Clinician Privacy Policy
Australia/Ireland/India/New Zealand/Singapore/South Africa/United Kingdom
Welcome
Zimmer Biomet values your privacy and the protection of your Personal Data. This Zimmer Biomet Privacy Notice (‘Notice’) explains how we collect, use, share, transfer and process information collected from or about you (‘Personal Data’) (as defined further below) by any subsidiary or affiliate of Zimmer Biomet Holdings, Inc. (collectively ‘Zimmer Biomet’, ‘we’, ‘our’, or ‘us’).
The Zimmer Biomet subsidiary or affiliate with whom you, your Healthcare Provider, or your patient is interacting or who owns and operates the Product or Service is, where applicable, the entity responsible for the collection and use of your Personal Data (known in some jurisdictions as the data controller). A list of the data controllers and contact details can be found in the section ‘Contact Us’ and in Appendix 1 to this Notice.
Please carefully review this Notice. We will process any Personal Data we collect in accordance with applicable law and as explained in this Notice (unless, as explained below, a separate policy or notice governs). In some circumstances, if you do not want to provide us with your information, certain Products and Services may be unavailable to you. To the extent permitted by applicable law, by providing us your Personal Data or otherwise interacting with us, you are agreeing to this Notice. If you do not agree with our policies and practices, it is your choice not to use our Products and Services or otherwise engage with us.
If you provide Personal Data of anyone other than yourself, please note that you are responsible for complying with all applicable privacy and data protection laws prior to providing that information to Zimmer Biomet (including obtaining consent, if necessary and required).
Purpose of this Privacy Notice
This Notice describes the types of Personal Data that Zimmer Biomet may collect or process, how we may use and disclose that Personal Data, and how you may exercise any rights you may have regarding the processing of your Personal Data. This Notice applies to Personal Data collected or processed by us.
Some examples of instances where we collect Personal Data include:
- Through online activities and services we offer (through this and other websites, web surveys, newsletters, applications, online messaging services or channels, including online ‘chats’ with live individuals and artificial intelligence, social media, our telephone customer service centres, email or SMS/text messages and otherwise) (‘Online Services’).
- Through your account and our products or services, whether provided directly to you or your patient, or if you are a patient, through your doctor, hospital, medical treatment or scanning facility, or other healthcare provider (collectively, ‘Healthcare Provider’, which refers both to the Healthcare Provider institution, organisation, or company and individuals employed by or working for or with such organisation).
- In other situations where you interact with us, including but not limited to interacting with us by visiting our sites, offices, or our events (such as trade fairs and conferences) (‘Events’) (our Online Service, Events and other products and services are collectively referred to in this Notice as ‘Products and Services’).
- Related to activities we undertake in recruiting participants for participation in clinical trials or activities related to identifying and contracting with study investigators and their staff.
- In connection with adverse events, complaints and reports.
- When you interact with us in a professional capacity, for example, if you are a Healthcare Provider or an employee of a company we do business with or provide Products and Services to.
- When we undertake employment recruiting activities, or
- Anywhere this Notice is posted or referenced.
Zimmer Biomet may have other unique privacy notices that apply to certain specific situations, such as privacy notices for specific Products and Services. To the extent you were provided with a different privacy notice or policy that applies, those policies or notices will govern our interactions with you, not this one.
Personal Data, Collection, Purposes, Source and Recipients
Personal Data
‘Personal Data’ is any information – as electronically or otherwise recorded – that can be used to identify a specific individual or that we can link directly to an individual, such as name, address, email address, telephone number, credit card number, or health or treatment information, as applicable. Personal Data in some jurisdictions can include information that indirectly identifies a person – such as a unique number assigned to a patient by a Healthcare Provider, even absent other identifying information. Please note that, for patients, as described below, we often receive information about you from your Healthcare Provider.
Personal Data may include information considered sensitive in some jurisdictions, such as biometric information, genetic information, health information, financial account information, specific geolocation, ethnic or racial origin, information concerning your sex life or your sexual orientation, social security number, driver’s license number, state identification card number, passport number and other similar information. Personal Data that could be considered sensitive Personal Data under applicable law is indicated with a caret (^) in the chart below.
The below table is a high-level summary of the types of Personal Data we may collect from you. Following that high-level summary is additional detail and information on how we collect, process and use Personal Data and the potential sources and recipients of your Personal Data, now and over the past twelve months. Some jurisdictions require us to state the legal bases for processing your Personal Data, which is included below, but please note that not all jurisdictions may recognise all legal bases. The types of Personal Data we collect and disclose depends on your relationship with Zimmer Biomet. Not all the categories listed in the following charts may apply to you. If the nature of your relationship with Zimmer Biomet changes, additional categories of Personal Data may also apply.
Identity and Contact Information | Age, Gender and Other Characteristics | Video, Audio and Recorded Information | Technical Information | Health Information | Commercial and Financial Information | Professional and Educational Information | Anonymised / De-Identified Data | |
---|---|---|---|---|---|---|---|---|
Users of Online Services, Visitors to Our Websites and Physical Locations, and Senders of Enquiries | X^ | X^ | X | X | X^ | X | ||
Patients and Users of Medical Devices | X^ | X^ | X^ | X^ | X^ | X^ | X | |
Healthcare Providers | X^ | X^ | X | X | X^ | X^ | X | |
Employment and Apprenticeship Candidates | X^ | X^ | X | X | X^ | X | ||
Business Partners and Their Employees, Agents and Contractors | X^ | X^ | X | X | X^ | X^ | X | |
Attendees and Participants at Zimmer Biomet Events | X^ | X^ | X | X | X^ | X^ | X | X |
Clinical Investigators and Members of Investigator Teams | X^ | X^ | X | X | X^ | X^ | X | |
Clinical Study Candidates | X^ | X^ | X | X^ | X^ | X^ | X | X |
Children+ | X^ | X^ | X^ | X^ | X^ | X | X |
Personal Data that may be considered sensitive is noted with a ‘^’.
+ Zimmer Biomet may process Personal Data of minors who are users of a Zimmer Biomet product. In those instances, Zimmer Biomet seeks consent from the minor’s parents or legal guardians to process their Personal Data. Zimmer Biomet does not knowingly collect, maintain, disclose, or otherwise process Personal Data from minors below the age of 16 in other circumstances, including through Online Services.
Users of Online Services, Visitors to Our Websites and Physical Locations, and Senders of Enquiries We may process your Personal Data when you (1) visit, use, register for and/or engage with our Online Services; (2) sign up for our newsletters or other informational or marketing materials; (3) submit enquiries to us both online (e.g. via email, via chatbot) or offline (e.g. by written letters); (4) contact our customer service centres through phone, email, SMS/text messages, chats, or otherwise; (5) complete a survey or other online questionnaire or form; and/or (6) participate in Events. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio and Recorded Information, such as:
Technical Information, such as:
Anonymised / De identified Data |
|
|
|
|
Patients and Users of Medical Devices We may process your Personal Data when you are the existing or prospective patient of a Healthcare Provider who is a Zimmer Biomet customer and/or when you receive or use a Zimmer Biomet medical device (including, where applicable, mobile apps). |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio and Recorded Information, such as:
Technical Information, such as:
Health Information, such as:
Commercial and Financial Information, such as:
Anonymised / De identified Data |
|
|
|
|
Healthcare Providers We may process your Personal Data when you are a Healthcare Provider who is a current or prospective Zimmer Biomet customer, uses Zimmer Biomet Products and Services, or treats patients with Zimmer Biomet Products and Services, including use of Zimmer Biomet’s online portals. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio and Recorded Information, such as:
Technical Information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Product Usage Information, such as:
Anonymised / De identified Data |
|
|
|
|
Employment and Apprenticeship Candidates We may process your Personal Data when you apply or are a candidate for employment or apprenticeship at Zimmer Biomet. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Technical Information, such as:
Professional and Educational Information, such as:
Anonymised / De identified Data |
|
|
|
|
Business Partners and Their Employees, Agents and Contractors We may process your Personal Data when you are a current or former business partner or an employee, agent, or contractor of a Zimmer Biomet business partner, including collaboration partners, key opinion leaders and vendors, suppliers of Zimmer Biomet. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Technical information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Anonymised / De identified Data |
|
|
|
|
Attendees and Participants at Zimmer Biomet Events We may process your Personal Data when you attend or participate in professional and educational events or conferences we sponsor or hold. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio and Recorded Information, such as:
Technical Information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Anonymised / De identified Data |
|
|
|
|
Clinical Investigators and Members of Investigator Teams We may process your Personal Data if you are an existing or prospective clinical investigator or a member of an investigation team for a clinical study that Zimmer Biomet sponsors. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Visual, Audio and Recorded Information, such as:
Technical Information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Product Usage Information, such as:
Anonymised / De identified Data |
|
|
|
|
Clinical Study Candidates We may process your Personal Data to determine whether you qualify for or would be interested in participating in a clinical trial and when you have been identified as a potential candidate for clinical studies sponsored by us. If you are a participant in a clinical study or clinical trial, you should receive a separate privacy notice regarding the Personal Data we process for those purposes. That privacy notice – and not this Notice – governs our processing of such Personal Data once you are chosen for and participating in a trial. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Visual, Audio and Recorded Information, such as:
Technical Information, such as:
Health Information, such as:
Commercial and Financial Information, such as:
Anonymised / De identified Data |
|
|
|
|
Children Zimmer Biomet may process Personal Data of minors who are users of a Zimmer Biomet Product. In those instances, Zimmer Biomet seeks consent from the minor’s parents or legal guardians to process their Personal Data. Zimmer Biomet does not knowingly collect, maintain, disclose, or otherwise process Personal Data from minors below the age of 16 in other circumstances, including through Online Services or Interactions. The below relates solely to the use of Personal Data of children who are users of a Zimmer Biomet Product and whose parents or legal guardians have given consent. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Visual, Audio and Recorded Information, such as:
Technical Information, such as:
Health Information, such as:
Commercial and Financial Information, such as
Anonymised / De identified Data |
|
|
|
|
*The legal bases relied upon by Zimmer Biomet under the European Union’s General Data Protection Regulation (‘GDPR’) include those enumerated in Articles 6 and 9, depending on the type of Personal Data.
**In limited circumstances, recipients may include, (1) in the event of a sale, assignment, merger, consolidation, corporate reorganisation, or transfer, to the buyer, assignee, or transferee; and, (2) government or regulatory officials, law enforcement, courts, public authorities, or others when permitted by this Notice or required by law.
***This includes in the United States the removal of identifiers from protected health information required under the Health Insurance Portability and Accountability Act (HIPAA), 45 CFR § 164.514(b)(2), for such data to be considered de-identified. We will not attempt to re-identify you or anyone else from this de-identified data, and if we disclose it to third parties, we will require that they not attempt to re-identify you or anyone else from the de-identified data.
****Geolocation information may be either provided by you or collected automatically (see section ‘Marketing, Cookies and Analytics’). This information may include your IP address and/or geographic location (such as longitude, latitude, city, state, zip or postcode).
Selling and Sharing Your Personal Data
We allow certain third parties to collect information about the users of our Products and Services to provide valuable services to us, such as fraud detection and reporting, analytics and advertising services, including cross-contextual behavioural advertising. This may include sharing information about your interactions with our Products and Services, including information about videos you may watch in connection with our Products and Services and disease, treatment, Healthcare Provider, or other information searched for or viewed in connection with our Products and Services for the purposes of providing you with information and advertising related to your searches, queries, or other interactions with our Products and Services. These activities may be considered a ‘sale’ or ‘sharing’ under some laws. To opt-out of any sale or sharing of Personal Data, please contact us as described in the section below titled ‘Your Rights Regarding Your Personal Data’.
Marketing, Cookies and Analytics
To the extent permitted by law, including with your consent where required, we may engage in the following activities:
- We may use your contact details to contact you to determine whether you would like to initiate a business relationship with us or to send you marketing emails. You may unsubscribe from any marketing or promotional emails. To do so, please email us at websupport@zimmerbiomet.com or use the unsubscribe mechanism offered in our marketing emails or other communications, as applicable. Please note that if you already have requested our Products or Services when you decide to withdraw consent, a short period of time may elapse before we can update your preferences and ensure that we honour your request.
- We may collect Personal Data automatically through cookies and other technologies to provide functionality to our Products and Services; to recognise you across devices when using our Products and Services; in each case where this is justified under applicable data protection law for our legitimate business purposes or with consent, where required. These legitimate business purposes include evaluating information about the use of our Products and Services and identifying trends; developing or enhancing our Products and Services; providing an experience tailored to you when you use our Products and Services; effecting certain security controls; and, identifying the advertisements and offers we think may interest you so that we may display them to you when you use our Products and Services.
- We may display advertisements to you regarding Products and Services that we believe are relevant to you based on your activities while using our Products or Services or on other web or digital properties. Such advertisements may be shown to you while you are using our Products or Services or while you are using the online services of others. We achieve this by using and allowing third parties (including social media companies) to use certain cookies, eTags, pixels, web beacons and other tracking technologies such as Google Analytics to track your activities while using our Products or Services or while using other online services. For more information about these activities and how to manage or opt out of them, please see our Cookie Notice or contact us.
- We may make offers to you based on your activities or interactions with Zimmer Biomet that are not through online Products and Services (for example, regional offers based on the location of your office listed on order forms).
- We also perform statistical analyses of the users of our Products and Services to improve the functionality, content, design and navigation of the Products and Services, and to market the Products and Services.
You may be able to opt out of or revoke your consent to, as applicable, receiving web-based personalised advertisements from companies who are members of the Network Advertising Initiative by going to http://optout.networkadvertising.org/?c=1 or participate in the Digital Advertising Alliance Self-Regulatory Programme by going to http://www.aboutads.info/.
Public Interactive Features of our Websites
To the extent we offer any public or group forums on our Products or Services, such as news feeds, blogs, message boards, or similar tools (‘Interactive Features’), the posts or comments you make may be public and viewed by others. You should use care before posting information about yourself, including Personal Data. Because these are public postings, you should have no expectation of privacy or confidentiality in the content you submit to Interactive Features in connection with the Products and Services. Your disclosure of any Personal Data through the Interactive Features is at your own risk. Based on your disclosure of Personal Data through the Interactive Features we may use anonymised and/or de-identified data for which your individual personal characteristics have been removed such that you are not identified and the information is no longer considered Personal Data under data protection laws
Third Parties
Service Providers
Service providers or vendors (or processors) acting on our behalf must execute agreements requiring them to maintain confidentiality and to process Personal Data only to provide the services to us and in a way that aligns with this Notice, other applicable privacy notices and as explicitly permitted or required by applicable laws, rules and regulations.
Combination of Data
We may combine information we collect, whether Personal Data or not, with Personal Data that we may obtain from third parties, including Healthcare Providers and third-party data repositories such as data brokers.
Links to Other Websites
Our Products or Services may contain links to other websites, applications, products, or services that are not owned or operated by Zimmer Biomet, such as social media websites and applications like Facebook and Twitter. Such links do not imply an endorsement with respect to any third-party, any website, or the products or services provided thereby. You should carefully review the privacy policies and practices of other websites, products and services as we cannot control and are not responsible for privacy policies, notices, or practices of third-party websites, applications, products and services.
Safeguarding Information
Consistent with applicable laws and requirements, Zimmer Biomet has put in place physical, technical and administrative safeguards to protect Personal Data from loss, misuse, alteration, theft, unauthorised access and unauthorised disclosure, consistent with legal obligations and industry practices. However, as is the case with all websites, apps, products and services, we unfortunately are not able to guarantee security for data collected through our Products and Services. In addition, it is your responsibility to safeguard any passwords, identification or ID numbers, or similar individual information associated with your use of the Products and Services.
Your Rights Regarding Your Personal Data
Depending on where you live, you may have the following rights with respect to some or all of your Personal Data:
- To exercise the rights described under the section above titled ‘Selling and Sharing Your Personal Data’;
- To request information about whether and how we process your Personal Data;
- to request access to and a copy of your Personal Data including to provide your Personal Data directly to another organisation (called, in some locations, a right to data portability) (including under GDPR Articles 15 and 20);
- to request that we correct or update your Personal Data (including under GDPR Article 16);
- to request that we delete your Personal Data (including under GDPR Article17);
- to request that we restrict or block or to object to or opt-out of the processing of your Personal Data, including your sensitive Personal Data (including under GDPR Articles 18, 21 and 22), or to revoke your consent (including under GDPR Article 7);
- to appeal the denial of a request; and
- to lodge a complaint with the data protection authority in your jurisdiction.
To exercise these rights, appeal the denial of one of your requests, or make a complaint about how we process your Personal Data, please submit a request using the Privacy Request Form, write at privacy.global@zimmerbiomet.com or for the US only, call us at 1-844-922-2721. Alternatively, you can find the relevant contact details for your country of residence in the section ‘Contact Us’ and in Appendix 1 to this Notice.
Zimmer Biomet will not discriminate against you for exercising any of the rights described above, although we may not be able to continue to provide you with certain Products and Services or it may otherwise affect the way we are able to interact with you.
Please note that after receiving your request, we may require additional information from you or your authorised agent to honour your request and may deny your request if we cannot verify your identity or status. Please be aware that we may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
When we receive your Personal Data from others, including your Healthcare Provider, and process your Personal Data on their behalf, we may do so at their request and subject to their instructions. In that case, we do not have control over their privacy and security practices and processes. If your Personal Data has been submitted to us by a third-party, we may need to ask you to contact them directly or we may be able to contact them on your behalf. If we need you to contact them directly, we will let you know.
Transfer of Personal Data Across National Borders
Please be aware that Personal Data we collect and process may be transferred and maintained outside your state, province, country, or other jurisdiction, where the privacy laws may not be as protective as those in your location, including the United States. In particular, Zimmer Biomet may disclose Personal Data to the countries listed in Appendix 1, the list of data controllers. Zimmer Biomet has put in place lawful transfer mechanisms and appropriate safeguards, in accordance with applicable legal requirements, to protect your Personal Data, including but not limited to entering into agreements with third parties, such as service providers, to require them to adopt standards that ensure an equivalent level of protection for data as those we adopt.
Zimmer Biomet’s privacy practices, described in this Privacy Policy, comply with the APEC Cross Border Privacy Rules System. The APEC CBPR system provides a framework for organisations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework can be found here: www.cbprs.org.
Click here to view our certification/verification status.
Special Note for Individuals Located in Japan
If you are located in Japan, the following sections also apply to you:
Joint Use of Personal Data
Zimmer Biomet may use your Personal Data jointly with any subsidiary or affiliate of Zimmer Biomet Holdings, Inc. as described here. Personal Data subject to joint use: The personal information indicated in ‘Personal Data, Collection, Purposes, Source and Recipients’. Range of joint users: Zimmer Biomet Holdings, Inc., and its subsidiaries and affiliates (please refer to Appendix 1 for the specific names of the subsidiaries and affiliates). Joint users’ purposes of use: The purposes described in ‘Personal Data, Collection, Purposes, Source and Recipients’. Party responsible for managing your Personal Data: Zimmer Biomet Holdings, Inc.
Acquisition of Personally Referable Information:
Zimmer Biomet may acquire personally referable information (for example, browsing history, purchase history, service usage history, OS and other device information, cookie IDs, advertising identifiers, IP addresses and other online identifiers) obtained from other companies, such as advertising companies, affiliates and companies that are related to advertising things such as DMP companies, as Personal Data by linking it to the Personal Data that Zimmer Biomet already possess and use such personally referable information in accordance with the purposes of use described in ‘Personal Data, Collection, Purposes, Source and Recipients’.
Additional Notes for Mainland China
Processing Method
Personal Data may be processed in various methods including, without limitation, collection, storage, use, transmission, provision, disclosure and deletion, as stipulated under the Personal Information Protection Law of China (the PIPL).
The necessity of processing your sensitive Personal Data and the impact it has on your rights and interests
Our processing of your sensitive Personal Data described herein is necessary for:
- Providing Products and Service, and fulfilling other purposes described above in each different scenarios;
- Performing accounting, audit, internal investigations and other internal reviews;
- Complying with all applicable laws, legal processes and internal policies; and
- Otherwise accomplishing our business purposes and objectives.
Our processing of your sensitive Personal Data will not impact on your individual rights and interests as described in Section ‘Your Rights Regarding Your Personal Information’ of this Notice. These rights may be limited by law and regulations for certain purposes, including for the establishment, exercise, or defence of legal claims. Our processing of your sensitive Personal Data will be limited to the minimal level that is necessary to accomplish specific purposes as described above, and will be subject to the physical, technical and organisational measures for special data protection in accordance with the PIPL and other applicable Chinese data protections laws and regulations.
Zimmer Biomet has conducted necessary security assessment and privacy impact assessment for cross-border transfer for the collection and processing of your sensitive Personal Data in accordance with relevant Chinese data protection laws and regulations.
EU-U.S. Data Privacy Framework
Zimmer Biomet Holdings, Inc., in addition to all U.S. entities listed in Appendix 1 except CD Laboratories, Inc., complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Zimmer Biomet has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Zimmer Biomet has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF programme, and to view our certification, please visit https://www.dataprivacyframework.gov/.
Onward Transfer to Third Parties
Zimmer Biomet shall remain liable under the DPF Principles if its agent(s) processes Personal Data in a manner inconsistent with the DPF Principles, unless Zimmer Biomet proves that it is not responsible for the event giving rise to the damage.
Recourse, Enforcement and Liability
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Zimmer Biomet commits to resolve DPF Principles-related complaints about our collection and use of your Personal Data. EU, UK and Swiss individuals with enquiries or complaints regarding our handling of Personal Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Zimmer Biomet at: privacy.global@zimmerbiomet.com.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Zimmer Biomet commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgement of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Individuals may, under certain conditions, invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the above DPF mechanisms. For more information, please visit: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
The Federal Trade Commission has jurisdiction over Zimmer Biomet’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).
Marketing and Promotional Emails
You may unsubscribe from any marketing or promotional emails. To do so, please email us at websupport@zimmerbiomet.com or use the unsubscribe mechanism offered in our marketing emails or other communications, as applicable. Please note that if you already have requested our Products or Services when you decide to withdraw consent, a short period of time may elapse before we can update your preferences and ensure that we honour your request.
How Long Your Personal Data Will Be Retained
We generally retain Personal Data for as long as needed for the specific purpose or purposes for which it was collected or obtained and as outlined in this Notice. In some cases, we may be required to retain Personal Data for a longer period of time by law or for other necessary or required purposes. Whenever possible, we aim to de-identify or anonymise your Personal Data or otherwise remove some or all information that may identify you from records that we may need to keep for periods beyond the specified retention period. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject that affects the length of time we need to keep your Personal Data; and (iii) whether retention is determined to be necessary for Zimmer Biomet due to limitation periods, litigation, or other legal or regulatory obligations. Zimmer Biomet takes reasonable steps to dispose of Personal Data upon the expiration of retention periods, taking into consideration these litigation, legal, or regulatory obligations.
Special Note to Patients in the United States
If you are a U.S. patient, please note that this Notice is distinct from your Healthcare Provider’s HIPAA Notice of Privacy Practices, which describes how your Healthcare Provider uses and discloses individually identifiable information about your health that it collects, as well as any other privacy practices it applies. Zimmer Biomet collects, uses and discloses Personal Data it receives on behalf of your Healthcare Provider in accordance with your Healthcare Provider’s HIPAA Notice of Privacy Practices.
Changes to This Privacy Notice
This privacy notice is effective as of the date last updated, as indicated below. We may update this Notice from time to time without notice. As such, you should review this Notice periodically. Your continued interactions with us and/or the use of our Products and Services subject to this Notice constitutes your agreement to this Notice.
Contact Us
If you have any questions, including how to access this Notice in an alternative format or to obtain further information about the security measures described in ‘Safeguarding Information’, please email us at privacy.global@zimmerbiomet.com or write to us at Zimmer Biomet, Attn: Global Privacy Officer, 345 East Main Street, Warsaw, IN 46580, United States. You may contact the data protection officer directly at dataprotectionofficer@zimmerbiomet.com.
For more contact details for your country of residence, please refer to Appendix 1 to this Notice.
Updated: July 2024
Appendix 1 – List of data controllers and contact details for data protection questions or to exercise your rights regarding your personal information
Kingdom of Saudi Arabia/United Arab Emirates
Welcome
Zimmer Biomet values your privacy and the protection of your Personal Data. This Zimmer Biomet Privacy Notice (“Notice”) explains how we collect, use, share, transfer, and process information collected from or about you (“Personal Data”) (as defined further below) by any subsidiary or affiliate of Zimmer Biomet Holdings, Inc. (collectively “Zimmer Biomet,” “we,” “our,” or “us”).
The Zimmer Biomet subsidiary or affiliate with whom you, your Healthcare Provider, or your patient is interacting or who owns and operates the Product or Service is, where applicable, the entity responsible for the collection and use of your Personal Data (known in some jurisdictions as the data controller). A list of the data controllers and contact details can be found in the section “Contact Us” and in Appendix 1 to this Notice.
Please carefully review this Notice. We will process any Personal Data we collect in accordance with applicable law and as explained in this Notice (unless, as explained below, a separate policy or notice governs). In some circumstances, if you do not want to provide us with your information, certain Products and Services may be unavailable to you. To the extent permitted by applicable law, by providing us your Personal Data or otherwise interacting with us, you are agreeing to this Notice. If you do not agree with our policies and practices, it is your choice not to use our Products and Services or otherwise engage with us.
If you provide Personal Data of anyone other than yourself, please note that you are responsible for complying with all applicable privacy and data protection laws prior to providing that information to Zimmer Biomet (including obtaining consent, if necessary and required).
Purpose of this Privacy Notice
This Notice describes the types of Personal Data that Zimmer Biomet may collect or process, how we may use and disclose that Personal Data, and how you may exercise any rights you may have regarding the processing of your Personal Data. This Notice applies to Personal Data collected or processed by us.
Some examples of instances where we collect Personal Data include:
- Through online activities and services we offer (through this and other websites, web surveys, newsletters, applications, online messaging services or channels, including online “chats” with live individuals and artificial intelligence, social media, our telephone customer service centers, email or SMS/text messages, and otherwise) (“Online Services”);
- Through your account and our products or services, whether provided directly to you or your patient, or if you are a patient, through your doctor, hospital, medical treatment or scanning facility, or other healthcare provider (collectively, “Healthcare Provider,” which refers both to the Healthcare Provider institution, organization, or company, and individuals employed by or working for or with such organization);
- In other situations where you interact with us, including but not limited to interacting with us by visiting our sites, offices, or our events (such as tradeshows and conferences) (“Events”) (our Online Service, Events, and other products and services are collectively referred to in this Notice as “Products and Services”).
- Related to activities we undertake in recruiting participants for participation in clinical trials or activities related to identifying and contracting with study investigators and their staff;
- In connection with adverse events, complaints, and reports;
- When you interact with us in a professional capacity, for example, if you are a Healthcare Provider or an employee of a company we do business with or provide Products and Services to;
- When we undertake employment recruiting activities; or
- Anywhere this Notice is posted or referenced.
Zimmer Biomet may have other unique privacy notices that apply to certain specific situations, such as privacy notices for specific Products and Services. To the extent you were provided with a different privacy notice or policy that applies, those policies or notices will govern our interactions with you, not this one.
Personal Data, Collection, Purposes, Source and Recipients
Personal Data
“Personal Data” is any information – as electronically or otherwise recorded– that can be used to identify a specific individual or that we can link directly to an individual, such as name, address, email address, telephone number, credit card number, or health or treatment information, as applicable. Personal Data in some jurisdictions can include information that indirectly identifies a person – such as a unique number assigned to a patient by a Healthcare Provider, even absent other identifying information. Please note that, for patients, as described below, we often receive information about you from your Healthcare Provider.
Personal Data may include information considered sensitive in some jurisdictions, such as biometric information, genetic information, health information, financial account information, specific geolocation, ethnic or racial origin, information concerning your sex life or your sexual orientation, social security number, driver’s license number, state identification card number, passport number, and other similar information. Personal Data that could be considered sensitive Personal Data under applicable law is indicated with a caret (^) in the chart below.
The below table is a high-level summary of the types of Personal Data we may collect from you. Following that high-level summary is additional detail and information on how we collect, process, and use Personal Data and the potential sources and recipients of your Personal Data, now and over the past twelve months. Some jurisdictions require us to state the legal bases for processing your Personal Data, which is included below, but please note that not all jurisdictions may recognize all legal bases. The types of Personal Data we collect and disclose depends on your relationship with Zimmer Biomet. Not all of the categories listed in the following charts may apply to you. If the nature of your relationship with Zimmer Biomet changes, additional categories of Personal Data may also apply.
Identity and Contact Information | Age, Gender and Other Characteristics | Video, Audio, and Recorded Information | Technical Information | Health Information | Commercial and Financial Information | Professional and Educational Information | Anonymized / De-Identified Data | |
---|---|---|---|---|---|---|---|---|
Users of Online Services, Visitors to Our Websites and Physical Locations, and Senders of Inquiries | X^ | X^ | X | X | X^ | X | ||
Patients and Users of Medical Devices | X^ | X^ | X^ | X^ | X^ | X^ | X | |
Healthcare Providers | X^ | X^ | X | X | X^ | X^ | X | |
Employment and Apprenticeship Candidates | X^ | X^ | X | X | X^ | X | ||
Business Partners and Their Employees, Agents, and Contractors | X^ | X^ | X | X | X^ | X^ | X | |
Attendees and Participants at Zimmer Biomet Events | X^ | X^ | X | X | X^ | X^ | X | X |
Clinical Investigators and Members of Investigator Teams | X^ | X^ | X | X | X^ | X^ | X | |
Clinical Study Candidates | X^ | X^ | X | X^ | X^ | X^ | X | X |
Children+ | X^ | X^ | X^ | X^ | X^ | X | X |
Personal Data that may be considered sensitive is noted with a “^”.
+ Zimmer Biomet may process Personal Data of minors who are users of a Zimmer Biomet product. In those instances, Zimmer Biomet seeks consent from the minor’s parents or legal guardians to process their Personal Data. Zimmer Biomet does not knowingly collect, maintain, disclose, or otherwise process Personal Data from minors below the age of 16 in other circumstances, including through Online Services.
Users of Online Services, Visitors to Our Websites and Physical Locations, and Senders of Inquiries We may process your Personal Data when you (1) visit, use, register for, and/or engage with our Online Services; (2) sign up for our newsletters or other informational or marketing materials; (3) submit inquiries to us both online (e.g., via email, via chatbot) or offline (e.g., by written letters); (4) contact our customer service centers through phone, email, SMS/text messages, chats, or otherwise; (5) complete a survey or other online questionnaire or form; and/or (6) participate in Events. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio and Recorded Information, such as:
Technical Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Patients and Users of Medical Devices We may process your Personal Data when you are the existing or prospective patient of a Healthcare Provider who is a Zimmer Biomet customer and/or when you receive or use a Zimmer Biomet medical device (including, where applicable, mobile apps). |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio and Recorded Information, such as:
Technical Information, such as:
Health Information, such as:
Commercial and Financial Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Healthcare Providers We may process your Personal Data when you are a Healthcare Provider who is a current or prospective Zimmer Biomet customer, uses Zimmer Biomet Products and Services, or treats patients with Zimmer Biomet Products and Services, including use of Zimmer Biomet’s online portals. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio, and Recorded Information, such as:
Technical Information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Product Usage Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Employment and Apprenticeship Candidates We may process your Personal Data when you apply or are a candidate for employment or apprenticeship at Zimmer Biomet. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Technical Information, such as:
Professional and Educational Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Business Partners and Their Employees, Agents, and Contractors We may process your Personal Data when you are a current or former business partner or an employee, agent, or contractor of a Zimmer Biomet business partner, including collaboration partners, key opinion leaders, and vendors, suppliers of Zimmer Biomet. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Technical information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Attendees and Participants at Zimmer Biomet Events We may process your Personal Data when you attend or participate in professional and educational events or conferences we sponsor or hold. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Video, Audio, and Recorded Information, such as:
Technical Information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Clinical Investigators and Members of Investigator Teams We may process your Personal Data if you are an existing or prospective clinical investigator or a member of an investigation team for a clinical study that Zimmer Biomet sponsors. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Visual, Audio, and Recorded Information, such as:
Technical Information, such as:
Commercial and Financial Information, such as:
Professional and Educational Information, such as:
Product Usage Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Clinical Study Candidates We may process your Personal Data to determine whether you qualify for or would be interested in participating in a clinical trial and when you have been identified as a potential candidate for clinical studies sponsored by us. If you are a participant in a clinical study or clinical trial, you should receive a separate privacy notice regarding the Personal Data we process for those purposes. That privacy notice—and not this Notice— governs our processing of such Personal Data once you are chosen for and participating in a trial. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Visual, Audio, and Recorded Information, such as:
Technical Information, such as:
Health Information, such as:
Commercial and Financial Information, such as:
Anonymized / De-identified Data |
|
|
|
|
Children Zimmer Biomet may process Personal Data of minors who are users of a Zimmer Biomet Product. In those instances, Zimmer Biomet seeks consent from the minor’s parents or legal guardians to process their Personal Data. Zimmer Biomet does not knowingly collect, maintain, disclose, or otherwise process Personal Data from minors below the age of 16 in other circumstances, including through Online Services or Interactions. The below relates solely to the use of Personal Data of children who are users of a Zimmer Biomet Product and whose parents or legal guardians have given consent. |
||||
We process these types of Personal Data: | We obtain this Personal Data from: | We process this Personal Data for the following purposes: | We process this Personal Data under the following legal bases: | We may share this Personal Data with**: |
Identity and Contact Information, such as:
Other Personal Information, such as:
Visual, Audio, and Recorded Information, such as:
Technical Information, such as:
Health Information, such as:
Commercial and Financial Information, such as:
Anonymized / De-identified Data |
|
|
|
|
*The legal bases relied upon by Zimmer Biomet under the European Union’s General Data Protection Regulation (“GDPR”) include those enumerated in Articles 6 and 9, depending on the type of Personal Data.
**In limited circumstances, recipients may include, (1) in the event of a sale, assignment, merger, consolidation, corporate reorganization, or transfer, to the buyer, assignee, or transferee; and, (2) government or regulatory officials, law enforcement, courts, public authorities, or others when permitted by this Notice or required by law.
***This includes in the United States the removal of identifiers from protected health information required under the Health Insurance Portability and Accountability Act (HIPAA), 45 CFR § 164.514(b)(2), for such data to be considered deidentified. We will not attempt to reidentify you or anyone else from this de-identified data, and if we disclose it to third parties, we will require that they not attempt to reidentify you or anyone else from the de-identified data.
**** Geolocation information may be either provided by you or collected automatically (see section “Marketing, Cookies, and Analytics”). This information may include your IP address and/or geographic location (such as longitude, latitude, city, state, and/or zip code).
Selling and Sharing Your Personal Data
We allow certain third parties to collect information about the users of our Products and Services to provide valuable services to us, such as fraud detection and reporting, analytics, and advertising services, including cross-contextual behavioral advertising. This may include sharing information about your interactions with our Products and Services, including information about videos you may watch in connection with our Products and Services and disease, treatment, Healthcare Provider, or other information searched for or viewed in connection with our Products and Services for the purposes of providing you with information and advertising related to your searches, queries, or other interactions with our Products and Services. These activities may be considered a “sale” or “sharing” under some laws. To opt-out of any sale or sharing of Personal Data, please contact us as described in the section below titled “Your Rights Regarding Your Personal Data”.
Marketing, Cookies, and Analytics
To the extent permitted by law, including with your consent where required, we may engage in the following activities:
- We may use your contact details to contact you to determine whether you would like to initiate a business relationship with us or to send you marketing emails. You may unsubscribe from any marketing or promotional emails. To do so, please email us at websupport@zimmerbiomet.com or use the unsubscribe mechanism offered in our marketing emails or other communications, as applicable. Please note that if you already have requested our Products or Services when you decide to withdraw consent, a short period of time may elapse before we can update your preferences and ensure that we honor your request.
- We may collect Personal Data automatically through cookies and other technologies to provide functionality to our Products and Services; to recognize you across devices when using our Products and Services; in each case where this is justified under applicable data protection law for our legitimate business purposes or with consent, where required. These legitimate business purposes include evaluating information about the use of our Products and Services and identifying trends; developing or enhancing our Products and Services; providing an experience tailored to you when you use our Products and Services; effecting certain security controls; and, identifying the advertisements and offers we think may interest you so that we may display them to you when you use our Products and Services.
- We may display advertisements to you regarding Products and Services that we believe are relevant to you based on your activities while using our Products or Services or on other web or digital properties. Such advertisements may be shown to you while you are using our Products or Services or while you are using the online services of others. We achieve this by using, and allowing third parties (including social media companies) to use certain cookies, eTags, pixels, web beacons, and other tracking technologies such as Google Analytics to track your activities while using our Products or Services or while using other online services. For more information about these activities and how to manage or opt out of them, please see our Cookie Notice or contact us.
- We may make offers to you based on your activities or interactions with Zimmer Biomet that are not through online Products and Services (for example, regional offers based on the location of your office listed on order forms).
- We also perform statistical analyses of the users of our Products and Services to improve the functionality, content, design, and navigation of the Products and Services, and to market the Products and Services.
You may be able to opt out of or revoke your consent to, as applicable, receiving web-based personalized advertisements from companies who are members of the Network Advertising Initiative by going to http://optout.networkadvertising.org/?c=1 or participate in the Digital Advertising Alliance Self-Regulatory Program by going to http://www.aboutads.info/.
Public Interactive Features of our Websites
To the extent we offer any public or group forums on our Products or Services, such as newsfeeds, blogs, message boards, or similar tools (“Interactive Features”), the posts or comments you make may be public and viewed by others. You should use care before posting information about yourself, including Personal Data. Because these are public postings, you should have no expectation of privacy or confidentiality in the content you submit to Interactive Features in connection with the Products and Services. Your disclosure of any Personal Data through the Interactive Features is at your own risk. Based on your disclosure of Personal Data through the Interactive Features we may use anonymized and/or de-identified data for which your individual personal characteristics have been removed such that you are not identified and the information is no longer considered Personal Data under data protection laws
Third Parties
Service Providers
Service providers or vendors (or processors) acting on our behalf must execute agreements requiring them to maintain confidentiality and to process Personal Data only to provide the services to us and in a way that aligns with this Notice, other applicable privacy notices, and as explicitly permitted or required by applicable laws, rules, and regulations.
Combination of Data
We may combine information we collect, whether Personal Data or not, with Personal Data that we may obtain from third parties, including Healthcare Providers and third-party data repositories such as data brokers.
Links to Other Websites
Our Products or Services may contain links to other websites, applications, products, or services that are not owned or operated by Zimmer Biomet, such as social media websites and applications like Facebook and Twitter. Such links do not imply an endorsement with respect to any third party, any website, or the products or services provided thereby. You should carefully review the privacy policies and practices of other websites, products, and services as we cannot control and are not responsible for privacy policies, notices, or practices of third party websites, applications, products, and services.
Safeguarding Information
Consistent with applicable laws and requirements, Zimmer Biomet has put in place physical, technical, and administrative safeguards to protect Personal Data from loss, misuse, alteration, theft, unauthorized access, and unauthorized disclosure, consistent with legal obligations and industry practices. However, as is the case with all websites, applications, products, and services, we unfortunately are not able to guarantee security for data collected through our Products and Services. In addition, it is your responsibility to safeguard any passwords, identification or ID numbers, or similar individual information associated with your use of the Products and Services.
Your Rights Regarding Your Personal Data
Depending on where you live, you may have the following rights with respect to some or all of your Personal Data:
- To exercise the rights described under the section above titled “Selling and Sharing Your Personal Data”;
- To request information about whether, and how, we process your Personal Data
- to request access to and a copy of your Personal Data including to provide your Personal Data directly to another organization (called, in some locations, a right to data portability) (including under GDPR Articles 15 and 20);
- to request that we correct or update your Personal Data (including under GDPR Article 16);
- to request that we delete your Personal Data (including under GDPR Article17);
- to request that we restrict or block or to object to or opt-out of the processing of your Personal Data, including your sensitive Personal Data (including under GDPR Articles 18, 21 and 22), or to revoke your consent (including under GDPR Article 7);
- to appeal the denial of a request; and
- to lodge a complaint with the data protection authority in your jurisdiction.
To exercise these rights, appeal the denial of one of your requests, or make a complaint about how we process your Personal Data, please submit a request using the Privacy Request Form, write at privacy.global@zimmerbiomet.com or for the US only, call us at 1-844-922-2721. Alternatively, you can find the relevant contact details for your country of residence in the section “Contact Us” and in Appendix 1 to this Notice.
Zimmer Biomet will not discriminate against you for exercising any of the rights described above, although we may not be able to continue to provide you with certain Products and Services or it may otherwise affect the way we are able to interact with you.
Please note that after receiving your request, we may require additional information from you or your authorized agent to honor your request and may deny your request if we cannot verify your identity or status. Please be aware that we may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
When we receive your Personal Data from others, including your Healthcare Provider, and process your Personal Data on their behalf, we may do so at their request and subject to their instructions. In that case, we do not have control over their privacy and security practices and processes. If your Personal Data has been submitted to us by a third party, we may need to ask you to contact them directly or we may be able to contact them on your behalf. If we need you to contact them directly, we will let you know.
Transfer of Personal Data Across National Borders
Please be aware that Personal Data we collect and process may be transferred and maintained outside your state, province, country, or other jurisdiction, where the privacy laws may not be as protective as those in your location, including the United States. In particular, Zimmer Biomet may disclose Personal Data to the countries listed in Appendix 1, the list of data controllers. Zimmer Biomet has put in place lawful transfer mechanisms and appropriate safeguards, in accordance with applicable legal requirements, to protect your Personal Data, including but not limited to entering into agreements with third parties, such as service providers, to require them to adopt standards that ensure an equivalent level of protection for data as those we adopt.
Zimmer Biomet’s privacy practices, described in this Privacy Policy, comply with the APEC Cross Border Privacy Rules System. The APEC CBPR system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework can be found here: www.cbprs.org.
Click here to view our certification/verification status.
Special Note for Individuals Located in Japan
If you are located in Japan, the following sections also apply to you:
Joint Use of Personal Data
Zimmer Biomet may use your Personal Data jointly with any subsidiary or affiliate of Zimmer Biomet Holdings, Inc. as described here. Personal Data subject to joint use: The personal information indicated in “Personal Data, Collection, Purposes, Source and Recipients”. Range of joint users: Zimmer Biomet Holdings, Inc., and its subsidiaries and affiliates (please refer to Appendix 1 for the specific names of the subsidiaries and affiliates). Joint users’ purposes of use: The purposes described in “Personal Data, Collection, Purposes, Source and Recipients”. Party responsible for managing your Personal Data: Zimmer Biomet Holdings, Inc.
Acquisition of Personally Referable Information:
Zimmer Biomet may acquire personally referable information (for example, browsing history, purchase history, service usage history, OS and other device information, cookie IDs, advertising identifiers, IP addresses, and other online identifiers) obtained from other companies, such as advertising companies, affiliates, and companies that are related to advertising things such as DMP companies, as Personal Data by linking it to the Personal Data that Zimmer Biomet already possess and use such personally referable information in accordance with the purposes of use described in “Personal Data, Collection, Purposes, Source and Recipients”.
Additional Notes for Mainland China
Processing Method
Personal Data may be processed in various methods including, without limitation, collection, storage, use, transmission, provision, disclosure and deletion, as stipulated under the Personal Information Protection Law of China (the PIPL).
The necessity of processing your sensitive Personal Data and the impact it has on your rights and interests
Our processing of your sensitive Personal Data described herein is necessary for:
- Providing Products and Service, and fulfilling other purposes described above in each different scenarios;
- Performing accounting, audit, internal investigations and other internal reviews;
- Complying with all applicable laws, legal processes, and internal policies; and
- Otherwise accomplishing our business purposes and objectives.
Our processing of your sensitive Personal Data will not impact on your individual rights and interests as described in Section “Your Rights Regarding Your Personal Information” of this Notice. These rights may be limited by law and regulations for certain purposes, including for the establishment, exercise, or defense of legal claims. Our processing of your sensitive Personal Data will be limited to the minimal level that is necessary to accomplish specific purposes as described above, and will be subject to the physical, technical, and organizational measures for special data protection in accordance with the PIPL and other applicable Chinese data protections laws and regulations.
Zimmer Biomet has conducted necessary security assessment and privacy impact assessment for cross-border transfer for the collection and processing of your sensitive Personal Data in accordance with relevant Chinese data protection laws and regulations.
EU-U.S. Data Privacy Framework
Zimmer Biomet Holdings, Inc., in addition to all U.S. entities listed in Appendix 1 except CD Laboratories, Inc., complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Zimmer Biomet has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Zimmer Biomet has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
Onward Transfer to Third Parties
Zimmer Biomet shall remain liable under the DPF Principles if its agent(s) processes Personal Data in a manner inconsistent with the DPF Principles, unless Zimmer Biomet proves that it is not responsible for the event giving rise to the damage.
Recourse, Enforcement, and Liability
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Zimmer Biomet commits to resolve DPF Principles-related complaints about our collection and use of your Personal Data. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Zimmer Biomet at: privacy.global@zimmerbiomet.com.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Zimmer Biomet commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Individuals may, under certain conditions, invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the above DPF mechanisms. For more information, please visit: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
The Federal Trade Commission has jurisdiction over Zimmer Biomet’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).
Marketing and Promotional Emails
You may unsubscribe from any marketing or promotional emails. To do so, please email us at websupport@zimmerbiomet.com or use the unsubscribe mechanism offered in our marketing emails or other communications, as applicable. Please note that if you already have requested our Products or Services when you decide to withdraw consent, a short period of time may elapse before we can update your preferences and ensure that we honor your request.
How Long Your Personal Data Will Be Retained
We generally retain Personal Data for as long as needed for the specific purpose or purposes for which it was collected or obtained, and as outlined in this Notice. In some cases, we may be required to retain Personal Data for a longer period of time by law or for other necessary or required purposes. Whenever possible, we aim to de-identify or anonymize your Personal Data or otherwise remove some or all information that may identify you from records that we may need to keep for periods beyond the specified retention period. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject that affects the length of time we need to keep your Personal Data; and (iii) whether retention is determined to be necessary for Zimmer Biomet due to limitation periods, litigation, or other legal or regulatory obligations. Zimmer Biomet takes reasonable steps to dispose of Personal Data upon the expiration of retention periods, taking into consideration these litigation, legal, or regulatory obligations.
Special Note to Patients in the United States
If you are a U.S. patient, please note that this Notice is distinct from your Healthcare Provider’s HIPAA Notice of Privacy Practices, which describes how your Healthcare Provider uses and discloses individually identifiable information about your health that it collects, as well as any other privacy practices it applies. Zimmer Biomet collects, uses, and discloses Personal Data it receives on behalf of your Healthcare Provider in accordance with your Healthcare Provider’s HIPAA Notice of Privacy Practices.
Changes to This Privacy Notice
This privacy notice is effective as of the date last updated, as indicated below. We may update this Notice from time to time without notice. As such, you should review this Notice periodically. Your continued interactions with us and/or the use of our Products and Services subject to this Notice constitutes your agreement to this Notice.
Contact Us
If you have any questions, including how to access this Notice in an alternative format or to obtain further information about the security measures described in “Safeguarding Information”, please email us at privacy.global@zimmerbiomet.com or write to us at Zimmer Biomet, Attn: Global Privacy Officer, 345 East Main Street, Warsaw, IN 46580, United States. You may contact the data protection officer directly at dataprotectionofficer@zimmerbiomet.com.
For more contact details for your country of residence, please refer to Appendix 1 to this Notice.
Updated: July 2024