U.S.SUPPLEMENTAL PRIVACY NOTICES
CALIFORNIA'DO NOT TRACK'DISCLOSURES
California law(CalopPA)requires Medtronic,plc to let you know how we respond to web browser'Do Not Track(DNT)signals’。Because there currently is not an industry or legal standard for recognizing or honoring DNT signals,we do not honor do Not Track requests at this time。
STATE PRIVACY LAW TRANSPARENCY
This notice describes our data practices under various state data privacy laws,including the California Privacy Rights Act and similar legislation,such as laws in Colorado,Connecticut,Utah,and Virginia。Unless otherwise noted,this notice does not describe our data practices where personal information is regulated by the federal Health Insurance Portability and Accountability Act of 1996,as regulated and amended(HIPAA),or state laws relating only to data governed by that Act。Other disclosures,such as Notices of Privacy Practices,may apply in those cases。
人员信息We Collect
edtronic collects information that identifies,relates to,describes,references,is reasonably capable of being associated with,or could reasonably be linked,directly or indirectly,with a particular device,consumer,or household(“personal information”)。We may have collected the following categories of personal information from consumers through our websites,apps,services,devices,orother services within the twelve(12)months preceding the effective date of this Privacy Statement:
- Identifiers such as
- Name
- Address
- Unique personal identifier(e.g.,device ID,online identifier)
- Internet Protocol address
- Email address
- Telephone number
- 帐户名称
- Social security number
- 驾驶员’s license number,or
- Other similar identifiers
- Characteristics of protected classifications under California/federal law(e.g.,age,race,sex,medical condition,etc.)
- 介质变形
- 垂直insurance information
- Financial information,including credit card numbers
- Biometric information(e.g.,imagery of the iris,retina,fingerprint,face,or other data that contain identifying information)
- Commercial information(e.g.,purchase history)
- Internet or other electronic network activity information(e.g.,browsing history,interaction with our website,etc.)
- 几何数据
- Audio,electronic,visual,thermal,olfactory,or similar information(e.g.,call recordings)
- Professional,employment-related,orother similar information
“人员information”under these state laws does not include information that is
- publicly available from government records,
- de-identified or aggregated consumer information,
- 1996(HIPAA)and the California Confidentiality of Medical Information Act(CMIA)or clinical trial data,or
- certain personal or financial information covered under certain sector-specific privacy laws。
预应力information,please seeHow Does Medtronic Keep and使用Personal Information。
人员信息,人员信息
通过以下步骤
- 直接从consumers’interactions with us,including with our devices,applications,websites,services,and representatives
- 公共可用源
- 客户,including health care providers and insurance providers
- 原封不动的用户到保护服务
人员信息,人员信息
其中12 months,we have used or disclosed the personal information we collect for our operational purposes and for one or more of the following business purposes:
- 目标产品和服务目标接合器
- 目标到接合器请求
- To improve and personalize consumer access to and experience on our website,for example,by telling consumers about new features,products,orservices that may be of interest to them
- To develop records,including records of consumers’personal information
- To contact consumers with information that might be of interest to them,including,to the extent permitted by law,information about clinical trials and educational and marketing communications about products and services of ours and of others
- For analytical purposes and to research,develop,and improve programs,products,services and content
- 外部产品和服务
- 应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力应力
- For U.S.healthcare providers,to link name,National Provider Identifier(NPI),state license number,and/or IP address to web pages they visit,for compliance,marketing,and sales activities
- 到控制audits and perform troubleshooting activities of our websites,products,and services
- 目标和保护安全性incidents和deceptive,malicious,or fraudulent activity
- To ensure our website,products,apps,and services function as intended,including debugging and repairing
- 到comply with a law or regulation,court order or other legal process
Please seeHow does Medtronic Keep and使用人员信息in our Privacy Statement for more information。
How We Share Personal Information
Medtronic will not share consumers’personal information with an unrelated third party without permission,except as described below。edtronic may share personal information with any member of our corporate group,including parent companies,subsidiaries,and affiliates,and other companies in which we anownership or economic interest for purposes thatare consistent with those identified in our Privacy Statement and this Notice。Medtronic may share or transfer personal information aspart of a transaction,such asa merger or acquisition,under which a third party acquires or full or partial ownership of a Medtronic affiliate,subsidiary,or business。In the ordinary course of business,we will share some personal information with companies,such as service providers,that we hire to perform services or functions on our behalf。Some companies performing services on our behalf may collect personal information forus.In all cases in which we share consumers’personal information with a third party vendor,we require them to keep personal information confidential,and will only allow them to keep,disclose,or use consumers’information to provide the services we asked them to provide。We may be required to release consumers’personal information in response to a court order,subpoena,search warrant,law,or regulation。We may cooperate with law enforcement authorities in investigating and prosecuting users who violate our rules or engage in behavior which is harmful to other users or illegal。In addition,we may keep,disclose,and use consumers’personal information in order to comply with U.S.FDA and other governmental guidance,directions,regulations,and laws。Personal information collected from SMS programs will not be shared with third-parties,including for their marketing purposes。
受保护的健康信息
In certain instances,we collect Protected Heath Information as defined under the Health Insurance Portability and Accountability Act of 1996(HIPAA)。We may de-identify such information,meaning that you would no longer be identified as a single unique individual。We use the HIPAA Safe Harbor method or the HIPAA Expert Determination method described in45C.F.R.1§164.514 to de-identify protected health information regulated under HIPAA。Once we have de-identified information,it is no longer personal information and we may treat it like other non-personal information。We may sell or disclose deidentified patient information consistent with our responsibilities under HIPAA。Enties to whom we disclose de-identified information are prohibited from re-identifying or attempting to re-identify it.Anyone with whom we contract who receives any de-identified data derived from Protected Health Information is prohibited by lawfrom attempting to re-identify that data。
人员信息,人员信息
We do not sell personal information of U.S.consumers,including on minors。
This does not include disclosures that are not a“sale”under applicable state privacy laws,including when
- consumers instruct us to disclose their personal information,
- a consumer instructs us to interact with a third party that does not sell that information,
- we use or share consumers’personal information pursuant to awritten contract with a service provider that is necessary to perform a business purpose,where our contract prevents the provider from using,keeping,or disclosing consumers’personal information forany purpose other than the reason supplied in the contract,or or or
- consumers’personal information is transferred as part of a transaction in which the third party assumes control of all or part of our business。
edtronic does not disclose your data to data brokers or release it to unrelated third parties for their own direct marketing purposes。
Insome cases,Medtronic uses cookies,scripts,and similar technologies on its websites to provide the website’s basic functionality,enhanced functionality and content,audience and technical analytics,impression management,and marketing。Some of these functionalities and technologies may be provided by third parties,who may be receiving data aboutyou(including your household,device,browser,or profile)and your interactions with Medtronic websites independently。This data may include your IP address,time of access,browser or network identifiers,domains,sites,or pages visited,time spent on site,interactions with site content like downloads and video plays,voluntered information like your name and contact information,your rough location,other technical information,other,and other information from cookies。
To give you control over what information you share with Medtronic and others about your activity on Medtronic websites,including for opting out of activity that may be classified as“Sharing”,“cross-contextual behavioral advertising”,audience“profiling”,or similaterms under applicalaw,you will be presented with a website privacy preference management prompt where you can choose to turn on or off of these technologies based on their purpose,such as analytics,marketing,and site functionality。
预成形过程中的cookies and how to opt out of some cookies as you choose,see ourCookie Policyand our cookie preferences link on applicable webpages。
Rights under State Privacy Laws
While these rights vary depending on where you are,you may have some or all of the following rights:
- Know:you may have a right to know of or confirm the existence of your personal data,any processing we do with it,and review our practices of data collection and processing,such as knowing what categories of personal data we process,our purposes of processing,and categories of party to whom we disclose。
- 访问,访问and,and运输能力:you may have aright to access your personal data,accessing specific pieces of information,and knowing to which third parties your data was disclosed。You may have a right to obtain a copy of your data,including in a machine-readable format。
- 核心,核心:you may have a right to correct or amend your data if it is incomplete,inaccurate,or outdated。
- 分离,分离或,或elimination:you may have a right to request your personal data be deleted or eliminated。Subject to applicable law,we may deidentify this data in certain circumstances。
- 阻力,阻力:your data in some circumstances,such asif processing is excessive or unlawful,the accuracy of the data is contested,the controller no longer needs the data for its primary processing purposes but is needed for legal or compliance purposes,or ifin(California)the data is sensitive personal data like health information and it is being used forpurposes beyond those reasonably necessary to perform services or provide goods requested。
- Objectionand,andopt-是的out:you may have aright to object to or opt-out of processing of your data in certain circumstances,including in cases where that data is used for direct marketing(including email or telephonic marketing),shared with third parties for their own marketing or for retargeted/cross-contextual marketing,sod,used to make certain decisions or profiles aboutyouby automated or artificial means,used for historical or scientific research,orused to place automated/prerecorded voice telephonic messages to you in some cases。
- 一致,一致:you may have a right to consent,and to withhold or横向排水管,for some practices,including processing of sensitive personal data or data on children,orwhere we use consent asour lawful basis for processing or transfer。If you withdraw consent,we will not further collect or process the personal data covered by that consent unless allowed or required by applicable law。
- Non-是的分度,分度:you will not be discriminated against for your exercise of your rights。This does not necessarily include,depending on applicable law in your jurisdiction,cases where a difference in price or services offered is reasonably related to the value provided by your data,or where you consent to participate in a voluntary loyalty or similar incentive program。
- Appealinternally:you may have a right to appeal a decision we make about the exercise of your rights within Medtronic。到submit an appeal to a decision we made about the exercise of your rights,you may use the options noted below or send an email tors.globaldataprivacyoffice@medtronic.com。Please enclose a copy of orotherwise specifically reference our decision on your data subject request,so that we may adequately address your appeal。We will respond to your appeal in accordance with applicable law。
- 组合,组合externally:you may have a right to complain to a regulator,including a数据保护or Supervisory Authority,a trade standards authority,ora public advocate(such asa state attorney general),if you are not satisfied with our response to your request,such asnot having responded to you within a reasonable time or you disagree with our determination,or have concerns about our data practices。If you ask us,we will try to provide you with information about complaint pathways that may be open to you depending on your location and circumstances。
Submitting a Request or Inquiry
If you want to submit a request or inquiry to us regarding your state privacy law rights,you or your authorized agent can contact ushere(opens new window)or call us at1-866-639-6907。You do not have to create an account with us to submit a request。
Your request will be confirmed within ten days of receipt and we will respond within45 days,unless shorter periods are required by law。If we need more than45days,we will notify you that your request is being delayed。
We can only respond to your request if it is verifiable。This means we are obligated to take reasonable steps to verify your identity or your authorized agent’s authority and your right to access the information you request。In the process of verifying your request,we may contact you to ask for additional information that will help us do so,including government-issued IDs containing your name and address,utility bills containing that same information,and/or unique identifiers like usernames。We will only use that additional information in the verification process,and not for any other purpose。Once we have received and verified the requested information from you,we will contact you with our response to your request,including any data,if applicable。If we do not hear from you or are unable to verify your identity for the request,we will contact you to inform you that we cannot process your request because we cannot verify your identity。
We do not charge a fee to process or respond to your verifiable consumer request unless it excessive,repetitive,or manifestly unfounded。If we determine that the request warrants a fee,we will tell you why we made that decision and provide you with a cost estimate before completing your request。