Last updated January 2025
The protection of your personal data is of great importance to Getinge, and we will process your personal data in accordance with applicable data protection laws and regulations.
Getinge is a global medical technology and device group with companies in around 40 countries, meaning different data protection laws apply dependent upon which group company you interact with. Since our parent company Getinge AB (publ) with reg. no 556408-5032 is based in Sweden, the General Data Protection Regulation (“GDPR”) is the basis for our global data privacy program and this notice.
We do our best to make the content of this notice easy to understand and navigate. Despite this, we know that some words are difficult to grasp. To facilitate your understanding, we have gathered explanations of such words used in this notice in the Privacy definitions page.
If you have any questions related to this notice, please contact our data protection officers by sending an e-mail to data.protection@getinge.com.
In this section we provide information about our different processing activities including explanations of the:
- Purpose – why we use your personal data in a certain way.
- Categories of personal data – if it includes your name, contact details, role or other.
- Legal basis - if we for example have asked for your consent, if we are required to collect and store your personal data based on a legal obligation or if we based on a legitimate interest, can use your personal data for a specific purpose.
- Retention period –how long do we keep the personal data for each purpose.
Purposes
To be able to make the Website available to you and to improve, develop, and enhance the usability of the website.
Who is responsible?
The data controller, i.e. the company that decides in which way your personal data is used and why, is Getinge AB (publ) with reg. no 556408-5032 based in Sweden.
Personal Data
If you visit our Website, we process your Internet Protocol (IP) address, browser language, geographical location data, demographic information, date and time, interest in products and information posted on our website and information about webpages, weblinks, and any other information on our Website accessed by you.
Legal basis
We base our processing on our legitimate interest to ensure that you are given access to a well-functioning website which is up to date and provides you and other website visitors with easy access to the functions and information you seek.
The amount of personal data being processed is fairly limited and is generally analysed on an aggregated basis. Information concerning the demography, geographical location, interests and behavior data are not linked to any specific individual person and the recording can be deactivated at any time in the browser settings. The processing activities are not deemed to affect personal integrity to a large extent and are proportionate in relation to their purpose.
Based on those factors, we have performed a balance of interest assessment and have concluded that our legitimate interest in processing your personal data for the stated purpose outweigh your potential interest in not having your personal data processed for this purpose.
You are always entitled to object to this assessment. You can read further about your rights here.
Retention Period
This personal data is collected via the use of cookies and may be stored for different periods of time as each cookie has a specific duration. These individual duration periods relating to specific cookies are available in our Cookie Notice.
Purposes
To be able to administer, follow up and respond to any messages and questions you send us through our contact forms, and to take necessary actions in relation to such messages and questions.
Who is responsible?
The data controller, i.e. the company that decides in which way your personal data is used and why, is the Getinge company that will respond to your request.
Personal Data
If you contact us via a contact form on our Website, e.g. to contact our sales department, place a service order, order spare parts, contact our technical support, contact us as a representative for the media or otherwise contact us, we process such personal data that is mandatory to provide in order to use the relevant contact form. Such information may include your name, e-mail address, your street address and the company you represent. What information that is mandatory to provide will vary depending on which form you use.
If you voluntarily provide additional information, such as your phone number and any information you provide in your personal message, we process this as well.
The contact forms will indicate which fields are mandatory for each respective contact form. If you do not provide such mandatory personal data to us, you will not be able to submit your message via our online contact form.
Legal basis
Our processing is based on our legitimate interest to administer, follow up and respond to messages and questions and to take necessary actions relating to your inquiry.
This processing is initiated by your contact and the personal data collected is limited to such information which is necessary in order for us to administer, follow up and respond to such contact and take action if needed. In our opinion, our processing of such personal data is to some extent also a shared interest between us as it lies within your interest that your personal data is used to provide you with the services or information you have requested.
Based on the factors mentioned above, we have conducted a balance of interest assessment and have concluded that our legitimate interest outweigh your potential interest in not having your personal data processed for this purpose.
You are always entitled to object to this assessment. You can read further about Your Rights here.
Retention Period
The exact duration of processing may vary depending on what department within Getinge that will receive your message. What department that will receive your message depends on; (i) what contact form you have used; and (ii) what country you or your company are located in.
However, your personal data will at least be stored for the duration of our correspondence and contact, and for a limited period thereafter, to enable any follow up of our correspondence and contact if needed.
Purposes
To be able to provide you with information and updates concerning our business and our products as requested by you.
Who is responsible?
The data controller, i.e. the company that decides in which way your personal data is used and why, is Getinge AB (publ) with reg. no 556408-5032 based in Sweden alone, or together with a local Getinge entity being the sales company of that country.
Personal Data
If you subscribe to receive continuous information and updates concerning our work or our products, we process your name and e-mail address.
Legal basis
Our processing is based on our legitimate interest to provide you with the information you have requested.
This processing is initiated by your subscription and the personal data collected is limited to such information, which is necessary in order for us to provide the requested documentation. In our opinion, our processing of such personal data is to some extent also a shared interest between us as it lies within your interest that your personal data is used to provide the information you have requested.
Based on the factors mentioned above, we have conducted a balance of interest assessment and have concluded that our legitimate interest outweigh your potential interest in not having your personal data processed for this purpose.
You are always entitled to object to this assessment. You can read further about your rights below.
Retention Period
Your personal data is stored until you no longer wish to receive our information. Once you have unsubscribed, we will delete your personal data as soon as possible. Statistics which have been anonymized may be saved thereafter.
You are given the opportunity to unsubscribe in connection with each distribution of information and may also unsubscribe by contacting us.
Purposes
Getinge, a global medical technology company, arrange events and offers webinars that customers, HCPs and others can register for via the Getinge website. Our purpose with the processing of your personal data is to communicate with you providing you with relevant information related to the event or webinar, as well as administrating the event or webinar.
Who is responsible?
The data controller, i.e. the company that decides in which way your personal data is used and why, is the Getinge company responsible for this event or webinar.
Personal Data
To achieve this goal, we may collect: your contact details, the location and address of your employer or the company you represent, your job title and function, the event and/or webinar you registered for and whether you participated.
Legal basis
This processing is based on Getinge’s legitimate interest to administer the event or webinar and to communicate with you before and after the event has been held.
Retention Period
We will keep your personal data from the time you registered for the event, and for as long as we consider that you could be interested in receiving invitations to similar events held by Getinge. If we have received your approval to send direct marketing, we will keep your personal data for that purpose until you unsubscribe to such communications or otherwise contact us requesting a stop.
In addition to the above, if necessary, Getinge will process personal data for the establishment, exercise and/or defense of legal claims. In such case, the data will be kept until the legal claim is finally settled and thereafter for the statute of limitation period.
This processing is based on Getinge’s legitimate interest to establish, exercise and defend legal claims.
The data controller, i.e. the company that decides in which way your personal data is used and why, is the Getinge company involved in the legal claim.
We will only collect the personal data directly from you, or from the company you represent as set out in section 2.
The provision of your personal data is necessary to provide to the extent as set out in section 2. If you do not provide your personal data to us, we may not be able to provide you with access to our website or all its services or provide you with information requested by you, and we will not be able to respond to your messages and questions.
We have implemented appropriate technical and organizational measures to protect your personal data against loss, accidental and unlawful access and unauthorized disclosure. The number of persons with access to your personal data is limited. Only individuals within Getinge that need to process your personal data in accordance with the purposes above have access to your personal data.
We may share your personal data with Getinge affiliates, if necessary, to achieve the purposes described in section 2.
In order to fulfill the purposes of processing, Getinge may, if necessary, also share your personal data with the following suppliers and partners that carry out services on our behalf or in other ways collaborate with us, including:
a) IT suppliers;
b) Suppliers of CRM systems;
c) Suppliers of marketing services; and
d) Technical service providers.
Your personal data may also be shared with courts and other authorities in order to fulfill the purposes described in section 2.
The companies which we share your personal data with described above are located in the EU/EEA as well as outside the EU/EEA – also called third countries. For example, if you apply for a position in Europe, the manager may be located in the US, meaning your personal data will be shared with him/her during the recruitment process.
Third countries legislation may differ from the rules of data protection within the EU/EEA, which means that when such transfers occur, we will either make sure the country has an adequate level of protection or enter into standard contractual clauses with the party which we share or give access to your personal data.
Adequate level of protection
The European Commission has decided that certain countries outside the EU/EEA have a sufficiently high level of security. This means that personal data can be transferred there without any further action having to be taken regarding the transfer itself (beyond what applies under the GDPR in general). A list of which countries are included can be found here.
If any Getinge company in the EU, shares or give access to your personal data to a Getinge company in the UK, Japan, Canada, Switzerland, New Zealand or Republic of Korea, such sharing or access is made to a country with an adequate level of protection.
EU Standard Contractual Clauses
Since only a few countries are considered to have an adequate level of protection, the most common measure to ensure sufficient protection in the event of a transfer outside the EU/EEA is to apply the EU Commission's Standard Contractual Clauses pursuant to Commission Implementing Decision (EU) 2021/914, without any changes or amendments in conflict with the clauses. If you want to read them in their entirety, you can download them via the European Commission's website under the heading Standard contractual clauses for international transfers.
Right to obtain a copy – If you would like more information about transfers to third countries, and a copy of the safeguard we have used, please contact us.
An Intra-group Data Processing Agreement, including the EU Standard Contractual Clauses, has been signed between all Getinge companies worldwide
You are entitled to exercise certain rights when we process your personal data. Below we list each of these rights and provide a short explanation of what they mean.
- Access – right to request and receive information.
- Rectification – right to request correction of incorrect or incomplete data.
- Erasure (right to be forgotten) – right to request deletion of personal data.
- Data Portability – right to request transfer of your personal data.
- Object – right to object to certain processing, such as direct marketing and when our legal basis is legitimate interest.
- Restriction – right to request restriction of how we use certain personal data.
- Withdraw consent – right to request us to cease processing based on your consent.
- Lodge a complaint – right to submit a complaint to a data protection authority.
More detailed information regarding the above rights is found on the page called Your Rights.
If you already know that you would like to exercise any of the above rights, please fill in our Data Subject Request Form. Please note that Getinge will assess on a case-by-case basis whether a request to exercise your rights is valid, since the rights are not absolute, and exceptions may apply.
If any changes are made concerning the processing of your personal data, we will inform you of such changes by publishing an updated version of this privacy notice in the Getinge Privacy Center.