At Roche Diabetes Care GmbH (“Roche”) we are committed to protecting your personal information. This Privacy Policy outlines the types of personal information Roche may collect, the means by which Roche may collect, use, or share your personal information, steps Roche takes to protect your personal information, and choices you are provided with respect to the use of your personal information.
This Policy only applies to Roche websites that link to this Policy. Our websites also may contain links to third-party websites. We do not endorse and are not responsible for the content of third-party websites or resources, and our Privacy Policy does not apply to any sites that are not affiliated with Roche, even if you access them via a link on our site. You should review the privacy policies of any third-party site before providing any information.
For purposes of this Privacy Policy, “Personal Data” is any information by which you can be individually identified both directly and indirectly, including, but not limited to, your name, address, e-mail address, and telephone number.
This website is not designed or intended for use by children under the age of 16. We do not knowingly collect any Personal Data from anyone under the age of 16 without the prior, verifiable consent of a parent or guardian. Such parent or guardian may have the right, upon request, to view the information provided by the child and require that it be deleted. Moreover, all minors should seek their parent’s or guardian’s permission prior to using or disclosing any Personal Data on this website or online resource.
The data controller is Roche Diabetes Care GmbH, Sandhofer Strasse 116, 68305 Mannheim, Germany. You may contact the data controller by mail at Sandhofer Strasse 116, 68305 Mannheim, Germany or email at [email protected]..
On this website, we may request Personal Data about you. Examples of Personal Data that we may collect that directly identifies you includes your name, contact information, email address, and other information in combination with these identifiers. We may also collect certain Personal Data information that does not directly identify you by name, but could be used to identify that a specific computer or device has accessed our website.
We process your Personal Data on our websites for many reasons, including:
Several places on our website require Personal Data if you choose to use them, including surveys, registration, support requests and content sharing features (i.e., “E-mail to a Friend” links). Roche and its processors collect this information about you only if you voluntarily provide it to us. Please be aware that certain features of this site may not be available to you if you elect not to provide certain Personal Data. Any Personal Data you provide to us will be used in accordance with this Privacy Policy.
This sections outlines each processing activity in greater detail and provides information on the categories of information collected for each activity as well as the legal basis of processing for each of these activities.
Responding to Requests or Inquiries. Certain parts of our websites and online resources allow you to submit your Personal Data to us to for various purposes. For example, you may inquire about a product, ask for technical support or subscribe to one of our mailing lists. In these instances, we may use the information that you provide to us to take the steps necessary to respond to your request. Depending on your request, we may collect your contact information (such as your name, mailing address, telephone number, job title), your interests and preferences (such as products or areas of interest), technical data that may help in solving your support request and any other information you provide to us. We collect and process your Personal Data for these purposes based on your consent or based on our legitimate business interests. If reporting is required, we may process your data to comply with our legal obligations.
Completing Transactions. Some parts of our website may collect your Personal Data to fulfill services that you have requested and to understand your interests and preferences. In these instances, we may collect your contact information as well as a history of your previous transactions with us (such as order history, customer account information). If you are purchasing or ordering a product or service from us, we use this information to perform our agreement with you.
Personalizing Your Experience. We may collect certain information about you, your preferences, and how you have interacted with us in the past in order to understand your interest in our products and services so that we can best serve you. This may include information about your contact and product preferences, languages, marketing preferences, and demographic data. In cases where we collect this information automatically, we collect and process this information for our legitimate business interests. In other cases, we will collect and process this information pursuant to your consent.
Website Analytics and Tracking. Where permitted by law, we may combine Personal Data you provide with other information you have provided to Roche through our websites. Where permitted by law, we may also combine Personal Data collected through our websites and online resources with Roche’s offline records and information provided to us by third parties. More information about this can be found in the section below and in our Cookie Notice.
To Run and Maintain our Website. We use this information to secure our websites, network systems, and other assets. This may include information concerning your IP Address, geographic location, resources you have accessed, and similar information. We collect this information automatically, for our legitimate business interests.
Cookies and Other Web Trackers
Our websites and online resources also collect other basic information about you which does not directly identify you but which may correspond with you or a particular device. We use this information to learn more about how our websites and online resources are used and to otherwise improve and administer the site. We also use this information to enable us to deliver information tailored to your interests and preferences, based on your use of the site. For example, we may collect the Internet Protocol Address assigned to your computer by your internet service provider. This address may change each time you connect to the internet (a “dynamic” IP address), or it may remain the same (a “static” IP address). In most cases, this information is collected automatically, for our legitimate business interests. In some jurisdictions, we are required to ask for your consent before collecting this information, in which case you will be presented with a choice as to whether you wish to allow the collection and use of this type of information. Please see our Cookie Notice for more information.
We will not sell or transfer your Personal Data to any non-affiliated entity for their own direct marketing use unless we provide clear notice to you and obtain your explicit consent. We use third party advertising companies to place ads on other websites. These companies may use data about your visits to this and other websites in order to measure advertising effectiveness and to provide advertisements about our goods and services that may be of interest to you. If you would like more information about this practice and your choices to opt out of having this information used by these companies, see our Cookie Notice.
Recipients of your Personal Data
We may share your Personal Data with Roche’s affiliates around the world. Our Roche affiliates will use your Personal Data for the same purposes as we do. A list of Roche’s affiliates is available in the current annual report, which can be found in the Investors section of www.roche.com.
We may also share your Personal Data with outside third parties, including our data processors, for the following purposes:
Any Personal Data you provide to us through your use of this website may be transferred to or stored in a geographic region which imposes different privacy obligations than your country of origin. This may mean that your Personal Data may be sent to a country with less restrictive data protection laws than your own. Any such transfer will be conducted in compliance with applicable law.
If your Personal Data is covered by the GDPR including UK: (a) For transfers of data within the Roche Group, contracts containing the EU Standard Contractual Clauses which constitute appropriate and suitable safeguards to ensure compliance with GDPR.
(b) For transfer of data outside the Roche Group we only carry out the transfer: (i) where we have lawful basis to do in a country which provides an adequate level of protection for personal data; (ii) under an agreement which covers the requirements for the transfer of personal data outside the EU as appropriate.. Contracts containing the EU Standard Contractual Clauses, which constitute appropriate and suitable safeguards to ensure compliance with GDPR.
The length of time in which we will store your Personal Data will differ depending on the purpose for which we have collected and are processing your data. In most cases, we will keep the data for three (3) years following our last interaction with you. We may, however, maintain your data for a longer period of time if we are required by law to maintain your data.
Your Rights If Your Data is Covered by the GDPR
If your Personal Data are covered by the GDPR (that is, if you are an individual within the European Economic Area), you may have certain additional rights with regards to our use and processing of your Personal Data.
You have the following rights with respect to your Personal Data:
To exercise any of these rights, please contact us using the information provided above.
Please note that erasure or restriction of processing is only possible if and to the extent that the processing of Personal Data is based on consent or legitimate interest. If data processing is based on consent, note that you have the right to withdraw your consent at any time, but that the withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. In the event of an erasure request, we may retain a copy of your Personal Data for our record-keeping purposes and to avoid entering your personal data in our systems after your request.
In the event that you believe or have the impression that our data processing does not comply with the GDPR, you are entitled to lodge a complaint with the responsible supervisory authority.
California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please use the contact information provided above.
Be sure to include your name and address; you can include your email address if you want to receive a response by email. Otherwise, we will respond by postal mail within the time required by law.
Please visit the California Supplemental Privacy Notice for more information about Personal Data processing activities as they relate to California residents.
Roche and its business partners take reasonable steps to protect Personal Data we access or receive through this website from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Nevertheless, Roche makes no guarantee as to the security of your Personal Data and disclaims, to the fullest extent permitted by law, all liability and damages caused by loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We recommend that you take any available precautions to protect Personal Data you submit on this website.
From time to time, we may revise this Privacy Policy. Any such changes to this Privacy Policy will be reflected on this page. Roche recommends that you review this Privacy Policy regularly for any changes. The date on which this Policy was last revised is located at the top of this Policy.