In Novo Nordisk we aim to be transparent about our use of your personal data and how we protect it. This notice explains which types of personal information we collect, why we collect it, and what we do with it.
The Novo Nordisk entity you entered a contract with is responsible for the collection and use of your personal data relating to this contract. If you have any questions or concerns with how we process your personal data, please reach out to your Novo Nordisk contact person, or to the Novo Nordisk Data Privacy Officer at privacy@novonordisk.com
We get your personal data from the following sources:
- From you directly
- From your family members or care givers on your behalf
- From Health Care Professionals such as your nurse, a pharmacist or doctor
- Through phone calls, emails and other digital channels
We process personal data about you for the following purposes:
- To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products. Complaints and side effects will be filed in databases and will be regularly analysed for overall patterns
- To respond to your questions or request for information
- To analyse data for the purpose of supporting product usage enquiries
- To analyse data for the purpose of improving our customer service and product offerings
- To analyse data for the purpose of improve our scientific and product communication to HCPs and patients
- To assess patterns and trends associated with complaints, side effect and product usage
| Type(s) of data | What we may collect and use |
| Personal identification information | First name, last name, title, date of birth, unique identifier, photo or video, professional qualifications |
| Contact information | Name, address, telephone number, email address |
| Financial information | Bank account number |
| Information to meet your needs | Such as allergies or food aversions |
| Data revealing racial or ethnic origin | |
| Data concerning health and medicinal products you are using |
Our processing of your personal data requires a legal basis. By law, we are allowed to process your personal data described above in Section 4 based on the following legal bases:
- The processing is necessary for our legitimate interests. The legitimate interests are:
- The processing is necessary for our compliance with a legal obligation
- To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products.
- To improve our customer service and product offerings
- To enhance our scientific and product communication
- You gave consent for us to process your personal data [optional – only relevant for countries where consent is required]
In line with the purpose as stated above, we may share your data with:
| Third party | Such as |
| Suppliers or vendors assisting Novo Nordisk | Consultants, IT service providers, financial institutions, law firms |
| Other Novo Nordisk entities | Novo Nordisk affiliates |
| Public authorities | Tax authorities |
| Your rights | How you exercise your rights |
| Overview of your data | Ask for a copy of your personal data, which we provide in a structured format, readable to a machine |
| Restrict use | Request that we stop or limit the use of your personal data |
| Deletion | Request that your personal data is deleted or destroyed |
| Correct your data | Ask us to correct information about you |
| Complain about our use of the data | Submit a complaint to your local Data Protection Authority |
We will keep your personal data for the following period of time:
- For data relating to technical complaints: 12 years
- For safety information and data relating to side effects : permanently (lifelong)
- For all other enquiries: Up to 5 years