California Privacy Notice
Last Updated – August 17, 2026
Vividion Therapeutics, Inc. a wholly owned and independently operated subsidiary of Bayer AG (“Vividion Therapeutics,” “we,” “us,” or “our”), is committed to protecting your privacy. This Vividion Therapeutics’ California Privacy Notice (“Notice”) supplements the information contained in the Vividion Therapeutics Privacy Notice above (“Privacy Notice”), and applies only to California Residents (“you,” “your,” or “consumer”). This Notice provides additional disclosures for residents of California, as required by the California Consumer Privacy Act, as amended (the “CCPA”). Please remember that the information we collect varies based on our relationship with you and note that certain Personal Data or activities may not be reflected in this Notice because they are exempt from the CCPA.
1. CCPA Categories of Personal Data We Collect, How, and Why We Collect Them
We collect the following categories of Personal Data about California consumers. This information may be, or may have been, collected from the sources of Personal Data as listed below.
| Category of Personal DATA Collected | Examples of Personal Data Collected | Sources of Personal Data | Business Purpose for Collection of Personal Data |
| Identifiers | Name (first and last), alias, address, telephone number, business/employment contact information, unique personal identifier, online identifier, IP address, email address. | Directly from you when you use our Website, or otherwise provide us your contact information or do business with us; from our business partners; through cookies and other tracking technologies. | Provide our services, administer our Website, communications, security, legal, compliance and regulatory obligations, communications and business development purposes. |
| Protected classification characteristics | Not collected. | N/A | N/A |
| Commercial information | Not collected. | N/A | N/A |
| Biometric information | Not collected. | N/A | N/A |
| Internet or other electronic network activity information | Website features you use, your access times, pages viewed, browser type, IP address, Internet service provider and/or mobile carrier, URLs of referring/exit pages, and information about the computer, phone, tablet or other devices you use to access the Services, including hardware model and operating system and version. | Cookies and other tracking technologies. | Provide, improve and enhance our Website and services; security, legal, compliance and regulatory obligations, communications and business development purposes. |
| Geolocation data | IP address | Cookies and other tracking technologies. | Provide, improve and enhance our Website and services; security, legal, compliance and regulatory obligations, communications and business development purposes. |
| Sensory data | Not collected. | N/A | N/A |
| Professional or work-related information | Employer or other company affiliation, your business title, your business contact information. | Directly from you; from our business partners. | To conduct business and provide our services. |
| Education information that is not publicly available | Not collected. | N/A | N/A |
| Inferences drawn from other personal DATA | Not collected. | N/A | N/A |
| Sensitive Personal Data | Personal Data collected and analyzed concerning a consumer’s health in the context of adverse event reporting. | Directly from you. | To conduct our business and meet our legal obligations. |
2. CCPA Categories of Personal Data Disclosed
We disclose all the above categories of Personal Data to service providers or other third parties as described in the Disclosure of Personal Data section above. We do not use or disclose the Sensitive Personal Data outlined in this section for purposes of inferring characteristics about you, nor do we sell or share it for purposes of cross-context behavioral advertising. We may, however, disclose Sensitive Personal Data to our trusted vendors and service providers so they can help us provide our services or for the other purposes outlined in our Privacy Notice.
3. CCPA Categories of Personal Data Sold or Shared
We do not sell Personal Data or share Personal Data for cross-context behavioral advertising. We also do not sell or share Sensitive Personal Data. We use analytics cookies to understand how users interact with our Website and to improve the Website, as described in the Cookies section of the Privacy Notice.
California residents should refer to the US State Privacy Rights and Exercising Your Privacy Rights sections of the Privacy Notice for information regarding their privacy rights under the CCPA and how to exercise them. California’s “Shine the Light” law (Civil Code § 1798.83 permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes.
4. Contact Us
If you have any questions, comments, or concerns about this California Privacy Notice or our information protection practices, you may contact us at:
Vividion Therapeutics, Inc.
Attn: Legal
10075 Barnes Canyon Road, Suite 100
San Diego, CA 92121
USA
or
or
858-345-4690
5. Changes to the Privacy Notice or California Privacy Notice
Our business may change from time to time. As a result, we may update this Privacy Notice at any time and we will let you know about changes by updating the Privacy Notice on the Website, unless another type of notice is required by applicable law. By continuing to use our Website or providing us with Personal Data after we have posted an updated Privacy Notice, or notified you by other means if applicable, you consent to the revised Privacy Notice and practices described in it. The most current version of the Privacy Notice will always be available on the Website. You can check the “last updated” date above to see when the Privacy Notice was last updated.