EEA Supplemental Website Privacy Statement

Scope of This supplemental statement

Bio-Rad Laboratories, Inc. ("Bio-Rad", "we", "us", "our") provides to residents of the European Economic Area (EEA) this Supplemental Website Privacy Statement ("Supplemental Statement"), which supplements and localizes the Privacy & Security Statements on the following Bio-Rad domains ("Statement"):

Bio-rad.com

Bio-rad-antibodies.com

QCNet.com

KnowItAll.com

KnowItAllAnyWare.com
Raindance.com

Diamed.com

Medizinische-diagnostik-dreieich.de
SpectraBase.com

Unless defined specifically in this Supplemental Statement, capitalized terms shall have the meaning set forth in the Statement.

Controller and EU Representative

Bio-Rad Laboratories, Inc., 2000 Alfred Nobel Drive, Hercules, California 94547, USA, operates the Site and is the controller of any personal data collected or otherwise processed on or through the Site. Information on our representatives in the EU can be requested by email at dataprivacy@bio-rad.com.

Purposes and Legal bases for processing 

We process your personal data on several different legal bases, as follows: 

1. Based on necessity to enter into or perform a contract with you - we need to process your personal data to enter into an agreement with you or a legal entity you represent, to perform contractual obligations, to respond to related questions and requests from you, perform sales transactions, or provide customer support; 

2. Based on legitimate interests - we process personal data from you 

• for the security and safety of the Site, our IT connected to the Site and the users of the Site; 
• to detect and prevent fraud; 
• to protect and defend the rights or property of others, or our own rights and interests;
• to track your activities on the Site, provided you have not opted out of such data processing. Detailed information about the web analytics solutions used on the Site can be found immediately below. 

3. Based on compliance with legal obligations - we may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process;

4. Based on your prior consent - for placing cookies on your device (subject to certain exceptions) or sending marketing communications to you. Detailed information on our use of cookies and our marketing communications to you are set forth immediately below. 

Name and Provider of Solution	Personal Data Processed by Solution	Purpose of Solution	Retention Period Applicable to Personal Data	Your Choice Regarding the Solution
Google Analytics by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	Information on your use of the Site, including, without limitation, your IP address	Evaluating your use of the Site, compiling reports on website activity for us and providing other services relating to website activity and Internet usage to us	2 Years	You can prevent Google’s collection and use of your personal data by downloading and installing the browser plug-in available under: https://tools.google.com/dlpage/gaoptout?hl=en-GB
Webtrends 555 SW Oak Street, Suite 300, Portland, OR 97204, USA	Information on your use of the Site, including, without limitation, your IP address	Evaluating your use of the Site, compiling reports on website activity for us and providing other services relating to website activity and Internet usage to us	2 Years	You can discontinue use of your personal data by removing cookies via your browser.
Marketo 901 Mariners Island Boulevard, Suite #500, San Mateo, CA 94404, USA	Information on your use of the Site, including, without limitation, your IP address	Evaluating your use of landing pages and email, compiling reports on activity for us and providing other services relating to landing page activity	2 Years	You can discontinue use of your personal data by removing cookies via your browser.
S.L.I. Systems, Inc. 78 – 106 Manchester Street, Christchurch 8011 New Zealand	Information on your use of the Site, including, without limitation, your IP address	Site search capability on bio-rad-antibodies.com	2 Years	You can discontinue use of your personal data by removing cookies via your browser.

Cookies Used On the Site 

The Site makes use of cookies. Cookies are small text files downloaded by your Internet browser and stored on the device you use to access the Site (e.g., your desktop computer, tablet or smartphone). Depending on their purpose, cookies log specific user-related information such as your user preferences, authentication information, security parameters, data concerning the device you access the Site with and statistical information regarding your use of the Site. Where necessary during your visit of the Site or when revisiting the Site, your Internet browser transmits the cookies including the contained information back to the servers they were initially downloaded from or created by. The analysis and Processing of such information allows us to ensure the functionality of the Site, improve your online experience and optimize the structure and content of the Site.

The cookies we use can be categorized as follows:

Strictly Necessary Cookies	These are cookies that are required for the operation of the Site or of certain parts thereof. They either serve the sole purpose of carrying out network transmissions or are strictly necessary in order for us to provide an online service explicitly requested by you.
Analytical/Performance Cookies	These cookies allow us to carry out web analytics or other forms of audience measuring such as recognizing and counting the number of visitors and seeing how visitors move around the Site. This helps us to improve the way the Site works, for example, by ensuring that users are easily finding what they are looking for.
Functionality Cookies	These cookies are used to recognize you when you return to the Site. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region). Loss of the information in these cookies may make our services less functional but would not prevent the Site from working.
Targeting/Profiling Cookies	These cookies record your visit to the Site and/or your use of the services, the pages you have visited and the links you have followed. We will use this information to make the Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Demographic Information Cookies	These cookies collect and retain limited demographic information such as date of birth and gender, if such information is provided by the user, which is tied to anonymous identifiers and may be referenced by the system for some tailored advertising.

The following cookies may be used in Bio-Rad domains:

Cookie Name	Who Places the Cookie?	Cookie Category	Expiry	Purpose
JSESSIONID	Bio-Rad	Mandatory	Session	Facilitates user session for navigating bio-rad.com
JSESSIONID_PRIMEPCR	Bio-Rad	Mandatory	Session	Facilitates user session for PrimePCR Custom Assay Builder
JSESSIONID_STERLING	Bio-Rad	Mandatory	Session	Facilitates user session for ecommerce actions
JSESSIONID_DESIGNER	Bio-Rad	Mandatory	Session	Facilitates user session for Digital Assay feature
JSESSIONID_FRGTPWD	Bio-Rad	Mandatory	Session	SessionID for forgot password
JSESSIONID_IEF	Bio-Rad	Mandatory	Session	SessionID for IEF
eVCntryLang	Bio-Rad	Mandatory	1 year (reset every login)	Enables country language selection
isProc	Bio-Rad	Mandatory	Session	Identifies commerce channel
SampleCookie	Bio-Rad	Mandatory	Session	Checks if user has cookies enabled
sid	Bio-Rad	Mandatory	Session	OKTA (SSO) session id
proximity_*	Bio-Rad	Mandatory	1 year	OKTA(SSO) specific cookie
ADRUM_BT1	Bio-Rad	Mandatory	Session	OKTA(SSO) specific cookie
ADRUM_BTa	Bio-Rad	Mandatory	Session	OKTA(SSO) specific cookie
t	Bio-Rad	Mandatory	Session	OKTA(SSO) specific cookie
bio-rad:msgids	Bio-Rad	Functional	1 year (reset every save)	Used to track dismissed messages
PreviouslyViewedCookie	Bio-Rad	Functional	1 year	Used to track previously visited pages
HealthCareCookie	Bio-Rad	Functional	1 year	France healthcare cookie for CDG
COOKIE_PLACEHOLDER	Bio-Rad	Functional	1 year	Cookie used to store preferences for EU cookie policy
NEW_COOKIE_PLACEHOLDER	Bio-Rad	Functional	1 year	Cookie used to store preferences for IT cookie policy
CartID_	Bio-Rad	Functional	1 year	Current cart for anonymous users
ASPSESSIONIDQSATSRCQ	Bio-Rad	Mandatory	Session	Used by sites written with Microsoft ASP technologies for session management.
WT_FPC	Webtrends	Performance	2 years	Webtrends performance analytics
ACOOKIE	Webtrends	Performance	2 years	Webtrends performance analytics
BIGipServerabdweb_mch_https	Marketo	Performance	Session	Marketo munchkin tracking cookie
_mkto_trk	Marketo	Performance	2 years	Marketo munchkin tracking cookie
AWSELB	Amazon	Mandatory	Session	Associated with Amazon web hosting services for routing client requests on the server.
fr	Fcebook	Performance	Varying	Facilitates analytics for Facebook plug-in within the KnowItAll Software browser.
fsr.*	Foresee	Performance	Session	Foresee survey tracking
_4c_ (and more)	Foresee	Performance	2 years	Foresee survey tracking
_ga, _gat*, _gid	Google	Performance	Varying	Google Analytics
__ut*	Google	Marketing	Varying	Google analytics
SIDCC	Google	Mandatory	3 months	Google recaptcha
IDE	Google	Marketing	Varying	Google Adwords Remarketing
SLI1_XXX	SLI Systems	Mandatory	30 min	Facilitates user site search on bio-rad-antibodies.com
SLI2_XXX	SLI Systems	Mandatory	Session	Facilitates user site search on bio-rad-antibodies.com
SLI4_XXX	SLI Systems	Mandatory	6 months	Facilitates user site search on bio-rad-antibodies.com
SLIBeacon	SLI Systems	Mandatory	2 Years	Facilitates user site search on bio-rad-antibodies.com
_sp_id.0bc5, intercom-lou-rycucve3, us_lang	Usersnap	Performance	Varying	Facilitates user feedback on spectrabase.com
APISID, LOGIN_INFO, PREF, SAPISID, YSC	YouTube	Performance	Varying	Facilitates analytics for YouTube plug-in within the KnowItAll Software browser.
HSID, SID, SSID, VISITOR_INFO1_LIVE	YouTube	Mandatory	Varying	Used for session state management for YouTube plug-in within the KnowItAll Software browser.

You may influence the scope and extent to which we use cookies when you visit our Site. In particular, you may prevent cookies from being stored on your device by adjusting the respective settings on your Internet browser. For more information on how to do so in the settings of your particular Internet browser, please see the following information:

To screen your browser for cookies:

http://optout.networkadvertising.org/

Internet Explorer:

https://privacy.microsoft.com/en-us/internet-explorer-ie11-preview-privacy-statement

Chrome:

https://www.google.com/intl/en/chrome/browser/privacy/

Firefox:

https://support.mozilla.org/en-US/products/firefox/protect-your-privacy

Safari:

http://www.apple.com/privacy/manage-your-privacy/

However, please be aware that this might render certain functions of our Site inoperable or more difficult to use. Depending on the Internet browser you use, you might also be able to specifically reject third-party cookies. In this context, please note, however, that third parties might still have access to your Personal Information to the extent that such information is logged by first-party cookies.

Marketing Communications to You 

On Bio-Rad domains, you can register to receive newsletters or similar information on our products or services or the products or services of our affiliated companies. As part of the registration process, we may ask you to provide us with certain mandatory information. Such information includes first name, last name, email address, country, and organization name. 

When receiving a registration, we log and store the date/time of registration and the IP address the registration was received from. This solely serves evidentiary purposes for consent management. 

When registering to receive newsletters or similar information, you need to explicitly declare your consent in our processing of your personal data for this purpose. You are under no obligation to provide such consent and, if you choose to do so nonetheless, you may withdraw your consent at any time, with future effect and for any or no reason by following the unsubscribe link contained in any email communication to you.

RECIPIENTS OF YOUR PERSONAL DATA

For the following purposes, we may disclose your personal data to the following third parties, as required or permitted by applicable law:

Who Is your Personal Data Disclosed To?	What Is the Purpose Underlying the Disclosure?
Companies affiliated with Bio-Rad Laboratories, Inc. including: Registered Channel Partners	Regional distributors contracted to facilitate sales and customer support processes.
Third-party suppliers and service providers including: Auth0 10900 NE 8th Street, Suite 700, Bellevue, WA 98004 Steelhouse 3644 Eastham Dr, Culver City, CA 90232, USA Kenshoo 22 4th St, San Francisco, CA 94103, USA World Land Trust Blyth House, Bridge Street, Halesworth, Suffolk IP19 8AB, United Kingdom	Auth0 For single sign on and token based authentication on spectrabase.com Steelhouse and Kenshoo To assist us in Marketing operation or improvement of campaigns World Land Trust To facilitate the Plant a Tree program process of planting a tree on the behalf of requesting customers

DATA TRANSFERS TO RECIPIENTS OUTSIDE OF THE EU/EEA

We and many of our affiliated companies and third-party service providers are located outside the EU/EEA in jurisdictions that are not subject to an unqualified adequacy decision by the EU Commission finding them to provide an adequate level of protection of personal data, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the EU.

However, to ensure an adequate level of protection of your personal data, we enter into data processing and data transfer agreements with our affiliated companies and third-party service providers outside of the EU/EEA that incorporate the provisions of the Standard Contractual Clauses approved by the EU Commission or implement other appropriate safeguards with them. You can ask for a copy of such appropriate safeguards by contacting us at dataprivacy@bio-rad.com. 

HOW LONG WE KEEP YOUR PERSONAL DATA

We have implemented appropriate retention periods for your personal data collected or otherwise processed on or through the Site as set forth in our records management policy. Personal data processed in the context of a contract with you will be retained by us for the term of the contract and for a reasonable time afterwards as might be required to determine and settle any related claims. Where our processing of your personal data is based on legitimate interests or the compliance with legal obligations, it will be deleted as soon as the underlying purpose has expired. Personal data processed based on your consent will be deleted if and when you withdraw such consent. 

YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA

Subject to the conditions set out in the applicable law, you have, without limitation, the rights to 

1. inquire whether and what kind of personal data we hold about you and how it is processed, and to access or request copies of such personal data, 
2. request the correction or supplementation of personal data about you that is inaccurate, incomplete or out-of-date in light of the purposes underlying the processing, or to 
3. obtain the erasure of personal data no longer necessary for the purposes underlying the processing, processed based on withdrawn consent, processed for legitimate interests that, in the context of your objection, do not prove to be compelling, or processed in noncompliance with applicable legal requirements. In addition, you have, subject to the conditions set out in the applicable law and without limitation, the rights to 
4. request us to restrict the processing of personal data in certain situations where you feel its processing is inappropriate, 
5. object, in certain circumstances, to the processing of personal data for legitimate interests, and to 
6. request portability of personal data that you have actively or passively provided to us (which does not include data derived or inferred from the collected data), where the processing of such personal Data is based on consent or a contract with you and is carried out by automated means. In case of concerns, you also have the right to lodge a complaint with the competent local data protection authority.

You may exercise the above mentioned rights of access, rectification, erasure, restriction, objection and data portability by contacting us under dataprivacy@bio-rad.com, even to the extent that such claims relate to the processing of personal data by one or more of the data recipients identified in this privacy statement.

YOUR PROVISION OF PERSONAL DATA TO US

Your use of the Site and your provision of personal data to us in the process is purely voluntary on your part. Subject to your sole discretion, you can, at any point, stop to use the Site or, where applicable, opt out of certain data processing operations while on the Site as described in this Supplemental Statement. An exception applies if an to the extent that you want to enter into or perform a contract with us on or through the Site. In this event, providing us with your related personal information is necessary for us to be able to enter into the contract with or provide any contractual services to you.

EFFECTIVE DATE AND CHANGES

This Supplemental Statement is effective May 25, 2018. We may make changes, including material changes, to this Supplemental Statement from time to time. You should review the Supplemental Statement each time you visit our Site to learn of any changes.

If you have questions about this Supplemental Statement, please contact us at dataprivacy@bio-rad.com .