We process Personal Data for users and customers who use our services (hereinafter referred to as the "Services"). We safeguard your privacy and comply with legislation applicable at all times intended to protect you as a private person. Our companies following this policy are part of the Ottobock Group's Nordic and Benelux organization. Ottobock, who are hereinafter jointly referred to as "Ottobock". Companies included are as follows: Ottobock Scandinavia AB, Ottobock Benelux B.V, Aktiv Ortopedteknik i Sverige AB, Aktiv Ortopedteknik Support i Norrköping AB and Respecta Oy.
Ottobock is the controller of Personal Data with respect to the Services, "Personal Data" means all information which can be directly or indirectly linked to a living natural person.
1. Collection and processing of Personal Data
Ottobock collects and processes your Personal Data only where permitted by law. The collection and processing may take place when you use the Services, e.g. visit our medical centres. We use various methods to collect Personal Data such as cookies, web beacons, customer surveys and medical remittance. At various times, Ottobock compiles or imports Personal Data from databases (e.g from Facebook or Google) within and outside Ottobock. From time to time we receive Personal Data regarding you from companies within Ottobock, cooperation partners and other information.
It is important for Ottobock to keep your Personal Data up to date and accurate at all times, why we may import Personal Data about you from external sources such as public registers.
When the law requires that consent be obtained for the processing of certain types of Personal Data or for certain forms of processing, consent will be obtained from you before processing takes place.
2. Information from and about you that we collect and process
3. Purposes for which we process your personal data
Ottobock uses Personal Data to:
1. administer, provide, develop and maintain the Services,
2. process your orders, remittances and referrals for Services,
3. contact you by, for example, SMS, other mobile applications or email
4. analyse and improve the quality and experience of the Services, for example, verify that your user account is not being used by others,
5. individualise communication with you regarding our Services, for example, by creating a profile for you and sending you offers that fit your profile as a user of our Services,
6. analyse statistics and user behaviour of our Services,
7. improve your benefits and experience of our Services in other ways we believe you would appreciate, or promote services and products, directly or not, including behavioural marketing.
You are entitled, at any time and without charge, to request that Ottobock refrain from processing your Personal Data for marketing purposes or revoke your consent thereto. You may exercise this right by contacting Ottobock at the address in Section 10.
We collect and process patient data in connection with the use of our Services. Patient data (later Patient data) is information on patient’s medical condition and Personal data that is needed in providing healthcare. We apply EU data protection regulation and other applicaple laws and regulations regarding collecting and processing confidential patient data.
4. Where we stoer as well as transfer your Personal Data
Ottobock may disclose Personal Data to third parties such as the police or other public authority, if the matter concerns the investigation of a crime, or Ottobock is otherwise required to disclose such information by law or decision of a public authority.
Generally, Ottobock does not transfer Personal Data to countries outside the EU/EEA; however, if we, for example, have a subcontractor located in a country outside the EU/EEA or it is necessary for us in order to fulfil our contractual obligations towards you, a transfer of Personal Data outside the EU/EEA may take place even if that country does not have an adequate level of protection for Personal Data according to the EU Commission. To ensure a high level of protection for your Personal Data in those situations and compliance with EU/EEA regulations, Ottobock enters into data processor agreements with such subcontractors. Such processor agreement will regulate the subcontractors' processing of the Personal Data and, when applicable, the transfer of Personal Data, pursuant to applicable EU/EEA data protection regulation. The agreements contain terms and conditions which the European Commission requires and which fulfill the requirements of applicable data protection laws.
5. Protection and deletion of Personal Data
Ottobock has taken appropriate technical and organisational measures to protect your data against, for example, loss, manipulation or unauthorised access. We adapt our security measures to meet the continuous development of technology.
Ottobock deletes Personal Data in accordance with applicable law. This means, for example, that Ottobock deletes or depersonalises Personal Data when there is no longer a purpose for processing the Personal Data. The purposes for which we process your Personal Data are described in Section 3 above.
6. Other applications and websites
7. Change, delete and review your Personal Data
Ottobock ensures that other Ottobock companies receive clear guidelines concerning the processing of Personal Data and defines the purposes for which Ottobock will use Personal Data. If your Personal Data change, please inform Ottobock of this by sending a message to the address in Section 10. Ottobock is not responsible for problems which arise due to data being out of date or inaccurate if you have failed to inform us of such changes.
Ottobock will, upon your request or whenever discovered by Ottobock, correct or delete inaccurate or incomplete information. You are also entitled without charge to receive a transcript of the Personal Data being processed about you. Requests for transcripts must be made in writing to Ottobock to the address stated in Section 10 and shall be signed by you and contain your name, post address, phone number, email address (used in communication with Ottobock), exept requests regarding Patient Data. The transcript will be sent to your registered address within one month of the date the request is received by Ottobock.
You may at any time revoke your consent to further processing (not retroactively) of your Personal Data by contacting Ottobock at the address set out in Section 10, whereupon Ottobock will block such information from further processing, exept Patient data. However, a withdrawal of consent may lead to deteriorated Services or impossibility for Ottobock to provide Services.
Your contact information will be checked at our clinic during your appointment. We will not receive or send any patient data, e.g. social security number or medical history, by email. Please see the terms and conditions about collecting and processing patient data on our website (in Finnish).
If we sell, re-organize or otherwise transfer all or part of our business, your Personal Data may be transferred simultaneously.
If you have any questions, comments or complaints related to Ottobock’s processing of Personal Data and compliance with the Privacy Terms or applicable legislation on the protection of Personal Data, please contact Ottobock at: firstname.lastname@example.org. If necessary Ottobock will ensure that your letter is transferred to and handled by the relevant Ottobock company.