WHAT IS THIS ABOUT?

In Novo Nordisk we aim to be transparent about our use of your personal data and how we protect it. This notice explains which types of personal information we collect, why we collect it, and what we do with it.

1. WHO ARE WE?

The company responsible for processing your personal data is:

NOVO NORDISK EDUCATION FUND (“Novo Nordisk”)
NXT 2, 1 & 2nd Floor, Embassy Manyata Business Park, 
Nagavara Village, Kasaba Hobli, Venkateshapura, 
Bangalore North - 560045, Karnataka, India

You can always contact [Company name] or the Novo Nordisk Data Privacy Officer at privacy-india@novonordisk.com with questions or concerns about how we process your personal data.

2. HOW DO WE COLLECT PERSONAL DATA ABOUT YOU?

We get your personal data from the following sources: 

• From you directly
• From your family members or care givers on your behalf
• From Health Care Professionals such as your nurse, a pharmacist or doctor
• Through phone calls, emails and other digital channels

3. WHY DO WE PROCESS YOUR PERSONAL DATA?

We process personal data about you for the following purposes

• To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products. Complaints and side effects will be filed in databases and will be regularly analysed for overall patterns.
• To respond to your questions or request for information
• To analyse data for the purpose of supporting product usage enquiries
• To analyse data for the purpose of improving our customer service and product offerings
• To analyse data for the purpose of improve our scientific and product communication to HCPs and patients 
• To assess patterns and trends associated with complaints, side effect and product usage 

4. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

For the purposes described above in Section 3, we may process the following types of personal data: 

• Contact information (name, address, telephone number, email address); 
• Data revealing racial or ethnic origin;
• Data concerning health and medicinal products you are using;

5. WHY ARE WE ALLOWED BY LAW TO PROCESS YOUR PERSONAL DATA?

Our processing of your personal data requires a legal basis. By law, we are allowed to process your personal data described above in Section 4 based on the following legal bases: 

The processing is necessary for our legitimate interests. The legitimate interests are: 

• the processing is necessary for our compliance with a legal obligation
• to perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products.
• to improve our customer service and product offerings 
• to enhance our scientific and product communication 
• you gave consent for us to process your personal data 

6. HOW DO WE SHARE YOUR PERSONAL DATA?

We may share your personal data with: 

• Suppliers or vendors that assist our company (e.g., consultants, IT service providers, financial institutions, law firms, license partners)
• Other Novo Nordisk entities (e.g., Novo Nordisk affiliates in other countries)
• Public authorities, including health and/or regulatory authorities
• Other pharma companies and partners if an enquiry is related to their product(s)

7. HOW LONG WILL WE KEEP YOUR PERSONAL DATA? 

We will keep your personal data for the following period of time: 

• For data relating to technical complaints: 12 years
• For safety information and data relating to side effects: End of activity + 10 years, where end of activity is the time where no product with the active ingredient is marketed 
• For all other enquiries: Up to 5 years 

8. HOW YOU CAN CONTROL THE USE OF YOUR PERSONAL DATA??

In general, you have the following rights:

Under applicable law, there may be limits on these rights depending on the specific circumstances of the processing activity.  Contact us as described in Section 1 with questions or requests relating to these rights.