Privacy Statement – California Consumer Privacy Act
Novocure may collect certain information related to the Company’s interactions with prospective patients, commercial patients, clinical patients, Health Care Professionals (”HCPs”), third party vendor/suppliers and Novocure employees.
Depending on the type of interaction, as listed above Novocure may have collected the following categories of information over the past 12 months:
Category | Data Elements | Examples/Definition |
Identifiers | Name | First and last name |
Address | Home address | |
Phone Number | Phone Number | |
Unique Government identifier | National identification number, passport number, tax ID number, driving license number, unique government identifiers | |
Customer Identification (Patient Identifier) | Internal Novocure Patient ID | |
Physical Identity | Photographs, date of birth, weight, height, gender | |
Data concerning family and relatives | Name of spouse, names of children, names of partners, birth name, date of birth of family members, place of birth of family members, date of marriage, date of contract of cohabitation, number of children | |
Image recording | Films, photographs, video recordings, digital photos | |
Personal information categories listed in California Customer Records statute (Cal. Civ. Code Sec. 1798.80(e))
|
Personal health insurance information | Previous and current health insurance information for individuals, regulatory reporting for employees for health insurance, employee personal insurance benefits information |
Health data (Novocure created) | Array map | |
Health data (not created by Novocure) | Blood pressure, diagnoses, examination results, assessments by treating physicians, treatment and/ or interventions, bio-medical state, prescription information, MRI used to create array map | |
Disability Information | Mental health state, physical health state | |
Income Information | Salary data, salary statements, data on total income situation, payment overview, family income, income tax declaration | |
Protected classification characteristics under California or federal law
|
Cultural Identity | Nationality |
Racial or Ethnic Origin | Ethnicity, race, skin color, family information | |
Commercial information | Customer goods and services | Order details, invoice number, details of goods and services provided, reminder / debt collection |
Bank Information | Information in order to pay for services | |
Transaction details | Orders, contracts, complaints, error analysis | |
Bank Account | Account number, bank details, card security code, expiry | |
Credit/Debit Card Numbers | Account/ Card number, bank details, card security code, expiry | |
Biometric information | Biometric Data | Fingerprints, retina/ iris scan, voice recognition, facial images |
Internet or other similar network activity | Online Identifier | Internet protocol address, cookie identifier, browsing history |
Professional or employment-related information
|
Education | Academic title, education path, training courses, certifications |
Professional/Career | Career history, employer and position, occupation code / type of activity, periods of unemployment, military service | |
Recruitment data | Hiring date, hiring method, hiring source, trial period, Date of departure, reasons for leaving, termination granted, conditions for the termination of the contract, applications (CV, application letter, date of application), employment history | |
Employment contract data | Personnel number, employee status, contract components | |
Operational classification (job function) | Employee group, post, organization unit, cost center, function, degree, specialization, working modalities and conditions, previous functions | |
Account Data | Payroll, commissions, bonus, employee participation, collective agreement, wage tax data (Procedure, exemption, deduction amounts, commuter allowance), social insurance data (social insurance number, social insurance benefits) | |
Criminal Information (background checks) | Criminal offences and conviction data (confirmed and suspected) | |
Presence Data | Working time regulation, time recording (overview of presence), motives for absence, projects, working hours, hours worked, holiday, absence data | |
Personnel administration | Other personal data: e.g. disciplinary measures, incidents and complaints (bullying) |
Novocure does not currently collect information from any of the following categories:
Novocure obtains the categories of personal information lists above from the following sources:
Novocure may use the personal information it collects for one or more of the following business purposes:
Novocure does not use personal information it collects for materially different purposes without providing prior notice.
Novocure only shares personal information for business purposes consistent with those listed in this notice. Novocure ensures that any external parties comply with applicable policies, written agreements and data protection laws when receiving or otherwise accessing personal information on Novocure’s behalf. Novocure may share any of the personal information identified above externally with the following with a legitimate business purpose to the personal information:
Novocure enters into data process agreements and/or business associate agreements (as applicable) with external parties and only permits personal information to be shared if reasonable and if appropriate steps have been taken to maintain the privacy and security of the information. Personal information is only shared for reasons consistent with the purposes for which the personal information was originally collected or other purposes authorized by law.
Novocure does not sell any personal information.
NOTE: The following rights and choices may not apply to all information listed here in this notice, for example Protected Health information. In addition, some rights may not apply to employees of Novocure.
You have the right to request that Novocure disclose certain information to you about its collection and use of your personal information over the past 12 months, including:
You have the right to request that Novocure delete any of your personal information that it collected from you and retained. Novocure may deny your deletion request if retaining the information is necessary for Novocure, its affiliates, or representatives to:
California Consumers have the right to opt-out of the sale of Personal Information by a business that sells Personal Information. Novocure does not sell any Personal Information of California Consumers.
To exercise the access, data portability and deletion rights described above, you may submit a verifiable consumer request to us by either:
Your request must provide sufficient information that allows us to reasonably verify you are the person about whom Novocure collected personal information or an authorized representative. You must describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.
Consumers may use an authorized agent to submit their request. The authorized agent must be registered with the California Secretary of State and be authorized to submit requests on behalf of a consumer. If you are an authorized agent and a consumer has given you signed permission to submit a request on his or her behalf, please send a copy of your signed permission by the consumer to Novocure. Failure to submit proof of signed permission may result in Novocure denying the consumer’s request. Novocure will require the consumer to verify his or her identity and directly confirm with Novocure that the consumer has provided you with permission to submit the request.
Novocure will not discriminate against you for exercising any of your CCPA rights. You will not be:
Novocure reserves the right to amend this privacy notice at its Discretion and at any time. When changes are made to this notice, it will be updated and available on the Novocure website homepage.