Who is collecting the data?
Please read this Policy in its entirety before using our Website or otherwise submitting personal information to us through the Website or otherwise. By providing personal information to us or by utilizing the Website, you agree to comply with the terms and conditions of this Policy, and you hereby consent to our collection, use, disclosure, and other processing of your personal information in accordance with this Policy. We reserve the right to modify this Policy at any time, as circumstances or requirements change. All updates are effective immediately when we post them here and apply on a go-forward basis. For this reason, we encourage you to review this Policy whenever you visit the Website so you are aware of any updates, as they will be applicable to you and your personal information.
We may provide you with products or services that have additional privacy terms, policies or notices that apply in connection with your use of such products or services. In the event of any conflict between this Policy and any such additional terms, policies or notices, such additional terms, policies or notices will govern in relation to your use of such products or services.
For purposes of this Policy, the term “personal information” has the meaning given to such term (or to terms of similar intent, such as “personal data”) under applicable law, as and to the extent applicable to your rights and our obligations with respect to such information, including (as and to the extent applicable):
(i) “personal information” as defined under the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020, and/or
(ii) “personal data” as defined under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or the UK General Data Protection Regulation (i.e., the GDPR as implemented into the laws of the United Kingdom).
What personal information is being collected?
The types of personal information collected by or on behalf of Natus about you varies based on our interactions with you (for example, whether you are a Website visitor or a customer).
This Website gathers certain information from its visitors by asking specific questions and permitting communication directly with Natus via forms. Some of the information that is submitted to Natus on these forms may be personal information. The personal information collected by or on behalf of Natus about you through the Website includes, but is not limited to, the following:
Certain sections of this Website may require you to submit such personal information in order to benefit from specified features of this Website (such as newsletter subscriptions, tips/pointers, order processing, or submitting a resume) or to participate in a particular activity (such as a webinar, an event, or a sales promotion). You will be informed at each information collection point what information is considered required or optional.
Your personal information also may be collected by Natus in connection with your purchase or use of products or services or other interactions with us. The personal information collected by or on behalf of Natus about you in connection with the purchase or use of products or services, or other interactions with us, may include, but is not limited to:
Personal information is also collected via cookies placed on your PC, mobile or tablet. You can disable cookies in your browser. The exact procedure depends on which browser you are using.
This Policy, and the practices described herein, applies equally to our collection, use, disclosure and other processing of such “sensitive” personal information.
The Website is not intended for children and we do not knowingly collect personal information relating to children (including any minors under the age of 16) through the Website or similar interactions with individuals. Where an individual (including any minor under the age of 16) is using one of our products or services, the additional terms, policies, or notices associated with that product or service will apply to such use.
How will the information be used?
In addition to the uses identified elsewhere in this Policy, we may use your Personal Information to operate our business including:
How long will the data be stored for?
We will normally only keep your data for as long as necessary to provide you the services you are using or have otherwise required by to comply with federal, state, or local laws, rules, regulations, and other applicable legal and regulatory requirements.
Will the data be shared with any third parties?
By providing your consent to provide Natus with information via this Website, you also consent, and Natus reserves the right, to disclose your personally identifiable information to affiliates of Natus that agree to treat it in accordance with this Policy.
In connection with the purposes listed below, we may share your personal information among our affiliates and subsidiaries and/or certain applicable third parties (such as governmental authorities and regulators; courts and law enforcement agencies; vendors, contractors and service providers, including those supporting the Website or providing us with other services needed to maintain our business (such as fulfillment or delivery services, IT and technical support, or financial services), as well as lawyers, accountants, auditors, and other professional advisors; and counterparties, or potential counterparties, in connection with certain types of corporate transactions):
Natus does not sell your personal information to third parties or share your personal information with third parties for purposes of cross-context behavioral advertising.
In addition, we will make full use of all information acquired through this site that is not in personally identifiable form.
Links to Other Websites
Any use of this Website is subject to the terms of our Legal Notice. We reserve the right to change this Policy at any time. For this reason, we encourage you to review this Policy whenever you visit the Website so you are aware of any updates, as they will be applicable to you and your personal information. The examples contained within this notice are illustrations and are not intended to be exhaustive. You may have additional rights under other applicable foreign or domestic laws.
Additional Information for Individuals Whose Personal Data is Subject to the GDPR or the UK GDPR
Residents of the European Economic Area (“EEA”) and the United Kingdom (“UK” and such residents of either, “EEA/UK Residents”) have certain rights with respect to their personal data pursuant to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or the UK General Data Protection Regulation (i.e., the GDPR as implemented into UK law, the “UK GDPR”), as applicable and as further described in this section. If you are an EEA/UK Resident and do not agree with our use of your personal data as set forth in this Policy, you should not submit your personal data to Natus. However, if you do not submit certain personal data to Natus, or if you exercise your rights to prevent us from using such personal data, you should be aware that we may not be able to do business with you. This section supplements this Policy and applies solely to EEA/UK Residents. For the purposes of applicable data privacy legislation, Natus Medical Incorporated is the “controller” of EEA/UK Residents’ personal data under this Policy.
Our legal bases for collecting and using personal data:
We are entitled to use your personal data in the ways set out in this Policy on the following legal bases:
We do not expect to process “sensitive” or “special” categories of personal data under the GDPR or UK GDPR, however, if we were to process such personal data, we would do so only where we have asked for your explicit consent or where such processing is necessary for the establishment, exercise or defense of legal claims or is otherwise permitted under applicable laws.
International transfers: Our processing of your personal information may involve transferring your personal information outside of the EEA or the UK, including to countries such as the United States which may not offer the same standard of protection for personal information as countries within the EEA or the UK. Whenever we transfer your personal information outside of the EEA or the UK to countries that have not been deemed to provide an adequate level of protection for personal information by the European Commission and/or the relevant public authority in the UK, as applicable, we seek to ensure a similar degree of protection is afforded to it by, where required by the GDPR or the UK GDPR, using specific contracts approved by the European Commission or the relevant public authority in the UK. You may be entitled, in accordance with the GDPR or the UK GDPR, as applicable, to request further information regarding such safeguards, which you can do by contacting us using the details set forth at the end of this Policy.
Your rights in connection with personal data:
Under certain circumstances, by law you have the right to:
If you want to exercise any of these rights, then please contact us using the details set forth at the end of this Policy. The various rights are not absolute and each is subject to certain exceptions or qualifications. For example, if you wish to withdraw your consent or object to processing, we may need to discuss with you whether our use of your personal data needs to continue for other lawful purposes, such as fulfilment of a legal or contractual requirement.
We will respond to your request within one month of receipt of your request. In some cases, we may not be able to fulfil your request to exercise the right before this date and may need to request more time. Where we cannot provide a full response to you for any reason, we will let you know about our inability to do so in our initial reply to your request.
Your duty to inform us of changes: It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Fees: You will not have to pay a fee to access your personal data (or to exercise any of the other above-listed rights). In some cases, we may charge a reasonable fee if your request for access is clearly unfounded or excessive, or if you request multiple copies of the information. Alternatively, we may refuse to comply with the request in such circumstances.
What we may need from you: To access your personal data (or to exercise any of the other above-listed rights), we may need to request specific information from you to help us confirm your identity and ensure your right to access the personal data (or to exercise any of your other above-listed rights). This is another appropriate security measure designed to ensure that personal data is not disclosed to any person who has no right to receive it.
Right to complain: If you wish to request further information about any of the above-listed rights, or if you are unhappy with how we have handled your personal data, please contact us using the details set forth at the end of this Policy. If you are not satisfied with our response to your complaint or believe our processing of your information does not comply with the GDPR, UK GDPR or other applicable data privacy legislation, you can make a complaint to the supervisory authority in your country. For example, in the UK you should contact the Information Commissioner’s Office at: https://ico.org.uk/global/contact-us/ or 0303 123 1113.
Additional Information for Individuals Whose Personal Information is Subject to CCPA and CRPA
California residents have certain rights with respect to their personal information pursuant to the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020, collectively, the “CCPA”), as applicable and as further described in this section. If you are a California resident and do not agree with our use of your personal information as set forth in this Policy, you should not submit your personal information to Natus. This section supplements this Policy and applies solely to California residents.
You may have certain rights regarding our use and disclosure of your personal information under the CCPA, as described below. These rights are not absolute and each is subject to certain exceptions or qualifications:
To submit an access or deletion request, please contact us using the details set forth at the end of this Policy. To help protect your privacy and maintain the security of your personal information, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you have an email address or other direct contact information on file with us, and request access to or deletion of your personal information, we may require you to provide your name, email address and company name, if previously provided.
You have the right to appoint an authorized agent to exercise these rights on your behalf. If you designate an authorized agent to make a request on your behalf (1) we may require you to provide the authorized agent written permission to do so and (2) for access and deletion requests, we may require you to verify your own identity directly (as described above).
If you choose to exercise rights you may have under the CCPA, you have the right to not receive discriminatory treatment from us for doing so. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. This notice may be made available in alternative formats upon request. Please contact us using the details set forth at the end of this Policy to request this notice in an alternative format or with any other questions or concerns about our privacy policies and practices.
How can you raise a request about the data we collect or otherwise process?
Should you have any questions or requests (including copy, correction, or deletion) regarding the processing of personal information, you may contact us at the following contact information:
Revised January 2023