Johnson & Johnson Medical Limited cares about your privacy and wants you to be familiar with how we collect, use and disclose personal information.

Based on our legitimate interests, we will use your personal information to manage our relationship with you and, where you interact with us over the telephone, calls may be recorded. We may also use your personal information to compile statistical data. With your consent, we will provide you with information, in accordance with our Privacy Notice below. Your personal information will be shared with our affiliates, service providers, and other third parties, as described in our Privacy Notice. Your personal information will be transferred to countries outside of your country of residence, including the United States, which may provide for different data protection rules than in your country.

In detail:

Privacy Notice

1.    Information collection. Based on our legitimate interests, Johnson & Johnson Medical Limited will collect and use your personal information to manage our relationship with you, and, where you interact with us over the telephone, we may record your calls for training, quality assurance and complaint management purposes. We may also use your personal information to compile statistical data based on the information in our databases as well as on surveys, customer feedback questionnaires, and similar communications. You will be informed what information is required and what information is optional.

If you consent, we will provide you with information about our products and services, medical and scientific information, and information about local and/or international medical events you may wish to attend or at which you may wish to speak.

Based on our legitimate interests, in order to most effectively manage our relationship with you and provide you with information tailored to your interests, we will use your personal information to create a profile of you. We may combine your personal information with professional information we receive about you from the following sources: publicly-available information, social media and J&J affiliates. This will help us to provide you with a personalised experience and information that is more relevant to your interests, preferences, and needs.

In order to identify leading specialists, we may create a profile of you, based on our legitimate interests. This profile may help us to make an assessment of the correct compensation for services and the fair market calculation.

2.    Disclosure of information. We disclose your personal information to our affiliates for the purposes described in this Privacy Notice. A list of our affiliates is available in Exhibit 21 to the Company’s last filed Form 10-K which is available at www.investor.jnj.com/financials/sec-filings/. Johnson & Johnson Medical Limited is the party responsible for the management of the jointly-used personal information.

We may also disclose your personal information to unaffiliated third parties, but only:

i.    To service providers that we use to support our business, such as technology and digital/marketing service providers, and with which we have a contract in place.
ii.    To third parties engaged directly or indirectly in the organization of local and international medical events of Johnson & Johnson Medical Ltd, such as hotels, transportation companies (airlines, trains, etc.), and event organizers.
iii.    As permitted by applicable law, to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

In addition, we may use and disclose your information as we believe to be necessary or appropriate:
(a) to comply with legal process or applicable law, which may include laws outside your country of
 

residence; (b) as permitted by applicable law to respond to requests from public and government authorities, which may include authorities outside your country of residence; (c) to enforce our terms and conditions; and (d) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others. We may also use and disclose your information in other ways, after obtaining you consent to do so.

3.    Your Privacy Rights. You have the right to request to review the personal information we have collected about you, as well as the right to request correction, deletion, blocking, data portability and restriction of our use of such information. You can make a request or withdraw your consent to receive marketing communications from us by contacting us at [email protected].

4.    Cross-Border Transfer. The use and disclosure of personal information contemplated in this Privacy Notice may involve a transfer of the information to jurisdictions located outside your country of residence, including the United States, which may provide for different data protection rules than in your country. Appropriate contractual and other measures are in place to protect your personal information when it is transferred. Some countries outside your country of residence are recognised as providing an adequate level of data protection. The full list of these countries is available here for the UK or here for Ireland. For transfers to countries not deemed adequate, we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by an International Data Transfer Agreement or Standard Contractual Clauses, to protect your Personal Information. You may obtain a copy of these measures by contacting our data protection officer at

5.    Data Retention. We will retain your personal information for as long as needed or permitted in the light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the service to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

6.    Data Protection Officer. If you have questions about our privacy practices, including how we determine that we may rely on our legitimate interests as a legal basis for our processing of your personal information, you may contact our data protection officer at

7.    Lodging a Complaint. You may lodge a complaint with a supervisory authority competent for your country:
•    UK regulator – the Information Commissioner’s Office (ICO)
•    Irish regulator – the Data Protection Commission (DPC)