Patients Privacy Policy

Privacy Policy

Last update 8/24/2022

What is personal data?

Personal data is information that can be used independently, or together with other information, to identify, localize or contact an individual. Examples of personal data include name, phone number and IP address.

Who is the Data Controller?

When you visit this website or interact with us, know that Photocure acts as a “Data Controller.” Under applicable law, the “Data Controller” determines the purpose and the means of the processing of personal data and decides what personal data will be requested.
The Data Controller has the ultimate responsibility for your personal data to be processed in accordance with applicable data protection laws.
Processing of personal data includes all types of personal data handling, for example, collection, analysis, registration and storage.

How do we collect your personal data?

When you interact with us digitally, we collect personal data from you or from your use of our products or services or from your activities on the site, in particular:

When you communicate with us

When you subscribe to our newsletter, we collect your email address
When you contact us via email or phone, we collect any information you may provide

When you use our products and services

When you visit our website, we collect log data and use information related to your use of our products and services.
Like most websites and other Internet services, we may collect certain technical and device information about your use of our website.

Such information may include your IP address, information about your device, browser, and operating system, and the date and time of your visit.

When you apply for a job opportunity

We can collect your name, email address, mailing address, phone number, CV as well as any other information you provide
We will keep your CV or application letter only when we are in the hiring process.

How do we obtain your consent?

We collect, use and disclose your personal data with your consent or as permitted or required by law. How we obtain your consent (that is, in what manner) will depend on the circumstances, as well as the sensitivity of the information collected.
Your consent may be express or implied, depending on the circumstances and the sensitivity of the personal data in question.
If you choose to provide personal data to us, we assume that you consent to the collection, use and disclosure of your personal data as outlined in this Privacy Policy.
Typically, we will seek your consent at the time your personal data is collected.
Where we want to use your personal data for a purpose not previously identified to you at the time of collection, we will seek your consent prior to our use of such information for this new purpose.
If you provide personal data about another individual to us, you are responsible for obtaining their consent to enable us to collect, use and disclose their information in accordance with this Privacy Policy.
You may withdraw your consent to our collection, use or disclosure of your personal data at any time by contacting us using the contact information in the “How can you contact Photocure?” section below.
However, before we implement the withdrawal of consent, we may require proof of your identity. In some cases, withdrawal of your consent may mean that we will no longer be able to provide certain products or services to you.

Why do we collect your personal data?

We collect your personal data for the following reasons:

To better serve you

To send you emails or newsletters.
To communicate with you following your initial contact and to answer your queries.
You can update your subscription settings and unsubscribe to further mailings.
You may opt out of receiving marketing-related emails by clicking the “unsubscribe” link at the bottom of any email you receive from us.
Or, if you created an online account when you registered to receive our emails, you may log in to your account and make changes to your communication preferences.
You may also opt out by contacting us directly using the contact information in the “Contact Details to Photocure” section below.

To improve our services

To obtain statistics and information about user behavior to improve our website and the corresponding user experience.
To protect the security and/or integrity of our website, our products and services, and our business.
To prevent, detect, and investigate activity and transactions that are suspicious, fraudulent, or violate our website’s Terms of Use.
To identify you when you exercise your rights under this Policy.
As required or authorized by law.

How long do we keep your personal data?

We process personal data only for as long as it takes to fulfill the purpose of their collection or as permitted by law. Depending on the data we have collected, it may vary how long they will be kept.

How do we protect personal data?

Measures

We have implemented physical, organizational, contractual and technological security measures with a view to protecting your personal data and other information from loss or theft, unauthorized access, disclosure, copying, use or modification.

Restricted access

Only a limited number of people within Photocure has access to your personal data, either on a need-to-know basis or when their duties reasonably require such information.

Disclaimer

Despite the measure outlined above, no method of information transmission or information storage is 100% secure or error-free. So, we unfortunately cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any information that you provided to us has been compromised), please contact us immediately using the contact information in the “How can you contact Photocure?” section below.

With whom do we share your personal data?

We do not sell your personal data to any third party. In the event there is an ongoing dialogue between you, us, and any of our business partners, we may need to share the personal data.

Service providers

When needed, we may rely on third party services providers or partners to perform a variety of services on our behalf.

For legitimate interests

Additionally, we may use and disclose your personal data when we believe such use or disclosure is permitted, necessary or appropriate:

under applicable law, including laws outside your country of residence;
to comply with legal requirements;
to respond to requests from public and government authorities, including public and government authorities outside your country of residence;
to enforce the terms of the agreements for our products and services;
to protect our operations or those of any of our affiliates or subsidiaries;
to protect our rights, privacy, safety or property, and/or those of our affiliates, you or others; and
to allow us to pursue available remedies or limit the damages that we may sustain. In addition, we may transfer your personal data and other information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, brands, affiliates, subsidiaries, or other assets.

Other

If we otherwise intend to disclose your personal data to a third party, we will identify that third party and the purpose for the disclosure and obtain your consent.

If we provide your information to service providers, then we require that the service providers maintain the confidentiality and security of your personal data. We also require that they only use your personal data for the limited purposes for which it is provided. When our service providers no longer need your personal data for those limited purposes, we require that they dispose of the personal data. In some circumstances, we may permit our service providers to retain aggregated, anonymized or statistical information that does not identify you. We do not authorize the service providers to disclose your personal data to unauthorized parties or to use your personal data for their direct marketing purposes. If you would like more information about our service providers, please contact us using the contact information in the “How can you contact Photocure?” section below.

Where is the data stored?

We generally do not store data, but if we do, the data is stored in various systems. It depends on the personal data provided. Your personal data may be stored and processed in in any country where we have facilities or in which we engage third-party service providers. As a result, your personal data may be transferred to countries outside your country of residence, which may have different data protection rules than in your country. While such information is outside of your country, it is subject to the laws of the country in which it is located and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. However, our practices regarding your personal data will at all times continue to be governed by this Privacy Policy, and Canadian applicable privacy laws and, if applicable, we will comply with the GDPR requirements providing adequate protection for the transfer of personal data from the EU/EEA to third country, such as standard contractual clauses.

What are your privacy rights?

We will take steps to ensure that your personal data is kept as accurate, complete, and up-to-date as reasonably necessary. We will not routinely update your personal data unless such a process is necessary. We expect you, from time to time, to supply us with updates to your personal data, when required. We may require that you provide sufficient identification to fulfill your request to access or correct your personal data. Any such identifying information will be used only for this purpose.

Access and rectification

You may make a written request to review any personal data about you that we have collected, used or disclosed, and we will provide you with any such personal data to the extent required by law. You may also challenge the accuracy or completeness of your personal data in our records. If you successfully demonstrate that your personal data in our records is inaccurate or incomplete, we will amend the personal data as required.

Consent withdrawal

You can also withdraw your consent to the disclosure or use of personal data collected. If applicable, you may have the right to request information about the use of any automated decision systems and the impact they may have on you. If you live in the European Union, you may have additional rights, including

the right to withdraw consent to processing where consent is the basis of processing
the right to object to unlawful data processing, under certain conditions
the right to the erasure of personal data about you, under certain conditions
the right to demand that we restrict processing of your personal data, under certain conditions, if you believe we have exceeded the legitimate basis for processing, the processing is no longer necessary, or believe your personal data is inaccurate
the right to data portability of personal data concerning you that you provided us in a structured, commonly used, and machine-readable format, under certain conditions
the right to object to decisions being taken by automated means that produce legal effects concerning you or similarly significantly affect you, under certain conditions. To learn more about your rights under the GDPR, you can visit the European Commission’s page. You also have the right to lodge a complaint with the relevant data protection authority.

To learn more about your rights under the GDPR, you can visit the European Commission’s page. You also have the right to lodge a complaint with the relevant data protection authority.

Will we update this Privacy Policy?

This Privacy Policy is current as of the “updated” date that appears at the top of this page. We may modify this Privacy Policy from time to time. When we make changes to this Privacy Policy, they become immediately effective when published on our website, unless otherwise noted. If the changes are significant, we may communicate them through our services or by other means.

How can you contact Photocure?

If you have questions regarding our processing or wish to get in touch with us to exercise your rights, please find our contact details below:

Norway

Privacy Officer Photocure ASA
Hoffsveien 4
0275 Oslo
Norway

Email address: gdpr@photocure.com
Phone: +47 22 06 22 10
Fax: +47 22 06 22

Canada

Photocure Canada Inc.
c/o Fasken Martineau DuMoulin LLP
333 Bay Street
Suite 2400
Toronto, ON M5H 2T6

Email address: photocure-pv@innomar-strategies.com
Phone: 1-833-229-1037