Source: https://livanova.com/en-US/Home/Privacy-Notice.aspx
Timestamp: 2019-04-23 00:09:18+00:00

Document:
LivaNova takes the privacy of your information seriously. We are committed to ensuring that information relating to you and from which you can be identified (known as “personal data”) is protected in accordance with our legal obligations under the EU General Data Protection Regulation (“GDPR”) and other applicable national data protection laws. With this Privacy Notice, we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. Which data exactly are processed and the manner in which they are used is principally determined by the services requested or agreed. Therefore, not every element of this information may be applicable to you.
2. How can I contact the European Data Protection Officer?
3. What kind of personal data do we hold?
4. For which purpose do we process your personal data and why is this justified?
We process personal data in accordance with the provisions of the GDPR and other applicable national data protection laws.
To the extent you have consented to the processing of personal data by us for certain purposes (such as marketing, mailing newsletters, clinical studies, device tracking), such processing is legitimate based on your consent. Consent once given may be revoked at any time. This also applies to the revocation of declarations of consent given to us before the effective date of the GDPR, i.e. before 25 May 2018. Revocation of consent has an effect only for the future and does not affect the legitimacy of the data processed until revocation.
Personal data are processed for the purpose of providing services in connection with the performance of our agreements with our customers or for performing pre-contractual measures as a result of queries. The purposes of data processing are primarily determined by the specific agreements regarding services or products (such as purchase of medical devices, repair or maintenance services, participation in events) and may, among other things, include administration of contracts. For further details on the purposes of data processing, please refer to the respective contractual documents.
Measures for business management and advanced development of services and products.
Moreover, we, as a medical device manufacturer, are subject to various legal obligations, i.e. statutory requirements (such as the EU Medical Device Regulation) which require us to process your personal data in certain cases.
Within LivaNova, those departments will be granted access to your data which require them in order to comply with our contractual and statutory obligations. Further, we may transfer personal data within the LivaNova group. Regulatory authorities responsible for medical device approval and product safety may receive personal data from us. Service providers and agents appointed by us may receive the data for these purposes. These are companies in the categories of IT services, logistics, printing services, telecommunication, consultation as well as sales and marketing. Your personal data may also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court.
In any case, personal data will only be transferred to recipients outside LivaNova if this is required by law, you have given your consent or we have entered into data processing agreements, if applicable.
6. Will the data be transferred to a third country or an international organization?
we ensure that appropriate safeguards are implemented to provide an adequate level of data protection such as standard contractual clauses approved by the European Commission or adequacy decision by the European Commission.
Compliance with obligations of retention under commercial or tax law. In general, the time limit specified for respective retention or documentation is two to 15 years.
Preservation of evidence under the statutory regulations regarding the statute of limitations. These statutes of limitations may be up to 30 years, the regular statute of limitation being three years.
8. What are my rights under to data protection law?
Every data subject has the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR. Moreover, there is a right to appeal to a competent data protection supervisory authority (Art. 77 GDPR).
Within the scope of our business relationship, you are obliged to provide such personal data which are required for commencing, executing and terminating a business relationship and for compliance with the associated contractual obligations. Without these data, we will generally not be able to enter into agreements with you, to perform under such an agreement or to terminate it.

References: Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20