At Novo Nordisk we aim to be transparent about our use of your personal data and how we protect it. This notice explains which types of personal information we collect, why we collect it, and what we do with it.

The company responsible for processing your personal data is:

Novo Nordisk Limited
3 City Place, Beehive Ring Road
Gatwick, West Sussex
RH6 0PA
United Kingdom
Registration number 1118740

You can always contact the UK Data Protection Officer at Novo Nordisk Limited at  privacyuk@novonordisk.com or the Novo Nordisk Data Privacy Officer at privacy@novonordisk.com with questions or concerns about how we process your personal data.

We get your personal data from the following sources: 

  • From you directly
  • From your family members or care givers on your behalf
  • From Health Care Professionals (HCPs) such as your nurse, a pharmacist or doctor
  • Through phone calls, emails and other digital channels

We process personal data about you for the following purposes:

  • To perform scientific evaluations of technical complaints, adverse events and other safety information potentially related to Novo Nordisk’s medicinal products. Technical complaints, adverse events and other safety information will be filed in databases and will be regularly analysed for overall patterns / To assess patterns and trends associated with technical complaints, adverse events and other safety information and product usage
  • To respond to your questions or request for information
  • To analyse data for the purpose of supporting product usage enquiries
  • To analyse data for the purpose of improving our customer service and product offerings
  • To analyse data for the purpose of improve our scientific and product communication to HCPs and patients
  • To assess patterns and trends associated with complaints, side effects and product usage

For the purposes described above in Section 3, we may process the following types of personal data: 

  • Contact information (name, address, telephone number, email address)
  • Data revealing racial or ethnic origin
  • Data concerning health and medicinal products you are using

Our processing of your personal data requires a legal basis. By law, we are allowed to process your personal data described above in Section 4 based on the following legal bases: 

  • The processing is necessary for our legitimate interests. These legitimate interests are: 
    • To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products
    • To improve our customer service and product offerings 
    • To enhance our scientific and product communication
  • The processing is necessary for our compliance with a legal obligation

We may process personal data concerning your health, which is one of the ‘special categories of personal data’ for the following purposes:

  • Ensuring high standards of quality and safety of health care and of medicinal products or medical devices
  • Scientific research purposes

We may share your personal data with: 

  • Suppliers or vendors that assist our company (e.g., consultants, IT service providers, financial institutions, law firms, license partners)
  • Other Novo Nordisk entities (e.g., Novo Nordisk affiliates in other countries)
  • Public authorities, including health and/or regulatory authorities
  • Other pharma companies and partners if an enquiry is related to their product(s)

We have safeguards in place to secure your personal data when transferred outside of the European Union (EU) and the European Economic Area (EEA).

Situation   Safeguards protecting your data   
Data is transferred from Novo Nordisk entity in EEA to Novo Nordisk entity outside EEA  Protected by Novo Nordisk’s Binding Corporate Rules, available here
Data is transferred from Novo Nordisk entity in EEA to third country

Protected by Standard Contractual Clauses for the transfers of data to third countries entered into by Novo Nordisk  

Or, adequate data protection is in place in destination country according to EU commission 

 

We will keep your personal data for the following period of time:

  • For data relating to technical complaints: 12 years
  • For safety information and data relating to side effects: End of activity + 10 years, where end of activity is the time where no product with the active ingredient is marketed 
  • For all other enquiries: Up to 5 years 

Under applicable law, there may be limits on these rights depending on the specific circumstances of the processing activity. Contact us as described in Section 1 with questions or requests relating to these rights. You may also complain to the Information Commissioner’s Office (https://ico.org.uk/).

 

Your rights    
How you exercise your rights  
Access to your data   Ask for a copy of your personal data  
Rectification  Request that we rectify inaccurate personal data that we hold about you  
Restrict use  Request that we stop or limit the use of your personal data  
Erasure (’the right to be forgotten’)  In some (but not all) circumstances, you have the right to have your data erased.  
Complain about our use of the data  Submit a complaint to your local Data Protection Authority   
Object to processing         You may object to certain processing activities such as direct marketing, profiling and the use of your personal data for scientific or historical research purposes or statistical purposes
Data portabilityWhere you have provided us with your personal data, in certain circumstances you have a right to receive that personal data in a structure, commonly used and machine-readable format, for transmission to a third party  

If you have any questions about this privacy, cookies and legal disclaimer, if you want to obtain insight in any personal data held about you, or if you have any concerns regarding Novo Nordisk’s use of your personal data you may contact us via privacyuk@novonordisk.com

September 2023