Most of our services do not require any form of registration, allowing you to visit our website without telling us who you are. However, some services and communications may require you to voluntarily provide us with personal data, which may include identification data and contact details, professional data in the context of a job application, and website usage data, which is collected automatically, when you visit our website. If you do not provide such data, we may not be able to provide services or information to you or enter into commercial engagements with you.
BD processes the personal data it collects depending on the relationship that you have with us. Unless the processing of your personal data is required or permitted by applicable law, for example the obligation to provide information to authorities in case of adverse events related to our products, or explicitly authorized by you, BD may process your personal data only as far as necessary to fulfill a contractual relationship with you, and for its legitimate business interests, such as responding to your requests and inquiries, running and maintaining our website, conducting analysis on the usage of our website, preserving our economic interests, and ensuring compliance with internal policies and applicable laws. Additionally, we may process your personal data to personalize the content of our website based on information we have collected based on your consent.
1.1 Personal data that is automatically collected when you visit our website
BD uses common, automated data collection technologies, such as Cookies or internet tags, to assess how our website is used, to personalize your experience, and to deliver content tailored to your interests. Through these technologies, some information may be collected automatically, when you visit our website, including:
- Usage data, such as your device ID, including your IP address, which is a unique number assigned to your computer; your login information, browser and devise information, including the operating system and platform, time zone setting, browser plug-in types and versions; information about your visit and online activities, such as page response times, download errors, length of visits of certain pages, page interaction information.
- Geolocation data and other information collected through Cookies and other tracking technologies (i.e. Web-Beacons and Pixels), subject to your explicit consent and as described in section 5.
We process this information for the following purposes and based on the following legal bases:
To run and maintain our website
We process usage data in our legitimate interest to enable the use of our website (connection establishment), to maintain our website, permanently ensure system security and stability, to fix technical problems, defend against attacks on the infrastructure, to perform analyses in the case of cyber attacks, audits, fraud monitoring and prevention, and to compile aggregated visitor statistics.
To perform website analytics and tracking
We process geolocation data and other information subject to your explicit consent together with usage data to better understand how our products and services impact you, to track and respond to safety concerns and to further develop and improve the quality and functionality of our products and services, identify usage trends and determine the effectiveness of our promotional campaigns, conduct surveys, improve the contents of our website, and to compile aggregated statistics about the usage or our website. For further information on how we use Cookies and tracking technologies, please read section 5 of this Privacy Notice and our Cookie Policy.
To identify your general geographic area
When you visit the BD.com site, the site automatically derives your geographic area based on your IP address and redirects you automatically to your local BD website.
Personal Data provided by you
BD collects personal data directly from you when you sign up for a service, subscribe for a newsletter, enter into a contract with us, submit an application to us, send us a question, make a product complaint, or otherwise interact with us. The type of personal data we collect depends on the interactions you have with us and the BD services you use, and may include information, such as:
- Identification data and contact details, such as name, first name, last name, gender, business email and/or postal address, fixed and/or mobile phone number; age, date of birth, country of origin or residence, username, passwords and other information used for authentication and BD account access.
- Information regarding your utilization, responses and preferences, such as communication preferences, channels, preferred languages.
- Financial or payment data, such as credit card details, bank account details, VAT or other tax identification number, dates and amounts of payments made or received.
- Other personal data necessary to administer certain online services, such as login ID, security questions and answers, or encrypted passwords; or provided by you, for example through our contact forms, including the content of your message when you make an inquiry, report an adverse event or product complaint, respond to a survey, or when you subscribe to one of our mailing lists (your interests).
- Special categories of data, such as data relating to your health or religion, are generally not collected by BD. However, in some circumstances the provision of special categories of data may be necessary, for example, health related information in cases of product claims or when applying for a job where such information is required to comply with applicable laws, such as labor laws, or subject to your explicit consent.
We process this information for the following purposes and based on the following legal bases:
Creating a user account
For the use of some services, you may be asked to create a user account, for example, when you visit a page, whose content is restricted to health care professionals. When registering, you need to provide your identification data and contact details. We process this information, based on our legitimate interest, only to enable you to access the content specifically relevant to you, in compliance with applicable laws, such as local medical laws.
Responding to your requests and inquires, and complaints
We process the data you submit to us via our contact forms to respond to your requests and inquires via mail, email, telephone, SMS text messaging or other channels, for example when you have a question or complaint related to a product or application, submit a medical information request or a safety concern, or would like to request samples, a quote or demo, or subscribe to our marketing communications mailing list.
We process your personal data for these purposes based on our legitimate interest, or, if applicable, contractual obligation, to respond to your request and get in touch with you. If you submit special categories of data with your request, we process this information based on your explicit consent. In case of an adverse event reporting or complaint, we process your personal data to comply with our legal reporting obligations.
Delivering products and services
We process your personal data provided when placing an order to provide you with the products and services ordered and for billing you for these products and services, based on the contractual relationship with you. We further use this data (including information on order history), based on our legitimate interest to improve our products and services by conducting surveys, increase customer satisfaction and our reputation by understanding your preferences and interests, and for marketing purposes. For further information on how we process customer personal data, please read the Data Privacy Notice for Customers.
Preserving our economic interests
We process your personal data, as necessary and based on our legitimate interest, to preserve the company’s economic interests, remain competitive in the market, and ensure compliance and reporting, such as (a) complying with our policies, legal and regulatory requirements, including money laundering, anti-bribery, and anti-corruption laws and regulations, (b) enforcing our terms and conditions, (c) protecting our operations or those of any of our affiliates, (d) protecting our rights, privacy, safety, or property, and that of our affiliates, you, or others, (e) preventing, monitoring and managing cases of alleged misconduct or fraud, misuse of IT systems, physical security, data loss, IT and network security, (f) conducting internal investigations, audits, and (g) defending litigation.
Performing marketing activities/newsletters
We process your personal data, including your identification data and contact details as well as information about your utilization, responses and preferences, and other personal data you submit to us, as necessary and based on your consent, to market products and services which we think may be of interest to you or to communicate with you for other purposes about which we inform you when we collect your personal data. When subscribing to our marketing communications, you will need to provide your name and email address. You can unsubscribe from marketing communications by clicking the “Unsubscribe” link included in each message.
Managing job applications
We process your personal data that you submit when applying for a position at BD to take steps at your request prior to entering into a potential contract with you and based on your consent, to administer your job application and assess your suitability for the relevant position for which you applied.
Complying with legal obligations applicable to BD
We process your personal data, as necessary, to comply with legal obligations applicable to us, such as labor laws requirements, transparency requirements, or adverse event reporting requirements.
Where BD is using your personal data in order to comply with legal obligations applicable to us, we are required to do so, as this affects the way in which we are running our business. In addition this will help us to make our products and services as safe as they can be. BD processes this personal data in line with the measures to protect your personal data as highlighted in this privacy notice.
Where required by law, we will obtain consent to allow us to process your personal for one or more purposes set out in this privacy notice.
Live Chats
BD also processes the data you provide to us when you use our live chat feature (chatbot). We may use live chat to answer your inquiries about our products, our career paths, or our website, as well as to provide technical support, and may also process this data to improve our products and services. When you use the live chat, some information is automatically collected via specific Cookies, such as your IP address, country of origin, and your message. In cases where we need to contact you with additional information, we will need your contact information, such as your name (although a pseudonym is sufficient) and your email address. Before you can use the live chat function, you must consent to the collection and processing of your personal data.
If our processing is based on your consent, you may at any time withdraw your consent by contacting us as described in section 8. Please note that the withdrawal of your consent does not affect the lawfulness of prior processing based on consent.
In some cases (I.e. the career path live chat) we are working with data processors and certain third-party providers to process your personal data as outlined in section 2. All processing of such personal data will be in line with the purposes and measures outlined in this Privacy Notice.
Depending on the interactions you have with us, please consult the specific privacy notices as listed above.
1.2 Personal Data we collect from other sources
To the extent permitted by applicable law, and as necessary for fulfilling our legitimate business interest, we may collect or receive additional information about you from publicly available sources, such as the Internet (I.e social media), or third parties.
For example, we may receive background check information when you apply for a position at BD (only with your explicit consent), or fraud warnings from service providers to fulfill our legitimate interest in fraud prevention. We may also monitor conversations on public social media platforms about our products and services, and collect information, such as comments, photos, videos, blogs, etc, to the extent necessary to better understand how consumers and healthcare professionals experience our products, and BD’s reputation, and to identify social media influencers. This includes the collection of data on how users on social media comment about BD as a company or about specific campaigns. We may further combine the information collected from various sources to better understand your interests and needs. The information may also be used to identify and engage with key stakeholders and/or to understand relevant topics, how they are perceived, positively or negatively, to adapt our communication and identify new topics. This may include the engagement of data processors and certain other third parties as outlined in section 2.
