Data Protection Information for the Use of the Medela Training Platform “Medela University” 

Protecting your privacy is important to us. Therefore, we would like to provide you with the following information.

1. Entity responsible for data processing and contact details (controller)

Medela AG (hereinafter referred to as "Medela")

Lättichstrasse 4b

6340 Baar

Switzerland

privacy@medela.com

2. Purpose of processing your personal data

The processing of your personal data is based on your freely given consent, which you can withdraw at any time without consequences (so-called revocation). Your personal data, which you provide to us as part of this registration, will be processed by Medela exclusively for the purpose of processing your registration for the use of educational content provided by Medela on Medela University.

All personal data collected will be processed exclusively for the purposes mentioned above. They are neither processed automatically nor analyzed in relation to personal aspects (profiling).

3. Types of personal data
  • ·       Contact details (first name, last name, e-mail, ZIP code, state, country, )

    ·       Job-related data (job title, organization/facility, License number)

4. Recipients or categories of recipients

Your registration for the use of the Training Platform is made through the LearnUpon Limited (registered company number 503858) trading as LearnUpon, whose registered office is at First Floor Ocean House, Arran Quay, Dublin 7, D07 DHT3, Ireland.

Medela has entered into an agreement with LearnUpon to ensure that your personal data is adequately protected. LearnUpon may not disclose your personal data to unauthorized third parties or use your personal data for purposes other than as instructed.

Furthermore, Medela may use cloud service providers located in countries outside Switzerland, the UK and the EU/EEA, including the USA, to host and process your personal data for storage, communication and support purposes. While the laws of those countries may not provide for the same level of data protection as considered adequate in Switzerland, the UK or the EU/EEA, we have taken the necessary measures to ensure your personal data will be handled and protected appropriately and only be processed on our behalf and in accordance with our instructions.

5. Location and duration of the storage of your personal data

Your personal data is stored on Amazon Web Services facilities in Dublin, Ireland. and will be deleted after the completion of the final work of the event.

6. U.S. State Law Requirements

Some U.S. state privacy laws such as the California Consumer Privacy Act (CCPA) and Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA) and the Connecticut Personal Data Privacy and Online Monitoring (2022 S.B.6) require specific disclosures for state residents. State laws like the CCPA, VCDPA, CPA and 2022 S.B.6 also provide the right to request information about how we collect, use and disclose your information. These laws also provide the right to request deletion or anonymization. Medela does not discriminate against individuals for exercising these privacy rights. For further information regarding these laws, please click the links below.

Medela’s Privacy Notice for California Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of California.

Medela’s Privacy Notice for Virginia Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Virginia.

Medela’s Privacy Notice for Colorado Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Colorado.

Medela’s Privacy Notice for Connecticut Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Connecticut.

7. Medela Does Not Sell Personal Data

Medela have not sold any Personal Data and we do not intend to sell any Personal Data in the future. If we change this intent, we will update this Privacy Notice accordingly. “Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information. 

From time to time we may collect “Sensitive Personal Information” (SPI).  SPI includes, but is not limited to, racial origin, religious beliefs, sexual orientation, ethnicity, religion, genetic data, private communications, specified health information and precise geolocation. We do not sell SPI or utilize automated decision making.

8. Your rights / how to contact us

Right to access personal data: You have the right to request and receive information on the personal data collected on you or processed or, where applicable, shared with third parties.

Right to rectification: You have the right to have any inaccurate personal data corrected.

Right to erasure ("right to be forgotten"): You have the right to have your personal data deleted – for example, if your personal information is no longer required for the original purpose it was collected – subject to statutory retention obligations. 

Right to restrict data processing: You have the right to request the restriction of the processing of your personal data, for example if the processing is unlawful or the accuracy of your personal data is contested.

Right to data portability: You have the right to receive a copy of the personal data you have provided us. You can request to have your personal data transmitted to you or, where technically feasible, to another data controller of your choice.

Right to object: You have the right to object to having your personal data processed for certain purposes or to withdraw your consent to such processing. 

Please note that in exceptional cases, your right to exercise the above rights may not be guaranteed due to statutory or regulatory requirements.

If you would like to exercise any of the above rights, please use our Privacy Request Webform.

For US residents: Click here

For any other state residents: Click here

Please note that any email requests will not be processed. 

In case of any questions about the collection, processing and/or use of your personal information, please email us at privacy@medela.com

To file an official complaint, please contact the data protection authority in your jurisdiction (For Switzerland:Federal Data Protection and Information Commissioner / Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, EDÖB for the EU and EEA, the current list of National Data Protection Authorities, members of the European Data Protection Board, can be found here for the UK: Information Commissioner's Officer - ICO