Abbott Diabetes Care, Inc. provides you with the FreeStyle family of products, include mobile applications which include the “FreeStyle App” and the LibreLinkUp app, and the LibreView website For more information see +About Us and +EU, Swiss and UK Representatives below.
We are committed to protecting your personal information. This Privacy Notice explains how we handle and what we do to keep your personal information secure when using the FreeStyle family of products. We understand that there is a lot of information included in this Privacy Notice. We want to provide you with a short and easily accessible summary of how we collect, protect, retain, store and disclose your personal information. For more information, see +Background on the LibreView Data Management System and +Security of Personal Information below.
THIS SUMMARY IS NOT COMPREHENSIVE. YOU WILL NEED TO READ THE RELEVANT SECTIONS OF THE PRIVACY NOTICE BELOW TO FULLY UNDERSTAND HOW WE PROCESS YOUR PERSONAL INFORMATION.
We use personal information when you create your own LibreView Data Management System account. We process data from sensors and/or readers, such as how often you scan or use your sensor, reader, glucose values, insulin and targets as well as data from connected third party devices. You may use the FreeStyle App (defined below) without creating a LibreView Data Management System account (in the countries where it is applicable) and all information will be stored locally on your mobile device. Whether you create a LibreView Data Management System account or use the FreeStyle App without an account, we will collect personal information if you request customer support and share system troubleshooting/diagnostics data. We also use cookies on our websites. For more information, see +Personal Information Collection via the LibreView Data Management System and +Country Specific Provisions below. The +Country Specific Provisions supplement and/or amend specific provisions, where required by law, that appear to conflict with the overall contents of this Privacy Notice.
We use personal information to: (1) provide you with the FreeStyle family of products and services; (2) comply with legal obligations, including those related to medical device safety, quality and improvement, complaints and adverse incident reports; (3) send you marketing communications where you have opted in or there is a legitimate basis to send communications; and (4) conduct research once the personal information has been de-identified, pseudonymized, aggregated and/or anonymized, so that it does not identify you by name. We conduct research to understand how our products and services are used, their effectiveness and for real-world evidence studies. For more information, see +Use of Personal Information, +Medical Devices and other Legal Requirements, +Research, +Use of Cookies and Similar Technologies on LibreView, +Retention of Personal Information and +How Abbott Sends Marketing and Other Material below.
We strictly limit access to your personal information to duly authorized personnel and strictly limit who we share your personal information with. We will never sell the information to third parties for our commercial benefit. We do share personal information with third party suppliers to provide you with the FreeStyle family of products, such as our third-party cloud service providers who are required to keep your personal information confidential and secure. Wherever we provide your personal information to third-party suppliers, they are required to comply with the conditions set forth in this document and keep your personal information confidential and secure and to use your personal information to the minimum extent necessary. We also share personal information with some of our affiliates in the Abbott group of companies, in particular to de-identify, pseudonymize, aggregate and/or anonymize personal information for research, or to perform troubleshooting/ diagnostics and broader analysis to detect systemic issues. If you are in the United States, we may share your personal information with your health care provider or with other third parties in accordance with our Abbott Diabetes Care Notice of Privacy Practices.. For more information, see +Security of Personal Information, +Disclosure of Personal Information and +How You May Share Information with your Health Care Provider or Others below.
Where your location grants you certain rights in relation to your personal information, we will respond to your requests to exercise those rights. For more information, see +How Individual Users Can Access and Correct Personal Information and Your Rights below.
We store personal information on servers provided by third party companies located in the country closest to your country of residence. For more information, see +Data Storage and +Cross-Border Transfers of Personal Information below.
Please contact us in the first instance if you have any questions, comments or complaints. You can do this by emailing us at DiabetesCarePrivacy@abbott.com or DiabetesCareHIPAA@abbott.com for HIPAA-related inquiries. If you are located in the European Economic Area, you may contact our European data protection officer or may make a complaint to your local data protection authority. The contact details, as well as other useful contact information, are available at www.EU-DPO.abbott.com. For more information, see +Contact Us below.
If you are located in Brazil, you may contact our local data protection officer, Juliana Ruggiero, at privacybrasil@abbott.com or may make a complaint to your local data protection authority. For more information, see +Contact Us below.
When we update this Privacy Notice with material changes, we may alert you through email or through logging into the LibreView website or by another means. For more information, see +Changes to this Privacy Notice below.
Abbott Diabetes Care, Inc. ("Abbott" or "us", "our", "we") recognizes the importance of data protection and privacy and is committed to protecting personal information, including health-related information. This Privacy Notice describes how your personal information, including health-related information, is collected and used by Abbott and how it is uploaded, transmitted and stored by you in the LibreView Data Management System. References in this Privacy Notice to "affiliate companies" or "third parties" are those of Abbott’s affiliate companies and third parties listed in the section titled +Disclosure of Personal Information .
Please read this Privacy Notice carefully before creating a LibreView Data Management System account as it applies to your use of the LibreView Data Management System and to the processing, transfer and storage of your personal information, including health-related information in the cloud by Abbott and certain affiliated companies as described below. More specifically, this Privacy Notice describes the privacy and data protection practices of Abbott and applies only to the personal information processed by us in the LibreView Data Management System through:
It also applies to the processing of your personal information by our affiliated companies and by our processors if required to resolve a customer service issue related to the LibreView Data Management System. You can find more information about how we process your personal information for customer support purposes in the privacy policies relevant to your country of residence which can be accessed at https://www.diabetescare.abbott/worldwide-locations.html
This Privacy Notice does not apply to personal information processed or collected by other Abbott affiliates or subsidiaries or via other methods, such as other Abbott websites, other Abbott customer call centers, or use of the FreeStyle Desktop software. Other privacy policies may apply to the personal information processed or collected through these methods.
By creating a LibreView Data Management System account and using LibreView, the FreeStyle App or LibreLinkUp App, you:
BY ACCEPTING OR AGREEING TO THIS PRIVACY NOTICE, YOU EXPLICITLY ACKNOWLEDGE THAT YOUR USE OF THE LIBREVIEW DATA MANAGEMENT SYSTEM IS SUBJECT TO THIS PRIVACY NOTICE AND TO THE PROCESSING AND TRANSFER OF PERSONAL INFORMATION INCLUDING HEALTH-RELATED INFORMATION, AS DESCRIBED IN THIS PRIVACY NOTICE. (THIS PARAGRAPH DOES NOT APPLY TO USERS IN THE EEA, UK, SWITZERLAND AND CHINA).
WHERE REQUIRED BY THE LAW OF YOUR COUNTRY OF RESIDENCE, FOR INSTANCE IF YOU ARE A USER IN THE EEA, UK, SWITZERLAND, CHINA OR MALAYSIA YOU ARE PROVIDING EXPLICIT CONSENT TO THE PROCESSING OF YOUR PERSONAL INFORMATION, INCLUDING HEALTH-RELATED INFORMATION BY CLICKING "ACCEPT".
YOU MAY ALSO BE PRESENTED WITH AN OPTION TO PROVIDE EXPLICIT CONSENT TO ALLOW YOUR PERSONAL INFORMATION TO BE USED FOR RESEARCH, AS SET OUT IN THE SECTION TITLED +RESEARCH. BY CLICKING TO AGREE OR OPT IN TO RESEARCH, YOU ARE PROVIDING YOUR EXPLICIT CONSENT.
YOUR CONSENT IS GRANTED AT YOUR FREE WILL AND YOU ACKNOWLEDGE THAT YOU ARE NOT UNDER ANY LEGAL OBLIGATION TO PROVIDE PERSONAL INFORMATION TO ABBOTT.
Abbott Diabetes Care Inc. of 1420 Harbor Bay Parkway, Alameda, CA 94502, USA is the developer of the FreeStyle family of products that include the LibreView website (“LibreView”), mobile applications which include the “FreeStyle App” and the LibreLinkUp app (“LibreLinkUp”) as well as FreeStyle branded sensors and readers. When the FreeStyle family of products are used together, they may be referred to as the “LibreView Data Management System”.
We have appointed representatives in the EU, Switzerland and UK. A full list of our EU, Swiss and UK representatives is available at +EU, Swiss and UK Representatives. References in this Privacy Notice to "affiliate companies" or "third parties" are those of Abbott’s affiliate companies and third parties listed in the section titled +Disclosure of Personal Information .
Abbott is a controller of personal information, including health-related information, uploaded, transmitted to or stored by you in the LibreView Data Management System. Professional users are also a controller of your personal information for the purpose of providing you with medical care. The word ‘controller’ is used here based on its definition in the data protection laws of the EEA, the UK and Switzerland and, where applicable, has the equivalent meaning of similar terms in other countries’ data protection and privacy laws in which you reside.
The LibreView Data Management System is a cloud-based diabetes management system that may be used by individuals, healthcare professionals and Abbott to aid in the review, analysis and evaluation of historical glucose data, glucose test results, ketone test results, data from connected devices and user-entered information including insulin, food, exercise, and notes to support an effective diabetes health management program. The LibreView Data Management System allows Abbott to provide improved guidance for patients utilizing Abbott’s readers and mobile apps. It also enables Abbott to improve quality, security and effectiveness of medical devices and systems and allows Abbott to develop innovative and effective treatment for and management of diabetes in the interests of public health.
Please be aware that third parties may offer products, services, software, hardware (such as glucose meters or attachments to an Abbott sensor) and mobile apps not authorized by Abbott and which they claim may be compatible with your sensor, the FreeStyle App, and/or the LibreView Data Management System. The use of such unauthorized third-party products, services, software, apps, or hardware may result in the off label and unauthorized use of Abbott’s products. Abbott does not recommend or endorse using the LibreView Data Management System with these third-party products and services, and is not responsible if you do, including but not limited to where your use of such products or services affect the integrity or accuracy of the information in your LibreView Data Management System account. Abbott is not responsible if you connect with these third-party products or services, or your decision to upload data from these third-party products or services to your LibreView Data Management System account, or to share data from your LibreView Data Management System account with these third-party products or services. If you do use these third-party products or services, your use is subject to their respective privacy policies and terms of use. When you do use such third-party products, services, software or apps and upload information into your LibreView Data Management System account, Abbott will receive and process such data, including if you have uploaded health-related information. For information about how Abbott allows you to share your information with authorized third parties, please see +Disclosure of Personal Information for more information.
Use of the LibreView Data Management System may require compatible devices, internet access, data usage (charges may apply), certain software (charges may apply), and periodic updates, and the performance of the LibreView Data Management System may be affected by these requirements.
Your health care provider also has the ability to create their own LibreView Data Management System account and to create patient profiles within that account. When you visit your health care provider, they can connect your reader to their LibreView Data Management System account to view and print out patient reports and to remotely view patient reports and share those reports with other professionals in their practice. The LibreView Data Management System allows patient users to create their own accounts, upload their own information and share information with professional users. This allows professional users to remotely view patient reports and share those reports with other professionals in their practice. Your health care provider may also use the LibreView Data Management System to send patient reports directly to their electronic medical record systems where permitted, such as in the United States, or where you opt-in or otherwise consent to this data sharing if you are in a country that requires such opt-in or consent.
You can choose to use the FreeStyle App without creating an account (only in the countries where it is applicable), and if you do have an account you can choose to sign out at any time. If you do not create an account, or you sign out of your account, the functionality of the FreeStyle App will be limited. You will not be able to share your information with family members, friends or caregivers by inviting them to use the LibreLinkUp App; your glucose values and other information will not be backed up and stored in LibreView for you to review historical data; and you will not be able to share your information with your health care provider through LibreView. All of your personal information and glucose values will only be stored locally on your mobile device. If you sign out of your account, you can sign back into the FreeStyle App with the same account at any time to resume full functionality, to store and back up data and to share your information with family, friends or caregivers. For information about what personal information we process when you do not create a LibreView Data Management System account, please see +Personal Information Collection via the LibreView Data Management System.
This Privacy Notice applies only to the personal information, including health-related information, processed by us in the LibreView Data Management System when:
When you sign up for a LibreView Data Management System account, your account profile information is kept in a separate database that does not include your health-related information, and Abbott uses technical and administrative measures to ensure data separation. Please note that your name and glucose data will be combined when you use the share functionality to share a report of your glucose data with your health care provider or any other third party and where, in the United States, your health care provider requests that the LibreView Data Management System send a report of your glucose data directly to their electronic medical record system, or where you are in a country that requires opt-in or consent for you to share your LibreView Data Management System, and you elect to connect your account to your health care provider’s electronic medical records system, as set out in the section titled +Background on the LibreView Data Management System and +Disclosure of Personal Information.
Where you opt in to receiving marketing communications from us, we will combine your LibreView Data Management System account profile (name, age range, mobile, email address, language and country) with other information you may have provided to us for marketing purposes, such as your address, and if you are a FreeStyle App User the time of your first sensor scan and frequency of sensor use, and whether you have Type I or Type II diabetes, as set out in the sections titled +Use of Personal Information and +How Abbott Sends Marketing and Other Material.
This Privacy Notice covers the collection of the following information:
When you sign up for a LibreView Data Management System account, account profile data (including name, mobile phone number (where it is applicable), country, date of birth, email address) are kept separate from the information you upload from your sensor or reader. Abbott uses technical and administrative measures to ensure data separation and will never combine these data, unless otherwise stated below.
Abbott uses your personal information, including health-related information, data derived from your sensor or reader, and technical information about your mobile device if you use the FreeStyle App, LibreLinkUp App or the computer you use to access LibreView in the following ways:
Abbott may use personal information, including health-related information, where legally required and, where possible, we will de-identify, pseudonymize, aggregate and/or anonymize information to comply with various legal requirements. For example, as a medical device manufacturer, Abbott has certain legal obligations to help ensure the ongoing safety of our medical devices. This may require Abbott to share personal information with regulatory authorities responsible for the quality and safety of medical devices (e.g. where your health care provider reports an adverse incident to us relating to an Abbott device). The information Abbott may be required to share is not used to identify you individually by your name or email address, except where there is a legal obligation to include this information, such as when a health care provider makes a complaint or reports an adverse incident. Our parent company, Abbott Laboratories, assists us as a processor to ensure such information does not identify a patient by de-identifying, pseudonymizing, aggregating and/or anonymizing personal information.
The legal requirements for which Abbott may use this information include:
We use the terms ‘de-identify’ and ‘pseudonymize’ interchangeably. The US Health Insurance Portability and Accountability Act and its implementing regulations (HIPAA) describe de-identified information as information where ‘there is no reasonable basis to believe that the information can be used to identify an individual’. The EU General Data Protection Regulation (2016/679) (GDPR) defines ‘pseudonymization’ as ‘the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information’. Anonymized data is information that does not relate to a person and from which a person cannot be identified, and this kind of data is not subject to data protection and privacy laws.
For more information about HIPAA, please see the +HIPAA Notice for individual users in the United States of America and +USA sections below for further information. For more information about GDPR, please see the +European Economic Area, UK and Switzerland section below.
Abbott conducts research for limited purposes using your personal information after it has been de-identified, pseudonymized, aggregated and/or anonymized. Such data includes limited demographic data, namely, year of birth and country of residence, and device related data (such as the frequency and days of sensor scans or usage, frequency of use of readers, glucose target ranges, average glucose values, insulin, mealtime patterns, logged exercise and other logged notes, and information generated by a sensor, namely, sensor started and ended information, Bluetooth connection and disconnection (where it is applicable), information about whether glucose information you upload into the LibreView Data Management System has been viewed by you). This information may also include data received from your third party connected devices or apps as well as your responses to research surveys. Our parent company Abbott Laboratories in the United States assists us, as a processor, to de-identify, pseudonymize, aggregate and/or anonymize your personal information. Where data has been anonymized, it is no longer subject to privacy and data protection laws.
A data set processed for research purposes will not include your name, address, phone number or email address. This de-identified, pseudonymized, anonymized or aggregated data set is securely held by Abbott and will not be used to identify you individually by your name or email address. If you delete your account through the settings in the LibreView Data Management System or through a request to Customer Service, the data that has already been or is in the process of being anonymized, de-identified, pseudonymized and/or aggregated for research purposes as described in this section will not be deleted. The research purposes for which Abbott may use this data set include:
Abbott conducts product usage research based on de-identified, pseudonymized, aggregated and/or anonymized data for limited purposes, in particular to help us understand the performance of the FreeStyle App and LibreLinkUp App, to help us understand issues which may need fixing with the apps and to help us understand how many times the apps have been downloaded from App Stores.
If, in addition to using the LibreView Data Management System, you use the FreeStyle Desktop Software, please note that information uploaded to the LibreView Data Management System is hosted separately and independently from the FreeStyle Desktop Software. Abbott will not combine data from these two services (de-identified data obtained through the FreeStyle Desktop Software and personal information uploaded to and contained in the LibreView Data Management System). Abbott uses administrative, technical and organizational measures to ensure that these data flows remain separate.
We use the terms ‘de-identified’ and ‘pseudonymized’ interchangeably. US Health Insurance Portability and Accountability Act and its implementing regulations (HIPAA) describe de-identified information as information where ‘there is no reasonable basis to believe that the information can be used to identify an individual’. The EU General Data Protection Regulation (2016/679) (GDPR) defines ‘pseudonymization’ as ‘the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information’.
For more information about HIPAA, please see the +HIPAA Notice for individual users in the United States of America and the +USA sections below for further information. For more information about GDPR, please see the +European Economic Area, UK and Switzerland section below. Where you live in a country that requires Abbott to obtain consent before we are able to use a de-identified, pseudonymized, or aggregated data set, you will be asked to provide consent by clicking the opt-in button.
For more information regarding our current scientific research projects, please click here.
When you share your troubleshooting/diagnostic data, the following information will be transmitted to us and collected by us (whether or not you are signed into LibreView Data Management System account on the FreeStyle App):
When you contact us to report a fault, we collect your name, address, phone number, country and email address. Your use of customer support is governed by the privacy policies relevant to your country of residence which can be accessed at https://www.diabetescare.abbott/worldwide-locations.html If you live outside of the United States of America, we do not combine your contact information with the product diagnostic/troubleshooting information you provide. We will keep these categories of data separately. If you live inside the United States of America, the FDA requires we keep your contact information with the diagnostic/troubleshooting information.
We use cookies and similar technologies on LibreView to collect technical information. Cookies are text files containing small amounts of data which are downloaded to your computer when you visit a website. Cookies are useful because they allow us to recognize your computer and improve your experience on our websites. We also use Google’s Invisible reCAPTCHA service to maintain the integrity of LibreView. The use of the Invisible reCAPTCHA service is subject to Google’s Privacy Policy and Terms of Use.
Your web browser (such as Firefox, Safari or Chrome) then sends these cookies or similar technologies back to the website on each subsequent visit so that we can recognize you. These cookies can only be read by the server that sent them to your browser. Our systems may not recognize Do Not Track (DNT) headers or similar mechanisms from some or all browsers.
Through our use of cookies and similar technologies on LibreView, we may collect the following technical information: your domain name, browser type and operating system, the webpages you view, links you click, IP address, length of time you visit LibreView, the referring URL or the webpage that led you to LibreView, and troubleshooting and analytical data to help us provide the LibreView Data Management System to you. We may combine this automatically collected information with other information we have about you.
LibreView uses the following types of cookies:
There are various ways that you can control and manage your cookies. Please remember that any settings you change will not just affect these cookies used by LibreView. These changes may apply to all websites that you visit (unless you choose to block cookies from particular websites).
To find out more about cookies visit https://www.allaboutcookies.org.
Abbott uses Amazon Web Services (AWS), CROC or Microsoft Azure to host your LibreView Data Management System accounts in the cloud. The servers that host LibreView Data Management System accounts may be located in North America (United States, Canada), Europe (Ireland, France, Germany), Russia, UAE, and the Asia Pacific countries (China, Japan, Australia, Singapore). You will be asked for your country of residence when you create a LibreView Data Management account. The country of residence that you select will determine where your data is stored. For example, if you reside in a member country of the European Union (EU), your personal information and health-related information you upload to your LibreView Data Management System account will be stored on servers within the territory of the European Union (Ireland, France, or Germany). For French users, Abbott hosts LibreView Data Management System accounts with AWS in France. AWS is certified by the French agency for digital health, the ANS to host health-related information. The personal information and health-related information you upload to your LibreView Data Management System account may be stored in the country closest to your country of residence or otherwise in accordance with the data storage and privacy requirements of your selected country. When your personal information is hosted in a country other than the country you selected, it may become subject to the laws of the host country, which may not be equivalent to the laws of the country you selected. If you have incorrectly identified a different country as your country of residence, do not complete the installation. Instead, return to https://www.libreview.com and click "Sign Up". Abbott has implemented appropriate security measures and controls to protect your personal information. For more information about our global server locations and on which servers your personal information, including health-related information, is stored, please see https://files.libreview.io/files/globalLogos/pp-image.png
Abbott will retain personal information associated with your LibreView Data Management System account for the following periods:
Unless otherwise stated above, Abbott will continue to store your personal information while you have an active LibreView Data Management System account. Your LibreView Data Management System account will be considered to be inactive once there has been no activity on it for six (6) months. Once your LibreView Data Management System account is considered inactive or where you delete your account, all personal information will be permanently and irrevocably deleted unless (1) Abbott is required or permitted to retain the personal information or (2) with respect to such information that has already been or is in the process of being anonymized, de-identified, pseudonymized and/or aggregated for the purposes set out in the section titled +Research. We will notify you in advance by sending an email to the email address associated with your LibreView Data Management System account so that you have an opportunity to ensure your account stays current and available for your use. The section titled +Deleting Your LibreView Data Management System Account explains how you can delete your account and what happens to your personal information once your account has been deleted.
We share personal information including health-related information with the following, and in each case only the minimum amount of personal information is shared for the purposes for which the third party is engaged:
Health care providers: If your health care provider has created a LibreView Data Management System Professional User account, your health care provider has the ability to use the LibreView Data Management System to create patient profiles and to connect your reader to their LibreView Data Management System account to view and print out a patient report and to remotely view patient reports and share those reports with other professionals in their practice. Abbott discloses such information pursuant to its contract with your health care provider and processes such data as a ‘processor’.
Where requested by your health care provider, Abbott may also share your personal information with your health care provider’s electronic medical records system (but only in countries where this is permitted or where you have opted-in or otherwise consented to such sharing). Where Abbott shares your personal information and health-related information, it does so under a data sharing agreement with your health care provider.
If you are in the United States, Abbott may disclose your personal information to your health care provider or with other third parties in accordance with our Abbott Diabetes Care Notice of Privacy Practices, including when your health care provider requests that the LibreView Data Management System send a report of your glucose data directly to their electronic medical record system. Please see the section titled +HIPAA Notice for individual users in the United States of America and +USA for additional information.
Abbott Laboratories: We share your personal information with our parent company to assist us as a processor with the de-identification, pseudonymization, aggregation and/or anonymization process and assist us with IT operations to support the diagnostic data platform.
Third-party suppliers: We share personal information with third-party suppliers solely to provide, maintain, host, and support the LibreView Data Management System. Abbott uses Amazon Web Services (AWS), Microsoft Azure and other cloud providers (see below) to host LibreView Data Management System accounts in the cloud. (Please see the section titled +Data Storage for further information) Where we provide your personal information to third-party suppliers to assist us with the provision of your LibreView Data Management System account, they are required to keep your personal information confidential and secure and to use your personal information to the minimum extent necessary. Where possible, Abbott uses third party service providers to report system errors so that we can support and improve the LibreView Data Management System and in such instances, the information sent to such third parties will not involve the use of your personal information.
Abbott uses third-party service providers to provide you with the LibreView Data Management System. For example, we use third-party service providers to report when either the FreeStyle App or LibreLinkUp App crashes or experiences certain scanning errors so that we can support and improve the apps, and when these crashes or scanning errors occur, the app will send certain information about the incident to such third parties. The information sent to such third parties will not involve the use of your personal information. Abbott uses Lomaco et AGPS to ensure invoicing of telemedicine acts in France to the social security system. Some versions of the FreeStyle family of products may be accessed via mobile devices that may contain pre-loaded third-party operating and device management software. More information about the device manufacturers’ privacy practices may be found in the device manufacturers’ privacy policy or website(s).
For some FreeStyle Apps, Android devices require location services permissions to be granted in order to discover and connect to the FreeStyle Libre sensor using Bluetooth technologies. The data from such location services is not collected by the FreeStyle App or transferred from the device; as such, it cannot be used by Abbott. Once the sensor is connected, location services permissions can be turned off with no impact on the FreeStyle App; however, they must be turned on again to connect to a new sensor. For more information on Google’s privacy practices, please see Android’s support website.
Abbott also uses third party suppliers to send surveys and collect your responses for research purposes and will, if required by law, obtain your consent to do so.
Local affiliated Abbott companies: We may share your personal information with local affiliated Abbott companies with whom we are jointly marketing a product or service or jointly conducting a program or activity. This will only occur where you consent to sharing, for example, where you opt-in to receive marketing communications from Abbott (or its affiliates) or where we have a legitimate basis for sharing personal information as described in this Privacy Notice. Where we require assistance from Abbott companies in your country to address diagnostics/troubleshooting and the fault you have reported, we will share the minimum of your personal information necessary to them.
Third Party Partners of Abbott: We also may share your personal information with third parties where you have expressly asked us to do so and/or consented to share your personal information, including where you use the share functionality in the LibreView Data Management System. When you use that share functionality your personal information, including health-related information from your third party connected device, sensor or reader, such as your glucose targets, glucose values, insulin, logged food, logged exercise and other logged notes may be shared. Where you decide to share your personal information, including health-related information, the use of your personal information, including health-related information by the third party partner of Abbott is not governed by this Privacy Notice, and will be governed by the third party partner’s privacy policy.
Your third party connected device, where applicable, may share data with the LibreView Data Management System. When you connect the device of an Abbott third party partner to the LibreView Data Management system, and your third party connected device shares data with the LibreView Data Management System, the consent choices that you have made for the LibreView Data Management system will apply to the data you share from the connected device to Abbott. The sharing and use of your data by the third party partner will be governed by the third party partner’s privacy policy.
You can elect to stop sharing data to/from your LibreView Data Management System account at any time by turning off the sharing function.
Other third parties: We may share de-identified, pseudonymized, aggregated, and/or anonymized information with affiliated Abbott companies and with other third parties for the purposes relating to +Research as set out above. This is information which Abbott securely holds and will not be used to identify you individually by your name or email address.
We will not sell or license your personal information to third parties except in connection with the sale, merger, or transfer of a product line or division, so that the buyer can continue to provide you with information and services. We will not sell your personal information for commercial purposes to third parties and we may only share your personal information with third parties where you have provided consent or where permitted by applicable law.
We reserve the right to disclose your personal information to respond to requests from any competent law enforcement body, regulatory or government agency, court or other third party where we believe the disclosure is necessary or appropriate to comply with a regulatory requirement, judicial proceeding, court order, government request or legal process served on us, or to protect the safety, rights, or property of our customers, the public, Abbott or others, and to exercise, establish or defend Abbott’s legal rights or where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Privacy Notice, or as evidence in litigation in which we are involved. Your personal information may be subject to foreign laws and may be accessible by foreign governments, courts, law enforcement, and regulatory agencies.
The LibreView Data Management System allows users to share information with health care providers and professional users of LibreView. You may also share your personal and health-related information with a person you invite to use the LibreLinkUp app. Depending on your selection of country, you may have limited ability to connect to other users of the LibreView Data Management System who choose a different country of residence. Where you use the share functionality in the FreeStyle App, we may share your personal information with your health care provider or with other third parties. We may also share your personal information with third parties where you have expressly asked us to do so and/or provided consent to share your data with our partners and third parties.
You may elect to share information with health care providers by allowing your health care provider to connect your reader to their LibreView Data Management System Professional User account or by using the share functionality in the FreeStyle App.
Where you use the share functionality in the FreeStyle App, you can send reports with your personal information and glucose data to your health care provider.
Where your health care provider has created a LibreView Data Management System Professional User account, your health care provider has the ability to use the LibreView Data Management System to create patient profiles and to connect your reader to their LibreView Data Management System account to view and print out a patient report and to remotely view patient reports and share those reports with other professionals in their practice.
When you provide your health care provider access to your LibreView Data Management System account or where your health care provider sets up a LibreView Data Management System account for you, Abbott (through the LibreView Data Management System) will be processing your personal information on behalf of your health care provider to protect your vital interests as determined by your health care provider. Abbott will process your personal information, including health-related information, as a ‘processor’ for the purpose of the healthcare they provide to you to protect your vital interests and your health care provider will be the controller of your personal information in such instances.
Abbott may also share your personal information with your health care provider where you have consented to or opted into connecting your LibreView Data Management System account to your health care provider’s electronic medical records system if you are located in a country that requires such consent or opt-in.
If you are in the United States, Abbott may disclose your personal information to your health care provider or with other third parties in accordance with our Abbott Diabetes Care Notice of Privacy Practices, including when your health care provider requests that the LibreView Data Management System send a report of your glucose data directly to their electronic medical record system. Please see the section titled +HIPAA Notice for individual users in the United States of America and +USA for additional information.
We have implemented administrative, technical and physical safeguards to protect your personal information, including health-related information, from unauthorized or unlawful access, accidental loss, destruction, damage, misuse, disclosure and alteration, including the use of cryptographic technologies. Abbott restricts access to personal information by its employees on a need to know basis. Personal information including health-related information may only be accessed by duly authorized personnel, respecting the principles of proportionality and necessity, and all personal information is treated with confidentiality. Please keep in mind that no internet or Wi-Fi transmission is 100% secure, so please exercise caution when uploading personal information, especially health-related information, to your LibreView Data Management System account.
FreeStyle sensors transmit personal glucose information to FreeStyle mobile apps and devices using NFC (Near Field Communication) and Bluetooth technologies. NFC and Bluetooth are both secure means of transferring information between devices. NFC has the added level of protection by requiring very close physical proximity. Encrypted Bluetooth connections for FreeStyle sensors are established during an NFC communication between a FreeStyle sensor and a FreeStyle mobile app or reader.
Please be aware that the LibreView Data Management System may be unavailable during periods of routine maintenance.
For LibreView users: Two-factor authentication may be required, where available, for you to log into LibreView and to complete your LibreView Data Management System account registration. You may either provide your phone number, email address, or other means to be authenticated as a user of your account. You also have an option to “remember me” to avoid repeating the two-factor authentication process and you will be able to “reset” your “remember me” settings in order to be prompted to complete two-factor authentication the next time you log into LibreView.
For FreeStyle App users: Use of the custom alarm feature may require you to permit access to mobile phone storage in order to play the custom alarm.
You are responsible for protecting against unauthorized access to your LibreView Data Management System account and devices. We recommend securing access to LibreView by logging-out, choosing a robust password for your LibreView Data Management System account that nobody else knows or can easily guess, implementing security settings on your mobile device or computer such as a password to access it, keeping your device locked when not in use and keeping your account information and password private. Abbott is not responsible for any lost, stolen or compromised passwords or for any activity on your LibreView Data Management System account from unauthorized users where caused by you. If you think your account has been compromised, please contact us as soon as you are able at DiabetesCarePrivacy@abbott.com.
If you selected a country outside the United States of America as your country of residence, we may occasionally need to access, transfer or view your personal information to provide you with technical or other customer support related to the use of your LibreView Data Management System account and/or support and maintain the LibreView Data Management System. The personal information may include your name, email address, and in certain exceptional circumstances, your health-related information, where the technical issue requires the support team to view such information. Access to personal information is via a secure network from the United States of America and only occurs to the extent it is necessary for us to provide the technical or other customer support required, and/or to maintain the LibreView Data Management System.
If you request our support and share your diagnostic/ troubleshooting data (including health-related data), we will transfer your data to the United States of America (for more information regarding diagnostics data use please see section +Diagnostics Data Use) to the extent it is necessary for us to provide you with technical support and to perform broader analysis to detect systemic issues. Where we transfer your personal information to another country, we will make sure that any transfer complies with the laws of the country where you live. For example, where necessary, we will put in place contractual arrangements that closely control how your personal information can be transferred.
When you share your personal and health-related information with a person you invite to use the LibreLinkUp app, we use Pushy (if you are a LibreLinkUp user based in mainland China) and Firebase Cloud Messaging (if you are a LibreLinkUp App user based in other jurisdictions other than mainland China) to send notifications from your LibreView Data Management System account to the individuals connected to you via LibreLinkUp. These notifications may be transferred via the United States.
More information about how we process personal information for customer support purposes is available in the privacy policies relevant to your country of residence which can be accessed at https://www.diabetescare.abbott/worldwide-locations.html.
In addition, we also transfer de-identified, pseudonymized, aggregated and/or anonymized data to the United States, which does not identify you by name, for the purpose of conducting research as described in the section titled +Research above, and we transfer your personal information (in de-identified, pseudonymized, aggregated and/or anonymized form where possible), for the purpose of complying with our legal obligations as described in the section titled +Medical Devices and other Legal Requirements above. The United States of America may not provide data protection or privacy laws equivalent to the laws of your country; however, we put appropriate contractual, technical and organizational safeguards and supplemental measures in place to protect your personal information and we may implement additional safeguards to continue to protect your personal information as required.
BY CREATING A LIBREVIEW DATA MANAGEMENT SYSTEM ACCOUNT AND BY ACKNOWLEDGING THIS PRIVACY NOTICE, WE ARE INFORMING YOU OF THESE TRANSFERS OF YOUR PERSONAL INFORMATION TO THE UNITED STATES OF AMERICA AND TO THE ACCESS OF YOUR PERSONAL INFORMATION, INCLUDING HEALTH-RELATED INFORMATION, WHICH MAY BE REQUIRED IN EXCEPTIONAL CIRCUMSTANCES TO RESPOND TO ANY SUPPORT REQUESTS YOU SUBMIT. THE LAWS IN THE UNITED STATES OF AMERICA MAY NOT OFFER AN EQUIVALENT LEVEL OF PROTECTION FOR YOUR PERSONAL INFORMATION WHEN COMPARED TO SWITZERLAND, THE UNITED KINGDOM, A EUROPEAN ECONOMIC AREA COUNTRY OR OTHER COUNTRY WITH DATA PROTECTION OR PRIVACY LAWS IN WHICH YOU RESIDE.
Abbott (or its affiliates) may send you advertising and marketing-related information or request that you participate in surveys about diabetes care or other products and services, provide you with news and newsletters, or notify you about special offers and promotions at any time if (where required by law) you opted-in to receive such communications or if we have a legitimate basis for sending you this material.
You may receive marketing information which is tailored to your specific needs based on the information uploaded or connected to your LibreView Data Management System, such as account profile (name, age range, mobile, email address and country) with other information you may have provided to us for marketing purposes, such as your address, and if you’re a FreeStyle App User the time of your first sensor scan and frequency of sensor use, and whether you have Type I or Type II diabetes so that we can send you information relevant to you.
You will be provided with an opportunity to opt-in to these communications (where required by law) when you first provide us with your personal information and when you log into your LibreView Data Management System account. After you opt-in, you will also be provided an opportunity to opt-out through each marketing communication you receive from us. These materials may be sent by us or by an affiliate of Abbott. You may opt out from receiving marketing-related communications by either clicking on the unsubscribe link in each marketing-related communication or by contacting us at DiabetesCarePrivacy@abbott.com. We will process opt-out requests without undue delay.
Neither Abbott nor its affiliates or licensors will knowingly send advertising or marketing-related information to children.
Abbott will not sell your personal information to third parties for direct marketing purposes.
Where you opt out of receiving marketing-related information about diabetes care, we may send you non-marketing related information, where required by law, such as information related to necessary system and service updates or issues relating to user or product safety.
Each user is required to enter their date of birth and country so that we may establish whether the user is a child under the law of their country. If a date of birth attributable to a child is entered, the user will be required to enter the email address of a parent/guardian before a LibreView Data Management System account will be created. The parent/guardian must consent to the child’s use of the LibreView Data Management System. Upon such consent, a LibreView Data Management System account will be created for the parent/guardian for use by a child.
Where a child wishes to use any functions in the LibreView Data Management System that disclose their personal information, including health-related information, to any other party, the child is prevented from doing so without obtaining the consent of his or her parent/guardian. Before a child may take such an action, the parent/guardian is required to enter his or her password to enable this functionality. We will send parents/guardians notice via their registered email address when such settings have been accessed, and it is the parent’s/guardian’s responsibility to manage these settings for the child.
At any time, a parent/guardian may stop the collection of a child’s personal information, including health-related information, by requesting that Abbott delete the LibreView Data Management System account used by a child by contacting us at DiabetesCarePrivacy@abbott.com.This action will delete the account being used by the child but we retain information that has already been or is in the process of being anonymized, aggregated, pseudonymized and/or de-identified for the purposes set out in the section titled +Research and we may need to retain certain personal information as required by law. See +Retention of Personal Information for more information.
You may correct your profile information (your name, mobile phone number (where it is applicable), country, date of birth (except children), email address and password) through the LibreView Data Management System account settings, or through the settings within your FreeStyle App or LibreLinkUp App. We are not able to correct or amend any sensor readings that you have uploaded into your LibreView Data Management System account or any data uploaded from a FreeStyle reader, but we will assist you with deleting your LibreView Data Management System account and creating a new one so that you can reload the correct information.
Depending on your place of residence, you may have the right to: (a) access the personal information we hold about you; (b) request we correct any inaccurate personal information we hold about you; (c) delete any personal information we hold about you; (d) restrict or cease the processing of personal information we hold about you; (e) object to the processing of personal information we hold about you; and/or (f) receive any personal information you have provided to us on the basis of your consent in a structured and commonly used machine-readable format or have such personal information transmitted to another company by using the export function in your LibreView Data Management System account, where accessible. Please note that Abbott is not required by law to adopt or maintain systems that are technically compatible with other companies. It may not be possible for Abbott to directly transmit your personal information to another company.
Children may also have the right to access the personal information held about them through the LibreView Data Management System. Where we receive a request for access for a child’s personal information from the child’s parent/guardian, we may respond directly to the child’s parent/guardian. We will always seek to verify the identity of person seeking access to a child’s information, whether it is from the child him/herself or from a parent or guardian.
To request the exercise of these rights, please contact us using any of the methods set out in the section titled +Contact Us.
If you would like to delete your LibreView Data Management System account, you may do so by logging into your LibreView Data Management System account via www.libreview.com and using the delete account functionality. Please be aware that if you delete your account, all data in the LibreView Data Management System account will be deleted but we will retain information that has already been or is in the process of being anonymized, aggregated, pseudonymized and/or de-identified for the purposes set out in the section titled +Research. We may also need to retain certain personal information when required by law. See +Retention of Personal Information for more information.
Once your LibreView Data Management System account has been deleted, you will no longer have access to the LibreView Data Management System and deletion of your account is irreversible. You are not therefore able to reactivate your LibreView Data Management System account or retrieve any personal information, including health-related information, so you may want to download and save any required information before requesting that we delete your account from the LibreView Data Management System.
If you have chosen to share your LibreView Data Management System account information with your health care provider or with other connections and you delete your account, those persons will no longer be able to view your glucose readings.
Please be aware that if your health care provider has set up their own account in the LibreView Data Management System and created a patient profile specific to you, your deletion of your LibreView Data Management System account may have no effect on the account or patient profile created by your health care provider.
If you reside in the United States, please see the +USA section for additional information related to deleting your LibreView Data Management System Account.
Abbott reserves the right to delete inactive LibreView Data Management System accounts after six (6) months. We will notify you in advance by sending an email to the email address associated with your LibreView Data Management System account so that you have an opportunity to ensure your account stays current and available for your use.
LibreView may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Notice, but instead is governed by the privacy notices of those third-party websites. We are not responsible for the information practices of such third-party websites.
If you have questions, comments, or complaints about our privacy practices, or if you would like to exercise any of your rights set out in the section titled +How Individual Users can Access and Correct Personal Information and Your Rights, please contact us by clicking on the "Contact Us" link in one of our websites or emailing us at DiabetesCarePrivacy@abbott.com. For HIPAA-related inquiries, please contact us at: DiabetesCareHIPAA@abbott.com. Alternatively, you may write to us at
Attn: Privacy Officer
Abbott Diabetes Care Inc.
1420 Harbor Bay Parkway
Alameda, CA 94502
USA
For European Economic Area, UK and Switzerland users, please view the +European Economic Area, UK and Switzerland section below for additional contact details.
For Brazil: If you have questions, comments, or complaints about our privacy practices, or if you would like to exercise any of your rights set out in the section titled +How Individual Users can Access and Correct Personal Information and Your Rights, please contact us by clicking on the "Contact Us" link in one of our websites or emailing our local DPO, Juliana Ruggiero, at privacybrasil@abbott.com.
Attn: Juliana Ruggiero Privacy Officer
Laboratórios do Brasil Ltda.
Rua Michigan 735, São Paulo/SP
CEP: 04566-905
In all communications to us, please include the email address used to create your LibreView Data Management System account and a detailed explanation of your request.
If we make material changes to our privacy practices, an updated version of this Privacy Notice will reflect those changes. You may be alerted to updates to this Privacy Notice by email, via the FreeStyle App or LibreLinkUp App or when you next log into LibreView. You will be notified if there is a new version of this Privacy Notice and will be prompted to read and accept it so that you can continue to access and use your LibreView Data Management System account via LibreView, the FreeStyle App or LibreLinkUp App.
Without prejudice to your rights under applicable law, we reserve the right to update and amend this Privacy Notice without prior notice to reflect technological advancements, legal and regulatory changes and good business practices to the extent that it does not change the privacy practices as set out in this Privacy Notice.
If you do not agree to the changes to this Privacy Notice, you should delete your LibreView Data Management System account by logging into your account via www.libreview.com and using the delete account functionality. See +Retention of Personal Information for more information.
Please note that any personal information, including health-related information provided to us by you directly through the LibreView Data Management System or provided to us by your health care provider, or shared by you with your health care provider via LibreView may be protected by the Health Insurance Portability and Accountability Act and its implementing regulations ("HIPAA"), and Abbott may use and disclose your personal information in accordance with our Abbott Diabetes Care Notice of Privacy Practices that is available on LibreView.
When you share your personal information, including health-related information, with us directly or with your health care provider through the LibreView Data Management System and you opt-in to receive marketing communications from Abbott, you are authorizing Abbott to use and disclose your personal information so that Abbott (or its affiliates) may send you advertising and marketing-related information about diabetes care or other products and services. You understand that once your information is disclosed pursuant to this authorization that it may be re-disclosed and may no longer be protected by HIPAA. You understand that neither Abbott nor your health care providers may condition your treatment, payment, insurance enrollment, eligibility for benefits on your choice to opt-in to receive marketing communications from Abbott. This authorization will remain in effect for so long as you share personal information with us directly or with your health care provider through the LibreView Data Management System account and opt-in to receive marketing communications. You understand that you may revoke this authorization at any time by opting out of receiving marketing communications by either clicking on the unsubscribe link at the bottom of marketing-related emails we send you, by changing your LibreView preferences, or by contacting us at DiabetesCareHIPAA@abbott.com, but that this revocation will only apply to the extent that we have not already taken action based on it.
Some functions within Abbott may operate as a "Covered Entity" pursuant to the Health Insurance Portability and Accountability Act and its implementing regulations ("HIPAA") and may use any patient personal information, including health information, that you provide to us directly or through the LibreView Data Management System for the purpose of improving treatment guidance for patients utilizing Abbott’s FreeStyle family of products and/or LibreLinkUp App, and/or LibreView. Abbott may use and disclose patient personal information, including health information, that is provided to us directly or through the LibreView Data Management System in accordance with our Abbott Diabetes Care Notice of Privacy Practices. For example, Abbott may share your personal information when your health care provider requests that the LibreView Data Management System send a report of your glucose data directly to their electronic medical record system.
If you choose to delete your LibreView Data Management System account, Abbott may also retain any patient personal information, including health-related information, that you provide to us directly or through the LibreView Data Management System for the purpose of improving treatment guidance for patients utilizing Abbott’s FreeStyle family of products, or LibreLinkUp App. See +Retention of Personal Information for more information.
Please contact DiabetesCareHIPAA@abbott.com with any questions about your HIPAA rights.
If you are a California resident, please also see section +California and Other States with Privacy Laws of this Privacy Notice.
California Civil Code Section 1798.83 permits residents of the State of California to request from certain businesses with whom the California resident has an established business relationship a list of all third parties to which the business, during the immediately preceding calendar year, has disclosed certain personally identifiable information for direct marketing purposes. Abbott is required to respond to a customer request only once during any calendar year. To make such a request you should send a letter to Abbott Diabetes Care Inc., Attn: Privacy Officer, 1420 Harbor Bay Parkway, Alameda, CA 94502, USA. In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California Privacy Rights requirements and only information sharing that is covered will be included in our response.
Depending on where you reside, you may have certain rights and choices (with certain limitations and exceptions) regarding our processing of your personal information in the event you provide your consent/authorization through our LibreView Data Management System. You can learn more about our collection and use of your personal information and specific data subject rights by visiting Abbott Privacy Policy | Abbott U.S..
The Public Information Access Agency, in its capacity as supervisory body of Act No. 25.326, has jurisdiction over all accusations and complaints made by those affected in their rights for infringements to regulations in force referred to the protection of personal information.
If you wish to make a complaint about a breach of the Privacy Act, the Australian Privacy Principle ("APPs") or a privacy code that applies to us, or if you have any queries or concerns about our Privacy Notice or the way we handle your personal information, please contact us using the details above and we will take reasonable steps to investigate and respond to you.
If after this process you are not satisfied with our response, you can submit a complaint to the Office of the Information Commissioner. See http://www.oaic.gov.au/privacy/privacy-complaints to obtain the relevant complaint forms, or contact the Information Commissioner’s office. We are not likely to disclose your personal information overseas, except as permitted by the Privacy Act 1988 (Cth), unless we otherwise advise you in writing. We may transfer your personal information to the United States. You consent to that disclosure and agree that by giving that consent, Australian Privacy Principle 8.1 no longer applies, and we are not required to take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information.
In case of updates to this Privacy Notice that require new collection of consent, you will be notified through the contacts you have provided us.
Consent: To process personal information concerning your health, you must provide Abbott affirmative consent to use the LibreView Data Management System. You may withdraw your consent at any time by logging into your LibreView Data Management System account via www.libreview.com and using the delete account functionality. See +Retention of Personal Information for more information.
Legal basis for the processing of your personal information: Abbott processes your information based on the following legal basis as set out in the Lei Geral de Proteção de Dados (LGPD):
Your rights: If you would like to exercise any of your rights set out in the section titled +How Individual Users can Access and Correct Personal Information and Your Rights and are contacting us by email, please title your email subject line accordingly (for example, "Correction Request" or "Access Request", or other right as applicable, in the subject line of the email.) We will do our best to respond to all reasonable requests in a timely manner, or at the very least, in accordance with any applicable legal requirements. You have the right to lodge a complaint with your local data protection authority if you are unhappy with any aspect of Abbott’s processing of your personal information.
Consent: To process personal information concerning your health, you must provide Abbott affirmative consent to use the LibreView Data Management System. You may withdraw your consent at any time by logging into your LibreView Data Management System account via www.libreview.com and using the delete account functionality. See +Retention of Personal Information for more information.
Legal basis for the processing of your personal information: Abbott processes your information based on the following legal bases as set out in the GDPR:
For Italy only – Where a GDPR Article 6 and a GDPR Article 9 lawful basis is referred to above, please refer only to the references to GDPR Article 9 for the lawful basis.
Data Protection Officer: The contact details of our European data protection officer along with other useful contact information are available at www.eu-dpo.abbott.com.
Your rights: If you would like to exercise any of your rights set out in the section titled +How Individual Users can Access and Correct Personal Information and Your Rights and are contacting us by email, please title your email subject line accordingly (for example, "Correction Request" or "Access Request", or other right as applicable, in the subject line of the email.) We will do our best to respond to all reasonable requests in a timely manner, or at the very least, in accordance with any applicable legal requirement. You have the right to lodge a complaint with your local data protection authority if you are unhappy with any aspect of Abbott’s processing of your personal information.
We may need to access and/or transfer personal information contained in the LibreView Data Management System, and in certain exceptional circumstances health-related information, as explained in +Cross-Border Transfers of Personal Information via a secure network from the United States of America to the extent necessary for us to provide you with technical support or to troubleshoot any LibreView Data Management System issues. Such cross-border transfers are only where required and on a case by case basis and are pursuant to the derogation set out in GDPR Article 49(1)(b) (or the respective provision in the Swiss data protection law where applicable) since the transfers are limited to those necessary for us to perform our contract with you for the provision of a LibreView Data Management System Individual User account. We also transfer diagnostic/troubleshooting data (including health-related data) to the United States as further described in +Diagnostics Data Use. Such cross-border transfers are only where required and on a case by case basis and are pursuant to the derogation set out in GDPR Article 49(1)(b) (or the respective provisions in the Swiss data protection law where applicable) since the transfers are limited to those necessary for us to perform our contract with you for the provision of a LibreView Data Management System Individual User account.
We also transfer personal information to the United States to comply with our legal obligations, as further described in +Cross-Border Transfers of Personal Information and +Medical Devices and other Legal Requirements. Such cross-border transfers are made pursuant to the derogation set out in GDPR Article 49(1)(d) (or the respective provisions in the Swiss data protection law where applicable) because it is in the public interest for Abbott to comply with its legal obligations.
Abbott has appointed the following local representatives in the EU, Switzerland and UK:
| Country | Representative name | Representative address |
|---|---|---|
| Austria | Abbott Gesellschaft m.b.H. | Perfektastraße 84A 1230 Vienna, Austria |
| Belgium Luxembourg | Abbott S.A. | Einstein 14, 1300 Wavre, Belgium |
| Czech Republic Croatia | Abbott Laboratories, s.r.o. | Prague 6 Hadovka Office Park Evropská 2591/33d, Prague 160 00, Czech Republic |
| Denmark | Abbott A/S | Emdrupvej 28 C DK – 2100 Copenhagen, Denmark |
| Finland | Abbott OY | Pihatorma 1AFIN 02240 ESPOO, Finland |
| France | Abbott France S.A.S | Batiment Florence, 3 Place Gustave Eiffel, Rungis 94518, France |
| Germany | Abbott GmbH | Max-Planck-Ring 2, 65205 Wiesbaden, Deutschland |
| Greece | Abbott Laboratories (Hellas) A.B.E.E.E. | Vouliagmesis Ave 512, 174 56 Alimos, Greece |
| Hungary | Abbott Laboratories (Hungary) Health Products and Medical Equipment Trading and Servicing Limited Liability Company | 1095 Budapest, Lechner Odon fasor 7, Budapest 1106, Hungary |
| Ireland | Abbott Laboratories, Ireland, Limited | 4051 Kingswood Drive, City West Business Campus, Dublin 24, Ireland |
| Italy | Abbott S.R.L. | Viale Giorgio Ribotta n.9, 00144 Roma, Italia |
| Netherlands | Abbott B.V. | Wegalaan 9, 2132 JD Hoofddorp, Nederland |
| Poland | Abbott Laboratories Poland Sp z.o.o. | ul. Postepu 21 b, 02-676, Warsaw, Poland |
| Portugal | Abbott Laboratorios, Limitada | da Alfragide 67, Alfrapark D, Amadora 2610-008, Portugal |
| Romania | Abbott Laboratories SA | Abbott Diabetes Care, Romania, Bucuresti 014459, sector 1, Floreasca Business Park, Calea Floreasca 169 A, Corp B, Romania |
| Slovakia | Abbott Laboratories Slovakia s.r.o. | Karadzicova 10, 821 08 Bratislava 2, Slovenska republika |
| Spain | Abbott Laboratories, S.A. | Costa Brava 13, 28034 Madrid, Spain |
| Sweden | Abbott Scandinavia AB | Hemvarnsgatan 9, 171 54 Solna, Sweden |
| Switzerland | Abbott Medical (Schweiz) AG | Neuhofstrasse 23, 6341 Baar, Switzerland |
| United Kingdom | Abbott Laboratories Ltd. | Abbott House, Vanwall Business Park, Vanwall Road, Maidenhead, Berkshire SL6 4XE, United Kingdom |
Your consent is required for Abbott to process your personal information generally. By accepting the terms of this Privacy Notice, you are deemed to have consented to the processing of your personal information as described herein. You may withdraw your consent at any time by logging into your LibreView Data Management System account via www.libreview.com and using the delete account functionality. See +Retention of Personal Information for more information.
References in this Privacy Notice to “country” include region.
Consent: To process personal information concerning your health, you must provide Abbott affirmative consent to use the LibreView Data Management System. For users who are under the age of 14, consent must be given by their guardian. You may withdraw your consent at any time by logging into your LibreView Data Management System account via www.libreview.com and using the delete account functionality. See +Retention of Personal Information for more information.
We are not legally required to obtain consent to collect or use your personal information including health related information under certain circumstances if the collection or use of your personal information including health related information is:
In addition to other rights you have under this Privacy Notice, you may have the following additional rights:
If you have questions or would like to exercise any of these rights in respect of your personal information including health related information, as set out in the Privacy Notice, please contact us at +Contact Us. We will do our best to respond to all reasonable requests in a timely manner, within fifteen (15) working days, in accordance with applicable legal requirements. We may charge a reasonable administrative fee for repeated requests within 3 months.
We may not process your requests if they are unreasonable or repetitive. We will not be able to carry out your request if:
Health-related information (such as those from your sensor, or reader, such as how often you scan or use your sensor, your use of readers, glucose targets, glucose values, insulin, logged food, logged exercise and other logged notes, sensor generation, and sensor started and ended information (where it is applicable) and the personal information of children under 14 are sensitive information, which is collected to provide a diabetes management service through our LibreView Data Management System and relevant mobile apps. Your failure to provide such information may cause your inability to use our service normally.
We have in place a comprehensive security program that complies in all respects with applicable law and industry practices to protect your personal information (including health related information). We will take all the commercially reasonable actions to ensure not to collect any personal information including health-related information irrelevant to the purposes as set out in this Privacy Notice, and will only retain your personal information (including health related information) within the retention period hereunder or a longer period as required by applicable laws. We will update and publish information about security risk, and personal information security impact assessment as required by applicable laws.
In the event that there is any security incident related to your personal information (including health related information), we will inform you in a timely manner as required by applicable laws by email, or other available contact methods about the following: general information about the incident and its possible impact, the remediation actions we have taken and will take, the actions to mitigate the risks and to remediate the impact. In the meantime, we may report such incident and the remediation actions to the regulatory agency as required.
As stated under the sections +Disclosure of Personal Information and +How You May Share Information with your Health Care Provider or Others, we may share your personal information including health-related information with third parties, where you have expressly asked us to do so, and/or provided consent or where permitted by applicable law.
Before sharing your personal information including health-related information with third parties, we will:
(a) inform you about the purpose of sharing personal information, the type of data recipient, and the possible consequences, and obtain prior consent from you;
(b) in addition to the content notified in (a), we will notify you of the content of sensitive personal information involved and the identity of the data recipient and its data security capability prior to the sharing of sensitive personal information.
Upon your consent, we may share your personal information, including your health-related information with our third party H2, Inc. ("H2S"), a digital diabetes coaching and diabetes management solution company based in Taiwan to power its mobile application for its users. As H2S’ mobile application user, by sharing your personal information, including health-related information stored in your LibreView Data Management System account, you may receive the below services from H2S where you are in H2S’ mobile application: automated coaching messages based on your personal information, including your health-related information and insights and guidance on how to change your behaviors around diet and exercise.
Your sensitive personal information that may be shared with H2S includes health-related information from your sensor device such as how often you scan or use your sensor, your use of device, glucose targets, glucose values, insulin, logged food, logged exercise and other logged notes; sensor generation, sensor started and ended information (where it is applicable);
Your access to and use of H2S’ mobile application is not governed by this Privacy Notice, but instead is governed by the Privacy Notice of H2S.
H2S has in place a comprehensive security program that complies in all aspects with applicable laws and industry practices to protect your personal information, including health-related information.
If there is any material change to this Privacy Notice, an updated version of this Privacy Notice will reflect those changes. You will be notified if there is a new version of this Privacy Notice and will be prompted to read and accept it so that you can continue to access and use your LibreView Data Management System account. Without prejudice to your rights under applicable law, we reserve the right to update and amend this Privacy Notice without prior notice to reflect technological advancements, legal and regulatory changes, and good business practices to the extent that it does not change how personal data is processed. If you do not agree to the changes to this Privacy Notice, you should delete your LibreView Data Management System account by logging into your account via www.libreview.com and using the delete account functionality. See +Retention of Personal Information for more information.
Personal information including health-related information generated and collected by us in China (excluding Hong Kong, Macau and Taiwan) is stored in China (excluding Hong Kong, Macau and Taiwan). Given that Abbott operates globally, your personal information may be transferred to and accessed by entities located outside of China (excluding Hong Kong, Macau and Taiwan), which is necessary for us to perform the de-identification of your personal information as required under applicable laws, or to perform our contract with you for the provision of a LibreView Data Management System account and relevant services, or to comply with the legal obligations . The types of personal information including health-related information that may be shared or transferred include any personal information including health-related information collected by LibreView Data Management System or provided to us by you or your guardians; and the recipients of your personal information including health-related information may include, but are not limited to, Abbott Laboratories Trading (Shanghai) Co., Ltd., located at F31, Ciro’s Plaza, 388 NanJing West Road, Shanghai P.R. China, and our parent company Abbott Labs located in the U.S.A. We will adopt necessary measures to ensure that the overseas recipients can provide the same level of protection to your personal information as required under the applicable Chinese laws. If your personal information is used for research, it is de-identified, pseudonymized, aggregated and/or anonymized, so that it does not identify you by name. Unless deletion is legally required or pursuant to user’s request, Abbott may retain any personal information, including health-related information, that you or your guardians provide to us through the LibreView Data Management System for the purpose of improving treatment guidance for your utilization of Abbott’s FreeStyle family of products, and/or LibreLinkUp App.
Contact Us: If you have any questions related to this Privacy Notice or if you would like to exercise any of your rights set out in this Privacy Notice including withdrawing your consent, please contact privacy@abbott.com
In all communications to us, please include a detailed explanation of your request or query. We will do our best to respond to all reasonable requests in a timely manner. We reserve the right to charge a reasonable fee to process an access request, as permitted under applicable laws.
We may also collect your gender and place of birth where applicable in your jurisdiction. It is important when you sign up for a LibreView Data Management System account that you select France as your country of residence as this will determine where your data is stored. If you have incorrectly identified a different country as your country of residence, do not complete the installation. Instead, return to www.libreview.com and click "Sign Up". The controller for your LibreView Data Management System account is Abbott Diabetes Care, Inc., 1420 Harbor Bay Parkway, Alameda, California 94502 United States. Our local representative is Abbott France (Diabétologie), S.A.S., Batiment Florence, 3 Place Gustave Eiffel, Rungis 94518, France. Abbott shares personal information for the purpose of invoicing telemedicine acts with its processor Lomaco et AGPS under the French social security system.
If you select Germany as your country of residence, any personal and health related information uploaded to the LibreView Data Management System will be stored on Amazon Web Services (AWS) servers in Germany. The controller for your LibreView Data Management System account is Abbott Diabetes Care, Inc., 1420 Harbor Bay Parkway, Alameda, California 94502 United States. Our local representative is Abbott GmbH, Max-Planck-Ring 2, 65205 Wiesbaden, Deutschland.
Personal Information Collection: This Privacy Notice also applies to the personal information, including health-related information, transferred to or share with us by third parties that may be providing services to you, where you have expressly asked such third parties to do so, or provided consent or where permitted by applicable law.
Disclosure of personal information by us: We may transfer and/or share your personal information including health-related information to/with third parties that may be providing services to you, where you have expressly asked us to do so, or provided consent or where permitted by applicable law.
Upon your request or where you have provided your consent, we may transfer and/or share your personal information, including your health-related information such as your name, mobile phone number (where it is applicable), date of birth, country, email address and health-related information scanned from your sensor, reader to /with H2, Inc. ("H2S"), a digital diabetes coaching and diabetes management solution company based in Taiwan and such personal information will be used to enable you to receive diabetes related services from H2S. It is voluntary for you to consent or refuse to consent to the transfer or sharing of such personal information but if you do not consent, you will not be able to receive services from H2S.
Direct Marketing: Abbott intends to use your personal information including your name, age range, mobile phone number, email address, address and country for direct marketing and advertising purpose including sending you information about diabetes care or other products and services, providing you with news and newsletters, or notifying you about special offers, promotions, events about Abbott and its products at any time if (where required by law) you opted-in to receive such communications. Abbott may not use your personal information for direct marketing unless your consent is obtained. You may communicate your consent via LibreView, or other online or offline channel provided by Abbott. You have the right to request Abbott to cease to use your personal information for direct marketing purposes.
Contact us: If you have any questions related to this Privacy Notice or if you would like to exercise any of your rights set out in this Privacy Notice or under the Personal Data (Privacy) Ordinance including notifying us that you no longer wish to grant your consent for direct marketing purpose, please contact privacy@abbott.com . Alternatively, you may send a letter to the following address:
Abbott Laboratories Limited
20F, AIA Tower, 183 Electric Road,
North Point, Hong Kong
(Attn: ADC Business Unit Head)
In all communications to us, please include a detailed explanation of your request or query. We will do our best to respond to all reasonable requests in a timely manner. We reserve the right to charge a reasonable fee to process an access request, as permitted under applicable laws.
Your LibreView Data Management System account will be considered to be inactive once there has been no activity on it for six (6) months. Abbott reserves the right to treat this inactivity as equivalent to a data subject request for personal data erasure.
By accepting or agreeing to this Privacy Notice, you consent to us contacting you electronically where required to notify you of any security event affecting your personal information. See +Retention of Personal Information for more information.
Personal Information Collection: This Privacy Notice also applies to the personal information, including health-related information, transferred to or shared with us by third parties that may be providing services to you, where you have expressly asked such third parties to do so, or provided consent or where permitted by applicable law.
Disclosure of personal information by us: we may transfer and/or share your personal information including health-related information to/with third parties that may be providing services to you or conducting specific research, where you have expressly asked us to do so, or provided consent.
H2 Inc.: Upon your request or where you have provided your consent, we may transfer and/or share your personal information, including your health-related information scanned from your sensor to /with H2 Inc. ("H2"), which is based in Taiwan and provides a smartphone application "SyncHealth", and such personal information will be used to enable you to receive diabetes related services from H2. It is voluntary for you to consent or refuse to consent to the transfer or sharing of such personal information but if you do not consent, you will not be able to receive services from H2. Your personal information which is transferred to and/or shared with H2 upon your request or consent shall be handled in accordance with H2’s privacy policy.
National Center for Global Health and Medicine/J-DREAMS: Where you have provided your consent, we may transfer and/or share your personal information, including your health-related information such as glucose value scanned from your sensor, reader and/or FreeStyle App with its time stamp and ID that will be assigned to you by your healthcare provider, to/with your healthcare provider that is participating in Japan Diabetes compREhensive database project based on an Advanced electronic Medical record System (“J-DREAMS”), and National Center for Global Health and Medicine (“NCGM”), a medical institution leading J-DREAMS. Your healthcare provider may invite you to share your information with J-DREAMS and it is voluntary for you to consent or refuse to consent to the transfer or sharing of such information. Your information which is transferred to and/or shared with your healthcare provider and NCGM for the purpose of J-DREAMS shall be handled in accordance with your healthcare provider’s and/or J-DREAMS’ privacy policy.
If you have any questions related to this Privacy Notice or if you would like to exercise any of your rights set out in the section titled +How Individual Users can Access and Correct Personal Information and Your Rights, please contact:
Abbott Laboratories (M) Sdn Bhd
Attention: Administrator (C/o ADC Dept)
No. 22, Jalan Pemaju U1/15, Seksyen U1, Hicom Glenmarie Industrial Park
40150 Shah Alam, Selangor.
Tel: +603 – 55663388
In all communications to Abbott, please include the email address used for registration (if applicable), the website address (if applicable), the specific FreeStyle family of products to which you have provided personal information and a detailed explanation of your request. We will do our best to respond to all reasonable requests in a timely manner.
Abbott Laboratories de México, S.A. de C.V. residing at Calzada de Tlalpan 3092, Colonia Ex Hacienda Coapa, Alcaldía Coyoacán, Mexico City, Postal Code 04980 is responsible for the treatment of personal data that is collected in accordance with the Federal Law on Protection of Personal Data in Possession of individuals. You can find more information about how we process your personal information for customer support purposes in the privacy policies relevant to your country of residence which can be accessed at https://www.diabetescare.abbott/worldwide-locations.html.
The section related to +Research does not apply to users located in Norway and Abbott will not conduct research with your personal information or health-related information.
If you have inquiries related to this privacy policy or how your personal data is processed, please e-mail us at ph-dataprivacy@abbott.com or send a letter to the following address:
Abbott LaboratoriesIf you reside in Russia, any personal information and health-related information uploaded to the LibreView Data Management System will be stored on servers within the territory of Russia.
The following Russian IT security requirements apply:
We have implemented the following administrative, physical and technical safeguards to:
To meet our contractual obligations to provide you with the LibreView Data Management System, your personal information and health-related information may be transferred to the US and/or Ireland.
You may have the right to exercise any other rights provided by the Russian data protection laws. To request the exercise of these rights, please contact us using any of the methods set out in the section titled +Contact Us.
If you have any questions related to this Privacy Notice or if you would like to exercise any of your rights set out in the section titled +How Individual Users can Access and Correct Personal Information and Your Rights, please contact:
Data Privacy Officer
3 Fraser Street #23-28
DUO Tower
Singapore 189352
ATTN: Data Protection Officer
sgdpo@abbott.com
In all communications to us, please include a detailed explanation of your request or query. We will do our best to respond to all reasonable requests in a timely manner. We reserve the right to charge a reasonable fee to process an access request, as permitted under the Personal Data Protection Act 2012.
If you have questions about your information, please contact us by sending a letter to the following address:
Abbott Laboratories South Africa (Pty) Ltd
Attention: OEC Department,
219 Golf Club Terrace
Constantia Kloof, Roodepoort
1709, South Africa
OR
Abbott Rapid Diagnostics (Pty Ltd)
Attention: OEC Department
Woodlands Office Park, Building 28,
20 Woodlands Drive, Woodmead,
2191, South Africa
In all communications to Abbott, please include the email address used for registration (if applicable), the website address or the specific FreeStyle family of products to which you have provided personal information and a detailed explanation of your request. We will do our best to respond to all reasonable requests in a timely manner.
The consent we requested from you as set out above is granted at your free will and you are not under any legal obligation to provide personal information to Abbott. However, if you elect not to provide your personal information, you will not be able to use the FreeStyle family of products and services described above.
DOC38902-006_rev-R_en-US