PRIVACY NOTICE

Effective Date. This Privacy Notice ("Notice") is effective as of Aug 1, 2023.

This information is meant to explain to you what kind of data we collect from what sources and are used for which purposes.

Identity and contact details of the data controller

Your Study Site and F. Hoffmann-La Roche Ltd, Grenzacherstrasse 124, CH-4070 Basel, Switzerland, email: [email protected] ("Roche") are acting as independent data controllers, unless otherwise stated differently in the informed consent form that you signed when joining the research study.

In the event that your personal data is covered by the EU General Data Protection Regulation (EU) 2016/679 ("GDPR"): EU representative of F. Hoffmann-La Roche Ltd is Roche Privacy GmbH, Emil-Barell-Str. 1, D-79639 Grenzach-Wyhlen, [email protected].

Purposes and legal basis for processing

Your study data will be used and shared for the purposes of the study and for research, to advance science and public health, or for analysis, development, testing, and commercialization of products that treat or diagnose disease, to potentially provide new insights into subject functioning and behavior or improve participant care. This processing is performed pursuant to your explicit consent or legitimate interest in accordance with the information provided in the informed consent form.

The results from exploratory biomarker tests will not be shared with you or your doctor, unless required by law. Information from these tests will not be part of your medical record.

Categories of personal data processed

We collect the data directly from the mobile application. This application collects continuous movement data (e.g., accelerometer), application usage, technical information about the smartphone for security and troubleshooting (e.g. battery life, application crash logs), participant ID. In addition, touch data (during selected active tests only), and audio data (during selected active tests only, and only when clearly indicated) are collected. Audio data will be used to extract outcome measures for the corresponding tasks and raw data will be provided to the study sponsor. No video or personal information (e.g. written names, phone number) or location data is recorded.

Please refer to the informed consent form that you signed when joining the research study if you need further information regarding personal data collection and their processing.

Recipients of personal data

Recipients of your data may be the Study Site, Roche and Roche's affiliates around the world including in countries with privacy standards different from those in your country and potentially other parties as stated in the informed consent form that you signed when joining the research study. Our Roche affiliates will use the data for the same purposes as we do. A list of Roche's affiliates is available in the current annual report which can be found in the Investors section of www.roche.com.

Additional information in case your data is covered by GDPR: Regarding the exchange of data within the Roche Group, contracts containing the EU Standard Contractual Clauses according to the EU Commission decision of 04 June 2021 (EU 2021/914) constitute appropriate and suitable safeguards to ensure compliance with GDPR.

Storage period

We store your personal data for the duration stated in the informed consent form that you signed when joining the research study.

Information about your rights if your data is covered by GDPR

Provided your personal data is covered by GDPR, please note that you have the right to request from your study site access to and rectification of your personal data as well as the right to data portability, if applicable, or erasure or restriction of processing of your personal data. Erasure or restriction of processing is only possible if and to the extent the processing of personal data is based on consent or legitimate interest. If data processing is based on consent, kindly note that you have the right to withdraw your consent at any time, however, without affecting the lawfulness of processing based on consent before its withdrawal. For sending a note to exercise your right to withdraw consent, please contact your study site in accordance with the information provided in the informed consent form that you signed when joining the research study.

In the event you have the impression that our data processing is non-compliant with GDPR: You are entitled to lodge a complaint with the responsible supervisory authority.