Privacy notice

The purpose of this notice is to provide details about Coloplast’s processing of personal information of persons who give consent for:  1. Order Consent, 2. Support Services Consent, 3. Sample Consent, and/or 4. Marketing Permission.

1.   Who is responsible for handling my information?

The Coloplast Group consists of many companies around the world. The Coloplast companies that provide the services you sign up for are joint data controllers responsible for handling your information. Some services are provided by the local Coloplast company in your country/region, whereas other services are provided by Coloplast A/S in Denmark (HQ), whereas other services are provided by the Parties together.

To this effect, the Parties have entered into an arrangement pursuant to Article 26 GDPR by which the main responsibility for obtaining consent correctly, i.e. for the validity of consent, lies with the obtaining local Coloplast Group entity in collaboration with HQ, whereas HQ and your local Coloplast Group entity share the responsibility for keeping data updated. HQ will eventually delete or anonymize data. For further information, please contact dataprivacyofficer@coloplast.com or visit Data Privacy and Security - Corporate (coloplast.com).

You can see the responsible Coloplast companies for the relevant consent options in section (2.) below. In respect of the consents you give, “Coloplast” is the responsible data controller as listed below.

2.   How is my information being handled?

In most cases when you reach out to Coloplast we will mainly process your data based on a contractual relationship between you and Coloplast. But because we will also inherently process information about your medical situation (sensitive data), we also need your consent for processing order or sample requests and provide you with support services.

The table below lists the different consent options you can choose. For each consent option it shows (i) the purposes your information is used for, and for each purpose, what information we collect, (ii) with whom the information is shared, (iii) how long it is kept, and (iv) on what legal basis it is processed. Description of the legal basis is made with reference to relevant articles of the EU General Data Protection Regulation (“GDPR”).

The information Coloplast may collect depends on the service(s) you have signed up for and the consent(s) you have given. See details for each consent option below. The information listed for each consent option below are examples of the information Coloplast may collect. Depending on what information you have (voluntarily) provided to Coloplast, Coloplast may only hold some of the information mentioned below.

1. Order Consent (Short-term Consent)

For what purpose(s) do you collect and use information about me?

To process your product and service orders, including delivery, prescription handling and communication with health care professionals and/or authorities to the extent required for processing your order, to store the information you provide to us and to manage your chosen preferences (data categories 1.-4.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast in the context of your order. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender and national identification number), 

2. Contact details (e-mail address, and if required phone number)

3. Health and product details if required for purchase (type of products used, type of surgery, date of surgery, weight, height)

4. Transaction and activity details (orders and invoices)

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software). Coloplast does not sell or share your information with other third parties that use it for their own purposes.

As an exception your information may be shared with health care professionals or authorities to the extent required for processing your order, e.g. when they provide, finance and/or approve your medical treatment.  

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

This short-term consent is valid for 12 months.

Data will be deleted if a user withdraws consent (unless we need to retain the data by law) or if the user has not within 12 months given Coloplast another form of consent for data processing.

Data about transactions is kept for documentation purposes in accordance with applicable local law, e.g. law within the field of bookkeeping, tax, quality or limitation of actions.

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

and

Coloplast A/S, 3050 Humlebaek, Denmark

jointly (more information on how the parties split their responsibilities can be accessed here).

 2.  Support Services Consent

For what purpose(s) do you collect and use information about me?

Store the information you provide to us and manage your chosen preferences (data categories 1.-6.)

Provide personalized product guidance, training, and support (data categories 1.-5.)

Tailor the information Coloplast will send to you based on your preferences and information and sending you personalized service messages, reminders, and surveys (data categories 1., 3., 4., 6.)

Provide you with nursing services, including reviews (if such a service is offered in your country, and you have signed up for it) (data categories 1., 3., 6.)

Develop and/or improve on an aggregated basis Coloplast products, technologies, algorithms, communication practices, apps and other services, including by gaining a better understanding user experience, behavior and preferences. This also includes gaining insights and developing and documenting product and marketing claims related to Coloplast’s products and services (data categories 1., 3., 4., 5.)

Share your information with third parties who provide, finance and/or approve your medical treatment, if required to provide the support service to you, cf. column 3 (data categories 1.-5.) 

Process your product and sample orders and service requests, including delivery, prescription handling and communication with health care professionals and/or authorities to the extent required for processing your order. (data categories 1., 2., 3.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender), 

2. Contact details (e-mail address, and if required phone number)

3. Health and product details if required for purchase (type of products used, type of surgery, date of surgery, weight, height)

4. Information preferences: The type of information you have selected to receive

5. Transaction and activity details: Orders, invoices, date and time of calls, meetings and other interactions with Coloplast. 

6. Other information you may share with Coloplast as part of the support program.

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software) Coloplast does not sell or share your information with other third parties that use it for their own purposes.

As an exception your information may be shared with health care professionals or authorities (public bodies) or third parties who provide finance (reimbursement) and/or approve your medical treatment (prescriptions) to the extent required for processing your support request and associated services 

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

As long as consent from the user applies. Data will be deleted if a user withdraws consent or if no interactions between the user and Coloplast has taken place within the preceding three years (interactions includes any support requests, orders, letters, e-mails, calls or any other type of communication).

Data about transactions is kept for documentation purposes in accordance with applicable local law, e.g. law within the field of bookkeeping, tax, quality or limitation of actions.

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

and

Coloplast A/S, 3050 Humlebaek, Denmark

jointly (more information on how the parties split their responsibilities can be accessed here).

3. Sample Consent

For what purpose(s) do you collect and use information about me?

To process your product and service orders, including delivery. (data categories 1.-5.)

Provide personalized product guidance, training and support (data categories 1.-5.)

Tailor the information Coloplast will send to you based on your preferences and information, and sending you personalized service messages, reminders, and surveys (data categories 1., 3., 4., 6.)

Provide you with nursing services, including reviews (if such a service is offered in your country, and you have signed up for it) (data categories 1., 3., 6.)

Develop and/or improve on an aggregated basis Coloplast products, technologies, algorithms, communication practices, apps and other services, including by gaining a better understanding user experience, behavior and preferences. This also includes gaining insights and developing and documenting product and marketing claims related to Coloplast’s products and services. (data categories 1., 3., 4., 5.)

Share your information with third parties who provide, finance and/or approve your medical treatment, cf. column 3 (data categories 1.-5.) 

Process your product and sample orders, including delivery, prescription handling and communication with health care professionals and/or authorities to the extent required for processing your order. (data categories 1., 2., 3.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender), 

2. Contact details (e-mail address, and if required phone number)

3. Health and product details if required for purchase (type of products used, type of surgery, date of surgery, weight, height)

4. Information preferences: The type of information you have selected to receive

5. Transaction and activity details: Orders, invoices, date and time of calls, meetings and other interactions with Coloplast. 

6. Other information you may share with Coloplast as part of the support program.

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software) Coloplast does not sell or share your information with other third parties that use it for their own purposes.

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

As long as consent from the user applies. Data will be deleted if a user withdraws consent or if no interactions between the user and Coloplast has taken place within the preceding three years (interactions includes any orders, letters, e-mails, calls or any other type of communication).

Data about transactions is kept for documentation purposes in accordance with applicable local law, e.g. law within the field of bookkeeping, tax, quality or limitation of actions.

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

and

Coloplast A/S, 3050 Humlebaek, Denmark

jointly (more information on how the parties split their responsibilities can be accessed here).

4. Marketing Permission

For what purpose(s) do you collect and use information about me?

Communicate with you via mail, phone, e-mail, to send newsletters and marketing materials, including promotional, about Coloplast’s offerings of relevance to you (data categories 1.-5.)

Tailor the information Coloplast will send to you based on your preferences and details (personal details, medical condition, health and product details, and transaction and activity details), including in the form of personalized messages, reminders, special offers and benefits (data categories 1.-5.)

Carry out segmentation analysis based on your personal details, medical condition, health and product details, transaction and activity details, and information preferences and to gain insights, carry out tailored campaigns and target you with information of relevance to you (data categories 1., 3., 4., 5.)

What information is being collected about me?

The information that is collected is the information you provide to Coloplast. This may include:

1. Personal details (first name, last name, postal address and if required date of birth, gender), 

2. Contact details (e-mail address, and if required phone number)

3. Health and product details if required for purchase (type of products used, type of surgery, date of surgery, weight, height)

4. Information preferences: The type of information you have selected to receive

5. Transaction and activity details: Orders, invoices, date and time of calls, meetings and other interactions with Coloplast. 

With whom do you share this information?

Third parties that act on instruction from Coloplast (e.g. providers of cloud computing services, payment processing software, third-party ERP software) Coloplast does not sell or share your information with other third parties that use it for their own purposes.

On what legal basis do you process this information?

The information is processed to comply with contractual obligations and on basis of your consent, cf. articles 6(1)(b) and 6(1)(a), cf. 9(2)(a) of GDPR.

For how long do you keep this information?

As long as consent from the user applies. Data will be deleted if a user withdraws consent or if no interactions between the user and Coloplast has taken place within the preceding three years (interactions includes any orders, letters, e-mails, calls or any other type of communication).

Responsible controller(s)

The local Coloplast entity you interact with in your country (click link to see local entities).

Your rights

You may withdraw your consents at any time at no cost. Withdrawing consent will not have any negative impact on you, but you will no longer be able to receive the associated services and benefits. The consents are a requirement for obtaining the services they cover (marketing consent is required for receiving marketing materials etc.). Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

Any personalized support, tailoring of information and/or segmentation analysis carried out under 1. Order Consent (Short-term Consent) 2. Support Services Consent, 3. Sample Consent, and/or 4. Marketing Permission does not produce any legal or other similar significant effects for you. It will e.g. not affect the prices you are offered or prevent you from purchasing products and services.

If we do not collect your personal data, we may not be able to provide you with the services requested by you.

Depending on your location, your personal data may be disclosed outside your jurisdiction such as to support our business operations.

Please see Coloplast’s global privacy notice for more information about how Coloplast is handling your personal information, contact information for Coloplast’s data protection officer, what your rights as data subject are and how to exercise them.

3.  How to contact Coloplast?

For questions, please contact privacyrequests@coloplast.com or contact your local Coloplast representative. Find your local Coloplast office here: Contact us - Corporate (coloplast.com).