Privacy notice

The purpose of this notice is to provide details about Coloplast’s processing of personal information of persons who give consent for:  1. Short-term consent, 2. Support Services Consent, and/or 3. Marketing Permission.

Who is responsible for handling my information? How is my information being handled?

The Coloplast Group consists of many companies around the world. The Coloplast companies that provide the services you sign up for are joint data controllers responsible for handling your information. Some services are provided by the local Coloplast company in your country/region, whereas other services are provided by Coloplast A/S in Denmark (HQ), whereas other services are provided by the Parties together. 

To this effect, the Parties have entered into an arrangement pursuant to Article 26 GDPR by which the main responsibility for obtaining consent correctly, i.e. for the validity of consent, lies with the obtaining local Coloplast Group entity in collaboration with HQ, whereas HQ and your local Coloplast Group entity share the responsibility for keeping data updated. HQ will eventually delete or anonymize data. For further information, please contact dataprivacyofficer@coloplast.com or visit Data Privacy and Security - Corporate (coloplast.com).

You can see the responsible Coloplast companies for the relevant consent options below. In respect of the consents you give, “Coloplast” is the responsible data controller as listed below.

In most cases when you reach out to Coloplast we will mainly process your data based on a contractual relationship between you and Coloplast. But because we will also inherently process information about your medical situation (sensitive data), we also need your consent for processing order or sample requests and provide you with support services. 

The table below lists the different consent options you can choose. For each consent option it shows (i) the purposes your information is used for, and for each purpose, what information we collect, (ii) with whom the information is shared, (iii) how long it is kept, and (iv) on what legal basis it is processed. Description of the legal basis is made with reference to relevant articles of the EU General Data Protection Regulation (“GDPR”). The information Coloplast may collect depends on the service(s) you have signed up for and the consent(s) you have given. See details for each consent option below.

The information listed for each consent option below are examples of the information Coloplast may collect. Depending on what information you have (voluntarily) provided to Coloplast, Coloplast may only hold some of the information mentioned below.

1. Short-term Consent

For what purpose(s) do you collect and use information about me?

To process your product and service orders, including delivery, prescription handling and communication with health care professionals and/or authorities to the extent required for processing your order, to store the information you provide to us and to manage your chosen preferences (data categories 1.-4.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender), 

2. Contact details (e-mail address, and if required phone number)

3. Health and product details if required (type of products used, type of surgery, date of surgery, weight, height)

4. Transaction and activity details (orders and invoices)

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software) 
Coloplast affiliated companies, including Comfort Medical, who may reach out to reach out to you regarding related products and services.
Health care professionals to the extent required for processing your support request and associated services.

Under very rare circumstances, we might be legally obligated to share your data with public authorities.

Coloplast does not sell or share your information with other third parties that use it for their own purposes. 

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

This short-term consent is valid for 12 months.
Data will be deleted if a user withdraws consent or if no interactions between the user and Coloplast has taken place within the preceding three years (interactions includes any support requests, orders, letters, e-mails, calls or any other type of communication).
Data about transactions is kept for documentation purposes in accordance with applicable local law, e.g. law within the field of bookkeeping, tax, quality or limitation of actions.

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

and

Coloplast A/S, 3050 Humlebaek, Denmark

jointly (more information on how the parties split their responsibilities can be accessed at Data Privacy and Security - Corporate (coloplast.com)).

 2.  Support Services Consent

For what purpose(s) do you collect and use information about me?

Store the information you provide to us and manage your chosen preferences (data categories 1.-6.)

Provide personalized product guidance, training, and support (data categories 1.-5.)

Tailor the information Coloplast will send to you based on your preferences and information and sending you personalized service messages, reminders, and surveys (data categories 1., 3., 4., 6.)

Develop and/or improve on an aggregated basis Coloplast products, technologies, algorithms, communication practices, apps and other services, including by gaining a better understanding user experience, behavior and preferences. This also includes gaining insights and developing and documenting product and marketing claims related to Coloplast’s products and services (data categories 1., 3., 4., 5.)

Share your information with third parties who provide your medical treatment, if required to provide the support service to you, cf. column 3 (data categories 1.-5.) 

Process your sample orders and service requests, including delivery and communication with health care professionals to the extent required for processing your order. (data categories 1., 2., 3.,4.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender, and national identification number)

2. Contact details (e-mail address, postal address and phone number)

3. Health and product details (type of products used, type of surgery, date of surgery, weight, height)

4. Information preferences: The type of information you have selected to receive

5. Transaction and activity details: Orders, date and time of calls, meetings and other interactions with Coloplast.

6. Other information you may share with Coloplast, including photos if you choose to share these.

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software)
Coloplast affiliated companies, including Comfort Medical, who may reach out to reach out to you regarding related products and services.
Health care professionals to the extent required for processing your support request and associated services.

Under very rare circumstances, we might be legally obligated to share your data with public authorities.

Coloplast does not sell or share your information with other third parties that use it for their own purposes.

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

As long as consent from the user applies. Data will be deleted if a user withdraws consent or if no interactions between the user and Coloplast has taken place within the preceding three years (interactions includes any support requests, orders, letters, e-mails, calls or any other type of communication).

Data about transactions is kept for documentation purposes in accordance with applicable local law, e.g. law within the field of bookkeeping, tax, quality or limitation of actions.

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

and

Coloplast A/S, 3050 Humlebaek, Denmark

jointly (more information on how the parties split their responsibilities can be accessed here).

3. Marketing Permission

For what purpose(s) do you collect and use information about me?

Communicate with you via mail, phone (including your cell phone if that is the number you provide), text message, and e-mail, to send newsletters and marketing materials, including promotional materials, about Coloplast’s current and future products and services (data categories 1.-5.)

Tailor the information Coloplast will send to you based on your preferences and details (personal details, medical condition, health and product details, and activity details), including in the form of personalized messages and reminders (data categories 1.-5.)

Carry out segmentation analysis based on your personal details, medical condition, health and product details, transaction and activity details, and information preferences and to gain insights, and carry out tailored campaigns and target you with information of relevance to you (data categories 1., 3., 4., 5.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender, and national identification number), 

2. Contact details (e-mail address, postal address, and phone number)

3. Health and product details if required for purchase (type of products used, type of surgery, date of surgery, weight, height)

4. Information preferences: The type of information you have selected to receive

5. Transaction and activity details: Orders, invoices, date and time of calls, meetings and other interactions with Coloplast. 

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software). Coloplast affiliated companies, including Comfort Medical, who may reach out to reach out to you regarding related products and services.

Under very rare circumstances, we might be legally obligated to share your data with public authorities.

Coloplast does not sell or share your information with other third parties that use it for their own purposes.

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

As long as consent from the user applies. Data will be deleted if a user withdraws consent or if no interactions between the user and Coloplast has taken place within the preceding three years (interactions includes any orders, letters, e-mails, calls or any other type of communication).

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

Text Messages and Consent

We may send text messages you have consented to receive. You can cancel text messages at any time by texting “STOP”. After you send “STOP” we may send you an additional text message to confirm that you have been unsubscribed. You will no longer receive text messages from that short code or phone number, but you may receive text messages if you are subscribed to other text lists. If at any time you have questions about the text messages, text “HELP”. After you send “HELP” we will respond with instructions on how to use our service as well as how to unsubscribe. Message and data rates may apply. Where we have collected your consent to receive text messages, this opt-in data and consent will not be shared with any third parties, except with aggregators and providers of text messaging services, to the extent permitted or required by law.

Your rights

You may withdraw your consents at any time at no cost. Withdrawing consent will not have any negative impact on you, but you will no longer be able to receive the associated services and benefits. The consents are a requirement for obtaining the services they cover (marketing consent is required for receiving marketing materials etc.). Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

Any personalized support, tailoring of information and/or segmentation analysis carried out under 1. Short-term Consent, 2. Support Services Consent, and/or 3. Marketing Permission does not produce any legal or other similar significant effects for you.

If we do not collect your personal data, we may not be able to provide you with the services requested by you.

Depending on your location, your personal data may be disclosed outside your jurisdiction such as to support our business operations.

Please see Coloplast’s global privacy notice for more information about how Coloplast is handling your personal information, contact information for Coloplast’s data protection officer, what your rights as data subject are and how to exercise them.

3.  How to contact Coloplast?

For questions, please contact privacyrequests@coloplast.com or contact your local Coloplast representative. Find your local Coloplast office here: Contact us - Corporate (coloplast.com).