Össur Portal Privacy Notice

The content of this page was last updated on November 16, 2022. 

Introduction 

We understand that you care about your personal privacy interests, and we take that seriously. This Privacy Notice describes how Össur collects and uses personal data in connection with the Össur Portal (the “Portal”) and sets forth your rights regarding your personal data.  

We recognize that protecting privacy and personal data is an ongoing responsibility. We will update this Privacy Notice from time to time as we undertake new personal data practices or adopt new privacy policies. We will inform you of such changes when you log into the Portal. The current version of this Privacy Notice is always available in the Portal.  

California Residents: For information relating to California residents, please click here. 

Data Protection Officer

Össur is headquartered in Reykjavík, Iceland. Össur has appointed a global data protection officer that you can contact if you have any questions or concerns about Össur’s personal data practices. Össur’s global data protection officer’s contact information are as follows:  

[email protected] 

Össur hf. 
Grjótháls 5 
110 Reykjavík, Iceland 

The personal data we collect 

Personal data, or personal information, is any information that can be used to identify an individual. It does not include data where a person’s identity has been completely removed (anonymous data).  

When you use the Portal, Össur may collect, use, store and transfer the following types of personal data about you:  

  • Identity Data such as your first name, last name, username or similar identifier and job title or role.  
  • Contact Data may include your billing address, delivery address, email address and telephone numbers.  
  • Financial Data includes bank information and payment card details.  
  • Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.  
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our websites, applications and services.   
  • Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses. 
  • Usage Data includes information about how you use our website, products, applications and services.   
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.  

How and why Össur collects your personal data

We collect your personal data in the following ways:  

  • Through direct interactions. You may give us your personal data when you: 
  • Create an account on the Portal. 
  • Submit quotes and orders. 
  • Use the Portal. 
  • Enter a competition, promotion, seminar, or survey. 
  • Give us feedback or contact us, for example through the Portal chat or contact form. 
  • Automated technologies or interactions. As you interact with the Portal, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. 

We collect your name and contact information to provide you with and secure your access to the Portal. This also enables us to respond to your support requests and comments. We collect financial and transactional data to protect Össur and your business interests.  

We collect and store data about your orders (patient identifier, measurements and any pictures uploaded by you) to provide the Össur manufacturing process with the information needed to produce your order.  

If you have opted in to receive marketing emails from Össur, we will use your name and email address to provide you with product promotions and marketing materials. Marketing materials can include information about new products, update to services, events and educational (CEU) opportunities. 

Any other data collected through the Portal is collected and processed in order to provide you with the best service and experience using the Portal.  

Your Rights

Right of access. You may ask for confirmation that Össur is processing your personal data and to get access to the personal data Össur may have about you. You may also request information on:  

  • The purpose of the processing. 
  • The categories of personal data concerned.  
  • Who else outside Össur might have received your personal data from Össur.  
  • The source of your personal data if you didn’t provide it directly to Össur.  
  • How long Össur will store your personal data.  
  • You have a right to correct the record of your personal data maintained by Össur if it is inaccurate.  
  • You may request that Össur erase or cease to process your personal data, subject to certain exceptions.  

In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you believe Össur’s processing of your personal data is not compliant with the relevant data protection laws. 

When technically feasible, Össur will, at your request, provide your personal data to you or transmit it directly to another controller. 

Reasonable access to your personal data will be provided at no cost upon request made to Össur at [email protected]. If access cannot be provided within a reasonable time frame, Össur will provide you with a date when the information will be provided. If for some reason access is denied, Össur will provide an explanation as to why access has been denied. 

Security of your personal data

To help protect the information transmitted through the Portal, including your personal data, we maintain physical, technical and administrative safeguards. We update and test our technology on an ongoing basis. We restrict access to your personal data to those employees who need it to provide services to you. 

Data storage and retention

Azure 

We use a cloud solution called Azure. Azure is a solution provided by Microsoft and the data is stored on Azure’s servers in Virginia. For more information about Microsoft’s privacy practices, click here.  

SalesForce 

We also use a cloud solution provided by Salesforce. The data is stored on Salesforce servers in Frankfurt, Germany (GER) and Paris, France (FRA). For more information about Salesforce’s privacy practices, click here.  

Pardot 

Pardot is a B2B marketing automation by Salesforce which we use to keep customers informed about upcoming events, product updates/new features, etc. When you consent to receiving our marketing material we log that consent, along with your email address, with Pardot. We do this to comply with legal requirements and to improve our marketing campaigns and make their content more relevant for you. For more information on Pardot's privacy policy, click here.