Last updated January 2025
The protection of your personal data is of great importance to Getinge, and we will process your personal data in accordance with applicable data protection laws and regulations.
Getinge is a global medical technology and device group with companies in around 40 countries, meaning different data protection laws apply dependent upon which group company you interact with. Since our parent company Getinge AB (publ) with reg. no 556408-5032 is based in Sweden, the General Data Protection Regulation (“GDPR”) is the basis for our global data privacy program and this notice.
We do our best to make the content of this notice easy to understand and navigate. Despite this, we know that some words are difficult to grasp. To facilitate your understanding, we have gathered explanations of such words used in this notice in the Privacy definitions page.
If you have any questions related to this notice, please contact our data protection officers by sending an e-mail to data.protection@getinge.com.
This notice provides information on processing of personal data made by a company part of the Getinge group, related health care professionals. The data controller, i.e., the company that decides in which way your personal data is used and why, is the Getinge company you (as a physical person or as a sole trader) or your employer is interacting with (“Getinge”).
Since this notice includes information of the processing activities related to the Getinge group globally, there may be local variations.
In this section we provide information about our different processing activities including explanations of the:
- Purpose – why we use your personal data in a certain way.
- Categories of personal data – if it includes your name, contact details, role or other.
- Legal basis – if we for example have asked for your consent, if we are required to collect and store your personal data based on a legal obligation or if we based on a legitimate interest, can use your personal data for a specific purpose.
- Retention period – how long do we keep the personal data for each purpose.
Purpose
Getinge, as a global medical technology company and device manufacturer collects and stores personal data of industry and medical experts with the purpose to assess their suitability to take on certain tasks for Getinge, such as providing expertise in Getinge’s Medical Advisory Board, a Clinical Event Committee, acting as speaker or otherwise.
Personal Data
Contact details, educational and professional background, qualifications, and other personal data included in your CV or gathered through communications and interviews.
Legal Basis
This processing is based on Getinge’s legitimate interest to find the right people and to assess whether he/she is suitable to take on certain tasks for Getinge as an external expert or advisor.
Retention Period
We will keep your personal data from the collection and as long as we think your profile is interesting to take in consideration for a role as an external expert or advisor for Getinge. If we engage you as an expert, please see below.
Purpose
When we have assessed your suitability and concluded to engage you as an expert or advisor in Getinge’s Medical Advisory Board, a Clinical Event Committee, as a speaker or otherwise, we will agree on terms for each party’s obligations, and describe the tasks you are engaged to perform for Getinge. The purpose is to process any personal data necessary to (i) fulfill the agreed obligations between us, and (ii) use any documents or material collected or created as a result of your tasks for Getinge.
Personal Data
In addition to personal data collected during the process to assess your suitability for the expert role, in relation to the agreement we will process personal data needed to pay you and your signature. We will also collect personal data included in our communications, and in documents and material related to the assignment. If agreed, we may also process pictures, and video and voice recordings.
Legal Basis
The processing of your personal data is necessary to fulfill our agreement, and for our legitimate interest to administrate the agreement and communicate with you, and to make use of all documents and materials related to the assignment.
Retention Period
Your personal data will be kept as long as our agreement is in force, and thereafter if the agreement and other personal data is needed for us to make use of the documents and materials collected or created as a result of your tasks for Getinge. If such documentation or material is related to a medical device, we may need to store such information as long as required by applicable medical device laws and regulations. Personal data related to payments is kept in accordance with applicable financial and accounting legislation.
Purpose
Getinge may be required to process your personal data to comply with regulatory monitoring and reporting obligations, including those related to adverse events, product complaints or product safety. According to Getinge’s obligation we may use your personal data for the following: (i) investigation of the adverse event or product complaint; (ii) contacting you to receive additional information about the adverse event or product complaint reported to Getinge; and (iii) providing mandatory reports to official authorities that they can analyze the safety of our products or check the issue behind the adverse event.
You are always entitled to object to this assessment. You can read further about your rights below.
Personal Data
Contact details, place and address of your employer, job title and position.
Legal Basis
The processing of your personal data is necessary to fulfill our legal obligations related to adverse events, complaints related to quality issues, or other issues related to the safety and reliability of Getinge’s products.
Retention Period
Your personal data will be kept as long as required by applicable medical device laws and regulations.
Purpose
Getinge, a global medical technology company, arrange events and offers webinars that customers, HCPs and others can register for via the Getinge website. Our purpose with the processing of your personal data is to communicate with you providing you with relevant information related to the event or webinar, as well as administrating the event or webinar.
Personal Data
Contact details, place and address of your employer or company you represent, job title and position.
Legal Basis
This processing is based on Getinge’s legitimate interest to administer the event or webinar and to communicate with you before and after the event has been held.
Retention Period
We will keep your personal data from the time you registered for the event, and for as long as we consider that you could be interested in receiving invitations to similar events held by Getinge.
If we have received your approval to send direct marketing, we will keep your personal data for that purpose until you unsubscribe to such communications or otherwise contact us requesting a stop.
Purpose
Getinge offers in different training centers the possibility to receive specialized technical product training. After the training Getinge will issue the related invoice for the training and send it directly for payment to the employer of the HCP and handout the relating certificate for the participation to the HCP directly or provide it later by E-Mail to the HCP’s.
Personal Data
Contact details, place and address of your employer, job title and position.
Legal Basis
This processing is based on Getinge’s legitimate interest to administer the training and to provide you with a certificate after finalized training.
Retention Period
Getinge will keep your personal data from its collection, during the training, and for a certain time thereafter. For such personal data included in invoices and other documents related to payments, such will be kept in accordance with applicable financial and accounting laws and regulations.
Purpose
To be able to administer, follow up and respond to your application and to take necessary actions in relation thereto.
Personal Data
If you fill out the research application form for Getinge Support for Clinical Study Research, we process your name, organization/institution, country and city, phone number and e-mail address.
The above information is mandatory to provide in order to file your application. If you do not provide such mandatory personal data to us, you will not be able to submit your application via our online form.
If you voluntarily provide additional information relevant for your application, such as your street address, your work title and any information you provide in the free-text boxes or as is contained in any documentation you upload, we process this as well.
Legal Basis
Our processing is based on our legitimate interest to provide you with the information you have requested and to review your application.
This processing is initiated by your application and the personal data collected is limited to such information, which is necessary in order for us to provide the requested documentation. In our opinion, our processing of such personal data is to some extent also a shared interest between us as it lies within your interest that your personal data is used to provide the information you have requested.
Based on the factors mentioned above, we have conducted a balance of interest assessment and have concluded that our legitimate interest outweigh your potential interest in not having your personal data processed for this purpose.
You are always entitled to object to this assessment. You can read further about your rights below.
Retention Period
The exact duration of processing may vary depending on the nature of your application.
However, your personal data will at least be stored for the duration of our evaluation of your application, including any correspondence and contact with you, and for a period thereafter to enable any follow up of the application, or initiation of a project.
Getinge collects your personal data either:
Directly from you
- Through the contract we have with you or through an electronic or paper form you have used to contact us or to submit a request;
Indirectly
- From an application or from third parties.
We share your personal data with various entities of the Getinge group in order to manage our activities and maintain our relationship with you.
We may also share your Personal Data in other special circumstances, for example when we believe that sharing will help protect the security of Getinge's assets and persons, property or rights, those of our partners, associates or others.
Depending on the above-mentioned purposes, Getinge may share your Personal Data:
Personal data shared internally within the Getinge group
- With departments authorized to process your data within the Getinge group (for example, people employed by Getinge companies and working in purchasing and procurement, finance, quality, or the legal and compliance department).
Personal data shared externally with a processor or separate data controller
- Your data may be shared outside the Getinge group, for example with Getinge service providers responsible for monitoring the security of the network and IT infrastructure of group companies,
- tax authorities or government agencies to comply with certain laws, such as those against fraud, tax evasion, anti-corruption, or
- ethics committee in relation to clinical trials or an independent body in a member state of the EU.
We require our service providers to keep your personal information secure, and do not allow our service providers to use or share your personal information for any purpose other than providing services on our behalf.
The companies which we share your personal data with described above are located in the EU/EEA as well as outside the EU/EEA – also called third countries.
Third countries legislation may differ from the rules of data protection within the EU/EEA, which means that when such transfers occur, we will either make sure the country has an adequate level of protection or enter into standard contractual clauses with the party which we share or give access to your personal data.
Adequate level of protection:
The European Commission has decided that certain countries outside the EU/EEA have a sufficiently high level of security. This means that personal data can be transferred there without any further action having to be taken regarding the transfer itself (beyond what applies under the GDPR in general). A list of which countries are included can be found here.
If any Getinge company in the EU, shares or give access to your personal data to a Getinge company in the UK, Japan, Canada, Switzerland, New Zealand or Republic of Korea, such sharing or access is made to a country with an adequate level of protection.
EU Standard Contractual Clauses:
Since only a few countries are considered to have an adequate level of protection, the most common measure to ensure sufficient protection in the event of a transfer outside the EU/EEA is to apply the EU Commission's Standard Contractual Clauses pursuant to Commission Implementing Decision (EU) 2021/914, without any changes or amendments in conflict with the clauses. If you want to read them in their entirety, you can download them via the European Commission's website under the heading Standard contractual clauses for international transfers.
Right to obtain a copy – If you would like more information about transfers to third countries, and a copy of the safeguard we have used, please Contact us
An Intra-group Data Processing Agreement, including the EU Standard Contractual Clauses, has been signed between all Getinge companies worldwide.
Your personal data will be retained for as long as necessary to achieve the purposes set out in this notice, but no longer than required or permitted by applicable data protection legislation and internal Getinge policies. To receive information of the certain retention periods applicable for the company which you interact with, and such information has not been provided by that company, you are welcome to contact us.
We dispose the personal data we collect in accordance with Getinge's directive and retention procedures.
You are entitled to exercise certain rights when we process your personal data. Below we list each of these rights and provide a short explanation of what they mean.
- Access – right to request and receive information.
- Rectification – right to request correction of incorrect or incomplete data.
- Erasure (right to be forgotten) – right to request deletion of personal data.
- Data Portability – right to request transfer of your personal data.
- Object – right to object to certain processing, such as direct marketing and when our legal basis is legitimate interest.
- Restriction – right to request restriction of how we use certain personal data.
- Withdraw consent – right to request us to cease processing based on your consent.
- Lodge a complaint – right to submit a complaint to a data protection authority.
More detailed information regarding the above rights is found on the page called Your Rights.
If you already know that you would like to exercise any of the above rights, please fill in our Data Subject Request Form. Please note that Getinge will assess on a case-by-case basis whether a request to exercise your rights is valid, since the rights are not absolute, and exceptions may apply.
If any changes are made concerning the processing of your personal data, we will inform you of such changes by publishing an updated version of this privacy notice in the Getinge Privacy Center.