Effective Date: 1 August 2020
Omnicell Privacy Notice
- Privacy Notice Overview
- The Kinds of Information We Collect
- How We Use the Information We Collect
- Information We Share
- For California Residents
- International Transfers of Information
- Securing Your Data
- Your Data Subject Rights
- Contact Us
This Privacy Notice (“Notice”) is designed to inform you about how we collect, use, and share your personal data through our website(s) (our “Site”), related applications, products, services, and web-based and mobile applications (collectively, the “Services”) operated by Omnicell, or when you interact with us online.
Information You Provide to Us Directly
We collect personal data you provide to us in the following instances:
- If you provide us feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
- We also collect personal data at such other points on our site and applications that expressly state that personal data is being collected.
Information About You Collected Via Technology
When you visit our Sites, some information is automatically collected.
Log Files. We gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider (“ISP”) data, referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information for purposes including analyzing trends, Site administration, tracking users’ movements around the Site and tailoring our Services to our users’ needs. Except as noted in this Notice, we do not link this automatically collected data to other personal data we have collected from you.
We use , collect, share, and otherwise process personal data for the purposes described in this Notice or as disclosed to you on our Sites or in connection with our services. We only collect the minimum amount of personal data needed to perform the specific processing activity for which the personal data was collected.
We process your personal data for the performance of the contractual obligations specified in our Omnicell Website Terms and Conditions and/or in order to provide the services to you. This includes, for example, using your personal data for:
- operating our Sites;
- providing and delivering the products and services you request, including payment processing; or
- sending you related information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
We process your personal data based on your consent in order to communicate with you regarding new contests, promotions, rewards, upcoming events, and other news about products and services offered by Omnicell and our selected partners.
We process your personal data when we have a legitimate interest to do so. This includes, for example, processing your personal data for:
- improving our Sites, products, services and the safety and security of our services, websites, and applications including facilitating identification and authentication, targeted online and offline marketing, for general research and aggregate reporting, customization of website and application customer experiences;
- understanding you and your preferences in order to enhance your experience and enjoyment using our Sites, products, and services;
- responding to your comments and questions and providing customer service;
- linking or combining your personal data with other personal data we obtain from third parties without personally identifying you to such third parties in order to help understand your needs and provide you with better service;
- compliance with a judicial or administrative order or in the course of judicial or administrative proceedings;
- protecting the rights and property of Omnicell and our agents, customers, and third parties including, but not limited to, the right to enforce our agreements, policies, and terms and conditions.
We may create anonymized data records from personal data by rendering data anonymous in such a way that you, the data subject, are no longer identifiable. We use this anonymized data to analyze request and usage patterns so that we may enhance the content of our products and services and improve Site navigation. Omnicell reserves the right to use anonymized data for any purpose and disclose anonymized data to third parties in our sole discretion.
We process your personal data for compliance with any legal obligation to which we are subject.
We share your personal data with Service Providers, Public Authorities, Third Parties (with Your Consent), and, if an employee of Omnicell, with our affiliates as needed to manage employment relationships.
We disclose your personal data as described in this Notice below. Additionally, we reserve the right to share your personal data when you have: (1) consented to such processing and have the ability to unilaterally revoke your consent at any time, or (2) have expressly made such personal data public, subject to limitations under applicable law. Personal data shared with third parties for purposes of processing will only be shared pursuant to a data processing agreement.
- performance of the contractual obligations in our Omnicell Website Terms and Conditions and in order to provide the services to you;
- serving our legitimate interests and those of third-party vendors, consultants, and other service providers
- protecting the personal safety and property of Omnicell, its customers, or any other third party;
- providing or improving our services and the safety and security of our services, websites, and applications including facilitating identification and authentication, targeted online and offline marketing, for general research and aggregate reporting, customization of website and application customer experiences;
- enabling third parties to perform services on behalf of Omnicell including, but not limited to, payment processing, research, analytics, and security; or
- compliance with a legal obligation or judicial or administrative order or in the course of judicial or administrative proceedings;
- protecting the rights and property of Omnicell and our agents, customers, and third parties including, but not limited to, the right to enforce our agreements, policies, and terms and conditions;
- facilitating the negotiation of any merger, financing, acquisition, or dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all, or a portion of our business or assets to another company. In the event of an insolvency, bankruptcy, or receivership, personal data may also be transferred as a business asset. If another entity acquires our company, business, or assets, that entity will possess the personal data collected by us and will assume the rights and obligations regarding your personal data as described in this Notice. Omnicell will not disclose your personal data to Third Parties without your express, revocable consent except as specified in this Notice.
For avoidance of doubt, “Consumer” means any California resident, and “Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as more fully defined in the California Consumer Privacy Act (CCPA).
- In no event will Omnicell sell Personal Information provided by a Consumer. Omnicell does not offer financial incentives to Consumers for the collection of Personal Information or the deletion of Personal Information. Except as permitted by the CCPA and in accordance with any program of financial incentives established by Omnicell, if any, Omnicell will not discriminate against a Consumer because the Consumer exercised any rights under the CCPA by denying goods or services to the Consumer; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing a different level or quality of goods or services to the Consumer; or suggesting that the Consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.
- Inquiries concerning CCPA or our compliance with the CCPA may be directed to us by email at privacy@Omnicell.com, or to our toll-free telephone number at (800) 671-0535.
If you are user of the Site residing outside of the United States, by visiting the Site and providing us with personal data, you acknowledge and agree that your personal data may be processed for the purposes identified in this Notice. In addition, your personal data may be processed in the country in which it was collected, but also in other countries outside of your country of Residence, including the United States, where laws regarding processing of personal data may be less stringent than or otherwise differ from the laws of the country in which you reside or are located when using our services.
Privacy laws and regulations in certain countries, including the rights of governmental authorities to access your personal data, may differ from those in the country in which you reside or are located when using Omnicell’s services. Omnicell will only transfer personal data to governmental entities when authorized by the laws of the countries in which such transfers of personal data occur.
In light of the judgment of the Court of Justice of the European Union (CJEU) in Case C-311/18, the Privacy Shield framework for the transfer of personal data from the EU to the United States has been invalidated. Transfers of personal data between the EU and the United States are now based on the Standard Contractual Clauses (SCCs) and data processing agreements.
However, Omnicell remains certified under the Privacy Shield Frameworks and is fully committed to its principles. The Federal Trade Commission has jurisdiction over Omnicell’s compliance with the Privacy Shield Frameworks. Omnicell’s U.S. affiliates, namely Omnicell, Inc., Omnicell International, Inc., Medpak Holdings, Inc., MTS Medication Technologies, Inc., MTS Packing Systems, Inc., and Ateb, Inc (collectively “ Omnicell US”) comply with the EU-U.S. and the Swiss-U.S. Privacy Shield Frameworks, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland, to the United States. Omnicell US has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between terms in this Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield Frameworks and to view our certification, please visit https://www.privacyshield.gov/welcome.
In compliance with the Privacy Shield Principles, Omnicell commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding Omnicell’s compliance with the Privacy Shield program should first contact Omnicell at GDPR@omnicell.com. In addition, our EU Data Protection Officer may be reached at:
2B Advice GmbH
Joseph-Schumpeter-Allee 25, 53227 Bonn, Germany
Telephone: +49 228 926165 120
Omnicell has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim for more information or to file a complaint. The services of JAMS are provided at no cost to you.
An individual who decides to invoke this arbitration option must take the following steps prior to initiating an arbitration claim: (1) raise the claimed violation directly with Omnicell and afford Omnicell an opportunity to resolve the issue within the timeframe set forth in Section III.11(d)(i) of the Principles: https://www.privacyshield.gov/article?id=11-Dispute-Resolution-and-Enforcement-d-e; (2) make use of the independent recourse mechanism under the Principles, which is at no cost to the individual; and (3) raise the issue through their Data Protection Authority to the Department of Commerce and afford the Department of Commerce an opportunity to use best efforts to resolve the issue within the timeframes set forth in the Letter from the International Trade Administration of the Department of Commerce, at no cost to the individual. This arbitration option may not be invoked if the individual’s same claimed violation of the Principles (1) has previously been subject to binding arbitration; (2) was the subject of a final judgment entered in a court action to which the individual was a party; or (3) was previously settled by the parties.
In addition, this option may not be invoked if an EU Data Protection Authority or the Commissioner (1) has authority under Sections III.5 or III.9 of the Principles; or (2) has the authority to resolve the claimed violation directly with the organization. A DPA’s/the Commissioner's authority to resolve the same claim against an EU or a Swiss data controller does not alone preclude invocation of this arbitration option against a different legal entity not bound by the DPA/Commissioner's authority.
In the context of an onward transfer, Omnicell, as a Privacy Shield Organization, has responsibility for the processing of personal information it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf. Omnicell organization shall remain liable under the Privacy Shield Principles if its agent processes such personal information in a manner inconsistent with the Privacy Shield Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.
Omnicell commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.
The main EU DPAs with which we cooperate and to which we have notified our DPO are the following:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Fax: 01625 524510
Garante per la protezione dei dati personali
Piazza Venezia n. 11 - 00187 Roma
www.gpdp.it - www.garanteprivacy.it
Telephone: (+39) 06.69677.1
Fax: (+39) 06.69677.3785
CNIL (Commission Nationale de l'Informatique et des Libertés)
3 Place de Fontenoy TSA 80715
75334 PARIS CEDEX 07, France
Telephone: +33 (0)220.127.116.11.22
Fax: +33 (0)18.104.22.168.00
PO Box 93374
2509 AJ DEN HAAG
Telephone: (+31) - (0)70 - 888 85 00
Fax: (+31) - (0)70 - 888 85 01
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Telephone: 0611 – 1408 0
Fax: 0611 – 1408 611
State Commissioner for Data Protection and Freedom of Information
Postfach 20 04 44
Telephone: 0211 / 38424-0
Fax: 0211 / 38424-10
If you are residing, or located, in an EU Member State, you may also contact your local supervisory authority, the government agency charged with the enforcement of privacy laws, for information about your rights as a data subject. Under the law, you have the right to redress for violations of your privacy rights, as well as to seek compensation for violations of your privacy rights. Contact information for the respective supervisory authorities can be found at https://edpb.europa.eu/about-edpb/board/members_en.
- Request access to your personal data in order to receive a copy of the personal data we hold about you.
- Request correction of the personal data that we hold about you in order to correct any incomplete or inaccurate information. New information provided to us may require verification.
- Request erasure of your personal data where a legitimate interest for us to process such personal data does not exist. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be provided to you, if applicable, at the time of your request. For example, where we have a legal obligation to retain and store your personal data.
- Request restriction of processing of your personal data.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party at your direction, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to personal data which you (a) initially provided consent for us to use, (b) where we utilized the personal data to perform a contract, or (c) we utilized the personal data to provide services to you.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and you object to processing on the basis that the processing impacts your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data, which override your rights and freedoms. You may, however, control the extent to which we market to you, and you have the right to request that we stop sending you marketing messages at any time.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. In particular, you may opt out of receiving promotional emails from us by following the instructions in those emails. If you opt out, we may still send you non-promotional emails, such as emails about our ongoing business relations. You may also send requests about your contact preferences and changes to your personal data including requests to opt-out of sharing your personal data with third parties by clicking on the Individual Data Requests button at the top of this Notice.
If we make any material changes in the way we use your personal data, we will notify you by sending you an email to the last email address you provided to us and/or by posting notice of the changes on our Site. These changes will be effective immediately for new users of our Site. Please note that at all times you are responsible for updating your personal data to provide us with your most current email address. In the event that the last email address that you have provided to us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the email containing such notice will nonetheless constitute effective notice of the changes described in the notice. Continued use of our Site or service, following notice of such changes after such emails are sent shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.
Questions or requests may be directed to email@example.com.