Notice of Personal Data Processing

1. WHAT IS THIS ABOUT?

In Novo Nordisk we aim to be transparent about our use of your personal data and how we protect it. This notice explains which types of personal information we collect, why we collect it, and what we do with it.

2. WHO IS RESPONSIBLE FOR YOUR DATA?

The Novo Nordisk entity you entered a contract with is responsible for the collection and use of your personal data relating to this contract. If you have any questions or concerns with how we process your personal data, please reach out to your Novo Nordisk contact person, or to the Novo Nordisk Data Privacy Officer at privacy@novonordisk.com

3. HOW DO WE COLLECT YOUR PERSONAL DATA?

We get your personal data from the following sources:

From you directly
From your family members or care givers on your behalf
From Health Care Professionals such as your nurse, a pharmacist or doctor
Through phone calls, emails and other digital channels

4. PURPOSE – WHY DO WE COLLECT AND USE YOUR DATA?

We process personal data about you for the following purposes

To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products. Complaints and side effects will be filed in databases and will be regularly analysed for overall patterns.
To respond to your questions or request for information
To analyse data for the purpose of supporting product usage enquiries
To analyse data for the purpose of improving our customer service and product offerings
To analyse data for the purpose of improve our scientific and product communication to HCPs and patients
To assess patterns and trends associated with complaints, side effect and product usage

5. WHAT TYPES OF DATA DO WE COLLECT AND USE?

Contact information (name, address, telephone number, email address);
Data revealing racial or ethnic origin;
Data concerning health and medicinal products you are using;

6. WHY ARE WE ALLOWED BY LAW TO PROCESS YOUR PERSONAL DATA?

Our processing of your personal data requires a legal basis. By law, we are allowed to process your personal data described above in Section 4 based on the following legal bases:

The processing is necessary for our legitimate interests. The legitimate interests are:

The processing is necessary for our legitimate interests. The legitimate interests are:
The processing is necessary for our compliance with a legal obligation
To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products.
To improve our customer service and product offerings
To enhance our scientific and product communication
You gave consent for us to process your personal data [optional – only relevant for countries where consent is required]

7. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

In line with the purpose as stated above, we may share your data with:

Third party	Such as
Suppliers or vendors assisting Novo Nordisk	Consultants, IT service providers, financial institutions, law firms
Other Novo Nordisk entities	Novo Nordisk affiliates
Public authorities	Tax authorities

8. HOW YOU CAN CONTROL THE USE OF YOUR PERSONAL DATA?

Your rights	How you exercise your rights
Overview of your data	Ask for a copy of your personal data, which we provide in a structured format, readable to a machine
Restrict use	Request that we stop or limit the use of your personal data
Deletion	Request that your personal data is deleted or destroyed
Correct your data	Ask us to correct information about you
Complain about our use of the data	Submit a complaint to your local Data Protection Authority

9. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

We will keep your personal data for the following period of time:

For data relating to technical complaints: 12 years
For safety information and data relating to side effects: End of activity + 10 years, where end of activity is the time where no product with the active ingredient is marketed
For all other enquiries: Up to 5 years