Privacy Notice
Updated: April 2024
1. Overview
Artivion, Inc. and its subsidiaries (collectively, “Artivion”, “we”, “our”, and “us”), are dedicated to partnering with surgeons to restore the health of patients by delivering innovative technologies of unsurpassed quality. In pursuit of this mission, Artivion processes personal data in a variety of ways.
This Notice explains how Artivion collects, uses, and discloses your personal data when we interact with you via our websites and in connection with the services and products we provide. This Notice also describes your rights concerning your personal data.
2. What is personal data?
“Personal data” means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
3. How does Artivion process personal data?
We collect or “process” personal data on our website automatically and when you voluntarily submit information to us. This personal data is processed for the purposes described herein or as otherwise permitted by law. We do not sell personal data to third parties.
The following sections set forth the categories of personal data that we may collect.
3.1. Automatic Collection of Personal Data Resulting from Web Protocols.
When you visit our website, we may automatically collect certain information about you from your web browser for technical reasons. This information may include:
- the type of web browser that you are using;
- the name of the domain from which you access the Internet;
- the Internet address of the website from which you linked directly to our site;
- the date and time you accessed our site;
- the pages you visited on our site; and/or
- information that has been de-identified.
We process this information for statistical and marketing purposes. The legal basis is our legitimate interest in ensuring the proper functioning of our website and improving our website services. We may also process your web server information in cooperation with your Internet service provider or local authorities to investigate and identify misuse. The legal basis for this processing is our legitimate interest in protecting our website, system, and users.
3.2. When you voluntarily submit an application, request, or contact form.
You may send us information about yourself through various forms on our website. For example, you may voluntarily submit information via a “Customer Service” request form, “Submit Your Story” form, “Physician Finder Request” form, “Newsletter Subscription Request”, “Like to Know More?” form, or on our recruiting and careers portal. We process this personal data to correspond with you. The legal basis for such processing is consent and the provisioning of our website services to you. The requested personal data on these forms may include:
- your name;
- address;
- email address;
- phone number;
- hospital or business name;
- other personal data included in the communication;
- your job history;
- surgical procedure information; and/or
- your healthcare story.
By submitting personal data, you agree to the use of such information, including any disclosures, processing, and transfers of your information to third parties by Artivion. Any consent you provide is voluntary. You may withdraw your consent at any time. If you do not accept this Notice, you should not submit any personal data to Artivion through this website or other sites we operate, or in connection with any of our services.
3.3. Through Cookies.
We, along with third parties who support our website, may automatically collect certain personal data from you using various technologies commonly referred to as “cookies.” Cookies are small pieces of data sent to and stored on your computer through your web browser. We may use cookies for the performance, enhancement, and operation of our website, to assess the performance of our website, and to enhance the functionality of our website for you. We may also use cookies to deliver content, including ads, on our sites or third-party sites. The information we collect using cookies is personal data that does not directly identify you.
You may decline our cookies. Please note that if you do so, some parts of our website may not work properly.
The legal basis for this processing is the provisioning of our website and other services to you and our legitimate interests in marketing our products and enhancing our website experience.
4. How long does Artivion store personal data?
We store personal data as necessary to fulfill the purpose of the collection or as permitted or required by law.
5. Does Artivion share my personal data with others?
We may share your personal data with vendors acting as data processors on our behalf for the purposes described in this Notice. Any vendor that we retain must follow our data protection requirements, and they are not allowed to use your personal data for any other purpose. We may also share your personal data to comply with a legal obligation or for a legitimate interest under applicable law.
6. Does Artivion respond to Do Not Track (“DNT”) signals sent by web browsers?
Artivion does not respond to DNT signals.
7. Will Artivion transfer my personal data outside of the European Union (“EU”)?
We may transfer personal data described in this Notice to a country outside the EU. We will only do so when we have a legal basis for the transfer and if the EU Commission has determined that the country’s laws provide an adequate level of data protection or if we have otherwise provided appropriate safeguards.
8. I live in the EU, what are my rights under the General Data Protection Regulation (“GDPR”)?
Depending on how and why we collected your data, you may have the following rights:
- Right of Access. You have the right to obtain from us access to your personal data.
- Right to Rectification. You have the right to obtain from us the rectification of inaccurate personal data about you.
- Right to Erasure or Restriction. You could have the right to obtain from us the erasure or restriction of processing of your personal data if, for example, there is no longer a legitimate purpose for processing the personal data and storage of the personal data is no longer required by law.
- Right to Data Potability. You could have the right to receive your personal data in a structured, commonly used, and machine-readable format or to transmit this personal data to another party.
- Right to Object. To the extent we process your personal data on the legal basis of our legitimate interests, you may object to our processing at any time. We have given a detailed description of our processing activities and the legal basis for each above. If you object, we will no longer process your personal data unless there are compelling and prevailing legitimate grounds for the processing of the personal data necessary for the establishment, exercise, or defense of a legal claim. If you object to such processing, please state the grounds for your objection so that We can examine the processing of your personal data and decide whether to adjust our processing accordingly.
- Right to Withdraw Consent. If you provided consent before we collected your personal data, you have the right to withdraw your consent, understanding that this withdrawal does not affect the lawfulness of any processing undertaken before you withdrew your consent.
- Right to File a Complaint. You have a right to file a complaint with the data protection supervising authority.
Should you wish to exercise your rights, please contact Artivion’s data protection officer at privacy@artivion.com. Artivion will not discriminate against you for exercising your rights.
9. I am a California resident; what are my rights under California law?
Depending on how and why we collected your data, you may have the following rights:
Your exercise of these rights will not have any adverse effect on the price and quality of our products or services. Artivion provides employee information to external parties for routine HR functions and benefits, as well as for routine business purposes. Artivion provides applicant information to external parties for routine background checks during the hiring process. Employees and applicants receive additional information during the hiring and onboarding process.
As defined by the California Privacy Rights Act (“CPRA”), Artivion does not “sell” or “share” employee information.
Should you wish to exercise your rights, please contact Artivion’s data protection officer at privacy@artivion.com. Artivion will not discriminate against you for exercising your rights.
10. I do not live in California or the EU; what are my data protection rights?
In accordance with applicable law, you may have the right to request that Artivion delete, correct, or provide you with access to or information about your personal data that we collected from you and retained – subject to certain exceptions. Artivion will consider all requests for access, deletion, correction, appeal, objection, etc. of your personal data that we collected and retained. Artivion will not discriminate against you for exercising your rights.
Artivion recognizes your rights under the following non-exhaustive list of data protection acts, policies, and regulations: Lei Geral de Protecao de Dados (“LGPD”) in Brazil, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) in Canada, the Australian Privacy Act (“APA”), the Personal Data Protection Bill (“PDPB”) in India, the Personal Data Protection Decree (“PDPD”) of Vietnam, the Connecticut Data Privacy Act (“CTDPA”), Utah’s Consumer Privacy Act (“UCPA”), Virginia’s Consumer Data Protection Act (“VCDPA”), Colorado’s Privacy Act (“CPA”), and Delaware’s Personal Data Privacy Act (“DPDPA”). Should you wish to exercise your rights, please contact Artivion’s data protection officer at privacy@artivion.com.
11. Does Artivion collect the personal data of children?
We do not knowingly collect personal data from children under the age of thirteen (13) without verifiable parental consent. If you become aware that a child provided us with personal data without parental consent, please contact us at privacy@artivion.com. If we become aware that a child under the age of thirteen (13) provided us with personal data without parental consent, we will take steps to delete such personal data as soon as possible.
12. How does Artivion ensure website security?
Artivion takes reasonable steps to protect your personal data from loss; misuse; and unauthorized access, disclosure, alteration, or destruction.
13. How is my privacy protected when I use links provided by Artivion to outside websites?
Our website contains links to websites that Artivion does not operate. This Privacy Notice does not apply to these websites. We provide these links for your convenience, but we do not review, control, or monitor the privacy practices of websites operated by others. Artivion is not responsible for the performance of these sites or your business dealings with them. Your use of any other websites is subject to the terms and conditions of those websites, including the privacy policies of those websites.
14. Will Artivion make changes to this Privacy Notice?
Artivion may change this Privacy Notice and encourages you to review this Notice each time you visit the website or provide personal data.
15. Who may I contact about this Privacy Notice or other privacy issues?
If you have a question, concern, or request regarding Artivion’s control or processing of your personal data, or should you wish to exercise your rights under the GDPR, CCPA, or another data protection law, please contact Artivion’s data protection officer at privacy@artivion.com. Please note that we may ask you to verify your identity before acting upon your request.