Privacy & Cookie Policy

1.1 Anonymous Usage of our Website

You are welcome to visit our Website while remaining anonymous and without revealing any of your personal data by using one of the opt-out mechanisms described herein.

However, when you first visit our Website we will display a cookie banner informing you how we will be placing cookies on your device and tracking your website usage behavior. This helps us to better understand how our customers use our Website and to improve our website offering and services, which includes providing you with a more personalized website experience and targeted offers. In case you have registered on our Website, including but not limited to by registering for “The Mom’s Room” or “Join our Community” or otherwise provided your consent on our Website to receive marketing communications (see Section 2 below), we will use such website usage information also to provide you with more personalized communications reflecting your specific interests and preferences. Please see Sections 2.2, 2.4 and 2.5 below for a detailed description of the cookies and website analysis tools we use for this purpose and your rights to change your choices.

If you do not agree with the above practices and wish to remain fully anonymous, you can choose not to provide your consent, or withdraw your consent with effect for the future, by using the opt-out mechanisms available (see Sections 2.2, 2,3, 2.4 and 2.5 below). In this case, we will only collect certain anonymous information which does not directly relate to your person. For example, we may collect the number of visitors to our Website, browsing patterns and areas of interest. We analyze this information to understand how our customers use our Website, and to assess trends, statistics and our customers’ needs, which helps us improve our Website and better serve our customers.

Other than as indicated above, we will only collect your personal data if you voluntarily decide to share such information with us, such as by sending an  inquiry (via email, chat or other means) or requesting a specific service. Unless you have provided your explicit consent, and unless indicated otherwise in this Policy, we will use the personal data that you have shared with us only as necessary for enabling your use of our Website, handling your requests and providing the requested services or goods. Apart from that, we may use any personal data we receive only in anonymized form (i.e., in a non-personally identifiable form which does not allow for any conclusions as to your identity) for statistical purposes and for internal evaluation to improve our products and services. Your data will not be processed for other purposes or beyond the scope of this Policy, except where expressly permitted or required by applicable law.

1.2  Website Consent and Registration

In using our Website or by registering on our Website, we may ask for your consent to receive marketing communications.  For example, you may register on our Website for “The Mom’s Room” or “Join our Community” or you may register your Medela breast pump. When doing so we will ask you for your consent to send you marketing communications. By providing your consent, you agree to receive marketing communications from Medela and other third parties and you agree to us sharing your personal information with third parties for marketing purposes.  As part of your consent, we may personalize the content of these marketing communications according to your needs and interests based on other information we receive and store from you, such as your account information, order history, or other information revealed by you (including, for instance, data from your usage of our MyMedela Breastfeeding App or from your participation in surveys). We will also use information about your website usage to provide you with personalized communications which reflect your specific interests and preferences.

By consenting to marketing communications on our Website, you further consent that your receipt of communications from Medela, such as email-opens and email-clicks, may be tracked by Medela using an analytics tool provided by our third party service providers. This tool also collects information about email-forwarding, undeliverable emails and unsubscribes.

Our service providers will process your information as our data processor only on our behalf and in accordance with our instructions to help us evaluate the usage of our Website and email communications, to personalize the communications to you, to compile reports on activity and to provide other statistical and analytical services relating to the usage of our Website and email communications.

While these service providers may be located in a country which may not provide for the same level of data protection as considered adequate in the United States of America (USA), we have taken the necessary measures to ensure your personal data is appropriately protected if being transferred outside of the USA.

You can unsubscribe from our Website at any time, and withdraw your consent with effect for the future, by clicking the "unsubscribe" link at the bottom of the newsletter emails you received or on our Website within the account profile.

2.1 Essential cookies

2.1 Essential Cookies

Cookies are small text files that our Website asks to place on your computer or other internet enabled devices, such as tablets or smartphones. If your browser is set to accept cookies, then your browser adds the text in a small file.

Except as indicated otherwise in this Policy, the cookies used by us are essential for the functioning and performance of our Website, such as by making our website work more efficiently and facilitating your use of the functionalities and services. We will not use the information stored in essential cookies for any other purpose than as strictly necessary to provide you with the services and functionalities requested.

2.2 Cookie Consent and Personalized Tracking

By accessing our Website, you agree to us placing additional cookies on your device ("Cookie Consent") and consent to cross device tracking. These cookies will not be strictly necessary for the functioning and performance of our Website but will help us to collect some of your personal data relating to your website usage behavior in order to improve our website offering and services and/or to provide you with more personalized information and services, including targeted offers (see below Sections 2.4 and 2.5 for the corresponding cookies placed for website analysis and remarketing purposes). If you have registered for our Website or otherwise given your consent (see Section 1.2 above), we will use such website usage information to provide you with more personalized communications reflecting your specific interests and preferences. By accessing our Website, you further agree to the placement of cookies for enabling the services of third party marketing providers.

Your continued use of our Website will signify your consent to the described practices.

The wording of the cookie banner declaration can be viewed at the bottom of this Policy. We explain the categories of non-essential cookies that may be placed on your device and their respective purposes in the context of the different services further below (see Sections 2.4, 2.5 and 3). At all times, you have the right to withdraw your Cookie Consent and individually opt-out of the placement of cookies and any collection of your information for the different purposes at any time with effect for the future, as further explained in Sections 2.3, 2.4, 2.5 and 3 below.

2.3 Managing your cookie settings

Most browsers are initially set to accept cookies. If you prefer, you can change your settings to generally refuse cookies, to delete cookies that have already been placed on your device, or to warn you before a cookie is placed. Please refer to your browser instructions or to www.aboutcookies.org or www.allaboutcookies.org to learn more about how to adjust or modify your browser settings.

If you choose not to accept cookies, this may impair the usability of the Website and you may not be able to take advantage of some of our features and services offered.

If you use different devices to access our Website (e.g., smartphone, tablet, computer, etc.) you will need to ensure that each browser on each device is adjusted to reflect your cookie preferences.

2.4 Use of Google Universal Analytics

This Website uses Google Universal Analytics ("Google Analytics"), a web analytics service provided by Google LLC  (“Google”). Google Analytics uses cookies to help us analyze how users use our Website, including the number of visitors to our Website, the websites our visitors have come from, and the pages they visit. This information is used by us to improve our Website offers and services. As a rule, any information generated by the cookie about your use of our Website will be transmitted to and stored by Google on servers in the United States.

Google will use this information as our commissioned data processor to help us evaluate the use of our Website, to compile reports on website activity and to provide other statistical and analytical services relating to usage of our Website. We use the Google anonymization function to change the last digits of your IP address. However, if you are logged in e.g. with a Google account, Google will be able to revoke the anonymization. In any event, Medela will never receive this information and cannot revoke the anonymization.

You may prevent the collection of data generated by the cookie about your use of this Website (including your IP address) and opt-out of being tracked by Google Analytics across all websites by downloading and installing a browser-plugin which is available here.

In this case, an opt-out cookie will be placed on your browser that prevents any further tracking of your use of this Website by Google Analytics. Please remember that you will have to opt-out again if you delete all cookies stored on your device.

You will also have to opt-out for each device you use to visit our Website.

For an overview of privacy at Google, please click here.

2.5 Use of Google Analytics Advertising Features

Depending on the pages you visit on our Website, we may further use certain Google Analytics Display Advertising features, such as demographics & interest reporting and remarketing features.

To enable these features, a third party DoubleClick Cookie will be placed on your device by Google (when you visit certain pages of our Website or websites from other publishers that have implemented advertising features based on the DoubleClick Cookie).

The DoubleClick Cookie stores information about your use of our Website (and eventually other websites visited in the Google advertising network), including the sites visited, ad views, page views, user interaction data, browser information, IP-address, a cookie ID, and your search history. Google will not link your name or other personally identifiable information to your DoubleClick cookie without your prior consent.

We use Google Analytics to analyze the data stored in the DoubleClick Cookie in order to obtain statistical reports on our user's demographics (age, gender) and interests. These reports help us to better understand our users and to improve our Website and services.

In addition, we use Google Analytics' remarketing features to run advertising campaigns (including Google AdWords) to users of our Website. Based on their prior visits to our Website (and their interests expressed during those previous sessions), these users will be delivered relevant targeted advertising when they browse other sites in the Internet within the Google Display Network. We may also use the Google Analytics Advertising features to help us measure the effectiveness of advertising campaigns.

Please further note that the DoubleClick Cookie also enables Google and other third party vendors to serve targeted advertising (based on your prior visits to our Website and/or other sites on the Internet). These ads may be shown on websites of Google and/or other publishers participating in the Google advertising network.

You can manage your preferences and opt-out of Google's interest-based ads in your Google Ads Settings. In this case, the unique cookie ID of the DoubleClick-Cookie is overwritten and can't be associated with a particular browser. Please note that a new DoubleClick-Cookie might be placed if you delete all cookies from your device and you may have to renew your opt-out settings.

If you would like to permanently deactivate the DoubleClick-Cookie please download and install the browser-plugin which is available here.

You can further opt-out of third-party vendors' use of cookies for online advertising at the US-based aboutads.info.choices page or the EU-based Your Online Choices page.

For an overview of privacy at Google, please click here.

This Website uses Google Maps ("Google Maps"), a map service provided by Google to display interactive maps. To provide you with the maps requested, Google will collect your IP-address, which can be transmitted to and stored by Google on servers in the United States. Google may further collect information about your usage of Google Maps. Please note that Medela does not control the collection, storage and use of any such information by Google and does not have any access to the information collected. You should read Google's privacy policy carefully before you use any Google Maps features. Google's privacy policy can be found here.

When you use Google Maps on our Website you agree to be bound by Google's Terms of Use, which can be found here.

If you do not wish Google to be able to collect any information about your use of Google Maps, you may prevent the collection of such information by disabling the Google Maps service entirely. In order to do so, you need to deactivate JavaScript within your browser settings. Please note that in this case you cannot use Google Maps at all.

Medela may conduct surveys and contests on this Website. Unless indicated otherwise, Medela will collect, process and use your personal data revealed by you for purposes of participating in these surveys or contests only as necessary to carry out the respective survey or contest and to provide you with personalized marketing communications. We will inform you prior to your participation about what information we will collect and how we intend to use the information collected.

Our survey and contest forms are often generated by using third party service providers. We have appropriate agreements in place to make sure that our service providers will collect and process your information only on our behalf and in accordance with our instructions.

In case you decide to use other services offered by us, such as by using our Medela Family App or by using any of our websites (as available under www.medela.com/en-us/, www.medela.com, www.medela.de, www.medela.ch, www.medelabreastfeedingus.com and/or other Medela websites (each including any subpages)), we may create one single record for you which combines the data we receive from you through your use of these other services with the data we receive from you through your use of the Website.

This single record helps us to better understand your needs and preferences in order to more efficiently provide you with the requested products and services, including enabling you to benefit from a more personalized experience.

We will not use such data for providing you with direct marketing communications, except where you have given your express prior consent (such as in the course of your Website or App registration). Other than as indicated in this Policy, we will not use the information for any other purposes or share the information with third parties, except where expressly permitted by you or required by applicable law.

6.1 Medela is operating the Website as data controller. However, to ensure the customer relationship with you is handled efficiently, and to provide you with a good customer experience, your customer relationship will be managed on local level also by the Local Group Company. The Local Group Company will be responsible for the related collection, processing and use of your personal data also as data controller. For instance, Medela may share your personal data with the Local Group Company where this is necessary to answer specific requests or inquiries submitted by you through our Website, to provide you with the services requested, or where otherwise necessary to handle the customer relationship with you. For these purposes, the Local Group Company will be granted with access to your personal data stored by Medela and will collect, store, process and use such personal data on local level for the above purposes.

6.2 In addition, Medela and/or the Local Group Company may use external service providers which are authorized to provide services on its behalf and in accordance with its instructions. These entities may have access to your personal data but only to the extent necessary to enable your use of our Website, provide related goods or services, handle your requests or inquiries or provide marketing communications as described in this Policy. For instance, Medela (and/or, as applicable, the Local Group Company) may use service providers to host our Website, store your personal data, send you marketing communications or analyze the information collected as explained in Section 2. These service providers may not disclose your personal data to any unauthorized third parties or use your personal data for any purposes other than as instructed. For further information about our service providers, please contact us as further explained in Section 11 below.

6.3 Other than as indicated above, we will not provide your personal data to any third party without your prior consent, unless we are compelled by law to do so.

Your data will be stored on servers in Switzerland and the USA. In addition, Medela and/or, as applicable, the Local Group Company may use cloud service providers located in countries outside Switzerland, the EU/EEA, and the USA to host and process your personal data for storage, communication and marketing purposes. While the laws of those countries may not provide for the same level of data protection as considered adequate in Switzerland or the EU/EEA, we have taken the necessary measures to ensure your personal data will be handled and protected appropriately and only be processed on our behalf and in accordance with our instructions.

We will treat your personal data confidential. We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized disclosure or access, alteration, misuse, accidental or unlawful destruction or loss.

To the extent that you are a U.S. citizen and may disclose “protected health information” as defined under U.S. law while accessing or using our Website, please refer to our HIPAA Privacy Policy and Notice of Privacy Practices to understand your rights and how we may use and disclose your protected health information.

In the preceding twelve (12) months, we have not sold any Personal Data. We do not intend to sell any Personal Data in the future. If we change this intent, we will update this Privacy Notice accordingly. “Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information. 

From time to time we may collect “Sensitive Personal Information” (SPI).  SPI includes, but is not limited to, racial origin, religious beliefs, sexual orientation, ethnicity, religion, genetic data, private communications, specified health information and precise geolocation. We do not sell SPI or utilize automated decision making.

Some U.S. state privacy laws such as the California Consumer Privacy Act (CCPA) and Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA) and the Connecticut Personal Data Privacy and Online Monitoring (2022 S.B.6) require specific disclosures for state residents. State laws like the CCPA, VCDPA, CPA and 2022 S.B.6 also provide the right to request information about how we collect, use and disclose your information. These laws also provide the right to request deletion or anonymization. Medela does not discriminate against individuals for exercising these privacy rights. For further information regarding these laws, please click the links below.

Medela’s Privacy Notice for California Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of California.

Medela’s Privacy Notice for Virginia Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Virginia.

Medela’s Privacy Notice for Colorado Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Colorado.

Medela’s Privacy Notice for Connecticut Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Connecticut.

You may have rights pursuant to your local data protection and privacy laws to request that we disclose to you all personal information that we have about you, request the correction, deletion and/or blocking of your personal information, object to the processing of your personal information for legitimate reasons, or request an electronic copy of your personal data for purposes of transmitting it to another company (data portability).

You may further at any time, with effect for the future, withdraw any consent you have given. For this purpose, please make use of the opt-out mechanisms provided for the different services (please see the respective descriptions in the corresponding Sections of this Policy) or, with respect to your Website registration, you can change your opt in status by logging into your profile on our Website.   

In case of any questions about the collection, processing and/or use of your personal information, please email us at privacy@medela.com.  

To exercise your privacy rights, please complete the privacy request webform based on your location:

• For US residents ONLY: Please use the US Privacy Request Form
• For China residents ONLY: Please contact Medela China Customer Service
• All other countries: Please use this Privacy Request Form

We reserve the right to make changes to this Policy at any time. The then current version of this Policy will be made available on the Website. While we do not intend to make changes to this policy very often, it is always a good idea to double check our most current policy statement when you visit us to be sure that you have read and agree with what information we collect, how we use it and under what circumstances we disclose it.

1.1 Registration & Usage of our App

In order to use our App you must register an account with us. During the registration process you will be asked to provide certain information, such as your name/nick name, email address, your baby's estimated or actual date of birth, and to choose a password. If you do not register an account, you cannot use the App.

For the registration or log in, you also have the option to authenticate yourself with your existing profile on one of the following social networks: Facebook, Apple or Google. For this purpose, you will find icons of the social networks on the registration page. Once you have clicked on the respective icon a new window will be opened on which you must log in with your login data for the specific social network. After you have successfully logged in, the social network will tell you what data (e.g. name, e-mail address, nick name, profile picture) will be transmitted to us for authentication. If you have given your consent, the respective data will be transmitted to us. No further communication will occur between the account you created with us and your social network account, other than the authentication process. To achieve the authentication process, your IP address is transmitted to the providers of the social network. We have no influence on the purpose and scope of the data collection or on the further processing of the data by the social network providers. For more information, please read the privacy policy of the social network provider.

As part of the registration, we may ask you for further (optional) information, such as your breast pump situation to personalize the content of our App according to your needs and interests. The registration process takes place via a protected server connection to Medela. Unless indicated otherwise in this App Privacy & Cookie Policy (in particular Sections 1.2, 1.3 and 1.4), we will use the personal data you provide only as indicated in this App Privacy & Cookie Policy and to manage your account with us, store and collate your information on our servers (as necessary for the provision of our services), and to offer the functionalities and services requested.

During the registration process we will ask for your consent to use your personal data for marketing purposes in order to provide you with updates about services, products and events of Medela and its affiliated group companies. We may also invite you to participate in surveys we performed. After you provide consent and based upon your region, you may receive a confirmation email which contains a link that you need to click on to confirm your consent. This double-opt-in procedure helps us to ensure the identification of the email-account holder.

Your personal data will not be shared with any third party or used for any purpose other than indicated in this App Privacy & Cookie Policy, unless you have given express prior consent.

By installing/starting our App and registering your account with us, you consent to Medela placing cookies on your device, which are used for certain anonymized analysis by collecting and processing statistical information, such as user behavior, browsing patterns, average time period of use, and areas of interest. We collect and process this information to understand how our customers use our App, and to assess trends, statistics and our customers' needs, which help us improve our App and to better serve our customers, which includes providing you with a more personalized App experience and targeted offers. Please see Sections 2, 2.4 and 2.5 below for a detailed description of the cookies and/or analytic tools we use for this purpose and your rights to opt-out. If you do not agree with the above practices and would like to fully avoid any tracking and collection of your information, even in anonymized form, please do not install the App on your device(s).

1.2 Use of our App's Features

Our App offers different features where you can voluntarily decide to share further information with us. Such information includes personal data concerning both baby (e.g., name, picture, date of birth) and mother (e.g., expectations/experiences with breast feeding and pumping or expected education/job return date). Our App further enables you to track and monitor prenatal activities, such as contraction information, but also postnatal activities, such as your breastfeeding, pumping and bottle-feeding sessions, breast milk management as well as your baby's weight, height, sleep, diaper changes and any further notes. Further, our App enables you to connect with our connected pumps to easily track and log session times, settings used, and record breast milk expressed, to receive reminder messages that keep you on track and notify you when your pump battery is low and to access live lactation support (if this is available in your market). You can also complete questionnaires to measure your breastfeeding success and in order to personalize your user experience with our App, the possibility to register your pump and get free access to the VIP pack (if this is available in your market), to find a store near you to buy our products and to provide feedback regarding the App. In addition, you can use our chatbot functionality and get technical support, product recommendations and breastfeeding support. Finally, you can also ask questions and share knowledge with one another on our “Mums Community” platform (“Community”). We do not request or process any personal data for the Community. However, by participating in our Community you can voluntarily disclose such data to Medela. By accepting our rules and entering such personal data you consent to the processing of such data by Medela. You can withdraw your consent at any time by deleting the respective data or by deleting the App. This will not affect the lawfulness of the data processing according to your consent given prior to the withdrawal.

For Android users only: When you connect our App with a Bluetooth enabled Medela pump, the operating system requires access to the location (GPS) of the device. However, Medela does not store or use your location data at any time. Not allowing the location permission leads to problems with the connection of the pump.

Unless you have given your explicit consent, and unless indicated otherwise in this App Privacy & Cookie Policy, we will store, process and use such information only as necessary to enable your use of our functionalities and services, including to provide you with personalized content, educational information, helpful tips based on your unique data and progress in the App as well as the possibility to send us your feedback about the App.

You may determine your areas of interest and/or alter your choices by changing your personalization settings in the App (Tools Menu → Tests → Content Personalization) at any time. If you do not wish to receive any personalized content or services at all, you are free not to provide any personal information (and should abstain from completing the personalization questions in the App).

You may further change your personal notification settings in the App (More → General App Settings → Notifications) at any time.

To enable you to upload a picture of your baby, our App will ask for the permission to access your camera/pictures. We will not use the permission granted other than as necessary for this purpose.

Other than as explained above, we will further use any personal data we receive only in anonymized form (i.e., in a non-personally identifiable form which does not allow for any conclusions as to your identity) for statistical purposes and for internal evaluation to improve our products and services. Your personal data will not be processed for other purposes or beyond the scope of this Privacy Policy, except where expressly permitted or required by applicable law.

1.3 Processing of sensitive personal data

Generally, we do not request or process any sensitive personal data (e.g., health information, genetic/biometric data). However, by using our App you can voluntarily disclose such data (e.g. contraction information, baby's weight/height) to Medela. By registering an account with us and by entering such sensitive personal data you explicitly consent to the processing of such data by Medela. You can withdraw your consent at any time by deleting the respective data or deleting the App. This would not affect the lawfulness of the data processing according to your consent given prior to the withdrawal.

1.4 Creating one Single Record with Information from other Sources

In case you decide to use other services offered by us, such as where you register for Medela Family through the Website, which provides you with free access to additional educational information and direct marketing communications about our products and services, we may create one single record for you which combines the data we receive from you through your use of these other services with the data we receive from you through your use of the App. By registering your account with us in the App you are automatically registered for the entire Medela Family Program. You can opt-out from individual Medela Family services at any time by changing the settings in your profile.

This single record helps us to better understand your needs and preferences in order to more efficiently provide you with the requested products and services, including enabling you to benefit from a more personalized experience.

Other than as indicated in this App Privacy & Cookie Policy, we will not use the information for any other purposes or share the information with third parties, except where expressly permitted or required by applicable law.

2.1 Essential cookies

2.1 Essential Cookies

Cookies are small text files that our App asks to place on your tablet, smartphone or other device. If your device is set to accept cookies, then the text will be added in a small file thereon.

Except as indicated otherwise in this App Privacy & Cookie Policy, the cookies used by us are essential for the functioning and performance of our App, such as by making our App work more efficiently and facilitating your use of the functionalities and services provided. These functionality and/or performance cookies will be deleted from your device after two (2) weeks of not using our App. We will not use the information stored in essential cookies for any other purpose than as strictly necessary to provide you with the services and functionalities requested.

2.2 Consent to Placement of Non-Essential Cookies and Use of Analytic Tools

When you install/start our App and register your account with us, you consent to Medela placing additional cookies on your device and/or to Medela’s use of certain tracking and analytic tools. These cookies and tools will not be strictly necessary to ensure the functioning and performance of our App but will help us to collect some non-personalized information relating to your App usage behavior in order to improve our App offering and services and/or to provide you with more personalized information and services, including providing you with targeted offers through our App (see also below Sections 2.4 and 2.5 for an explanation of certain tracking and analysis tools we use).

You have the right to withdraw your consent and/or to individually opt-out from the placement of cookies and/or any collection of your information for the different purposes through the tracking and analytic tools at any time with effect for the future. For this purpose, please follow the instructions outlined in the sections below. To completely withdraw your consent and to avoid any tracking and collection of your information, please delete the App from your device(s).

2.3 Managing your Cookie Settings

Most mobile devices are initially set to accept cookies. If you prefer, you can change your settings to generally refuse cookies, to delete cookies that have already been placed on your device, or to warn you before a cookie is placed. Please refer to your device instructions or to www.allaboutcookies.org to learn more about how to adjust or modify your mobile device settings.

If you choose not to accept cookies, this may impair the usability of the App and you may not be able to take advantage of some of our features and services offered.

If you use different mobile devices to access our App (e.g., smartphone, tablet, etc.) you will need to ensure that the settings on each device are adjusted to reflect your cookie preferences.

2.4 Use of Google Mobile App Analytics

This App uses Google Mobile App Analytics ("Google Analytics"), a web analytics service provided by Google, Inc. (USA) and Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (for EU) ("Google"). Google Analytics may use certain tracking technologies to help us analyze how users use our App, including the number of active users and user behavior (e.g., average time period of use, returning users, screen views per month, top articles). As a rule, any information generated about your use of our App will be transmitted to and stored by Google on servers in the USA. Since this App has implemented the IP-anonymization functionality offered by Google, your IP address will, before being transferred to the USA, be shortened by Google within the Member States of the European Union or in other contractual states of the Treaty on the European Economic Area. Only in exceptional cases your full IP address will be transferred to a server of Google in the USA and be shortened there.

Google will use this information as our commissioned data processor to help us evaluate the use of our App, to compile reports on App activity and to provide other statistical and analytical services relating to usage of our App. The IP address transmitted by your mobile device within the framework of Google Analytics will not be associated with any other data held by Google.

If you do not wish to be tracked by Google Analytics you can opt-out at any time by deleting the App from your mobile device.

For an overview of privacy at Google, please click here.

2.5 Use of App Analytic Tools

Medela further uses certain app analytic tools and services to gather aggregated and anonymized statistical information about the usage of our App.

We use iTunes Connect App Analytics provided by Apple, Inc. ("Apple"). This tool collects anonymized and aggregated data from app users on mobile Apple devices using iOS. iTunes Connect App Analytics provides us with metric App usage data, such as the total number of times the App has been installed, the number of times the app has been used, and the number of active sessions within a specific period.

We further use similar analytics and statistics services provided by Google Inc. (USA) and Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (for the EU) ("Google") through the Google Play Developer Console and/or Google Firebase Console. The information we receive only includes aggregated and anonymized statistical information from app users on Android devices, such as install and upgrade numbers, crash numbers, information about a crash, user ratings, acquisition channels, and visitor regions.

If the respective feature is enabled on your device, Apple or Google (respectively) will collect, process and use such information to help us evaluate the use of our App, to compile reports on App activity and to provide other statistical and analytical services relating to the usage of our App.

We only receive the above information if you have opted-in to share your data with third-party providers on your mobile device. You can make and alter your choice (opt-in or opt-out) at any time in the settings menu of your device (for iOS devices see: Settings → Privacy → Diagnostics & Usage; for Android devices see Settings → User and backup → Google → More → Usage & diagnostics).

Medela is responsible for operating the App as data controller. However, to ensure the customer relationship with you is handled efficiently, and to provide you with a good customer experience, your customer relationship may be managed on local level also by the Local Group Company, which is our affiliated group company responsible for your country. Apart from that, our affiliated group companies may only receive anonymized statistical reports and other analytical data on App usage and activity which will not contain any personally identifiable information.

In addition, Medela and/or the Local Group Company may use external technical service providers which are authorized to provide services on its behalf and in accordance with its instructions. These entities may have access to your personal data but only to the extent necessary to enable your use of our App, including providing related services or handling your requests or enquiries. For instance, Medela (and/or, as applicable, the Local Group Company) may use service providers to develop and/or host the App, to store your data, to enable the chatbot functionality, to enable sharing functionality via Social Media, to manage the customer relationship, to simplify the authentication process, to provide marketing related communications about our products and services, to process your rental request, to give voice commands supported by Siri (iOS) and Google Assistant (Android) or analyze the information collected as explained in this policy. These service providers may not disclose your personal data to any unauthorized third parties or use your personal data for any purposes other than as instructed. Some of these service providers may be located in countries outside Switzerland and the EU/EEA which may not provide for the same level of data protection as in your country of residence. However, Medela and/or, as applicable, the Local Group Company have appropriate agreements in place with these service providers to ensure that they will take all necessary measures to protect your personal data in accordance with applicable requirements. For further information about our service providers, please contact us as further explained in the Section, Your Rights and How to Contact Us.

We may provide your personal data to third parties to process transactions (e.g., address validation, shipping, tax calculation).

By participating in our Community and publishing your personal data, your personal data can be viewed by the public.

Other than as indicated above, we will not provide your personal data to any third party without your prior consent, unless we are compelled by law to do so.

Your data will be stored on servers in Ireland and the Netherlands. USA and Canadian user data will be stored in the USA, additionally. Furthermore, Medela and/or, as applicable, the Local Group Company may use cloud service providers located in countries outside Switzerland and the EU/EEA, including the USA, to host and process your personal data for storage, communication, support and marketing purposes. While the laws of those countries may not provide for the same level of data protection as considered adequate in Switzerland or the EU/EEA, we have taken the necessary measures to ensure your personal data will be handled and protected appropriately and only be processed on our behalf and in accordance with our instructions.

All your personal data will be irreversibly and automatically deleted after one year of inactivity (not using the App). Personal data of USA and Canadian residents will be deleted after three years of inactivity.

Any publication on our Community allows access to your personal data from anywhere in the world. This means that countries that do not guarantee the same level of data protection as your country of residence might, can also access the data.

We reserve the right to delete all your personal data irreversibly and automatically after one year of inactivity (not using the App). You can delete all your personal data upon your request (go to “more”  “mom profile”  “delete account”). Personal data of USA and Canadian residents will be deleted after three years of inactivity or upon your request. This deletion schedule is not applicable for any publication in our Community. Personal data published in the Community will be stored until you delete it.

We will treat your personal data confidentially. We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized disclosure, access, alteration, misuse, accidental or unlawful destruction or loss.

To the extent that you may disclose "protected health information" as defined under U.S. law while accessing or using our App, please refer to our HIPAA Privacy Policy and Notice of Privacy Practices to understand your rights and how we may use and disclose your protected health information.

Medela’s Privacy Notice for California Residents supplements the information contained in this App Privacy & Cookie Policy and applies solely to visitors, users, and others who reside in the State of California, USA.

You may have rights pursuant to your local data protection and privacy laws to request that we disclose to you all personal data that we have about you, request the correction, deletion and/or blocking of your personal data, object to the processing of your personal data for legitimate reasons, or request an electronic copy of your personal data for purposes of transmitting it to another company (data portability).

You may further at any time, with effect for the future, withdraw any consent you may have given by deleting the App from your device(s) and requesting a deletion by email to the email address identified below.

In case of any questions about the collection, processing and/or use of your personal data or to exercise your rights please send us an email at privacy@medela.com.

USA residents: In order to exercise your rights to delete or know what information we have collected about you, please complete the Privacy Request Form and return the completed form to us by email at privacy.us@medela.com.

Nevada residents: Without limiting the foregoing, Nevada law may allow you to specifically direct us not to sell your covered information to third parties. If you are a Nevada resident, you may submit such opt-out requests by email at privacy.us@medela.com. To be effective, your request must include your full name, address and email address so that we may attempt to verify the authenticity of your request.

We reserve the right to make changes to this App Privacy & Cookie Policy at any time with effect for the future. The then current version of this App Privacy & Cookie Policy will be made available within the App. While we do not intend to make changes to this policy very often, it is always a good idea to double check our most current policy statement when you visit us to be sure that you have read and agree with what information we collect, how we use it and under what circumstances we disclose it.

1.1 Anonymous Usage of our Website

You are welcome to visit our Website while remaining anonymous and without revealing any of your personal data. However, when you first visit our Website we will ask for your consent to place cookies on your device and to track your Website usage behaviour. This helps us to better understand how our customers use our Website and to improve our Website offering and services, which includes providing you with a more personalized Website experience and targeted offers. Please see Sections 2.2, 2.4, 2.5 and 2.6 below for a detailed description of the cookies and Website analysis tools we use for this purpose and your rights to change your choices.

If you do not agree with the above practices and wish to remain fully anonymous, you can indicate not to provide your consent, or withdraw your consent with effect for the future, by using the opt-out mechanisms available (see Sections 2.2, 2.4, 2.5 and 2.6 below). In this case, we will only collect certain anonymous information which does not directly relate to your person. For example, we may collect the number of visitors to our Website, browsing patterns and areas of interest. We analyse this information to understand how our customers use our Website, and to assess trends, statistics and our customers’ needs, which help us to improve our Website and to better serve our customers.

Other than as indicated above, we will only collect your personal data if you voluntarily decide to share such information with us, such as by sending an enquiry (via our contact form) or requesting a specific service. Unless you have provided your explicit consent, and unless indicated otherwise in this Website Privacy Policy, we will use the personal data that you have shared with us only as necessary for enabling your use of our Website, including handling your requests and providing the requested services. Apart from that, we may use any personal data we receive only in anonymized form (i.e., in a non-personally identifiable form which does not allow for any conclusions as to your identity) for statistical purposes and for internal evaluation how to improve our products and services. Your data will not be processed for other purposes or beyond the scope of this Website Privacy Policy, except where expressly permitted or required by applicable law.

1.2 Using our Contact Form

We collect the personal data you voluntarily disclose when you contact us through the contact form on our Website, for example, if you send us an enquiry or file a specific request with our customer service and support. Unless indicated otherwise in this Healthcare Website Privacy & Cookie Policy, your data will not be used without your consent other than to handle your request/enquiry, e.g., to provide you with the service information you asked for, and not be used for any other purpose, unless expressly permitted or required by applicable law.
Your request/enquiry will be handled by Medela or, as necessary, by one of our local affiliated group companies or authorised distributor responsible for handling the topics addressed in your request/enquiry for your jurisdiction.

2.1 Essential cookies

Cookies are small text files that our Website asks to place on your computer or other internet enabled devices, such as tablets or smartphones. If your browser is set to accept cookies, then your browser adds the text in a small file.
Except as indicated otherwise in this Healthcare Website Privacy & Cookie Policy, the cookies used by us are essential for the functioning and performance of our Website, such as by making our Website work more efficiently and facilitating your use of the functionalities and services provided. We will not use the information stored in essential cookies for any other purpose than as strictly necessary to provide you with the services and functionalities requested.

2.2 Cookie Banner & Personalised Tracking

When you access our Website, we will ask for your consent to place additional cookies on your device by displaying a cookie banner ("Cookie Consent"). These cookies will not be strictly necessary for the functioning and performance of our Website but will help us to collect some of your personal data relating to your Website usage behaviour in order to improve our Website offering and services and/or to provide you with more personalised information and services, including targeted offers (see below Sections 2.4, 2.5 and 2.6 for the corresponding cookies placed for Website analysis and remarketing purposes). The cookie banner informs you about the main purposes of the additional cookies and provides you with information about your choices and where you may access further information. Your continued use of our Website after having been displayed with the cookie banner will signify your consent to the described practices.

The wording of the Cookie Consent declaration can be viewed at the bottom of this Healthcare Website Privacy & Cookie Policy. We explain the categories of non-essential cookies that may be placed on your device and their respective purposes in the context of the different services further below (see Sections 2.4, 2.5 and 2.6). At all times, you have the right to withdraw your Cookie Consent and individually opt-out from the placement of cookies and any collection of your information for the different purposes at any time with effect for the future, as further explained in the respective Sections 2.3, 2.4, 2.5 and 2.6 below.

2.3 Managing your cookie settings

Most browsers are initially set to accept cookies. If you prefer, you can change your settings to generally refuse cookies, to delete cookies that have already been placed on your device, or to warn you before a cookie is placed. Please refer to your browser instructions or to www.aboutcookies.org or www.allaboutcookies.org.org to learn more about how to adjust or modify your browser settings.

If you choose not to accept cookies, this may impair the usability of the Website and you may not be able to take advantage of some of our features and services offered.
If you use different devices to access our Website (e.g., smartphone, tablet, computer, etc.) you will need to ensure that each browser on each device is adjusted to reflect your cookie preferences.

2.4 Use of Google Universal Analytics

This Website uses Google Universal Analytics ("Google Analytics"), a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”). Google Analytics uses cookies to help us analyse how users use our Website, including the number of visitors to our Website, the Websites our visitors have come from, and the pages they visit. This information is used by us to improve our Website offer and services. As a rule, any information generated by the cookie about your use of our Website will be transmitted to and stored by Google on servers in the United States.

Google will use this information as our commissioned data processor to help us evaluate the use of our Website, to compile reports on Website activity and to provide other statistical and analytical services relating to usage of our Website. The IP address transmitted by your browser within the framework of Google Analytics will not be associated with any other data held by Google.
You may prevent the collection of data generated by the cookie about your use of this Website (including your IP address) and opt-out of being tracked by Google Analytics across all Websites by downloading and installing a browser-plugin which is available here.

In this case, an opt-out cookie will be placed on your browser that prevents any further tracking of your use of this Website by Google Analytics. Please remember that you will have to opt-out again if you delete all cookies stored on your device. You will also have to opt-out for each device you use to visit our Website.

For an overview of privacy at Google, please click here.

2.5 Pardot

This Website tracks visitor and prospect activities by using Pardot cookies which are placed in your browsers. The visitor cookie is composed of a unique visitor ID and the unique identifier for your account. This cookie is set for visitors by the Pardot tracking code. If you register your e-mail address on this Website (e.g. contact form, downloads) another Pardot cookie will remember your e-mail address and will match your e-mail address with your past and future activities (before and after e.g. submitting a form) based on your visitor ID. If you do not click "accept" in the cookie banner, the latter Pardot cookie will not be placed. Furthermore, you can withdraw your consent at any time, by deleting the cookies in your browsers.     

2.6 CrazyEgg

We use CrazyEgg in order to better understand our users’ needs and to optimize our service and experience. CrazyEgg is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. CrazyEgg uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), mouse scrolls, clicks on our Websites, keystrokes entered on our Website, viewed pages incl. duration, browser information, geographic location (country only), preferred language used to display our website). CrazyEgg has a technology in place to stop any recording of personal data (e.g. when filling out a contact form). For further details, please see CrazyEgg’s privacy policy by clicking on this link.

You can opt-out of CrazyEgg storing data about your usage of our Website by following CrazyEgg's opt-out instructions.  

2.7 Other Third-Party Cookies

Some content or applications, including advertisements, on the Website may be served by unaffiliated third parties. These may place cookies on your device for their own purposes. We do not control these third parties' tracking technologies or how they may be used.
You may prevent the placement of and tracking by such third-party cookies by adjusting or modifying your browser settings accordingly. For further information, please refer to your browser instructions.

This Website also embeds videos provided by YouTube LLC (“YouTube”). Using YouTube’s offering requires a connection to be established to YouTube’s servers in the US. During this process, certain information is transmitted to YouTube. For all YouTube videos embedded in our Website we have enabled the Privacy-enhanced mode offered by YouTube. This means that YouTube stores information about a visitor to our Website only if he or she chooses to play an embedded video. Medela does not control the collection, storage and use of any of your information by YouTube and does not have access to any information collected. You should read YouTube’s Privacy Policy carefully before you use any YouTube features.

Further information about how your data are collected and used by YouTube and your rights in relation to this can be found in YouTube's privacy policy at www.youtube.com.

This Website uses Google Maps ("Google Maps"), a map service provided by Google, Inc. (“Google”) to display interactive maps.

To provide you with the maps requested, Google will collect your IP-address, which can be transmitted to and stored by Google on servers in the United States. Google may further collect information about your usage of Google Maps. Please note that Medela does not control the collection, storage and use of any such information by Google and does not have any access to the information collected. You should read Google's privacy policy carefully before you use any Google Maps features. Google's privacy policy can be found here.

When you use Google Maps on our Website you agree to be bound by Google's Terms of Use, which can be found here.
If you do not wish Google to be able to collect any information about your use of Google Maps, you may prevent the collection of such information by disabling the Google Maps service entirely. In order to do so, you need to deactivate JavaScript within your browser settings. Please note that in this case you cannot use Google Maps at all.

5.1 Medela is operating the Website as data controller. However, to ensure the customer relationship with you is handled efficiently, and to provide you with a good customer experience, your customer relationship will be managed directly by our Local Group Company or by an authorised distributor located in your country. The Local Group Company or the distributor will be responsible for the related processing and use of your personal data. For instance, Medela may share your personal data with the Local Group Company or the distributor where this is necessary to answer specific requests or enquiries submitted by you through our Website, to provide you with the services requested, or where otherwise necessary to handle the customer relationship with you. For these purposes, the Local Group Company or the distributor will be granted with access to your personal data stored by Medela and will collect, store, process and use such personal data on local level for the above purposes. Some of these distributors may be located in countries outside Switzerland and the EU/EEA which may not provide for the same level of data protection as in your country of residence. However, Medela has appropriate agreements in place with these distributors to ensure that they will take all necessary measures to protect your personal data in accordance with applicable requirements. For further information about our distributors, please contact us as further explained in Section 7 below.

5.2 In addition, Medela and/or the Local Group Company may use external technical service providers which are authorized to provide services on its behalf and in accordance with its instructions. These entities may have access to your personal data but only to the extent necessary to enable your use of our Website, including providing related services or handling your requests or enquiries. For instance, Medela (and/or, as applicable, the Local Group Company) may use service providers to host our Website, store your personal data, or analyse the information collected as explained in Section 2. These service providers may not disclose your personal data to any unauthorized third parties or use your personal data for any purposes other than as instructed. Some of these service providers may be located in countries outside Switzerland and the EU/EEA which may not provide for the same level of data protection as in your country of residence. However, Medela and/or, as applicable, the Local Group Company have appropriate agreements in place with these service providers to ensure that they will take all necessary measures to protect your personal data in accordance with applicable requirements. For further information about our service providers, please contact us as further explained in Section 7 below.

5.3 Other than as indicated above, we will not provide your personal data to any third party without your prior consent, unless we are compelled by law to do so.

Your data will be stored on servers in Switzerland. In addition, Medela and/or, as applicable, the Local Group Company or the authorised distributor may use cloud service providers located in countries outside Switzerland and the EU/EEA, including the United States of America (USA), to host and process your personal data for storage, communication and marketing purposes. While the laws of those countries may not provide for the same level of data protection as considered adequate in Switzerland or the EU/EEA, we have taken the necessary measures to ensure your personal data will be handled and protected appropriately and only be processed on our behalf and in accordance with our instructions.

We will treat your personal data confidential. We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized disclosure or access, alteration, misuse, accidental or unlawful destruction or loss.

To the extent that you are a U.S. citizen and may disclose “protected health information” as defined under U.S. law while accessing or using our Website, please refer to our HIPAA Privacy Policy and Notice of Privacy Practices to understand your rights and how we may use and disclose your protected health information.

Medela’s Privacy Notice for California Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of California.

Some U.S. state privacy laws such as the California Consumer Privacy Act (CCPA) and Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA) and the Connecticut Personal Data Privacy and Online Monitoring (2022 S.B.6) require specific disclosures for state residents. State laws like the CCPA, VCDPA, CPA and 2022 S.B.6 also provide the right to request information about how we collect, use and disclose your information. These laws also provide the right to request deletion or anonymization. Medela does not discriminate against individuals for exercising these privacy rights. For further information regarding these laws, please click the links below.

Medela’s Privacy Notice for California Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of California.

Medela’s Privacy Notice for Virginia Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Virginia.

Medela’s Privacy Notice for Colorado Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Colorado.

Medela’s Privacy Notice for Connecticut Residents supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the State of Connecticut.

You may have rights pursuant to your local data protection and privacy laws to request that we disclose to you all personal information that we have about you, request the correction, deletion and/or blocking of your personal information, object to the processing of your personal information for legitimate reasons, or request an electronic copy of your personal data for purposes of transmitting it to another company (data portability).
You may further at any time, with effect for the future, withdraw any consent you have given. For this purpose, please make use of the opt-out mechanisms provided for the different services (please see the respective descriptions in the corresponding Sections of this Healthcare Website Privacy & Cookie Policy) or you can also contact us as indicated below.

In case of any questions about the collection, processing and/or use of your personal data , please email us at privacy@medela.com.

In order to exercise your rights, as mentioned above, please use our Privacy Request Webform. Please note that any email requests will not be processed. 

To be fully transparent about its practices, Medela makes the content of consent declarations obtained through its Website available for access by its users. In the context of your use of our Website, you may have expressly given one or more of the following consent declarations:

Cookie Consent
We use cookies to analyze our traffic and to allow the best experience possible. We also share information about your use of our site with analytics partners. Please click "accept" to consent to the use of such cookies. Without your consent, only the essential and functional cookies will be installed, which are necessary to display our website correctly.

This Privacy & Cookie Policy ("NPWT App Privacy & Cookie Policy") applies to the mobile application NPWT App ("App") which is operated by Medela AG, Lättichstrasse 4b, 6340 Baar, Switzerland ("Medela" or "we").

This NPWT App Privacy & Cookie Policy governs the collection, processing and use of your personal data, when you use our App, and explains our practices with respect to the placement of cookies, including the types of cookies we use and how you can manage them.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the App. By means of this NPWT App Privacy & Cookie Policy, Medela would like to inform the App users of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

Medela built this App as a free app. It is provided by Medela at no cost and is intended for use as is.

If you choose to use this App, then you agree to the collection and use of information in relation to this NPWT App Privacy & Cookie Policy. We will not use or share your information with anyone except as described in this NPWT App Privacy & Cookie Policy.

This App does not collect any personal data. However, it has implemented Google Analytics for Firebase. What this means is described below:

Google Analytics for Firebase (Google Inc.)

Google Analytics uses "cookies", which are text files placed on your device, to allow us to analyze how users use the App. The information generated by the cookie about your use of this App is usually transferred to a Google server in the USA and stored there. However, IP anonymisation is activated. Therefore, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

Google will use this information as our commissioned data processor to help us evaluate the use of our App, to compile reports on App activity and to provide other statistical and analytical services relating to usage of our App. The IP address transmitted by your mobile device within the framework of Google Analytics will not be associated with any other data held by Google. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f GDPR. Sessions and campaigns are terminated after a certain period of time. By default, sessions are closed after 30 minutes without activity and campaigns after six months. The time limit for campaigns may not exceed two years. For more information on terms of use and data protection, please visit www.firebase.google.com/terms/data-processing-terms.

We reserve the right to make changes to this NPWT App Privacy & Cookie Policy at any time with effect for the future. The then current version of this NPWT App Privacy & Cookie Policy will be made available within the App Store/ Google Play. While we do not intend to make changes to this policy very often, it is always a good idea to double check our most current policy statement when you visit us to be sure that you have read and agree with what information we collect, how we use it and under what circumstances we disclose it.

NPWT App Privacy & Cookie Policy last revised in June 2018.

We may use or disclose the Personal Information we collect for one or more of the following business purposes:

• To process your purchases of or requests for products or services.
• To meet the reason for which your Personal Information was provided.
• To respond to your inquiries and for other customer service purposes.
• To provide you with email alerts and other marketing concerning our products or services.
• To provide you with updates to your insurance application process and fulfillment.
• To improve our products or services to you.
• To tailor the content and information that we or our service providers may send or display to you, to offer personalized help or instruction or to otherwise personalize your experience while using the website or app.
• To assist in advertising our products and services on third-party websites.
• For testing, research, analysis and product development.
• For marketing analysis, data analytics and other similar analytics
• As necessary or appropriate to protect the rights, property or safety of us, our customers, service providers or others.
• To comply with federal, state and local laws, cooperate with and respond to law enforcement requests and as otherwise required by applicable law, court order, or governmental regulations.
• As described to you when collecting your Personal Information or as otherwise set forth in the CCPA.
• To maintain appropriate records for internal administrative purposes.
• To help maintain the safety, security and integrity of our website, app, products and services, databases and other technology assets, and business.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice and obtaining your consent.

We may disclose your Personal Information to third parties for business purposes. When we disclose Personal Information for a business purpose, we enter into a contract with the third party that describes the purpose and requires the third party to both keep that Personal Information confidential and not use it for any purpose except performing the contract or otherwise complying with the law.

In the preceding twelve (12) months, we have disclosed the following categories of Personal Information for a business purpose:

• Identifiers.
• California Customer Records personal information categories.
• Protected classification characteristics under California or federal law.
• Commercial information.
• Internet or other similar network activity.

We have disclosed Personal Information for a business purpose to the following categories of third parties:

• Affiliates and subsidiaries.
• Our distribution partners and customers or their agents who are providing products or services to you.
• Service providers.
• Development partners.
• Operating systems and platforms. 
• Data processors.
• Marketing analytics and advertising companies.
• Research partners.
• Third parties to whom you authorize us to disclose your Personal Information in connection with products or services.

You have the right to know what categories of Personal Information we collect, the sources from which we collect the Personal Information, the categories of third parties with whom we share or disclose the Personal Information, and the purposes for collecting or disclosing the Personal Information.  We are required to provide this information to you before or at the point of collection of your Personal Information.  This Privacy Notice is intended to provide you with this informatio

You have the right to request that we disclose certain information to you about our collection, disclosure and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of Personal Information we collected about you.
• Our business or commercial purpose for collecting that Personal Information.
• The categories of third parties with whom we share that Personal Information.
• The specific pieces of Personal Information we collected about you.

You have the right to request that we delete the Personal Information we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete, if applicable) your Personal Information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction or provide a good or service requested by you for which we collected the Personal Information, or otherwise perform a contract.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug to identify and repair errors that impair existing intended functionality of our systems.
4. Exercise a legal right provided by law, including exercising or ensuring free speech rights. 
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest if: the research adheres to all other applicable ethics and privacy laws; deleting the Personal Information is likely to make the research impossible or seriously impair it; and you provided informed consent during the initial data collection. 
7. Enable our internal use in a manner that you would reasonably expect based on your relationship with us.
8. Comply with our legal obligations.
9. Otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.

To exercise your rights under the CCPA, please email us at privacy.us@medela.com or call us at 800-435-8316 and we will provide you with a Privacy Request Form that you will need to complete and submit to us in order to make a verifiable consumer request. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request twice within a 12-month period. You can submit a verifiable consumer request by completing the Privacy Request Form and:

• Providing sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative;
• Describing your request with sufficient detail that allows us to properly understand, evaluate, and respond to it; and
• Including a declaration affirming your identity.

We may deny your request if we cannot verify your identity or authority to make the request.  Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

We will confirm receipt of a request from you or your authorized agent within ten (10) days of the request. 

We will respond to a verifiable consumer request within 45 days.  If we cannot verify your request and respond in that time, we will notify you in writing that we need an additional 45 days and explain the reasons for the additional time. 

Any disclosures in response to a request to know will only cover the 12-month period preceding the verifiable consumer request’s receipt.  If you have requested to know specific Personal Information we collected, we will provide your Personal Information in a format that is readily useable and allows you to transmit the information to another person or entity.

If we cannot comply with your request, in whole or in part, we will explain the reasons why we cannot comply in our response.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you use of our products or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of products or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or qualify of goods or services.

If you have any questions or comments about this Privacy Notice, our Privacy Policy, the ways in which we collect and use your Personal Information, or your choices and rights regarding such use, or if you wish to exercise your rights under California law, you may contact us via email at privacy.us@medela.com.

Updated: July 1, 2020

We are required by law to:

• Maintain the privacy of your Protected Health Information;
• Provide you with certain rights with respect to your Protected Health Information;
• Provide you with a copy of this Notice of our legal duties and privacy practices with respect to your Protected Health Information; and
• Follow the terms of the HIPAA Privacy Policy that is currently in effect

Under the law, we may use or disclose your Protected Health Information under certain circumstances without your permission.  The following categories describe the different ways that we may use and disclose your Protected Health Information. 

For Treatment.  We may use or disclose your Protected Health Information to facilitate medical treatment or services by providers. 

For Payment.  We may use or disclose your Protected Health Information to determine your eligibility for benefits, to facilitate payment for the treatment and services you receive from health care providers, to determine benefit responsibility, or to coordinate coverage under benefit plans. 

For Health Care Operations.  We may use and disclose your Protected Health Information for other health care operations.   

Treatment Alternatives or Health-Related Benefits and Services.  We may use and disclose your Protected Health Information to send you information about treatment alternatives or other health-related benefits and services that might be of interest to you.

To Business Associates.  We may contract with individuals or entities known as Business Associates to perform various functions on our behalf or to provide certain types of services.  In order to perform these functions or to provide these services, Business Associates will receive, create, maintain, transmit, use and/or disclose your Protected Health Information, but only after they agree in writing to implement appropriate safeguards regarding your Protected Health Information. 

As Required by Law.  We will disclose your Protected Health Information when required to do so by federal, state, or local law.  For example, we may disclose your Protected Health Information when required by national security laws or public health disclosure laws.

To Avert a Serious Threat to Health or Safety.  We may use and disclose your Protected Health Information when necessary to prevent a serious threat to your health and safety, or the health and safety of the public or another person. 

In addition to the above, the following categories describe other possible ways that we may use and disclose your Protected Health Information without your specific authorization. 

Military.  If you are a member of the armed forces we may release your Protected Health Information as required by military command authorities. 

Public Health Risks.  We may disclose your Protected Health Information for public health activities.  These activities generally include the following:

• To prevent or control disease, injury or disability;
• To report births and deaths;
• To report child abuse or neglect;
• To report reactions to medications or problems with products;
• To notify people of recalls of products they may be using;
• To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition;
• To notify the appropriate government authority if we believe that a patient has been the victim of abuse, neglect, or domestic violence.  We will only make this disclosure if you agree, or when required or authorized by law.

Health Oversight Activities.  We may disclose your Protected Health Information to a health oversight agency for activities authorized by law.  These oversight activities include, for example, audits, investigations, inspections and licensure.  These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights law.

Lawsuits and Disputes.  If you are involved in a lawsuit or a dispute, we may disclose your Protected Health Information in response to a court or administrative order.  We may also disclose your Protected Health Information in response to a subpoena, discovery request, or other lawful process by someone involved in a legal dispute, but only if efforts have been made to tell you about the request or to obtain a court or administrative order protecting the information requested.

Law Enforcement.  We may disclose your Protected Health Information if asked to do so by a law-enforcement official (1) in response to a court order, subpoena, warrant, summons, or similar process; or (2) to identify or locate a suspect, fugitive, material witness, or missing person.  If asked by a law-enforcement official we may also disclose Protected Health Information about –

• the victim of a crime if, under certain limited circumstances, we are unable to obtain the victim’s agreement;
• a death that we believe may be the result of criminal conduct; and
• criminal conduct.

National Security and Intelligence Activities.  We may release your Protected Health Information to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.

Inmates.  If you are an inmate of a correctional institution or are in the custody of a law-enforcement official, we may disclose your Protected Health Information to the correctional institution or law-enforcement official if necessary (1) for the institution to provide you with health care; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution.

Research.  We may disclose your Protected Health Information to researchers when:

1. The individual identifiers have been removed; or
2. When an institution review board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of the requested information, and approves the research.

The following is a description of disclosures of your Protected Health Information we are required to make.

Government Audits.  We are required to disclose your Protected Health Information to the Secretary of the United States Department of Health and Human Services when the Secretary is investigating or determining our compliance with the HIPAA privacy rule.

Disclosures to You.  When you request, we are required to disclose to you the portion of your Protected Health Information that contains medical records, billing records, and any other records used to make decisions regarding your health care benefits.  We are also required, when requested, to provide you with an accounting of disclosures of your Protected Health Information if the disclosure was for reasons other than for payment, treatment, or health care operations, and if the Protected Health Information was not disclosed pursuant to your individual authorization.

Personal Representatives.  We will disclose your Protected Health Information to individuals authorized by you, or to an individual designated as your personal representative, attorney-in-fact, or similar persons, as long as you provide us with a written notice/authorization and any supporting documents. Please note, however, that under the HIPAA privacy rule, we do not have to disclose information to a personal representative if we have a reasonable belief that:

1. You have been, or may be, subjected to domestic violence, abuse, or neglect by such person; or
2. Treating such person as your personal representative could endanger you; and
3. In the exercise of professional judgment, it is not in your best interest to treat the person as your personal representative.

Authorizations.  Other uses or disclosures of your Protected Health Information not described above will only be made with your written authorization.  For example, in general and subject to specific conditions, we will not use or disclose your protected health information for marketing; and we will not sell your protected health information, unless you give us a written authorization.  You may revoke written authorizations at any time, so long as the revocation is in writing.  Once we receive your written revocation, it will only be effective for future uses and disclosures.  It will not be effective for any information that may have been used or disclosed in reliance upon the written authorization and prior to receiving your written revocation.

You have the following rights with respect to your Protected Health Information:

Right to Inspect and Copy.  You have the right to inspect and copy certain Protected Health Information.  If the information you request is maintained electronically, and you request an electronic copy, we will provide a copy in the electronic form and format you request, if the information can be readily produced in that form and format; if the information cannot be readily produced in that form and format, we will work with you to come to an agreement on form and format.  If we cannot agree on an electronic form and format, we will provide you with a paper copy.

To inspect and copy your Protected Health Information, you must submit your request in writing to the  Privacy Officer.  If you request a copy of the information, we may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request.

We may deny your request to inspect and copy in certain very limited circumstances.  If you are denied access to your medical information, you may request that the denial be reviewed by submitting a written request to the Privacy Officer.

Right to Amend.  If you feel that the Protected Health Information we have about you is incorrect or incomplete, you may ask us to amend the information.  You have the right to request an amendment for as long as the information is kept by or for Medela.

To request an amendment, your request must be made in writing and submitted to the Privacy Officer at 1101 Corporate Drive, McHenry, Illinois 60050.  In addition, you must provide a reason that supports your request.

We may deny your request for an amendment if it is not in writing or does not include a reason to support the request.  In addition, we may deny your request if you ask us to amend information that:

• Is not part of the medical information kept by or for Medela;
• Was not created by us, unless the person or entity that created the information is no longer available to make the amendment;
• Is not part of the information that you would be permitted to inspect and copy; or
• Is already accurate and complete.

If we deny your request, you have the right to file a statement of disagreement with us and any future disclosures of the disputed information will include your statement.

Right to an Accounting of Disclosures.  You have the right to request an “accounting” of certain disclosures of your Protected Health Information.  The accounting will not include (1) disclosures for purposes of treatment, payment, or health care operations; (2) disclosures made to you; (3) disclosures made pursuant to your authorization; (4) disclosures made to friends or family in your presence or because of an emergency; (5) disclosures for national security purposes; and (6) disclosures incidental to otherwise permissible disclosures.

To request this list or accounting of disclosures, you must submit your request in writing to the Privacy Officer.  Your request must state the time period you want the accounting to cover, which may not be longer than six (6) years before the date of the request.  Your request should indicate in what form you want the list (for example, paper or electronic).  The first list you request within a 12-month period will be provided free of charge.  For additional lists, we may charge you for the costs of providing the list.  We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.

Right to Request Restrictions.  You have the right to request a restriction or limitation on your Protected Health Information that we use or disclose for treatment, payment, or health care operations.  You also have the right to request a limit on your Protected Health Information that we disclose to someone who is involved in your care or the payment for your care, such as a family member or friend. 

Except as provided in the next paragraph, we are not required to agree to your request.  However, if we do agree to the request, we will honor the restriction until you revoke it or we notify you otherwise.

We will comply with any restriction request if (1) except as otherwise required by law, the disclosure is to a health plan for purposes of carrying out payment or health care operations (and is not for purposes of carrying out treatment); and (2) the Protected Health Information pertains solely to a health care item or service for which the health care provider involved has been paid in full by you or another person.

To request restrictions, you must make your request in writing to the Privacy Officer at 1101 Corporate Drive, McHenry, Illinois 60050.  In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure, or both; and (3) to whom you want the limits to apply-for example, disclosures to your spouse.

Right to Request Confidential Communications.  You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.  For example, you can ask that we only contact you at work or by mail.

To request confidential communications, you must make your request in writing to the Privacy Officer at 1101 Corporate Drive, McHenry, Illinois 60050.  We will not ask you the reason for your request.  Your request must specify how and/or where you wish to be contacted.  We will accommodate all reasonable requests.

Right to Be Notified of a Breach.  You have the right to be notified in the event that we (or a Business Associate) discover a breach of unsecured Protected Health Information.

Right to a Paper Copy of This Notice.  You have the right to a paper copy of this notice.  You may ask us to give you a copy of this notice at any time.  Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice.

Right to know name.  You have the right to know the name of the personal helping or guiding you through the process.

Right to be treated with respect.  You have the right to be treated with respect, consideration, and recognition of client/patient dignity and individuality.

If you believe that your privacy rights have been violated, you may file a complaint with Medela or with the Office for Civil Rights of the United States Department of Health and Human Services.  To file a complaint with Medela, contact the Privacy Officer, at Medela LLC, 1101 Corporate Drive, McHenry, Illinois 60050.  All complaints must be submitted in writing.

Customers who obtain an insurance breast pump from Medela also have a right to report grievances/complaints to ACHC’s Complaints Department at (855) 937-2242. 

You will not be penalized, or in any other way retaliated against, for filing a complaint with us, the Office for Civil Rights or the ACHC’s Complaints Department.

Choice/Opt Out

If you have submitted Protected Health Information through the Site, or if someone else has submitted your Protected Health Information through the Site, and you would like to have that information deleted from our databases, please contact us via email.  We will then use reasonable efforts to remove your Protected Health Information.  However, we may maintain your Protected Health Information to the extent it relates to individual sales transactions for recordkeeping and servicing.

1.     You can send email to privacy.us@medela.com.

2.     You can send mail to the following postal address:

Medela LLC
Attn: Privacy Policy
1101 Corporate Dr.
McHenry, IL 60050

Questions About Our HIPAA Privacy policy

If you have questions about our Site and our HIPAA Privacy Policy, please feel free to contact us at privacy.us@medela.com or contact our Privacy Officer, at Medela LLC, 1101 Corporate Drive, McHenry, Illinois 60050, 815-578-2372.

Updated July 1, 2020