PRIVACY POLICY

Orange Pharma BV
Version: 1.0
Date: 31 March 2026

1. Introduction
   Orange Pharma BV processes personal data of contact persons at (potential) customers, suppliers and other business partners. We handle your personal data carefully and process it in accordance with the General Data Protection Regulation (GDPR).

   In this privacy policy we explain which data we process and how we handle it.

2. About Orange Pharma
   Orange Pharma is an independent and broadly stocked pharmaceutical wholesaler. We supply medicines to pharmacies, hospitals, clinics and wholesalers in Europe and the Dutch Caribbean.

   Through direct relationships with the pharmaceutical industry and an international network of suppliers, we provide a wide and rapidly available assortment.

   From our central location in Deventer, a dedicated team manages the logistical handling of medicines and medical products, including narcotics, temperature-controlled products and precursors, in accordance with applicable laws and regulations.

3. Which Personal Data Do We Process?
   We may process the following business-related personal data:
   • first and last name
   • company name
   • business address details
   • telephone number(s)
   • email address(es)
   • job title
   • contact history
   • payment and invoicing details
4. Why Do We Process Personal Data?

   Execution of Agreements
   To perform business agreements, such as deliveries of products or services.

   Administration and Services
   To manage our customer, supplier and partner administration in our ERP system and to maintain contact with business relations.

   Legal Obligations
   To comply with legal obligations, for example in the field of administration and pharmaceutical regulations.

   Communication and Newsletters
   To inform you about relevant products, services or developments. You may unsubscribe from newsletters or email communications at any time.

5. Legal Basis for Processing
   We process personal data based on one or more of the following legal bases:
   • performance of a contract
   • compliance with a legal obligation
   • legitimate interest
   • consent (for example for newsletters)
6. Retention Periods
   Orange Pharma BV does not retain personal data longer than necessary for the purposes for which it was collected, unless a statutory retention period applies.
7. Your Rights

   Right of Access
   You may request information about which personal data we process about you.

   Right to Rectification
   If your data is incorrect or incomplete, you may request correction.

   Right to Erasure
   You may request the deletion of your personal data unless we still need the data to comply with legal or administrative obligations.

   Right to Restriction
   You may request that the processing of your data be restricted.

   Right to Object
   You may object to the use of your personal data, for example for marketing purposes.

   Withdrawal of Consent
   If you have given consent for a specific processing activity, you may withdraw this consent at any time.

   Filing a Complaint
   If you believe we are processing your personal data incorrectly, you may contact us or file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Social Media
   When you interact with Orange Pharma BV via social media, your message may remain visible as long as it is relevant. The processing of personal data via social media falls under the privacy policy of the respective platform.
9. External Websites
   Our website www.orangepharma.nl may contain links to external websites. Orange Pharma BV is not responsible for how these websites process personal data. We recommend that you review the privacy policy of these websites.
10. Contact
    If you have questions about this privacy policy or wish to exercise your rights, please contact us:

    Phone: +31 (0)85 0777810
    Email: cs@orangepharma.nl

    We aim to respond to your request as soon as possible and no later than within the legally required timeframe.