Medtronic (hereinafter referred to as “we”) are committed to maintaining your trust by protecting your Personal Information. This Privacy Notice explains how we process your personal information collected via your sign up on Social Media channels, using our Marketing Automation platform and Customer Relationship Management systems.
We are committed to ensuring that your privacy is respected and that your Personal Information is handled in a transparent and lawful way. Any Personal Information you provide will only be used in accordance with this Privacy Statement. We encourage you to read this Privacy Statement carefully.
We recognize that data privacy is an ongoing responsibility and therefore in case of any material changes to our privacy practices or policies we will revise this Privacy Notice. Any significant update to this Privacy Notice will be brought to your attention either via an email or other electronic notification to you, or by posting a notice on our website or appropriate social media channel. This Privacy Statement was last revised on March 10th 2021.
“Personal Information”, (also known as “Personal Data” or “Personally Identifiable Information”) is any information relating to an identified or identifiable person; in other words: any information which can lead to knowing who you are (either directly or indirectly). Your name, address, phone number and social media username or profile are examples of Personal Information.
When we process your Personal Information we will ensure that we have an appropriate legal basis, and will get your consent first if necessary. More information on the Personal Information that we process, and the legal basis we rely on, is set out below:
Your consent is optional and can be withdrawn at any time in the same way as it was given, or by contacting us as detailed in the Your Rights section below. You may also at any time, free of charge and without having to provide any justification, opt-out of any direct marketing campaigns and request to no longer receive any promotional material by using the opt-out option in any relevant communication you receive. If any changes to this notice impact the terms under which you provided your consent, we will notify you and provide you with the option to withdraw or renew your consent.
Medtronic may process your Personal Information to the extent you have provided consent, in the following situations:
We are committed to protect the security and confidentiality of Personal Information. To prevent accidental or unlawful destruction, loss, alteration, unauthorized access or disclosure of, the Personal Information, we use appropriate technical and organizational measures to safeguard and secure the “Personal Information” we process.
We will inform you and/or the relevant supervisory authorities without undue delay should an unauthorized disclosure of the Personal Information require such a notification.
We may disclose your Personal Information as we believe to be necessary or appropriate to protect the health and safety of you or another person, our physical and online operations, and the property, rights, and privacy of our affiliates, you or others.
We only disclose your Personal Information to our Medtronic affiliates or third-party providers or vendors for the purposes identified above. In such cases, the third-party providers or vendors are obligated to use the Personal Information in accordance with the binding agreements that we have with them. The agreements include data processing clauses to ensure that your Personal Information is handled in accordance with applicable data protection laws and regulations.
All third-party providers or vendors involved in data processing have the obligation to meet the requirements of applicable data protection laws and regulations and to comply with Medtronic's privacy, data protection, and security policies and standards.
|Processing Activity||Purpose||Categories of Personal Information ( Data Elements disclosed)||Category of Recipient|
Hosting of personal data in Customer Relationship Management System
To allow Medtronic to manage your personal information appropriately and enable fulfilment of other data processing purposes set out in this privacy statement.
Name, Location, Occupation, Contact details (e.g. work email, address, phone and or/or FAX number, mobile phone number)
Customer Relationship Management System provider. e.g Salesforce
To enable effective transmission of marketing communications by Medtronic.
Email address, plus additional identifiers if necessary for specific purposes
Marketing Automation provider. e.g. Eloqua
Please note that subject to applicable laws, we may disclose your personal information if we believe we are required to do so to comply with any law, regulation, court order, legal or government request. In the unlikely event that all or part of our business is acquired by a third party, your information may be transferred to the new corporate owner insofar as relevant to the business in question and subject to appropriate safeguards being in place. We may need to transfer your Personal Information to Regulatory Authorities in order to comply with our legal obligations.
When we transfer your Personal Information to other Medtronic affiliates or to a third party in another country, we will ensure that adequate safeguards are in place in accordance with applicable laws.
Where we transfer Personal Information internationally we will ensure a level of protection for Personal Information that is adequate according to applicable laws and regulations. For transfers of your Personal Information we will ensure that approved legal mechanisms are in place. For more details or to request a copy please Contact Us at firstname.lastname@example.org.
We will not store your Personal Information for longer than is necessary for the purpose for which we have identified.
The criteria we use to determine our retention periods include: the duration of your relationship with Medtronic, the period during which we need to be able to demonstrate compliance with legal requirements, and the period of time for which we need to protect our legal position (e.g. in case of litigation or an investigation).
For more information on how long your Personal Information is stored please send your request to the contact details below .
Please see the description of the processing of personal information above where the applicable data subject rights are listed.
In accordance with applicable laws, you may have the right to:
Note: This does not affect the lawfulness of our use of your Personal Information before you withdrew your consent. Also, aggregated data which we have already complied will not be affected, even after you withdraw your consent, as there are no technical means available to isolate or identify data elements to exclude.
Our Data Protection Officer may be contacted by email at europeanDPO@medtronic.com. or by post at:
Attn: Data Protection Officer,
Building 9, Croxley Park,
WD18 8WW, UK
Please note that in accordance with applicable laws, we may ask you to provide some proof of identity before we can process your request.
If you are not satisfied with our handling of your request, you may also wish to exercise your right to file a complaint with a supervisory authority.