Privacy notice

Last update : 01/2020

This Privacy Notice may be updated any time. Each Privacy Notice mentions the date of its last update. We will inform you if we make substantial changes to this Privacy Notice.

This Privacy Notice applies to https://www.resmed.co.uk/. If you use other ResMed products and services, your relationship with us will be governed by separate privacy notices for each of them.

For the purposes of this Notice, “you” and “your” refer to the Person who uses https://www.resmed.co.uk/, “we” and “our” refer to ResMed.

ResMed must ensure that it is compliant with the requirements laid down in the General Data Protection Regulation (GDPR) and, when necessary, with local data protection laws. Your personal data must be processed and protected in accordance with data protection regulations.

This Notice provides information on your rights and our practices in relation to privacy. Said rights and practices govern how we process your personal data.

This is the information which ResMed wishes to share with you.

The personal data collected by ResMed and the purposes of such collection

When you browse the https://www.resmed.co.uk/ website, ResMed collects some of your personal data via cookies or like technologies. If you wish to learn more on the use of said data collected via cookies or like technologies, please consult our Cookie policy.

When you create your account on ResMed.com/uk as a healthcare professional and you then log on to said account to access our documentation, ResMed collects the following personal data:

  • Identification data: First name and last name, country/regions;
  • Professional data: email address, name of your company;
  • Connection data: password.

The use of said personal data is necessary to create, maintain and manage your account on ResMed.com/uk and thus to allow you to access our documentation. It is therefore needed for the performance of the contract to which you are a party insofar as you accept the general terms and service on the registration page of your https://www.resmed.co.uk/ account.

When you create your account, ResMed collects your email address which you will use as an access identifier on https://ww.resmed.co.uk/.

The use of your professional email address in this framework is justified by ResMed’s legitimate interest in maintaining its commercial relations with its customers and in being able to inform them of products and services which might be of interest to them.

When you subscribe to our newsletter, ResMed collects the following personal data:

  • Identification data: Email address.

The use of said personal data is necessary to be able to send you the regular tips related to sleep apnoea and/or respiratory disease therapy designed to enhance your therapy experience and simplify your life. It is justified by the consent you are giving to ResMed by clicking on the tick boxes on the contact form.

When you fill out the form to contact ResMed customer service, ResMed collects the following personal data:

If you are a healthcare professional or a professional prospect:

  • Identification data: first name, last name;
  • Professional data: email address, job title;
  • Information you may sharein the “message” field of your request: identification data, professional information, private information, etc.

The use of said personal data is necessary to be able to answer your questions. It is therefore legitimate for ResMed to respond to healthcare professionals who are interested in asking further questions of ResMed. When filling out the contact form, ResMed collects your email address in order to answer your question via your email address. However, ResMed may also send you further information on its products and services, via your professional email. The use of your professional email address in this framework is justified by the consent you gave to ResMed to send you its newsletter.

If you are a patient or a prospect:

  • Identification data: first name, last name, email address.
  • Information you may sharein the “message” field of your request: identification data, health data, private information, etc.

The use of this personal data is necessary to be able to answer your request. As you may share health data – sensitive data – in the “message” field of the contact form, it is necessary for ResMed to collect your consent before answering your request. That is why you are informed above the “send” button that “by clicking on “send”, you also consent to the processing of your health data by ResMed in order to answeryour request”.

When filling out the contact form, ResMed collects your email address in order to answer your question via your email address. However, ResMed may also send you further information on sleep apnoea therapy and/or respiratory disease therapy directly to your email box. However, the use of your email address in this framework is justified by the consent you are giving to ResMed by clicking on the tick boxes on the contact form.When clicking on the “I am not a robot” ReCaptcha, some of your personal data is collected and shared with Google. Indeed, in order to adequately secure ResMed’s website forms against misuse and spam, ResMed has decided to use the Google service ReCaptcha. It checks that the data entered in ResMed’s forms has actually been entered by a human being and not by an automated program. To achieve this, ReCaptcha analyzes your behavior by processing your personal data namely your IP address, the duration of your presence on the website, your mouse movements, etc.

Those responsible for the collection and use of your personal data at ResMed

The ResMed entity responsible for your personal data is called the “Data controller”. Each ResMed entity has appointed a data protection officer (DPO) who advises and supports the data controller to ensure it protects your personal data appropriately. The Data controller of your personal data is the following ResMed entity:

ResMed (UK) Ltd., a limited company incorporated in England (registration number 02863553) registered office 96 Jubilee Avenue, Milton Park, Abingdon Oxfordshire, United Kingdom, OX14 4RW (+44 [0] 1235 862 997.

DPO: Bureau du délégué à la protection des données, Parc Technologique de Lyon, 292 Allée Jacques Monod, 69791 Saint-Priest Cedex – France, +33 426 100 200, privacy[at]resmed.eu.

The retention period of your personal data

ResMed stores your personal data (apart from data collected via cookies or like technologies) depending on the purpose of the collection:

– Contact requests: ResMed will keep your personal data for as long as necessary for the Permitted Purposes in a special folder of the ResMed’s Customer service email box before deletion;

– Claims: if the request coming from the contact form is identified as a claim, it will be then stored in our Quality Management System for 15 years in order to track how we have answered it;

– Emailing: ResMed will keep your personal data for a delay of 3 years’ from our last contact.

Data collected via cookies or like technologies will be stored in accordance with the periods provided for in our Cookies policy.

The sharing of your personal data with third parties

We do not sell or lease your personal data. We share it only as stated in this Privacy Notice, to the extent permitted under the applicable law.

We may share your personal data:

– With any ResMed entity or branch and any company held or controlled by the latter;

– If all or some of ResMed’s activity is transferred to another entity under a merger, an assignment of assets or otherwise;

– In a controlled and secure way, with third parties, our emailing tool (Dot Digital), our hosting provider (AWS), our Quality Management System (Trackwise), our Customer Relationship Management (Salesforce). Said processors are contractually bound to protect your personal data and to use it only to provide the services that ResMed first asked them to provide;

-If we are bound by law or;

– If it is needed for the purposes in the scope of the legal proceedings or to exercise or defend a right recognized by law.

 

The transfer of your personal data outside the EU

ResMed will favour the use of your personal data on the territory of a Member State of the European Union or of any other country which the European Commission has declared to have an adequate level of protection of personal data in light of its domestic law or ratified international conventions.

However, as specified in part 4 above, ResMed may share your personal data with some of its entities located out of EU for claims management and with its external service providers, Sparta Systems, as it is handles the maintenance of our Quality System Management (Trackwise) and Google LLC as ResMed uses its ReCaptcha service

ResMed highlights that said access is possible only if appropriate safeguards are implemented to ensure that the transfer is compliant with data protection regulations. Thus, we implement all appropriate safeguards (for instance, the standard contractual clauses of the European Commission,Google Privacy Shield certification) in order to ensure that any transfer of personal data to service providers outside the EU is compliant with data protection regulations.

Data security at ResMed

We use various security and privacy measures to protect your data and to comply with current data protection laws.

ResMed has also checked that your personal data collected on Resmed.co.uk will be hosted in a secure hosting centre in Europe by processors that were chosen with great care and which only act under ResMed’s instructions.

Despite the security measures we take, you must bear in mind that it is impossible to guarantee an absolute level of security for data sent over the Internet. If we receive confirmation that your personal data has been hacked, we will comply with the relevant legal provisions relating to notification of data breaches.

Your rights in light of the use ResMed makes of your personal data

You have rights over your personal data.

You may first of all exercise your right of access which includes the right to information in order to understand how ResMed processes your personal data as well as the right to instruct ResMed to provide you with a copy of the personal data that we hold.

You may also instruct us to delete the personal data that we hold in the systems described above under certain conditions; this is the right to erasure of personal data.

You may instruct us to correct your personal data if you see that it is wrong; this is your right to rectify your personal data.

In certain cases, you may instruct us to restrict how we use your personal data; this is the right to restriction of personal data processing.

You may also object to ResMed’s use of your personal data under certain conditions; this is the right to object to the processing.

You may also object to your personal data being used for marketing purposes at any time by following the opt-out instruction in each marketing email we send you.

Lastly, you have the right to instruct ResMed to transfer your personal data to you or to transfer it directly to another service provider. This is the right to portability of personal data.

If you live in France, you may also define instructions on what happens to your personal data following your death.

For the rights which you cannot exercise yourself, please write to the ResMed data protection team at the address privacy[at]resmed.eu. We will then promptly process your request to exercise rights and we will inform you in any event on any action taken following your request within a period of one month from receipt of your request.

Please note that some legal obligations may limit your request to exercise rights. In this case, we will keep you informed thereof.

If you are not happy with our response or if you notice a violation of specific local data protection laws, you have the right to file a complaint with the relevant data protection authority of your country of residence, your place of work or of the country where the violation is deemed to have been committed.