We at Glooko Inc. (“Glooko”) and Novo Nordisk Inc. (“Novo Nordisk”) (jointly “we,” “us,” “our”) respect your concerns about privacy. We know that you care about how your personal information is used and shared, and we take your privacy seriously.
In addition to the other transfers described below, users with preexisting Cornerstones4Care online accounts also consent to the transfer of any data entered into such Cornerstones4Care online accounts to Glooko for the purposes of prepopulating data fields within the App to expedite the configuration process, and otherwise enhancing the user experience within the App.
The App is made available to assist you in monitoring your blood glucose levels as well as tracking other data associated with managing diabetes. In order to use the App, you must register for the App.
2. What Personal Information does Glooko collect and for what purpose?
3. Glooko’s sharing of Personal Information with Novo Nordisk and Novo Nordisk’s use of Personal Information
a) What information is shared with Novo Nordisk?
b) How does Novo Nordisk use your Personal Information?
c) Does Novo Nordisk share your Personal Information with third parties?
d) How long does Novo Nordisk store your Personal Information?
e) How does Novo Nordisk keep your Personal Information safe?
f) What are your rights specifically related to the sharing of your Personal Information with Novo Nordisk and Novo Nordisk’s use of your Personal Information?
g) Novo Nordisk’s contact information
4. Does Glooko share the Personal Information with anyone other than Novo Nordisk?
5. What about links to other third party sites and services?
6. How does Glooko keep your Personal Information safe?
7. What Personal Information stored by Glooko can I access?
8. What rights and choices do I have in relation to Glooko’s collection and use of your Personal Information?
9. Will I be notified of changes to your privacy practices?
10. How do I request access or changes/deletion of/ to Personal Information stored by Glooko?
11. How do I request alternate communication methods from Glooko?
12. Who can I contact with a privacy question to Glooko?
2. WHAT PERSONAL INFORMATION DOES GLOOKO COLLECT AND FOR WHAT PURPOSE?
The information Glooko collects from you enables Glooko to (i) personalize and improve the App in collaboration with Novo Nordisk, including sharing Personal Information with Novo Nordisk, (ii) operate Glooko’s in-clinic offerings and MyGlooko web portal (“Glooko’s Other Services”), (iii) allow you to set up an account and profile for the App, (iv) provide you with information, updates, offers and other communications related to the App and Glooko’s Other Services, (v) analyze and report on the results of the App in an aggregate manner, and (vi) support your use of the App and Glooko’s Other Services. Glooko collects the following types of information from you:
a. Personal Information You Provide to Glooko:
Glooko receives and stores any information you enter in connection with the App or provide to Glooko in an authorized way. The types of Personal Information that are collected include your name, email address, password, phone number, IP address, mailing address, gender, age, weight, height, photograph, food, health and well-being related information (including without limitation blood glucose monitor readings and other sensitive medical information), type of glucose meter, continuous glucose monitor and exercise device you use. If you have purchased or have received any Glooko Hardware (such as Glooko’s MeterSync Blue device) and are using it in connection with the App, Glooko will also collect the Lot number of such Product. You can choose not to provide Glooko with certain information, but then you may not be able register with Glooko or take advantage of all of the App’s functionalities. You can choose to enable the Bluetooth Low Energy (BLE) syncing feature in the App in order to background sync your devices while the App is closed and to eliminate the need for manual syncing. BLE syncing collects your device and health data from a connected device for use in the App. The Android version of the App requires you to grant location permission in order to sync with BLE supported devices. Your location data will be collected in order to sync with BLE supported devices. Glooko does not store or use location data generated by your use of the BLE syncing feature.
If you complete an online form on glooko.com or you engage with Glooko Support, you will be asked to include Personal Information about yourself in order to help resolve your issue. You understand that providing your Personal Information over the Internet involves some risk and understand that in order to receive the support you are requesting, you are accepting that risk.
Please note that Glooko may use and share aggregated and anonymized data derived from your information, but not in a manner that would readily identify you personally:
b. Personal Information Collected Automatically:
Glooko receives and stores certain types of information whenever you interact with the App.
Generally, the App automatically collects usage information including the number and frequency of download of and visitors to the App, and its components, and how you interact with and use the App. Glooko only uses this data in aggregate form, that is, as a statistical measure, and not in a manner that would identify you personally. This type of aggregate data enables Glooko to figure out how parts of the App are used so that the App can be improved and made useful for as many users as possible.
c. E-mail and Text Message Communications:
3. GLOOKO’S SHARING OF PERSONAL INFORMATION WITH NOVO NORDISK AND NOVO NORDISK’S USE OF PERSONAL INFORMATION
a. What information is shared with Novo Nordisk?
b. How does Novo Nordisk use your Personal Information?
Novo Nordisk is using your Personal Information for its own purposes, independently of Glooko. Novo Nordisk’s uses include (i) providing you with and improving the App in collaboration with Glooko, (ii) analysis, research and studies for the purpose of gaining insights and knowledge in order to improve medical care and develop additional offerings (either similar to the App or in other formats) for you and others with similar conditions in the future, (iii) analysis for the purpose of gaining insights and knowledge about how the App interacts and operates together with other Novo Nordisk products (e.g. Novo Nordisk insulin injection pens) in order to improve both Novo Nordisk products and the App, and (iv) supporting your use of the App, including providing you with information, updates and offers and other communications related to the App.
c. Does Novo Nordisk share your Personal Information with third parties?
Novo Nordisk may share your Personal Information with service providers that work on its behalf for the purposes described above. These service providers are contractually restricted from using the Personal Information that is shared with them beyond what is necessary to provide their services or as otherwise required by law.
Novo Nordisk may also share your Personal Information with independent third parties that Novo Nordisk may collaborate with in order to develop future offerings for other patients or users, including those with similar conditions as you.
When Novo Nordisk shares your Personal Information with such independent third parties, it will be pseudonymised (deidentified), which means that it will not have your name included in the information. It will also not include your address, telephone number or anything else that directly identifies you. The goal of this pseudonymisation (deidentification) process is to make it difficult to link the information to you without having access to an identification key. Novo Nordisk will endeavor to keep the identification key confidential at all times and will not deliberately share it with the third parties.
Protection of Novo Nordisk and Others: Novo Nordisk may release Personal Information when it believes in good faith that the release is necessary to comply with law, necessary for the establishment, exercise or defense of legal claims, or otherwise necessary for reasons of substantial public interest. This may include exchanging information with other companies and organizations for fraud protection and credit risk reduction.
Except as outlined above, Novo Nordisk will not intentionally share your Personal Information with anyone else without your express consent unless Novo Nordisk is required to do so by law.
d. How long does Novo Nordisk store your Personal Information?
Novo Nordisk will keep your Personal Information for as long as you are registered as a user of the App. Thereafter, Novo Nordisk will continue to retain the information in accordance with applicable laws for as long as necessary to fulfill the purposes described in section 3b above (“For what purposes is Novo Nordisk using your Personal Information?”).
Novo Nordisk may also seek to anonymize your Personal Information (i.e., to alter your information so that it can no longer be identifiable). Such “Anonymized Data” may be retained indefinitely and used for a variety of purposes.
e. How does Novo Nordisk keep your Personal Information safe?
Novo Nordisk makes an effort to keep your Personal Information safe and private, although complete security can never be guaranteed. Novo Nordisk will maintain administrative and technical safeguards to protect against unauthorized disclosure, use, alteration and destruction of the personal information in our possession. Novo Nordisk is committed to providing appropriate security controls to protect personal information Novo Nordisk has about you against foreseeable hazards. Unauthorized entry or use, hardware or software failure, and other factors, may however compromise the security of your information at any time. Your Personal Information will be stored electronically in the databases of Novo Nordisk’s business partners located in the United States (US) and other countries worldwide, which are processing your Personal Information on its behalf.
Novo Nordisk may need to transfer your Personal Information outside the US, including to the European Union (EU) or other countries that may not have data protection laws which are as detailed as the laws in the US, but will under such circumstances take any measures required to ascertain an adequate level of protection, including the use of standard contractual clauses or binding corporate rules.
f. What are your rights specifically related to the sharing of your Personal Information with Novo Nordisk and Novo Nordisk’s use of your Personal Information?
You are entitled to request access to your Personal Information being stored and used by Novo Nordisk (including copies of the suitable safeguards taken for any third country transfer); to require it to be corrected if it is inaccurate; or, under certain circumstances to require that it is erased. If required by applicable law you may also request a copy of your Personal Information and that your Personal Information is transferred to another data controller, provided this is technically feasible.
You are also entitled to restrict Novo Nordisk’s use of your Personal Information and at any time to withdraw your consent to Glooko’s sharing of your Personal Information with Novo Nordisk. If you wish to do so, please use the contact information provided below. If you withdraw your consent you have the right to have your data erased. This will not affect the lawfulness of processing based on consent before its withdrawal.
If you change your mind and withdraw your consent, you may, however, no longer be able to use the App, as Glooko and Novo Nordisk are providing you the Service in collaboration.
g. Novo Nordisk’s contact information
If you have any questions about Novo Nordisk’s collection, storing, or use of your Personal Information, you can contact Novo Nordisk at: NNIPrivacy@novonordisk.com
Novo Nordisk Inc.
800 Scudders Mill Road
Plainsboro, NJ 08536
4. DOES GLOOKO SHARE THE PERSONAL INFORMATION WITH ANYONE OTHER THAN NOVO NORDISK?
In addition to sharing your Personal Information with Novo Nordisk, Glooko may share your Personal Information with other third parties as described below:
Agents: Glooko may share your Personal Information with service providers that work on its behalf in order to provide you with and to improve the App in collaboration with Novo Nordisk. These service providers are contractually restricted from using the Personal Information that is shared with them beyond what is necessary to provide their services or as otherwise required by law.
With Your Consent: Except as set forth above, you will be notified when your Personal Information may be shared with third parties, and in general, you will be able to prevent the sharing of this information.
5. WHAT ABOUT LINKS TO OTHER THIRD PARTY SITES AND SERVICES?
6. HOW DOES GLOOKO KEEP YOUR PERSONAL INFORMATION SAFE?
Your Glooko account Personal Information is protected by a password for your privacy and security. You need to prevent unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer, mobile device, and browser by signing off after you have finished accessing your account.
Glooko will take steps to keep your Personal Information safe and private. However, Glooko cannot guarantee the security of such information. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of your information at any time.
7. WHAT PERSONAL INFORMATION STORED BY GLOOKO CAN I ACCESS?
Glooko allows you to access certain categories of information about you for the purpose of viewing, and in certain situations, updating or deleting that information. These categories may change as the App changes. Any information that is automatically uploaded from a Product to the App cannot be later changed or updated. Certain information is required to fully utilize the functionalities of the App, so your deletion of certain information, or provision of inaccurate information, may render the App inoperable, in whole or in part. Please note that Glooko may use aggregate data derived from your information after you have requested it be modified or deleted, but not in a manner that would readily identify you personally.
8. WHAT RIGHTS AND CHOICES DO I HAVE IN RELATION TO GLOOKO’S COLLECTION AND USE OF YOUR PERSONAL INFORMATION?
As stated previously, you can opt not to disclose, or allow to be disclosed, certain information to Glooko, even though it may be needed to take advantage of certain features of the App or to register for the App.
You are able to add or update certain information within the App. When you update information, however, Glooko often maintains a copy of the unrevised information in Glooko’s private records. As mentioned above in Section 7 (“What Personal Information Stored by Glooko Can I Access”), deleting or modifying information may render the App inoperable, in whole or in part.
1. HOW DO I REQUEST ACCESS OR CHANGES/DELETION OF/TO PERSONAL INFORMATION STORED BY GLOOKO?
Glooko offers email-based and online support tools. You may access support resources or contact our support by visiting https://www.glooko.com/support/.
1. HOW DO I REQUEST ALTERNATE COMMUNICATION METHODS FROM GLOOKO?
You may contact our support department to make this request by visiting https://www.glooko.com/support/ and clicking on “Contact Support.”
1. WHO CAN I CONTACT WITH A PRIVACY QUESTION TO GLOOKO?
PP 0002 Rev A
Effective Date: 3/26/2021