Privacy notice for Heylo

As the responsible data controller Coloplast (Coloplast A/S, Holtedam 1, 3050 Humlebaek, Denmark) is required to obtain your consent to collect and process the personal information you provide in order to enable the Heylo online features and free personal support. The purpose of this declaration is to give you information on what you are consenting to and how Coloplast is handling your information.

How will my information be handled?

• You don’t need to enable the Heylo online features and free personal support to use the Heylo app. It is voluntary to enable, but some functionalities will not be present if the Heylo online features and free personal support are not enabled. By enabling the Heylo online features and free personal support you allow your information to be shared with Coloplast, and you allow Coloplast to use your information as described in this declaration.

• The Heylo online features and free personal support include: personal onboarding support (an advisor will call and guide you), leakage tracking notifications via e-mail (support e-mails tailored to improve your routine will be sent based on leakage events), and phone support for leakage events, wet mount events and transmitter errors (an advisor will call you based on these events).

• The information Coloplast may collect from you via the Heylo app (“your information”) includes: first name, last name, stoma type, surgery date, password, email, phone number, country, insurance type, consent, transmitter ID, User ID, wet mount events, transmitter error events, and leakage events.

• Coloplast will use your information to (i) provide the personal Heylo support, (ii) analyse the data to improve the performance of Heylo and other Coloplast products and gain insights for service claims and publications
(including in combination with data from other Coloplast services), and (iii) for Coloplast to call you and send you information about new Coloplast products, and other marketing materials. The consent allows Coloplast to contact you and provide the support via phone, e-mail, SMS, mail, social media, and other online communication channels. Coloplast will only handle your information in accordance with your consent for this purpose, which forms the legal basis for Coloplast’s processing, cf. articles 6(1)(a) and 9(2)(a) of the EU General Data Protection Regulation (“GDPR”).

• Your consent will be valid for 5 years unless you withdraw the consent before expiry of the period. Coloplast may ask for your consent again before expiry. Your information is kept as long as a valid consent is in place and will be deleted automatically if your consent is not renewed before expiry.

• Coloplast will protect your information in accordance with best industry practices and will only process your data for the specified purpose(s). Coloplast will in certain cases use systems run on third-party platforms or involve third parties in the processing (e.g., IT development consultants). Such cases will imply a transfer of data to the third parties, but solely for the specified purposes and with the third parties acting on instruction from Coloplast. Data may be collected and processed across the Coloplast network, which may entail processing of personal data outside the European Economic Area. In such cases, an adequate level of protection will be ensured by the third parties being subject to the standard contractual clauses on data protection adopted by the EU or to an EU-approved certification mechanism on data protection. For further information about this please consult Coloplast’s data protection officer (details below).

• Coloplast will not make any individual automated decisions that may affect you or have legal effects for you based on the information you provide.
  
  

What are my rights?

You may contact Coloplast at privacyrequests@coloplast.com at any time with a request for:

-        Access to your data;

-        Rectification or deletion of your data;

-        Restrictions upon Coloplast in the processing of your data or object to the processing;

-        Receiving your data in a machine readable format (data portability); and

-        Withdrawal of your consent

Your exercise of any of the rights listed above will not have negative implications for you. Please visit www.coloplast.com/global/privacy-notice for more information on how Coloplast is handling personal information.

Where you have questions or queries regarding Coloplast’s handling of personal information, please contact Coloplast’s Data Protection Officer at dataprotectionoffice@coloplast.com. Complaints related to Coloplast’s handling of your personal information may similarly be sent to the Data Protection Officer, and you are also entitled to file a complaint with the relevant supervisory authority. As Coloplast is established in Denmark you may always file a complaint with the Danish Data Protection Agency (www.datatilsynet.dk).

How can I contact Coloplast