We get your personal data from you directly when you send an email to us from:

• Contact us
• Report a product issue or a side effect

• To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products. Complaints and side effects will be filed in databases and will be regularly analysed for overall patterns.

• To respond to your questions or request for information

You are not required to provide us with your personal data. If you do not want Novo Nordisk to use your personal data, we will not be able to respond to your request.

For the purposes described above in Section 2, we may process the following types of personal data if provided by you:

• Contact information (name, address, telephone number, email address)
• Data concerning your health and medicinal products you are using;
• Data revealing racial or ethnic origin;
• Other personal data if shared by you

Our processing of your personal data requires a legal basis.

Our processing of your personal data requires a legal basis. By law, we are allowed to process your personal data described above in Section 4 based on the following legal bases:

• The processing is necessary for our legitimate interests. The legitimate interests are:

a. the processing is necessary for our compliance with a legal obligation

b. to perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products.

c. to improve our customer service and product offerings

d. to enhance our scientific and product communication

e. you gave consent for us to process your personal data

We may share your personal data with:

• Public authorities 
• Suppliers or vendors that assist our company (e.g., customer services, consultants, IT service providers, financial institutions, law firms)
• Other Novo Nordisk entities

For the purposes described above in Section 2, we may transfer your personal data to countries outside the European Economic Area (EEA).

The level of data protection in certain countries outside the EEA does not conform to the level of data protection for personal data currently applied and enforced within the EEA.

We therefore use the following safeguards, as required by law, to protect your personal data in case of such transfers:

• The transfer is to a Novo Nordisk entity covered by Novo Nordisk’s Binding Corporate Rules, available here.
• The destination countries are deemed by the EU Commission to have an adequate level of protection of personal data
• We have entered into Standard Contractual Clauses for the Transfer of Personal Data to Third Countries. You can get a copy of the Clauses by contacting us as described in the top of this page;

We will keep your personal data:

• For data relating to technical complaints: 12 years
• For safety information and data relating to side effects: End of activity + 10 years, where end of activity is the time where no product with the active ingredient is marketed
• For all other enquiries: Up to 5 years

In general, you have the following rights:

Under applicable law, there may be limits on these rights depending on the specific circumstances of the processing activity. Contact us if you have questions or requests relating to these rights.