Effective Date: March 1st. 2019
A. Our Commitment to Data Privacy
C. Data Controller
The data controller of the Web Sites is Sivantos. Where a registration or consent form is presented on our Web Sites or in your use of any of our Applications or Services, the data controller may vary and may be an affiliate or subsidiary of Sivantos or yourself depending on the actual offering or the purpose of the data collection and may be displayed on the applicable registration or consent form. For inquiries you may contact our Data Protection Officer at firstname.lastname@example.org.
D. Data Processor (processing of patient data)
In cases where Sivantos is a data processor, the use of information collected through Applications shall be limited to the purpose of providing the service for which Sivantos is engaged for.
Sivantos might have no direct relationship with the individuals whose personal data it processes, e.g. where you are a patient of one of our partners (“Audiologist”) and would no longer like to be contacted by your Audiologist that use our service, please contact the Audiologist that you interact with directly. We may transfer personal data to companies that help us provide our service. Transfers to subsequent third parties are covered by the T&C with our business partners.
We will retain personal data we process on behalf of our Audiologists for as long as needed to provide services to the Audiologists. Sivantos will retain this personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
You may revoke your consent to the collection and processing of your personal data at any time with effect for the future by written notification to your Audiologist. Please note that deleting the App does not delete your account. You must contact your Audiologist to delete your registration and data. You may also send us an email at email@example.com to request access to, correct, or delete any personal data that you have provided to us. If you choose to delete your account, you will not be able to take advantage of all the functions of the App, including certain personalized features. We may not accommodate a request to change data if we believe the change would violate any law or legal requirement or cause the data to be incorrect. In addition, your Audiologist may be required under applicable law to retain a copy of data as part of your patient file.
E. Why do I need to provide Personal Data?
In general: We do not collect Personal Data through our Web Sites and Applications unless you voluntarily allow us to do so (e.g. by way of registrations, surveys, choosing certain settings in the Applications or on the Web Sites, etc.), provide us with your consent or unless otherwise permitted by applicable laws and regulations for the protection of such Personal Data.
F. Personal Data we may collect?
Categories of data subjects from whom we may collect data:
- Customers and former customers and their employees or representatives, which may include clients of customers and former customers;
- individuals and representatives of organizations who have registered to obtain information on products and/or services offered (e.g. newsletters, surveys, webinars etc.); and
- individuals and representatives of organizations who have visited the website or are using our Applications and Services (such as mobile or desktop applications).
Information may include:
- browser and device information;
- server log file information;
- information collected through cookies and other technologies;
- demographic information and other information provided by you;
- information from third parties (Audiologist) where, for example, you give permission to those third parties to share your information with us (as referred to in Section E above);
- contact details, where appropriate, including email, postal address, telephone and facsimile numbers; and
- usage data when you interact with our Website, Applications and Services (e.g. user settings, duration of use, crash reports etc.).
G. What is the Personal Data used for?
H. Duration of processing of Personal Data.
I. Where will Personal Data be processed?
J. What are my rights?
In General. You can at any time request from us information about whether we hold any of your personal data and about which of the Personal Data we are processing as well as the correction or deletion of such Personal Data by sending your request to firstname.lastname@example.org. Please note, however, that we can delete such Personal Data only if there is no statutory obligation or prevailing right for us to retain it. Kindly note that if you request us to delete such Personal Data, you will not be able to continue to use the applicable Web Sites, Applications, Services or any related Sivantos services that requires Sivantos’ use of such Personal Data. We will respond to your request within a reasonable timeframe.
Request a copy. If we use the Personal Data based on your consent or to perform a contract with you, you may request from us for a copy of Personal Data that you had provided. In this case, please contact us at email@example.com and specify the Personal Data and the format in which you would like to receive the Personal Data.
Right to be forgotten / Restriction of use. You may request us to restrict any processing of the Personal Data in any of the following events: (i) you inform us that the Personal Data that we have is incorrect, (in such cases we may continue to retain such of the Personal Data to check its accuracy), (ii) that we have no legal basis to process such Personal Data, or (iii) you object to our processing of such Personal Data based on our legitimate interest as set out in Section L below.
K. Further Restrictions and Specific Provisions
Use of the Web Sites by children. The Web Sites are not intended for anyone under the age of 16 years. If you are younger than 16, you may not register with or use the Web Sites.
Links to other Web Sites. The Web Sites may contain links to foreign (meaning non-Sivantos companies) websites. Sivantos is not responsible for the privacy practices or the content of websites outside Sivantos. Therefore, we recommend that you carefully read the privacy statements of such foreign sites.
L. Use of technical measures, e.g. Cookies etc.
Non-Personal Data Collected Automatically
When you access our Web Sites or use our Applications and/or Services, we may automatically (i.e., not by registration) collect non-personal data (e.g. type of Internet browser and operating system used, domain name of the Web Sites from which you came, number of visits, average time spent on the site, pages viewed; general usage data). Sivantos may use such data and share it with our affiliates and subsidiaries to improve the performance, content or appearance of the Web Sites, Applications and/or Services.
We also use analytics software to allow us to better understand the functionality of our Applications. This software may record information such as how often you use the Application, the events that occur within the Application, aggregated usage and performance data. We do not link the information we store within the analytics software to any personal data you might have entered in the Application.
“Cookies” – Information Stored Automatically on Your Computer
A Cookie is a small text file sent from a website to your computer or mobile device where it is stored by your web browser. Web Cookies may store information such as your IP address or other identifier, your browser type, and information about the content you display and interact with on the digital services. By storing such information, Cookies can store your preferences and settings for online services and analyze how you use online services.
Tracking Technologies: Web Beacons / Gifs, Pixels, Page Tags, Script
E-Mails and Applications can contain small, transparent image files or lines of code to record how you interact with them. This information is used to help website and app publishers better analyze and improve their services.
Cookies can also be managed through our Cookie Preference Manager where we group cookies into three categories:
- Required cookies: These cookies are necessary to enable the basic features of the Web Sites to function, such as allowing images to load or allowing you to select your cookie preferences.
- Functional cookies: These cookies allow us to analyze your use of the Web Sites and/or Applications to evaluate and improve our performance. They may also be used to provide a better customer experience, for example, remembering your log-in details or providing us information about how our Web Sites and/or Applications are used.
- Advertising cookies: These cookies may be used to share data with advertisers so that the ads you see are more relevant to you, allow you to share certain pages with social networks, or allow you to post comments on our site.
To protect Personal Data against accidental or unlawful destruction, loss or alteration and against unauthorized disclosure or access, we use technical and organizational security measures.
N. Purpose of Use
In the following cases, we are permitted to process Personal Data under the applicable data protection laws.
b) Communication. We communicate on a regular basis by email with users who use our goods or related services, and we may also communicate by phone to resolve customer complaints or investigate suspicious transactions. We may use your email address to confirm your opening of an account, to send you notice of payments, to send you information about changes to our goods and services, and to send notices and other disclosures as required by law. Generally, users cannot opt out of these communications, which are not marketing-related but merely required for the relevant business relationship.
c) Compliance. Furthermore, you acknowledge that any information required to track your choices regarding the processing or use of Personal Data or receipt of marketing materials may be stored and exchanged between members of Sivantos to ensure compliance.
d) Sivantos’ legitimate interest. Each of the use cases in sub-paragraphs e) to g) below constitutes our legitimate interest to process or use the Personal Data. If you do not agree with this approach, you may object against our processing or use of such Personal Data as set out below.
e) Questionnaires and surveys. We may invite you to participate in questionnaires and surveys. These questionnaires and surveys will be generally designed in a way that they can be answered without any Personal Data. If you nonetheless enter Personal Data in a questionnaire or survey, we may use such Personal Data to improve Sivantos goods and services.
g) Recording of calls and chats for quality improvement purposes. In case of telephone calls or chat sessions, we may record such calls (after informing you accordingly during that call and before the recording starts) or chat sessions to improve the quality of our services.
In the following cases we will only use Personal Data as further detailed below after you have granted us prior consent.
News about Sivantos’ Products and Services. We may use your name, email and postal address, telephone number or (in the case where you are a healthcare provider, audiologist or similar or seller) the name, email and postal address, telephone number of your customer, patient or end-user, and basic information about your employer (name and address) to keep you or (in the case where you are a healthcare provider, audiologist or similar or seller) your customer, patient or end-user up to date on the latest product announcements and other information about Sivantos’ goods and services (including marketing-related newsletters) as well as events of Sivantos and to display relevant content on our Web Sites. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you.
Sivantos will collect, use or disclose personal data supplied by You through the Sivantos applications only for the purposes disclosed to You, unless the disclosure:
- is necessary for maintenance and to ensure the proper functionality of the Sivantos software,
- is required by law or the competent governmental or judicial authorities, such as to comply with a subpoena or other legal process,
- is necessary to protect our rights, protect Your safety or the safety of others, investigate fraud, or respond to a government request
- is necessary to establish or preserve a legal claim or defense, or
- is necessary to prevent fraud or other illegal activities, such as willful attacks on Sivantos’ information technology systems.
In certain situations, Sivantos may be required to disclose personal data in response to lawful requests by public authorities, including to meet law enforcement requirements as applicable.
O. Questions and Comments
We will respond to reasonable requests to review the Personal Data and to
correct, amend or delete any inaccuracies. Please contact us at firstname.lastname@example.org for such requests.
If you have a complaint about how Personal Data is handled by us, you may contact the person, department or office that you have been dealing with. You can alternatively contact our Data Privacy Officer, email@example.com and the responsible data privacy personnel shall contact you within a reasonable timeframe.
Sivantos Pte. Ltd.
18 Tai Seng Street, #08-08