood that fraudulent or malicious actors would seek the Personal Information;
Whether the Personal Information to be provided by the Consumer to verify their identity is sufficiently robust to protect against fraudulent requests or being spoofed or fabricated;
The manner in which we interact with the Consumer;
Available technology for verification; and
Other factors that may be reasonable in the circumstances, are consistent with industry practice, are recommended by California government officials, or which may be required by law or regulation following the effective date of this CCPA Privacy Notice.

If your request is regarding household information, the same verification steps above may be required before we can provide you with aggregate household information. In addition, if you do not have a password-protected online account with us, for us to process a request for access to or deletion of specific pieces of information regarding your household, we may need all members of the household to make the request, and we may need to individually verify each household member and that each member making the request is currently a member of the house.

We reserve the right to charge a reasonable fee or take other appropriate action in response to requests from a Consumer or household that are manifestly unfounded or excessive, in particular because of their repetitive character.

Authorized Agent Requests

You may designate an authorized agent to make a request on your behalf pursuant to applicable law. We accept documentation of your designation in the form of a valid power of attorney and/or a written authorization signed by you and the authorized agent. You may submit evidence of your designation of an authorized agent in writing to: [email protected] or 333 Twin Dolphin Drive, Suite 600, Redwood City, California 94065, United States.

We may require verification of your authorized agent in addition to the information for verification above for Consumers and households.

Children

Our services are not directed to children, and we do not knowingly collect or sell Personal Information from children under the age of 16. If you learn that a child has provided us with Personal Information, then you may contact us through the Contact Us section below.

Notice of Financial Incentive

We do not offer financial incentives to Consumers based upon the collection, retention or sale of a Consumer’s Personal Information.

If you have any questions or concerns regarding this CCPA Privacy Notice, contact [email protected].

Last updated: August 1, 2021

GDPR PRIVACY POLICY

Last updated: August 1, 2021

This Privacy Policy (the “Policy”) applies to the processing of Personal Data, subject to all applicable privacy and data protection laws of the European Union and the European Economic Area (collectively, “Europe”), by Coherus BioSciences, Inc. and its subsidiaries and affiliates (“Company”, “we”, “our”, or “us”) through its website, products, and services (the “Services”). It describes how we collect, use, and disclose such Personal Data, your rights and choices with respect to your Personal Data, and how you can contact us if you have any questions or concerns.

1. Personal Data We Collect

In this Policy, “Personal Data” means any information relating to an identified or identifiable individual. We may collect Personal Data about you from various sources described below.

Information Provided by You

Communications. When you contact us via a contact form, email, or other means, you provide us with Personal Data, such as your name and contact details, and the content, date, and time of our communications.
Careers. If you apply for a job with us, you may provide us with your resume, name, contact details, and any other relevant information. If you become an employee, we collect additional information, such as your family information, beneficiary selections, banking information, and other relevant information for employment, payroll, and benefit purposes, and we may collect certain sensitive Personal Data such as trade union membership data or biometric data for identity verification.
Support Information. When you request technical support services, we will process your Personal Data such as your name and the contact details you use to contact us, as well as information on the reasons for your support request, and any additional information you may provide in that context.
Business opportunities. Information we collect in order to communicate with current and prospective business partners and vendors.

Where applicable, we may indicate whether and why you must provide us with your Personal Data as well as the consequences of failing to do so. For example, it may be necessary for you to disclose certain Personal Data in order for us to provide the Services to you.

Our Services are not intended for use by children under the age of 16.

Information Collected from Other Sources

Third Parties. We may obtain Personal Data about you from third parties such as Current and prospective vendors and business partners and other entities. This information may include names, email address, phone number, business address and other similar information.

Information we Collect by Automated Means

Social media. We may collect Personal Data via social media tools, widgets, or plug-ins to connect you to your social media accounts. These features may allow you to sign in through your social media account, share a link, or post directly to your social media account. When you visit a website that contains such tools or plugins, the social media or other service provider may learn of your visit. Your interactions with these tools are governed by the privacy policies of the corresponding social media platforms.
Cookies. We may collect Personal Data via cookies and similar technologies (see section 3 of this Policy for more information).

2. How We Use Personal Data

We use the Personal Data we collect for the following purposes:

Providing Services, including to operate, maintain, support, and provide our Services.
Communicating with You, including to contact you for administrative purposes (e.g., to provide services and information that you request or to respond to comments and questions) or to send you marketing communications, including updates on promotions and events, relating to products and services offered by us.
Personalization, including to customize our Services to you and provide you with the most relevant marketing and advertising materials.
Analytics and Product Development, including to analyze usage trends and preferences in order to improve our Services, and to develop new products, services, and features.
Customer and Vendor Relationship Management, including to track emails, phone calls, and other actions you have taken as our customer or vendor.
Aggregation. We may aggregate or anonymize Personal Data and use the resulting information for statistical analysis or other purposes.
Administrative and Legal, such as to address administrative issues or to defend our legal rights and to comply with our legal obligations and internal policies as permitted by law.

3. Legal Basis for the Processing of Personal Data

We rely on various legal bases to process your Personal Data, including:

Consent. You may have consented to the use of your Personal Data, for example to send you electronic marketing communications or for the use of certain cookies.
Contract. We need your Personal Data to provide you with our Services and to respond to your inquiries.
Legal. We may have a legal obligation to process your Personal Data, for example to comply with tax and accounting obligations, and we may process your Personal Data when necessary to establish, exercise, or defend legal claims. We may also process your Personal Data when necessary to protect your or another individual’s vital interests.
Legitimate Interest. We or a third party have a legitimate interest in using your Personal Data, for example to prevent fraud. We only rely on this legal basis when such legitimate interests are not overridden by your interests or your fundamental rights and freedoms.

4. How We Disclose Personal Data

We may disclose Personal Data about you in the following circumstances:

Group Entities. We may disclose Personal Data about you to our affiliates and subsidiaries.
Public Posts. Any information that you voluntarily choose to post to a publicly accessible area of our Services will be available to anyone who has access to that content.
Service Providers. We work with third parties to provide services such as hosting, maintenance, and support. These third parties may have access to or process your Personal Data as part of providing those services to us.
Legal. We may disclose your Personal Data if it is necessary (i) for compliance with our legal obligations or (ii) to establish, exercise, or defend legal claims.
Merger. Information about our users, including Personal Data, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
Aggregated Information. We may use and disclose aggregated or otherwise anonymized information for any purpose, unless we are prohibited from doing so under applicable law.

5. Your Rights and Choices

As provided under applicable law and subject to any limitations in such law, you have the following rights:

Access and Portability. You may ask us to provide you with a copy of the Personal Data we maintain about you, including a machine-readable copy of the Personal Data that you have directly provided to us, and request certain information about its processing.
Rectification. You may ask us to update and correct inaccuracies in your Personal Data.
Deletion. You may ask to have your Personal Data anonymized or deleted, as appropriate.
Restriction and Objection. You may ask us to restrict the processing of your Personal Data or object to such processing.
Consent Withdrawal. You may withdraw any consent you previously provided to us regarding the processing of your Personal Data at any time and free of charge. We will apply your preferences going forward. This will not affect the lawfulness of the processing before you withdrew your consent.
Complaint. You may lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where you believe an incident took place.

You may exercise these rights by contacting us using the contact details at the end of this Policy. Note that applicable laws contain certain exceptions and limitations to each of these rights.

6. International Data Transfers

We may transfer your Personal Data outside of the country in which it was collected and where the level of protection of Personal Data may be different than in your country. Personal Data may be transferred to United States, and countries in the European Economic Area (“EEA”). If we do so, we will comply with applicable data protection laws, in particular by relying on an EU Commission adequacy decision, on contractual protections for the transfer of your Personal Data, or on another approved derogation for a specific situation, such as your explicit consent. For more information about how we transfer Personal Data internationally, or to obtain a copy of the safeguards we use for such transfers, please contact us as specified below.

7. Data Security and Data Retention

We use physical, managerial, and technical safeguards that are designed to improve the integrity and security of Personal Data that we collect, maintain, and otherwise process.

We take measures to delete or anonymize your Personal Data when it is no longer necessary for the purposes for which we process it, unless we are required by law to keep it for a longer period. When determining the retention period, we take into account various criteria, such as the type of products or services provided to you, the nature and length of our relationship with you, mandatory retention periods, and applicable statutes of limitations.

8. Third-Party Services

Our Services may contain features or links to websites and services provided by third parties. Any information you provide via these websites or services is provided directly to these third-party operators and is subject to their privacy policies, even if accessed through our Services. We encourage you to learn about these third parties’ policies before providing them with your Personal Data.

9. Changes and Updates to this Policy

We may update this Policy from time to time to reflect changes in our privacy practices. We will follow applicable laws and regulations regarding notification of such changes.

10. Our Contact Information

Coherus BioSciences, Inc. is the entity responsible for the processing of your Personal Data. If you have any questions or comments about this Policy, our privacy practices, or if you would like to exercise your rights with respect to your Personal Data, please contact us by email at [email protected], https://www.requesteasy.com/5ef2-6288, or by mail at:

Coherus BioSciences, Inc.
333 Twin Dolphin Drive, Suite 600
Redwood City, California 94065
United States

LEGAL DISCLAIMER

Coherus BioSciences (“Coherus”) maintains the Coherus web site as a service to the internet community. The Coherus web site has been designed to provide general information about Coherus, its people and its products. These pages are not intended to provide investment or medical advice nor do they provide instruction on the appropriate use of products produced or supplied under development by Coherus, its partners, related companies, or its licensors or joint venture partners. Users of this Web site should be aware that products under development described herein have not been found safe or effective by any regulatory agency and are not approved for any use outside of clinical trials. Access and use of the Coherus web site is subject to the terms and conditions set forth herein and all applicable laws, statutes, and/or regulations. Coherus may revise these terms and conditions from time to time without further notice by updating this posting.

Coherus will use reasonable efforts to include accurate and up-to-date information on the Coherus web site but Coherus makes no warranties or representations as to the accuracy of information presented on the Coherus web site. In addition, any information presented on the web site as of a particular date may only be accurate as of such date and Coherus disclaims any responsibility to update such information. Coherus shall not be held responsible for any action taken that is based on the information presented on the Coherus web site, and all users of the Coherus web site agree that all access and use of the Coherus web site, and any and all content presented on the Coherus web site, is at the user’s own risk. Neither Coherus nor any party involved in creating, producing or delivering this site shall be liable for any direct, incidental, consequential, indirect, or punitive damages arising out of user’s access, use, or inability to use the Coherus web site, or any errors or omissions in the content of the Coherus web site. Any communication or material you transmit to Coherus via the Coherus web site or Internet electronic mail is transmitted by you on a nonconfidential basis. Coherus makes no promise, express or implied, not to use such communication or material for any purpose whatsoever, including reproduction, publication, broadcast and posting.

It is the policy of Coherus to enforce its intellectual property rights to the fullest extent permitted under law. All product names, regardless of whether or not they appear in large print or with a trademark symbol, are trademarks of Coherus, its affiliates’ related companies, or its licensors or joint venture partners, unless otherwise noted. The entire content of the Coherus web site, including any images or text, is copyrighted and may not be distributed, downloaded, modified, reused, reposted, or otherwise used except as provided herein without the express written permission of Coherus. The use or misuse of these trademarks, copyrights, or other materials, except as permitted herein, is expressly prohibited and may be in violation of copyright law, trademark law, communications regulations and statutes, and other laws, statutes and/or regulations.