This Privacy Notice applies to personal data collected through the websites pandomeetings.com and letspando.com ('Websites'). The processing of your personal data is necessary to operate the Website and to provide you with the service that Website offers. Merck Sharp and Dohme, ("MSD") is acting as data controller of the processing of your personal data for the purposes described below. Your personal data will be collected in accordance with this Privacy Notice, our Privacy Policy and applicable laws.

What personal information is collected?
MSD collects personal data via the Website in two ways:

(i) Information you have submitted: MSD collects personal data and other information you have submitted when you registered via the Website. This information may include, but is not limited to: Names and contact information, including phone number, physical address, fax and e-mail; IP address, browser information, length of visit; Title, position, degree/education, business/company name; Referral source data (i.e., how you ended up at the website); Any other similar information provided to us by you or your company in connection with our services, and any other information that you have submitted when using the App/Website (including but not limited to that which is provided if/when you send us e-mails or other inquiries,)

(ii) Automatically collected information: The Website collects information that is provided by your browser. This information may include but is not limited to the type of browser you are using, and the date and time you accessed the Website. The Website also collects information provided by your computer. This information may include but is not limited to your IP address and domain name. For more information, visit our Cookie Policy.

How is the personal information used?

MSD collects and processes your personal data for the following purposes:

Manage and provide the service of the Website,

(i) Services in connection with the use and management of the website and all content and services therein.
(ii) Any other services described at the website, including but not limited to: broadcasts & webcasts, studios & on location production, video productions, and nationwide audiovisual services.

(iii) Enhance the Website (using personal or non-identifiable information transmitted to us) and develop new tools or for quality improvement.

We may use your personal data for the following additional purposes which may be included in, or part of, the Services:

• Updating our records;
• In connection with any application for employment with the Company;
• Internal analysis for our business management purposes;
• Any statutory or regulatory purpose which requires the processing of your personal data;
• Legal and regulatory compliance;
• Fraud and crime prevention;
• Internal or external audits; and
• Any other purpose for which valid consent is obtained.

What legal basis do we have for processing your personal information?

We process your personal information under more than one legal basis depending on the specific purpose for which we are using your personal information. We rely on consent when you have consented to the use of your personal information, for example when you give us information - You may provide us information when:

• you set up an account with us;
• you register for a program with us;
• you provide it to us by filling out forms;
• you send us e-mail;
• you provide information via phone or in person;
• you provide us with information in writing and send it to us other than via e-mail, phone or in person (i.e., mail, FedEx, etc.);
• you provide us with documentation;
• you provide us with information which may contain personal data;
• you provide it to use through our “Contact Us” page on the website or in connection with requesting information from the website;
• you provide us information after logging in to our system at inceptionmeetings.com, or letspando.com or elsewhere; and/or
• you provide us with information in connection with seeking employment with the Company.
• We Collect Information Automatically – We automatically collect certain types of information when you visit our Website (as explained below).

Recipients of your personal information

Your personal data may be transferred to 3rd party processors who will process your personal data on behalf of MSD. The use of your personal data by such processors is governed by contracts that guarantee that your personal data receives the same protection as provided in this Privacy Notice and our Privacy Policy and applicable laws. MSD reserves the right to disclose your personal data to authorized entities, but only if required by applicable law or by a binding court decision.

Security of personal data

We will take reasonable steps to protect your personal data against unauthorized access, disclosure, alteration or destruction. You are personally responsible for securing your own copies of your passwords and related access codes for our online resources.

Retention of your personal data

We will retain your personal information for the time necessary to fulfill the purposes listed in this privacy notice, as required by law or once you have deleted your account.

We will retain your personal data as follows:

• your personal data will be retained for a minimum period of three years following the date of the program in a secure project database, and for a maximum period of five years following the date of the program, with the last two years being in cold (offline) storage.

• In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based upon the performance of our Services, and any applicable industry and governmental standards.
• We may also retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Transfers outside the European Economic Area

Your personal data is stored in the US. To the extent your personal data is transferred outside the European Economic Area, which may include countries that do not provide the same level of data protection as within the European Economic Area, MSD will ensure that the transfer is covered by an adequate level of protection. This will occur by way of standard contractual clause or MSD's Binding Corporate Rules, which have been approved by the data protection authorities in the European Economic Area Member States. Please refer to our Privacy Policy for more details.

Your rights and how to contact us

You may exercise your rights, among others, of access and rectification, deletion or objection to the processing of your personal information by sending an email to privacy@inceptioncompany.com. You can also delete and access the personal data associated with your profile via your user account.