The California Consumer Privacy Act of 2018 (CCPA) gives California residents the right to know what personal information Roche collects about them, including whether it is being sold or disclosed to third-parties, and the right to prevent Roche from selling that information.
DEFINITION OF PERSONAL INFORMATION UNDER CCPA
California law defines ‘Personal Information’ to mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to the categories of personal information identified below if such information identifies, relates to, describes, is capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household.
Most companies need to collect and share consumers’ Personal Information for everyday business purposes, marketing, and maintenance of the safety, security, and integrity of their websites and other assets, to comply with legal and regulatory obligations, among other reasons. This supplemental notice provides the information required under the CCPA and applies to both Roche’s online and offline activities.
The types of Personal Information we collect and disclose depends on your relationship with Roche. Not all of the categories listed below may apply to you. If the nature of your relationship with Roche changes, additional categories of Personal Information may also apply. In some cases, an additional data privacy notice may apply and will be provided to you.
CCPA NOTICE ON COLLECTION OF YOUR PERSONAL INFORMATION. If you are a California resident, the following sections detail how we collect, use and share your Personal Information:
Categories and Sources of Personal Information
Contact Information
We collect this type of information from:
You
Those authorized to provide on your behalf such as your caregiver or authorized representative.
We assign a customer number to you when you contact us for assistance or register a complaint.
Third parties, such as ad delivery companies who place cookies containing advertising IDs on your devices for us.
Health insurance companies (health plans) and other payors.
Authorized/legal representatives, family members, and caregivers.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Consumer reporting agencies and other third parties who verify the information you provide.
Third parties who help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records.
Third parties who provide digital marketing and analytics services for us using cookies and similar technologies that contain a unique identifier, such as an advertising ID.
Representative Data Elements
Data elements in this category include:
Full name, or unique pseudonym
Honorifics and titles, preferred form of address
Postal address
Email address
Phone number
Contact information for related persons, such as authorized users of your account
Company ID number [customer number, account number, subscription number, rewards program number etc.]
System identifiers (e.g., usernames or online credentials)
Device identifier
Advertising ID
Customer number
IP address
Social security number
Service Request ID number
Cookie ID
Purpose for Collecting and Sharing the PI
We use this type of information:
To identify you and communicate with you
To send transactional messages such as confirmations or responses for assistance
To send marketing communications, surveys and invitations
To personalize our communications and provide customer service
To administer and manage events
To identify you or your device, including to associate you with different devices that you may use
For record-keeping and reporting, including for data matching
For metrics and analytics,
To track your use of products, services, websites, including for ad delivery and personalization
To troubleshoot product issues
To determine and verify program, product, and service eligibility and coverage.
To enroll you in our programs and provide our products and services to you.
To administer, manage, analyze, and improve our programs, products, and services.
To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.
To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.
To conduct internal business analysis and market research.
Advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful.
To engage in joint marketing initiatives.
To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.
To provide access to, monitor, and secure our facilities, equipment, and other property.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To comply with legal and regulatory obligations.
To identify you and your device(s) for any/all purposes identified above, including to monitor your use of and interactions with programs, products, services, and advertisements for such purposes.
To evaluate a potential employment or contractor relationship with you.
To perform background checks and verify past employment, educational history, and professional standing and qualifications.
To evaluate, determine, and arrange compensation, payroll, and benefits.
To assess your fitness for work.
To contact you regarding your application and potential employment or contractor relationship with us.
For our everyday business purposes.
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service Providers, including to social media companies such as Facebook which use the data only to identify which of our customers use their platforms so that we can deliver ads to you on the platform
Service providers such as companies who help manage and coordinate events
Third parties who deliver our communications, such as the postal service and couriers
Other third parties (including government agencies) as required by law, such as pursuant to legally binding subpoenas, court orders, and similar instruments)
Service providers, including companies who assist with our information technology and security programs
Third party advertising network companies, when you opt-in via our cookie banner to have such Personal Information disclosed for advertising (see Third Party Advertising below)
Third parties who assist with fraud prevention, detection and mitigation
Health insurance companies (health plans) and other payors.
Authorized/legal representatives, family members, and caregivers.
Third parties with whom we have joint marketing and similar arrangements.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.
Other third parties as necessary to complete transactions and provide our products/services, including delivery companies, agents, and manufacturers.
Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors..
Consumer reporting agencies.
Our lawyers, auditors, and consultants.
Legal and regulatory bodies and other third parties as required by law.
Health insurance companies (health plans) and other payors.
Authorized/legal representatives, family members, and caregivers.
Third parties with whom we have joint marketing and similar arrangements.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.
Other third parties as necessary to complete transactions and provide our products/services.
Third party network advertising partners.
Consumer reporting agencies
Legal and regulatory bodies and other third parties as required by law.
Transaction and Interaction Information
We collect this type of information from:
You
Third parties that provide access to information you make publicly available, such as social media.
Automatically, such as when you interact with our websites or mobile apps.
Representative Data Elements
Data elements in this category include:
Personal characteristics and preferences, such as your age range, marital and family status, shopping preferences, languages spoken
Subscription program data
Household demographic data
Data from social media profiles, such as Facebook, Twitter, LinkedIn and similar platforms
Education information
Professional information
Hobbies and interests
Purpose for Collecting and Sharing the PI
We use this type of information:
To fulfill our business relationship with you, including customer service
For recordkeeping and compliance, including dispute resolution
For internal business purposes, such as finance, quality control, training, reporting and analytics
For risk management, fraud prevention and similar purpose
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Third parties with whom we have joint marketing and similar arrangements
Service providers, including third parties as needed to complete the transaction, including delivery companies, agents and manufacturers
Our lawyers, auditors and consultants
Customers, in connection with their audits of Roche
Other third parties as required by law
Inferred and Derived Information
We create inferred and derived data elements by analyzing our relationship and transactional information.
We draw inferences from the information we collect from and about you, such as your preferences, characteristics, attributes, and abilities.
Representative Data Elements
Data elements in this category include:
Propensities, attributes and/or scores generated by internal analytics programs and used for marketing
Propensities, attributes and/or scores generated by internal analytics programs and used for information security and fraud purposes
Preferred language
Inferences reflecting a consumer’s wellness, health, preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes, or other inferred data.
Purpose for Collecting and Sharing the PI
We combine inferred data with other relationship information and use this type of information:
To better understand you and to understand our customers generally
To design products, services and programs that delight our customers, including subscription programs
To identify prospective customers
For internal business purposes, such as quality control, training and analytics
To administer, manage, analyze, and improve our programs, products, and services
To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.
For advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful.
To engage in joint marketing initiatives.
To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.
To comply with legal and regulatory obligations
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service providers, including those who analyze data on our behalf and who help execute programs
Our lawyers, auditors and consultants
Third parties with whom we have joint marketing and similar arrangements
Legal and regulatory bodies and other third parties as required by law.
Internet and Online/ Electronic Technical Information
We collect this type of information from:
You and from your computer or devices when you interact with our platforms, websites and applications. For example, when you visit our websites, our server logs record your IP address and other information.
Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites.
Third parties, including computer security services and advertising partners We also associate information with you using unique identifiers collected from your devices or browsers.
Third parties who provide website and online security services.
Representative Data Elements
Data elements in this category include:
IP Address
MAC Address, SSIDs or other device identifiers or persistent identifiers
Online user ID
Password
Device characteristics (such as browser information)
Web Server Logs
Application Logs
Browsing and search history
Viewing Data (site and app usage)
First Party Cookies
Third Party Cookies
Web beacons, clear gifs and pixel tags
Internet service provider
Referring/exiting URL
Request/response date and time
Clickstream data
Ads and web pages viewed
Time spent on a web page or mobile app
Other information regarding your interactions with our websites, applications, emails, and advertisements
Purpose for Collecting and Sharing the PI
We use this type of information:
For system administration, technology management, including optimizing our websites and applications,
For information security and cybersecurity purposes, including detecting threats
For recordkeeping, including logs and records that are maintained as part of Transaction Information
To better understand our customers and prospective customers and to enhance our Relationship Information, including by associating you with different devices and browsers that they may use
For online targeting and advertising purposes subject to choices made via the Cookie Banner
To administer, manage, analyze, and improve our programs, products, and services.
To conduct internal business analysis and market research.
For advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful.
To engage in joint marketing initiatives.
To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To comply with legal and regulatory obligations.
To identify you and your device(s) for any/all purposes identified above, including to monitor your use of and interactions with programs, products, services, and advertisements for such purposes
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service providers including companies who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected
Service providers who assist with fraud prevention, detection and mitigation
Third party advertising network companies, when you opt-in via our cookie banner to have such Personal Information disclosed for advertising (see Third Party Advertising below)
Our lawyers, auditors and consultants
Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.
Legal and regulatory bodies and other third parties as required by law
Audio Visual Information
We collect this type of information from:
You
Automatically, such as when we record calls to our call center and use CCTV cameras in our facilities.
Companies conducting non-clinical research such as market research companies.
Third parties that provide access to information you make publicly available, such as social media.
Representative Data Elements
Data elements in this category include:
Photographs
Video images,
CCTV recordings
Call center recordings and call monitoring records
Voicemails
Purpose for Collecting and Sharing the PI
We use this type of information:
For internal business purposes, such as call recordings used for training, coaching or quality control
For relationship purposes, such as use of photos and videos for social media purposes
For premises security purposes and loss prevention
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service providers, including companies who assist with our information technology and security programs, and our loss prevention programs
Service providers, including companies who conduct market research on our behalf
Our lawyers, auditors and consultants
Other third parties as required by law
Financial information
We collect this type of information from:
You
Payment processors and other financial institutions.
Health insurance companies (health plans) and other payors.
Authorized/legal representatives, family members, and caregivers.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Third parties who assist with fraud prevention, detection, and mitigation.
Representative Data Elements
Data elements in this category include:
Bank account number and details (if you use automated payments)
Payment card information
Debit or credit card number
Bank account number and routing information
Payment and reimbursement amounts
Purpose for Collecting and Sharing the PI
We use this type of information:
To fulfill our business relationship with you, including processing payments, issuing refunds and collections
For recordkeeping and compliance, including dispute resolution
For internal business purposes, such as finance, audits, training, reporting and analytics
For risk management, fraud prevention and similar purpose
To determine and verify program, product, and service eligibility and coverage.
To enroll you in our programs and provide our products and services to you.
To administer, manage, analyze, and improve our programs, products, and services.
To issue invoices and collect payments.
Reimburse customers, satisfy warranty obligations, and fulfill payment obligations.
To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To comply with legal and regulatory obligations
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service providers, including payment processors, financial institutions and others as needed to complete the transactions and for authentication, security and fraud prevention
Our lawyers, auditors and consultants
Customers, in connection with their audits of Roche
Authorized/legal representatives, family members,and caregivers.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services
Representative Data Elements
Data elements in this category include:
Information about physical or mental health, disease state, medical history or medical treatment or diagnosis, medicines taken
Name/Contact of a patient’s healthcare providers
General disease or product interest
Health insurance company
Insurance account number
Information on payment for healthcare services [EOB forms, HSA statements. claims data, claims assistance records)
Health plan beneficiary names/numbers
Information needed to accommodate disabilities
Information about workplace accidents and occupational safety
Medical record information, such as medical diagnosis, disease information, and treatment history
Health values and sensor readings data, such as steps taken, blood glucose levels, heart rate, and blood pressure
Drug allergies
Prescriptions and dosing
Medical appointment dates
Purpose for Collecting and Sharing the PI
We use this type of information:
To determine and verify program, product, and service eligibility and coverage.
To enroll you in our programs and provide our products and services to you.
To administer, manage, analyze, and improve our programs, products, and services.
To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.
To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.
To conduct internal business analysis and market research.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To comply with legal and regulatory obligations
For our everyday business purposes.
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments
Our lawyers, auditors and consultants.
Other third parties as permitted by HIPAA and/or CMIA for treatment, payment and authorization.
Authorized/legal representatives, family members, and caregivers.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Other third parties as necessary to complete transactions and provide our products/services.
Legal and regulatory bodies and other third parties as required by law.
Electronic and Sensor Data
We collect this type of information automatically when you use our internet-enabled products such as mobile apps and connected devices from:
You (directly from participant).
When you contact or visit us (automatically), such as when we record calls to our call center or use CCTV cameras in our facilities.
Your mobile devices and other internet-connected devices and applications (automatically).
Third parties that provide access to information you make publicly available, such as social media platforms.
Representative Data Elements
Data elements in this category include:
Smart device records
IoT products
Health values and sensor readings data, such as steps taken, blood glucose levels, heart rate, and blood pressure
Recording of a customer service call
Recording from a CCTV camera in our facilities
Purpose for Collecting and Sharing the PI
We use this type of information:
To enable product functionality
For internal business purposes, such product development, security, and quality control
To administer,manage, analyze, and improve our programs, products, and services.
To analyze and better understand your needs, preferences, and interests, as well as those of other consumers.
To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To provide access to, monitor, and secure our facilities, equipment, and other property.
To comply with legal and regulatory obligations.
To identify you and your device(s) for any/all purposes identified above, including to monitor your use of and interactions with programs, products, services, and advertisements for such purposes
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service providers, including companies who assist with our information technology and security programs, including network security services and cybersecurity
Service providers, including companies who assist with fraud prevention, detection and mitigation
Third party network advertising partners
Our lawyers, auditors and consultants
Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments
Authorized/legal representatives, family members, and caregivers.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.
Third parties who assist with our information technology and security programs.
Third parties who assist with fraud prevention, detection, and mitigation.
Other third parties as necessary to complete transactions and provide our products/services.
Other third parties as required by law
Geolocation Data
We collect this type of information automatically from your mobile device and computer when you visit or interact with our websites, applications, and online platforms.
Representative Data Elements
Data elements in this category include:
Precise location data
Geofencing data
Purpose for Collecting and Sharing the PI
We use this type of information:
Provide the information, products or services requested
For information security and fraud prevention
For our Everyday Business Purposes
To administer, manage, analyze, and improve our programs, products, and services.
To conduct internal business analysis and market research.
For advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful.
To administer, provide access to, monitor, and secure our information technology systems, websites, applications, databases, and devices.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To comply with legal and regulatory obligations
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Third parties who assist with our information technology and security programs
Third parties who assist with fraud prevention, detection and mitigation
Our lawyers, auditors and consultants
Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, email marketing vendors, and data analytics vendors.
Legal and regulatory bodies and other third parties as required by law.
Children’s Data
We collect this type of information from children when they use our apps and from parents or guardians. This is done in accordance with applicable laws.
Representative Data Elements
Data elements in this category include:
Child’s name
Child’s age
Product usage data
Health information
Purpose for Collecting and Sharing the PI
We use this type of information:
To provide the information, products or services requested by the child or by the child’s parent or guardian
So that we know who is visiting our facilities
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Service providers, including those who help administer our call center hosting platforms and phone systems
Service providers who host our websites and mobile apps
Other third parties as required by law
Our lawyers, auditors and consultants
Compliance Data
We collect this type of information from:
You
Third parties, including companies that help us conduct internal investigations.
Third parties, such as consumer reporting agencies and data aggregators who conduct background screening for us.
Representative Data Elements
Data elements in this category include:
Compliance program data, including customer screening records, and other records maintained to demonstrate compliance with applicable laws, such as tax laws, ADA, et al.
Occupational and environmental safety records
Records relating to complaints and internal investigations, including compliance hotline reports
Records of privacy and security incidents , including any security breach notifications
Purpose for Collecting and Sharing the PI
We use this type of information:
To comply with and demonstrate compliance with applicable laws
For legal matters, including litigation and regulatory matters, including for use in connection with civil, criminal, administrative, or arbitral proceedings, or before regulatory or self-regulatory bodies, including service of process, investigations in anticipation of litigation, execution or enforcement of judgments and orders
For internal business purposes, such as risk management, audit, internal investigations, reporting, analytics
For our everyday business purposes
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Our lawyers, auditors and consultants.
Customers, in connection with their audits of Roche
Other third parties (including government agencies, courts and opposing law firms, consultants, process servers and parties to litigation) in connection with legal matters
Professional Information
We collect this type of information from:
You (directly from participant).
Representative Data Elements
Data elements in this category include:
Employer and job title
Information included in a patient’s IRS 1040 form
Purpose for Collecting and Sharing the PI
We use this type of information:
To determine and verify program, product, and service eligibility and coverage.
To conduct internal business analysis and market research.
To comply with legal and regulatory obligations
For our everyday business purposes.
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Our lawyers, auditors, and consultants.
Legal and regulatory bodies and other third parties as required by law
Health insurance companies (health plans) and other payors.
Authorized/legal representatives, family members, and caregivers.
Third parties who provide benefit verification, program enrollment, and product fulfillment services in connection with our products and services.
Representative Data Elements
Data elements in this category include:
Your signature on a patient consent form or program enrollment form
Purpose for Collecting and Sharing the PI
We use this type of information:
To determine and verify program, product, and service eligibility and coverage.
To enroll you in our programs and provide our products and services to you.
To procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations.
To engage in joint marketing initiatives.
To monitor, investigate, and enforce compliance with our policies, product/service terms and conditions, and legal and regulatory requirements.
To comply with legal and regulatory obligations
For our everyday business purposes.
Categories of Third Parties to whom this type of Personal Information is Shared or Disclosed for a Business Purpose
We may disclose this type of information to our Affiliates and Service Providers and to:
Healthcare providers (including specialty pharmacies), health insurance companies (health plans), other payors and others as needed to provide the contemplated services or transactions involving the data, such as for processing health care payments
Authorized/legal representatives, family members, and caregivers.
Third parties with whom we have joint marketing and similar arrangements.
Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention.
Other third parties as necessary to complete transactions and provide our products/services.
Our lawyers, auditors, and consultants.
Legal and regulatory bodies and other third parties as required by law.
Third Party Advertising. If you click “Allow All” or accept certain cookies on our Cookie Banner, we will disclose information about you (as set forth in the table above) to third party advertising companies. We use third party advertising companies to place ads on other websites, including network advertising companies with whom we work who place their own cookies on your browser when you visit our website. This enables these third party advertising companies to collect and use data from their cookie on your browser, which may include information about your visits to this and other websites. These advertising companies use this information in order to deliver advertisements about our goods and services to you when you are on other websites. These advertisements will often be tailored to you. These advertisers may in turn disclose the information about you collected from their cookies to other advertisers to allow those advertisers to display ads to you as well. Under the CCPA, these additional disclosures may be considered a sale of personal information.
Roche also uses certain third party analytics tools to analyze site performance and aggregated visitor metrics. This helps us measure and improve the performance of our site. You can opt out of this use of your data through our Cookie Preference Center or by using the opt-out available from the third parties with whom we work. If you would like to opt-out of having your data used by the Google’s cookies, please use the Google Analytics opt-out available here: https://tools.google.com/dlpage/gaoptout/. If you would like to opt out of having your data used by Adobe Analytics, you can use Adobe’s opt-out tool, available here: http://www.adobe.com/privacy/opt-out.html.
In addition, the Digital Advertising Alliance maintains a web site where consumers can opt out from receiving interest-based advertising from some or all of the network advertising companies participating in the program (www.AboutAds.info/choices).
Roche does not sell and will not sell your Personal Information at this time. In the event that this changes, we will modify this California Supplemental Privacy Policy and take the additional steps required under the CCPA.
Your Rights Under CCPA. In addition, California residents have certain rights with respect to Roche’s use and disclosure of personal information about California consumers:
Right of Access | Right to Notice. If you are a California resident, you have the right to request that Roche disclose to you the categories of personal information we have collected about you, the categories of sources from which the Personal Information is collected, the business purpose or commercial purpose for collecting or selling Personal Information, the categories of third parties with whom we share Personal Information, the categories of Personal Information we have disclosed about you for a business purpose. You also have the right to request that we provide you with a copy of the specific pieces of Personal Information we have collected about you in the preceding 12 months.
Right to Deletion. If you are a California resident, you have the right to request that Roche delete the Personal Information we collect from you. However, in certain situations we are not required to delete your Personal Information, such as when the information is necessary in order to complete the transaction for which the personal information was collected, to provide a good or service requested by you, to comply with a legal obligation, to engage in research, to secure our websites or other online services, or to otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.
Right Not to Be Subject to Discrimination. Roche shall not discriminate against a consumer because the consumer exercised any of the consumer’s California rights described above.
To exercise any of the rights described above, you can:
Call us at (800) 975-7105;
Complete our California Data Subject Request Intake Form, available here; or