How to Exercise Your Consumer Rights

1.Rights that Require Verification of Your Identity.

You may exercise your data subject rights by contacting our Privacy Office at [email protected], by calling 1-844-294-5418, or by using our online Personal Information Rights Request Form and submitting details regarding your request.

We will handle any request to exercise your rights in accordance with applicable law, but please note that these rights may not be absolute. We may refuse or deny a request in accordance with applicable privacy laws. Additionally, depending on the circumstances and where you are located, not all the rights below may be available to you.

You may also designate an authorized agent to make a request to exercise your rights on your behalf. Your authorized agent may use the same methods as you to submit the requests on your behalf. We may ask for additional information from your authorized agent to ensure they are authorized to act for you and to verify your identity, where necessary.

In some instances, we may decline to honor your request if an exception applies under applicable law.

When contacting us to exercise your rights, please adhere to the following guidelines:

• Tell Us Which Right You Are Exercising: Specify which right you want to exercise and the Personal Information to which your request relates (if it does not relate to you). If you are acting as an authorized agent on behalf of a Consumer, please clearly indicate this fact and indicate your authority to act on their behalf.
• Help Us Verify Your Identity: Provide us with enough information to verify your identity. Please note that if we cannot initially verify your identity, we may request additional information to complete the verification process. Any Personal Information you disclose to us for purposes of verifying your identity will solely be used for the purpose of verification.
• Direct Response Delivery: Inform us of the delivery mechanism by which you prefer to receive our response. You may specify, for example, email, mail, or through your account (if you have one with us).

Please note that you do not need to create an account with us in order to make a request to exercise your rights hereunder.

To appeal our decision on your data subject requests, you may contact our Privacy Office at [email protected] or by calling 1-844-294-5418. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

2.Rights that Do Not Require Verification of Your Identity.

You may exercise some rights without verification of your identity. We will not request that you verify your identity for requests to (1) opt-out of the sale of your Personal Information, (2) opt-out of the Sharing of your Personal Information or the use of your Personal Information for targeted advertising, or (3) revoke consent or limit the use of your Sensitive Personal Information.

Right to Opt-Out of Sale, Sharing or Use of Your Personal Information for Targeted Advertising.

You may exercise your right to opt-out of the sale, sharing or use of your Personal Information for targeted advertising by clicking on the “Do Not Sell/Share my Personal Information” in the footer of every Baxter Site. You may also opt-out by emailing [email protected], or by contacting us using the contact information at the end of this policy.

Right to Revoke Consent for or Limit the Use of Your Sensitive Personal Information.

We do not use or disclose Sensitive Personal Information other than to provide our Services as described above. However, if we used or disclosed Sensitive Personal Information for other purposes, you would have the right to limit certain uses of Sensitive Personal Information.

Opt-Out Preference Signal. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, sold, shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.