The company responsible for processing your personal data is:

Novo Nordisk Limited
3 City Place, Beehive Ring Road
Gatwick, West Sussex
RH6 0PA
United Kingdom
Registration number 1118740

We collect your personal data from the following sources: 

• From you directly;
• From your family members or care givers on your behalf;
• From Health Care Professionals (HCPs) such as your nurse, a pharmacist or doctor;

We process personal data about you for the following purposes:

• To perform scientific evaluations of technical complaints, adverse events and other safety information potentially related to Novo Nordisk’s medicinal products. Technical complaints, adverse events and other safety information will be filed in databases and will be regularly analysed for overall patterns.
• To assess patterns and trends associated with technical complaints, adverse events and other safety information and product usage.
• To respond to your questions or request for information.
• To analyse data for the purpose of supporting product usage enquiries.
• To analyse data for the purpose of improving our customer service and product offerings.
• To analyse data for the purpose of improve our scientific and product communication to HCPs and patients.
• To assess patterns and trends associated with complaints, side effects and product usage.

For the purposes described above in Section 3, we may process the following types of personal data: 

• Contact information (name, address, telephone number, email address);
• Data revealing racial or ethnic origin;
• Data concerning health and medicinal products you are using.

Our processing of your personal data requires a legal basis. We will not process your personal data if we do not have a proper justification foreseen in the law for that purpose.  

By law, we are allowed to process your personal data described above in Section 4 based on the following legal bases: 

• The processing is necessary for our compliance with a legal obligation
• The processing is necessary for our legitimate interests. These legitimate interests are: 
  • To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products
  • To improve our customer service and product offerings 
  • To enhance our scientific and product communication

We may process personal data concerning your health, which is one of the ‘special categories of personal data’ for the following purposes:

• Ensuring high standards of quality and safety of health care and of medicinal products or medical devices;
• Scientific research purposes.

We may share your personal data with: 

• Suppliers or vendors that assist our company (e.g., consultants, IT service providers, financial institutions, law firms, license partners)
• Novo Nordisk staff and consultants, and other Novo Nordisk entities (e.g., Novo Nordisk affiliates in other countries)
• Other pharmaceutical companies and partners if an enquiry is related to their product(s)

The above third parties are contractually obliged to protect the confidentiality and security of your personal data, in compliance with applicable law. 

Your personal data can also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court, where we are required to do so by applicable law or regulation or at their request.

We have safeguards in place to secure your personal data when transferred outside of the United Kingdom (UK). The level of data protection in certain countries outside the UK does not conform to the level of data protection for personal data currently applied and enforced within the UK. We therefore use the following safeguards, as required by law, to protect your personal data in case of such transfers:

• Data is transferred from Novo Nordisk entity in UK to Novo Nordisk entity outside UK. The transfer is to a Novo Nordisk entity covered by Novo Nordisk’s Binding Corporate Rules, available here
• The destination countries are deemed by the Information Commissioner’s Office (ICO) to have an adequate level of protection of personal data.
• We have entered into International Data Transfer Agreement for the Transfer of Personal Data to Third Countries. You can get a copy of the Clauses by contacting us as described in Section 1.

We will keep your personal data for the following period of time:

• For data relating to technical complaints: 12 years
• For safety information and data relating to side effects: End of activity + 10 years, where end of activity is the time where no product with the active ingredient is marketed 
• For all other enquiries: Up to 5 years 

You are entitled to know whether we hold personal data about you and, if we do, obtain insight to that data and require the data to be corrected, if inaccurate.

You are also entitled to know the purpose(s) and you may object to Novo Nordisk’s use of your personal data and require such data erased. please contact us via our privacy mailbox privacyuk@novonordisk.com if you wish to obtain insight in your personal data or if you have any concerns in this regard.

Under applicable law, there may be limits on these rights depending on the specific circumstances of the processing activity. 

Contact us as described in Section 1 with questions or requests relating to these rights.

If you are not satisfied with our response or believe we are processing your personal data in a way that is not lawful you can complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns/.