Privacy principles

In this Statement of Privacy Principles, we describe how NexStep Medical processes personal information. Preservation of, and respect for, our customers’, business colleagues and vendors’, and patients’ trust is critical to our continued success. We will always process personal information:

WHO IS NEXSTEP MEDICAL?

NexStep Medical is the name we use to refer to our whole business, including NexStep Medical, Inc., a corporation based in the United States of America, and any of the companies that it controls such as its subsidiaries, and any of its affiliates. When we use the words we or our, we mean NexStep Medical.

PRIVACY ACT

Contact name : Diane Marceau
Title : Quality Assurance Director
Email : dmarceau@nexstepmedical.com

WHEN DO THESE PRIVACY PRINCIPLES APPLY?

These Privacy Principles apply when we process personal information collected in France. These Privacy Principles apply to personal data when we collect it directly from the data subject (being the person who the data identifies), and also when we collect data from one person (or company or other legal entity) that identifies another person. Therefore, when we use the word “you”, “me”, and “I” in this Statement of Privacy Principles, we mean the individual whose personal information we are processing, whether we collect that information directly from the individual or indirectly from someone else.

This Statement of Privacy Principles does not apply when we process information:

about our employees and business consultants in the scope of their employment or business consultancy relationship with us
where we have given other disclaimers, policies, terms of use, or other notices indicating that this policy does not apply, or that a different policy or notice does apply
that does not identify you as an individual person, including personal information (which we define below) or after any information has been anonymized, so that it can no longer be used to identify you

WHAT IS DATA PROCESSING?

Data processing is any operation or set of operations involving personal information, whether or not by automatic means, including collecting, using, disclosing, adapting, altering, correcting, retrieving, combining, blocking, erasing, transferring, destroying, recording, organizing, storing, disseminating, or otherwise making available, consulting, and using personal information.

WHAT IS PERSONAL INFORMATION?

Personal information is information relating to you that we can use to specifically identify you, such as your:

name
phone number
e-mail address
date of birth
address
social insurance number or other national identifier
account number
any other information that identifies or could identify you and relates to you

Some kinds of personal information are sensitive information. Sensitive information is defined below. In this Statement of Privacy Principles, when we use the phrase personal information, we include sensitive information unless we specifically state otherwise.

WHEN AND HOW DOES NEXSTEP MEDICAL COLLECT PERSONAL INFORMATION?

NexStep Medical may collect personal information in a variety of ways. For example:

In some places on our web sites you have the opportunity to send us personal information about yourself. For example, you may fill out a registration form, a survey or an e-mail form. You may also choose to allow us to personalize your visits to the web sites, in which case we will ask you for certain personal information to make your visits to our web sites more helpful to you. When this information is combined with the non-personal information that we collect through cookies, we will be able to tell that you have visited our web sites before.

We may collect personal information from you when you contact us for information, products, or services.

HOW DOES NEXSTEP MEDICAL PROCESS PERSONAL INFORMATION?

We may process your personal information (other than sensitive information, which is discussed separately below):

to respond to your requests and enquiries
to perform a contract or for contract negotiations with or about you
to develop records, including records of your personal information
to contact you by mail (or in other ways with your permission) with information that might be of interest to you, including information about clinical trials and about products and services of ours and of others
for analytical purposes and to research, develop and improve programs, products, therapies, services and content
to remove your personal identifiers (your name, e-mail address, social security number, etc) so that information is anonymized. In this case, you would no longer be identified as a single unique individual. Once we have anonymized information, it is non-personal information and is not subject to this Statement of Privacy Principles
to personalize your access to our web sites, for example, by telling you about new features that may be of interest to you
to enforce this Statement of Privacy Principles and otherwise protect our rights or property
to protect your vital interests or someone else's health, safety or welfare
to comply with a law or regulation, court order, or other legal obligation
for our other legitimate interests, unless such processing will unfairly prejudice your rights or freedoms
in other ways to which you consent

WHAT IS SENSITIVE INFORMATION?

Some types of personal information are sensitive information. Sensitive information is personal information revealing or relating to your health (such as your device serial number, or the date of an implant), your racial or ethnic origin, religious or philosophical beliefs, sex life, political affiliation, or trade union membership.

WILL NEXSTEP MEDICAL COLLECT OR PROCESS SENSITIVE INFORMATION ANY DIFFERENTLY THAN OTHER PERSONAL INFORMATION?

NexStep Medical will only collect and process your sensitive information:

in ways for which you have given your explicit consent;
to protect your vital interests, in cases where your explicit consent cannot be given or reasonably requested;
according to and as permitted by national law;
where the processing is necessary for medical purposes and we are, under the circumstances, under a duty of confidentiality equivalent to the duty of confidentiality of a health professional;
to establish, exercise, or defend a legal claim

For example :

We may collect sensitive information about patients from our customers, vendors, or other business contacts when we provide therapy or technical support for our products or services to you
We may collect sensitive information about patients when we receive questions and suggestions about our products and services
We may collect sensitive information as required by Health France and other regulators in order to assure safe and effective use of our products and services
We may collect sensitive information about participants in clinical trials, studies, and other research initiatives
We may collect sensitive information directly from you, when you voluntarily provide it to us

WILL NEXSTEP MEDICAL EVER USE PERSONAL INFORMATION TO CONTACT ME WITH MARKETING OR EDUCATIONAL MESSAGES?

We may contact you periodically in person, by e-mail, by fax, by mail, or by telephone to provide information regarding programs, products, services and content that may be of interest to you, unless you advise us that you do not wish to receive marketing, market research communications, or educational materials from us. If applicable law requires that we receive your explicit consent before we send you certain types of marketing communications, we will only send you those types of communications after receiving your explicit consent.

WHAT IF I NO LONGER WISH TO RECEIVE INFORMATION FROM NEXSTEP MEDICAL?

If you wish to stop receiving communications from us, or would like us to stop processing your personal information in any other way, you can contact us as described at the bottom of this Statement to let us know what types of communications you wish to stop receiving. In addition, if you have received, or in the future receive, an e-mail from us, each e-mail we send includes an easy, automated way for you to cease receiving e-mails from us.

DOES NEXSTEP MEDICAL EVER SHARE PERSONAL INFORMATION WITH THIRD PARTIES?

NexStep Medical will not share your personal information with an unrelated third party without your permission, except as otherwise provided in this Statement of Privacy Principles.

In the ordinary course of business, we will share some personal information with companies that we hire to perform services or functions on our behalf. For example, we may use different vendors or suppliers to ship our products. In these cases, we provide the vendor or supplier with information to process your order such as your name and mailing address. In all cases in which we share your personal information with a third party, we will not authorize them to keep, disclose or use your information with others except for the purpose of providing the services we asked them to provide.

We will not sell, exchange or publish your personal information, except in conjunction with a corporate sale, merger, dissolution, or acquisition.
We may be legally compelled to release your personal information in response to a court order, subpoena, search warrant, law, or regulation. We may cooperate with law enforcement authorities in investigating and prosecuting web sites visitors who violate our rules or engage in behavior which is harmful to other visitors (or illegal).
We may disclose your personal information to third parties if we feel that the disclosure is necessary to:

WILL NEXSTEP MEDICAL EVER TRANSFER PERSONAL INFORMATION ABOUT ME TO COUNTRIES OTHER THAN THE COUNTRY WHERE I AM LOCATED?

NexStep Medical may transfer information out of the country in which it was collected to any other country that is recognized by France as having adequate privacy protections. We will transfer information to other areas only if:

NexStep Medical has arrangements with all of its offices and affiliates that assure that personal information transferred among NexStep Medical companies is adequately protected, including transfers of personal information (which may include sensitive information) to NexStep Medical companies in the United States of America.

WHAT HAPPENS IF THE STATEMENT OF PRIVACY PRINCIPLES CHANGES?

f we decide to make a significant change to this Statement of Privacy Principles, we will describe any major changes in this section of the Statement. You can always find the most current copy of this Statement on the website for your country, or contact us at the address below.

WHAT ABOUT THE SECURITY OF PERSONAL INFORMATION?

We use reasonable physical, administrative, and technical safeguards to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We also restrict access to your personal information to those employees and contractors who need to know that information to do their jobs. You should keep in mind that no Internet transmission is ever 100% secure or error-free. In particular, e-mail sent to or from us may not be secure, and you should therefore take special care in deciding what information you send to us via e-mail.

HOW LONG WILL NEXSTEP MEDICAL MAINTAIN MY PERSONAL INFORMATION?

We will not keep information for any longer than is required. In many cases, personal information must be kept for considerable periods of time in order to make it available as and when questions or disputes arise. Retention periods will be determined taking into account the type of personal information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable opportunity.
We will continue to treat your personal information in accordance with this Statement of Privacy Principles so long as we retain it.

ARE THERE ANY ADDITIONAL PRIVACY PRINCIPLES RELATING TO NEXSTEP MEDICAL WEB SITES?

Links. Our web sites may contain links to web sites operated by other parties. We provide the links for your convenience, but we do not review, control, or monitor the privacy practices of web sites operated by others and this Statement of Privacy Principles does not apply to such third party web-sites. We are not responsible for the performance of web sites operated by third parties or for your business dealings with them.

Our web sites also may contain links to other web sites operated by NexStep Medical. This Statement of Privacy Principles applies only to web sites for NexStep Medical companies located in France. Therefore, whenever you follow a link from this web site to another web site, even to another site operated by NexStep Medical, we recommend that you review that web site’s privacy practices.

Cookies. NexStep Medical may use cookies on its web sites. Cookies are text files we place in the browser files of your computer when you visit. The cookies may be stored on your computer’s hard drive. The information that we collect using cookies is non-personal information. You are always free to decline our cookies if your browser permits, but some parts of our web sites may not work properly for you if you do so. We will not allow third parties to place cookies on our web sites.

HOW TO CONTACT NEXSTEP MEDICAL

We strive to keep our records of your information accurate. If you ever notice that your information is not complete, accurate or current, or if you have questions or comments about this Statement of Privacy Principles, please contact us at:

NexStep Medical
7-9 Place Saint Bernard
21000 Dijon France
FRANCE

Phone : +33 6 16 48 80 02