Privacy Policy

1.Introduction

GN respects your privacy and is committed to protecting your personal data. This privacy policy gives you information about how GN collects and processes your personal data when you purchase our products or services, use our website, tools, applications, email or communicate in other ways with us e.g. in relation to support requests, queries, marketing activities, surveys, participate in events or interact with GN in relation to social media platforms etc.

Please note that other privacy policies may apply to certain specific solutions or services provided by us. We kindly refer you to read that privacy policy for the information related to the specific solutions or service you are using. 

This privacy policy may supplement such other policies and is not intended to replace them.

For sake of good order if you are applying for a job or have applied for a job, please refer to privacy policy available on www.gn.com

2.Who we are

The legal entity who is controller and responsible for processing your personal data is:

GN Audio A/S, Lautrupbjerg 7, 2750 Ballerup, telephone +45 4575 0000, email info@gn.com (the “Company”).

The Company markets brands such as Jabra, Blueparrott a.m. 

Data Protection Officer

For general questions concerning personal data you may contact our data protection officer on (click on the link): GN Data Privacy Inquiry Site

For specific request concerning your personal data you may contact our data protection officer on (click on the link): GN Data Privacy Request Site

The Company is part of an international group of companies which is engaged in different activities: production and marketing of for example hearing instruments, headsets, speakerphones, webcams, accessories and other services and products.

When referred to “GN”, “we” or “us” it includes the Company and/or any other relevant affiliated company whose involvement is necessary to achieve the purposes as described in this privacy policy. You can find more information about the companies in the GN Group here: www.gn.com

The GN companies may act as joint controllers when processing your data. In such case we jointly determine the purposes and means of processing personal data. We have determined how the respective tasks and responsibilities in the processing of personal data are structured and who fulfils which data protection obligations.

GN store Nord, Lautrupbjerg 7, 2750 Ballerup, Denmark (“GNSN”) is an affiliated company to the Company.  GNSN is at your disposal as your central point in case of any questions in relation to our use of personal data, and GNSN can be contacted by using the contact information above. You are also free to assert your rights by contacting any of the involved companies. In case you do so and if necessary, GNSN and the company in question will coordinate in order to respond to your inquiry and to guarantee your rights as a data subject.

3.How we collect your personal data?

We collect your data in different scenarios and from different sources, such as directly from you, through third parties and/or through automated means, such as:

• We collect and use personal data about you when you use our websites, our apps, contact us on phone, email, text or through other channels to purchase products or services, request support, provide ratings, subscribe to newsletter or white papers, participate in a competition, a test, promotions or surveys;
• We collect and use personal data about you when you participate in a meeting with us or attend our events;
• we receive personal data about you from various third parties (incl. social media platforms and other similar third-party websites), when you communicate with us or otherwise use our services on social media platforms and similar websites; cf. also the section on social media platforms below;   
• We may use contact data or other business-related data about contact if you are an employee with, or otherwise engaged by any of, our partners; 
• we may use information from rating companies or other agencies providing information about you; and    
• we may use personal data about you from publicly available sources; and
• we may use personal data about you received from our partners, such as your hearing care professional and similar partners to the extent provided by such hearing care professionals or partners.

4.What data do we use and why?

We have set out below, a description of how we may use your personal data. This is a generic description and the specific use may differ in some cases and may be more detailed in a specific privacy policy for an app, a hearing aid, a headset, a speakerphone, tests etc.  

We use the personal data to achieve purposes such as outlined below: 

• to maintain a professional relationship with our business partners, we collect you and/or your company’s contact info, title, records of sales, plans, professional activities, product inquiries, minutes of meetings, service provided to partners etc;
• to allow for purchasing, self-service and training by our customers we give you access to profile areas such as web shops or partner portals. In this connection we collect your contact info where needed, depending on the service, your access credentials and the activity you create within the portals, such as purchases, downloads, training completed etc; 
• to provide and supply services and products requested and/or purchased by you and to communicate with you about such services and/or products, i.e. requests, inquiries, complaints in relation to these, we may use your contact information such as name, address, email, phone number, your purchases, payment information and your specific requests. If you are a current or potential customer of our hearing aids or other medical related products, we may also collect and use sensitive information about your health where necessary and when provided by you to us and/or your hearing care professional. If you are acting on behalf of another person, we note your contact information and our communication;
• to provide you with the chance to have your hearing ability tested, we offer certain hearing tests online, and subject to your consent, we collect information such as your contact information, age, gender and your test result and transfer this to a hearing care professional in order for the hearing care professional to contact you regarding a hearing consultation;
• to recommend products and services we think you will be interested in, we contact on you on phone, text, email or browser, depending on the consent you have given us. When doing so we use your information such as name, address, email, phone number and the information we have registered about your preferences, incl. but not limited to automated information collected via your use of GN websites, GN apps and other websites (see more about automatically collected information below);
• to provide you with our services in our apps, subject to your privacy choices, we collect and use Product and Device Information (as defined below), we may also collect information such as name, address, telephone, age, gender, and location (if you have accepted a GPS-enabled service) and other data types. Some of our apps have features that require you to take pictures of yourself and your hearing aids. These features rely on facial and object recognition technologies and are used with the purpose of ensuring a good quality fitting and sound experience for you. The pictures are only stored locally in the app and are not accessed or used by GN nor shared with any third parties. The pictures can be deleted directly in the app or simply through uninstalling the app from your phone. Some of our apps allow you to subscribe to functionality, for example, to create your own plan for managing tinnitus;
• to tailor products and services to you, and subject to your consent, we collect information such as age, gender, location, usage data, hearing loss, purchases, returns, requests, complaints, ratings, feedback on surveys, hearing aid usage logs, fitting information etc. to understand your individual characteristics and to provide you with recommendations for usage, products, services, guidance etc;  
• to better understand how people interact with our products and services, to analyze trends, to create statistical information, to develop optimized and personalized product and feature profiles, we use information in an anonymized format such as age, gender, location, usage data, hearing loss, purchases, returns, requests, complaints, ratings, feedback from surveys or test panels, hearing aid usage logs, fitting information, collected actively from you, via online services and or from a designated partner e.g. a hearing care professional or other partners;
• to better understand how people interact with our websites and apps, to analyze trends, to ensure security on our websites, to create statistical information, to develop optimized and personalized product and feature profiles we, subject to your consent, where required, collect certain automated information:
• when you use our websites, we automatically gather and store certain information in server log files, including data available from your web browser, such as IP Address, browser type, internet service provider, referring/exiting pages, operating system, date/time stamp and how you use our websites;
• when you use our apps, we may collect information about your computer or mobile device such as unique id, model, IP address, bluetooth mac address and your operating system. GN will also collect and use information about how our app features are used in general. This could be information about how extensively a feature is used and when the feature is typically activated. Also, we collect information about your products (hearing aids, headset, speakers a.m.) connected to our apps, such as model, model number and firmware version. (altogether referred to as “Product and Device Information”);
• When use you use our services on our websites and in some cases in our apps and emails we may also collect and use certain data about your equipment, browsing actions and patterns by using GN and/or third party-cookies and other similar technologies cf. also the section on cookies below, in order to better tailor our services and messages to you;
• to ensure payment for subscription of certain services through our websites, your contact and payment information may be collected. GN will not have access to your payment information. GN refers you to the payment service providers’ personal data policies for information about your payment;
• for subscription of apps through various third-party app stores, GN refers you to privacy policies available within these services;
• to communicate with current and potential customers, to market, improve and develop our products and services and to inform about various activities, we use social media platforms cf. also the section on social media platforms below;
• to prevent or detect fraud and to establish, exercise or in defense of legal claims, we use your contact info such as name, address, email, phone number and the information we have registered about your requests, inquiries, purchases and returns; 
• to comply with applicable legislation such as tax, accounting or medical requirements and/or requests from law enforcement agencies, we use and share with such law enforcement agencies and regulatory authorities, information about purchases, returns or complaints and your contact info such as name, address, email, phone number to the extent required; 

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for an additional purpose which is compatible with the original purpose. If we were to consider using your personal information for a new purpose, we will inform you or, as required, collect your consent.

5.What is our legal basis?

Applicable personal data legislation may require us to outline the legal basis on which we collect and use your personal data. This is for example a requirement under the EU General Data Protection Regulation and similar national legislation.

Below we have outlined the legal basis we rely on to collect and use your data. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.  

We will use your personal data based on the following legal bases:

• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests, we base our use on our legitimate interest;
• where the information is needed to perform a contract, we are about to enter into or have entered into, we rely on the performance of the contract as a legal basis; 
• where the information is needed to comply with a legal or regulatory obligation, we rely on this as a legal basis; 
• where your consent is required as a legal basis for processing your personal data, we strictly use your data based on your consent;
• Where it is necessary for the establishment, exercise or defense of legal claims. 

When we rely on our legitimate interest, we do this to:

• manage our supplier relationship with you;
• study how customers purchase, return, use or react to our products/services in order to provide you with better products and services;
• run our business and ensure provision of administration and IT services and hereby provide you with the products and services you have purchased, and to provide effective service and support to you;
• communicate with you and understand your needs and to provide you with relevant information on social media platforms;  
• ensure your safety when using our products and services and visiting our websites;
• prevent fraud and hereby ensure you the best possible service and support experience.

It is necessary for GN to collect and process certain limited information, subject to appropriate safeguards, to be able, for example, to provide transactions requested by our customers, administer our shared systems in the GN Group of companies, to understand our customers, and fulfil our obligations towards our customers and other third parties.

To the extent use of your personal data is governed by national regulation requiring explicit or deemed consent for the use described in an applicable privacy policy we only do this based on your consent. Consent may be required when we for example

• send you newsletters;
• use your health data; or
• transfer your data to a third-party or affiliate inside or outside your country;

We will only use and transfer your personal data when applicable law allows us to.

6.What happens if you fail to provide us with the required data?

Where we need to collect personal data by law, or under the terms of a contract we have with you or your company and you fail to provide that data when requested, or choose to withdraw a former given consent, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you or your organization (if this is our customer) has with us; but we will notify you if this is the case at the time. 

7.Social media

This section describes how we process your personal data in connection with your interaction with us as a data controller by use of different social media platforms, such as Facebook, Instagram, Twitter, YouTube and LinkedIn.

We use social media platforms to get in contact with current and potential customers, to improve, develop and market our products and services and to inform about various activities, i.e. we use the social media platforms:

• to understand our current and potential customers on social media platforms in relation to their demographic, preferences and interests;
• to analyze trends to develop and improve our services and communications;
• to process and respond to requests and inquiries received from you;
• to carry out market surveys to improve and develop our services and communications for the benefit of our users through our social media pages; and
• To recommend products and services we think you will be interested in, we carry out direct marketing to our customers and/or potential customers. However, if we use electronic methods, such as email or direct messaging through our social media pages, for instance, to send direct marketing to you, we will only do so if it is permitted under the applicable rules on direct marketing.

We may use information about you, such as your name, email, age, gender, country, job title, current and former employer, education background, profile picture, interests, your friend list/connections/followers, and other publicly available information, provided that you have published all or parts of this information on your social media profile, posted it on one of our social media pages or sent it directly to us via our social media platforms.

In some cases, for instance, in relation to our certain social media platforms we may act as joint controller together with a social media platform in relation to the processing of your personal data.

We generally refer to the different social media platforms' privacy policies and cookie policies for more information about their processing of your personal data, incl. any information on when our use is considered joint use with the social media platform in question. Below you will find a listing of the social media platforms that we use and a reference to their privacy policies.

•  Facebook's data policy
•  LinkedIn's privacy notice
•  Instagram's data policy
•  Twitter's privacy policy
•  YouTube's privacy policy provided by Google

8.Cookies

When you use or open our websites, and in some cases apps and emails, we collect personal data about you via cookies and similar technologies, such as pixels, in order to improve our website, to learn about your preferences, produce statistics, to market products and services to you. In this connection we collect information about among others your IP-address, browser type, device, operative system, user conduct and how you use our website or read our emails.

We only use your data to the extent you have given us your consent, when required, to use the data. 

If you do not give your consent to certain cookies, please note that some parts of our website or apps may become inaccessible or not function properly.

You can read more about how we use cookies in our cookie policy available on the relevant website or in the app you are using.   

9.Children

We do have products and services for children. However, If you have not reached the age of majority or are not able to enter into legally binding agreements in your country, you should not use our products and services unless necessary parental consent has been obtained. If you believe that we have received information from a person protected under child protection laws where necessary parental consent was not obtained, please notify us immediately, and we will take reasonable steps to securely remove such information.

10.Recipients

We will not pass, sell or otherwise share or disclose your personal data, except as described herein or otherwise stated at the time the personal data is collected. We will generally limit sharing of your personal data and always only share to the extent necessary.

However, we might share your personal information with:

• GN Group companies when necessary to carry out the purpose. See more about the GN Group on www.gn.com
• Service providers, e.g. hosting partners, maintenance, market or technical support. These service providers may not process your personal data for their own purposes. We will only share your information, if it is necessary in order for our service providers to perform the specific service for us. These service providers are not authorized to keep or use your personal data for any other purposes, and they will always be under an obligation to keep your personal data safe and confidential.
• selected third parties, such as hearing care professionals, distributors, resellers, payment providers, financial institutions and/or shipping/courier companies, but only to the extent this can be done in compliance with applicable law and only to fulfill our obligations to you or enforce or apply any terms and conditions or related contracts with you or your company.
• public authorities and our professional advisors if we are under a duty to do so in order to comply with any legal obligation, if it is in our legitimate interests to do so or if necessary for the establishment, exercise or defence of legal claims.

11.International transfers

In some cases, we will transfer personal data to recipients identified above which may be located in countries outside of your jurisdiction. Such transfers will be conducted in strict accordance with applicable laws, and where required we will provide appropriate safeguards for such transfers.

When transferring personal data out of the European Union or other jurisdictions requiring appropriate safeguards, we will use either the standard contractual clauses as approved by the European Commission or equivalent national bodies, or any other contractual agreement approved by the competent authorities as a basis for the transfer and where necessary, implement additional supplementary safeguards to ensure an adequate level of protection.

Your personal data will be stored in your jurisdiction if the applicable law requires so.

Please contact us by using the contact details in section 2 above, if you would like further information on the specific mechanism used by us when transferring your personal data out of the European Union and/or other jurisdictions requiring appropriate safeguards.

12.Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, such as accounting, tax or other reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your personal data are available upon request.

Please use the contact information outlined in section 2 above.

13.Your rights

Data protection law gives you a range of rights in connection with our processing of your personal data. In this regard you have the right to request access to the personal data concerning you that we use. You may request that we rectify or delete the personal data or restrict the use of your personal data, if you think they are inaccurate. You may have the right for data portability. We are required to assess and act on your request.

The mentioned rights may be subject to conditions or restrictions. Accordingly, there is no certainty that you will be entitled to for example data portability in the specific situation; it will depend on the circumstances of the processing.

If our use of your personal data is based on your consent, you may withdraw your consent at any time. However, please note that this does not affect our use of your personal data prior to withdrawal of your consent. 

If you wish to contact us about our processing of your personal data, feel free to contact our Data Protection Officer as specified above in section 2.

You have the right to be free from unlawful discrimination for exercising your rights under this privacy policy.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month and shorter where required.  Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Please be aware that you may also have the right to lodge a complaint with the Danish Data Protection Agency and with your national data protection authority or other public authority governing the protection of your personal data comprised by this privacy policy. We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection authority or other public authority, so please contact us in the first instance.

The contact information of the Danish Data Protection Agency is dt@datatilsynet.dk, www.datatilsynet.dk, telephone +45 33193200.

14.Unsubscribe to marketing communication

We provide you with the opportunity to unsubscribe to communications from us if you receive newsletters etc via e-mail or text (SMS). At the end of each message, instructions on how to unsubscribe and be removed from the mailing list are included.

15.Third-party links

Our websites may include links to third-party websites. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. 

16.In connection with a sale, merger or related event

If one of our corporate affiliates or a third party has acquired our business, specific assets or the business of one of our operating divisions (such as part of a sale, merger, reorganization, or similar event), your personal data will become owned by that company, unless otherwise provided for by local legislation. In that event, the acquiring company's use of your personal data will be subject to the governing privacy policy, and the privacy preferences you have expressed to us prior to any merger.

17.Data Security

Personal data used is stored and processed according to applicable data protection legislation. We take steps to ensure that the information we process is dealt with in accordance with this privacy notice and in accordance with applicable laws.

When required or appropriate, we shall obtain written assurances from third parties that may access your data that they will protect the data with equivalent safeguards to those adopted by GN.

To protect the privacy of your information we maintain both technical and organizational safeguards, and we regularly update and test our security measures.

18.Processor

GN may in some situations act as a data processor based on agreements entered into with partners or customers etc. The partners/customers are in these cases considered data controllers. In such case your personal data is processed by GN on the basis of the instructions provided by the controller. For more information about how your personal data is used we refer to the privacy policies of the relevant controller.  

19.Do we sell your personal data?

You are free to request and obtain from us once a year, free of charge, information about the personal information, (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year.  If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year.

Please be informed, that we do not sell and have not sold personal information in the preceding 12 months. We do not sell the personal information of minors.

20.Changes to the privacy policy

This privacy policy will be updated on a regular basis and when necessary due to changes in applicable law. The privacy policy will always include information on the effective date of the latest version. We will post any privacy policy changes on our websites. We recommend that you regularly check this page to keep yourself updated on our privacy practices.

August 9, 2023