Privacy Policy

Edwards Health Care Services (EHCS) is committed to protecting the privacy of our employees, our customers, and their employees. We process data about identified or identifiable individuals, called personal data, with due care and under applicable data protection law.

This Privacy Notice describes how EHCS, supported by its worldwide affiliated companies, processes personal data collected from individuals about their enrollment in our programs, use of our websites, product orders, and attendance at events (collectively, our “Services”). In legal terms, we are the data controller, as we determine the means and/or purposes of the processing data collected in these circumstances.

This Privacy Notice only covers data processing carried out by EHCS. The Privacy Notice does not address, and we are not responsible for, the privacy practices of any third parties, also in cases where Services include hyperlinks to third parties’ websites or when cookies are set by third parties.

Rights Of Users

Right to access. Any User may contact us to get confirmation as to whether or not we are processing User’s personal data. Where we do process User’s personal data, we will inform User of what categories of personal data we process regarding him/her, the processing purposes, the categories of recipients to whom personal data have been or will be disclosed and the envisaged storage period or criteria to determine that period.

Right to withdraw consent. In case our processing is based on a consent granted by the User, the User may withdraw the consent at any time by contacting us or by using the functionalities of our Services. Withdrawing a consent may lead to fewer possibilities to use our Services.

Right to rectification. Any User has the right to have inaccurate or incomplete personal data we store about the User rectified or completed.

Right to object. In case our processing is based on our legitimate interest to run, maintain and develop our business, any User has the right to object at any time to our processing. We shall then no longer process User’s personal data unless for the provision of our Services or if we demonstrate other compelling legitimate grounds for our processing that override User’s interests, rights and freedoms or for legal claims. Notwithstanding any consent granted beforehand for direct marketing purposes, any User has the right to prohibit us from using his/her personal data for direct marketing purposes, by contacting us or by using the functionalities of the Services or unsubscribe possibilities in connection with our direct marketing messages.

Right to restriction of processing. Any User has the right to obtain from us restriction of processing of User’s personal data, as foreseen by applicable data protection law, e.g. to allow our verification of accuracy of personal data after User’s contesting of accuracy or to prevent us from erasing personal data when personal data are no longer necessary for the purposes but still required for User’s legal claims or when our processing is unlawful. Restriction of processing may lead to fewer possibilities to use our Services.

Right to data portability. Any User has the right to receive User’s personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party, in case our processing is based on User’s consent and carried out by automated means.

Right to erasure. Any User has the right to have personal data we process about the User erased from our systems if the personal data are no longer necessary for the related purposes, if we have unlawfully processed the personal data or if the User objects to processing for direct marketing. Any User furthermore has the right to erasure if the User withdraws consent or objects to our processing as meant above, unless we have a legitimate ground to not erase the data. We may not immediately be able to erase all residual copies from our servers and backup systems after the active data have been erased. Such copies shall be erased as soon as reasonably possible. How to use these rights. To exercise any of the above-mentioned rights, User should primarily use the functions offered by our Services. If such functions are however not sufficient for exercising such rights, Customer shall send us a letter or email to the address set out below under Contact, including the following information: name, address, phone number, email address and a copy of a valid proof of identity. We may request additional information necessary to confirm User’s identity. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

Recipients

We only share personal data within our organization, if and as far as necessary, for the purposes specified in this Privacy Notice. Our staff members processing personal data are bound to confidentiality. We do not share personal data with any third party outside of our organization unless one of the following circumstances applies.

Necessary for the purposes. We may share personal data with third parties to the extent our Services foresee such disclosure and Users submit their personal data for that purpose, such as through an address book to create connections and facilitate our Services. We may furthermore share personal data with our affiliated companies and other service providers that support us in the realization of the purposes specified in this Privacy Notice, such as by performing data hosting, direct marketing and customer services. Our agreements with these service providers foresee privacy and security commitments from these service providers that are no less protective than our own commitments described in this Privacy Notice. If our Users provide personal data directly to a third party, such as through a link on our website, the processing is typically based on such third party’s notice.

For legal reasons. We may share personal data with third parties if we have good-faith belief that their access to and use of the personal data is necessary (i) to meet any applicable law and/or court order, (ii) to detect, prevent or otherwise address fraud, security or technical issues, and/or (iii) to protect the interests, properties or safety of us, our Users or the public, in accordance with the law. We will notify Users about such disclosure, as far as reasonably possible.

In relation to corporate restructuring. If we are in a process of merger, acquisition or asset sale, we may transfer personal data to the involved third party. We continue to ensure the confidentiality of all personal data.

Upon User’s consent. We may share personal data with third parties for other reasons than the ones mentioned above, if we obtained User’s explicit consent to do so. The User has the right to withdraw this consent at any time.

Location and Transfer
We and our service providers have operations in several locations. Consequently, we and our service providers may transfer personal data to, or access it from, countries outside User’s country of domicile. We take steps to ensure that Users’ personal data receives an adequate level of protection in the countries in which we process it.

HIPAA Privacy
To read our HIPAA Notice of Privacy, go here.

Changes

This Privacy Notice is dated January 1, 2020. We may update this Privacy Notice at any time if required in order to reflect changes in our data processing practices, in personal data protection laws or otherwise. We reserve the right to modify this Privacy Policy at any time by posting revisions on the EHCS web site. We encourage you to periodically review the privacy policy for any modifications.

The English version of this Privacy Notice shall govern in the event of any conflict with or substantial translation changes into a non-English language.