Privacy Policy for MAGNETOM Community

_{(Version: June 2024)}

Siemens Healthineers is committed to protecting and respecting the privacy of your personal data. This Privacy Policy explains how Siemens Healthineers processes your personal data in compliance with the EU General Data Protection Regulation (GDPR) when using the online communication platform MAGNETOM Community.

Controller

Siemens Healthineers AG, Siemensstr. 3, 91301 Forchheim, Germany, or the Siemens Healthineers group company (“Siemens Healthineers“) will process your personal data as the data controller in accordance with this Privacy Policy when you are using the online communication platform MAGNETOM Community where you as a MR user or researcher register, submit, discuss and develop ideas, solutions and suggestions on a non-binding basis. MAGNETOM Community helps to generate, structure and prepare ideas, solutions and suggestions for potential MR development or support. Siemens Healthineers encourages idea generation through challenges and similar campaigns, driven by employees and partners.

Categories of personal data processed

Siemens Healthineers may process the following categories of personal data about you:

• Employee/ external master data, including your full name, business e-mail address, company / organization, country and city and about the user´s role in that organization

• Information to professional experience such as academic education, professional background or expertise

• Transactional data, including IP address, location, created by/when, modified by/when

• Provided ideas and comments and submitted to ideas and comments

• Information to the participation in MAGNETOM Community and respective actions (if shared by you)

• Photo (if uploaded by you)

Purposes for processing your personal data

Siemens Healthineers processes your personal data for the following purposes:

• Collaborative generation and development of ideas, solutions and suggestions with Siemens Healthineers employees and other users of the platform

• MAGNETOM Community permits the voluntary upload of a photo

• The application is using personal data for authentication and authorization purposes

• Logfiles are created for audit and misuse detection

Legal basis for the processing

The legal basis for Siemens Healthineers processing your personal data is Art. 6 (1) lit. b GDPR.

Cookies and other similar technologies

To make the MAGNETOM Community work properly, we store on your device small data files called “cookies.” Cookies save certain settings and data to exchange with teamplay web-applications via your browser.

For example, cookies enable us to secure the MAGNETOM Community and to remember your settings so that you do not have to re-enter it every time.

Please note that certain functions of our MAGNETOM Community may no longer work, or not correctly, without cookies.

Cookies used on websites, can be assigned to the following categories, depending on their function and intended purpose: Strictly Necessary Cookies, Performance Cookies, Functional Cookies, and Marketing Cookies.

MAGNETOM Community utilizes only Strictly Necessary Cookies.

Strictly Necessary Cookies are needed for authenticating you as a user. They are also required to enable navigation within Siemens Healthineers MAGNETOM Community and operate MAGNETOM Community functions.

The following table lists the Strictly Necessary Cookies

As the cookies set by the Magnetom Community are required for the operations of the application you cannot disable these cookies through the “Do Not Track” setting in your browser.

If you are not using MAGNETOM Community any longer, you can remove the cookies by clearing your browser cache. Please refer to the user instructions of your browser to manually remove the cookies.

Links to other websites

MAGNETOM Community may contain links to third party websites and applications. This Privacy Policy, however, only applies to MAGNETOM Community and does not cover how third-party organizations process personal data. For information on their processing of your personal data, we encourage you to read their data privacy policies.

Retention Periods

Siemens Healthineers will store your personal data linked to your account for the duration of your usage of your User-account at MAGNETOM Community, unless statutory retention obligations under applicable law (such as tax or commercial law) require us to further retain your personal data. Posts and comments that you make while participating in MAGNETOM Community are stored for as long as the content is relevant for the development community.

You can delete your MAGNETOM Community User-Account at any time.

Recipients and transfer of personal data

Siemens Healthineers may share your personal data with the following recipients, if and to the extent such transfer is necessary:

• Siemens Healthineers Group companies, i.a. by having internal discussions on ideas and providing / receiving feedback or which process personal data to support in fulfilling our contractual or legal obligations or internal functions such as customer services

• External MAGNETOM Community users, i.a. by participating in MAGNETOM Community communication platform and providing / receiving feedback to their contributions

• Other recipients such as business partners or (IT-) service providers which process personal data as part of their service provision for Siemens Healthineers (e.g., hosting or IT maintenance and support services).

• Third parties in connection with complying with legal obligations or establishing, exercising, or defending rights or claims or in relation to corporate transactions (e.g., for court and arbitration proceedings, to law enforcement authorities and regulators, to attorneys and consultants).

In addition, Siemens Healthineers may commission service providers that support Siemens Healthineers with the collection, processing and use of personal data, in particular in the area of IT-services.

Sometimes a recipient to whom Siemens Healthineers transfers personal data is in a country in which applicable laws do not provide the same level of data protection as the GDPR. In such cases and unless permitted otherwise by applicable law, Siemens Healthineers only transfers personal data if appropriate and suitable safeguards for the protection of personal data are implemented, in particular, if the recipient entered into the EU Standard Contractual Clauses for the transfer of personal data to third countries with us or if the recipient has introduced approved Binding Corporate Rules in its organization.

Further information on the safeguards in place is available by contacting the Siemens Healthineers Data Privacy Organization.

Your Rights

Under the GDPR, you have specific rights in relation to your personal data. In particular, and subject to the statutory requirements, you may be entitled to:

• obtain confirmation as to whether Siemens Healthineers processes personal data about you and, where that is the case, obtain access to your personal data processed by Siemens Healthineers as well as other information,

• obtain the rectification of your inaccurate personal data processed by Siemens Healthineers,

• obtain from Siemens Healthineers the erasure of your personal data processed by Siemens Healthineers,

• obtain from Siemens Healthineers restriction of processing of your personal data,

• obtain a copy of your personal information that you have provided to Siemens Healthineers or request that your personal information be transmitted to another recipient,

• object on grounds relating to your particular situation to the processing of your personal data by Siemens Healthineers insofar as the processing of your personal data is based on legitimate interests.

To receive more information regarding these rights or to exercise any of your rights, please contact the Siemens Healthineers Data Privacy Organization.

Data Protection Officer, Siemens Healthineers Data Privacy Organization

The Siemens Healthineers Data Protection Officer and the Siemens Healthineers Data Privacy Organization provide support with any data privacy related questions, comments, concerns, or complaints or in case you wish to exercise any of your data privacy related rights. The Siemens Healthineers Data Privacy Officer and the Siemens Healthineers Data Privacy Organization may be contacted at: dataprivacy.func@siemens-healthineers.com.

The Siemens Healthineers Data Privacy Organization will always use best efforts to address and settle any requests or complaints brought to its attention. In addition, you may also contact a supervisory authority with requests or complaints. The competent lead supervisory authority for Siemens Healthineers is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, BayLDA - Das Bayerische Landesamt für Datenschutzaufsicht.