Global Privacy Notice

Effective Date: January 1, 2020

Last Updated: June 30, 2023

Please click here for:

• 1. the Global Privacy Notice translated in other languages
• 2. further jurisdictional and product-specific information relating to your privacy rights and our practices

I. Introduction

Appropriately managing and safeguarding personal data is fundamental to Olympus Corporation and its family of companies’ (“We” or “Olympus”), core values and commitment to patients, healthcare professionals(“HCP”), external business partners, employees, and customers. This Privacy Notice explains how we collect, use and share information, including your personal data, when it’s collected through this website and/or mobile application, linked products, applications, services, websites, sub-sites, widgets, interactive features, forms, mobile site(s) and social media pages offered, owned, or operated by Olympus (the “Site(s)”).

If we make changes to this Privacy Notice, we will notify you by revising the Effective Date above and, in some cases, we may provide you with more prominent notice (such as sending you a notification or providing you with other disclosures within or in connection with the provision of the Sites). Your access to and use of the Site(s) means you agree to the terms in this Privacy Notice. We encourage you to refer to this Privacy Notice periodically so that you understand our current privacy practices.

This Privacy Notice Explains:

• I. Introduction
• II. Who You Should Contact
• III. Types Of Information We Collect And Use
• IV. Why We Collect And Use Information
• V. Additional Ways We May Collect and Share Your Information
• VI. How Long We Will Keep Your Personal Data
• VII. Our Use Of Information Technology
• VIII. Security
• IX. International Transfers Of Personal Data
• X. Promotional Emails
• XI. Information Applicable To Residents Of the United States
• XII. Personal Data Subject To European Privacy Laws
• XIII. Personal Data Subject To Japanese Privacy Laws
• XIV. Personal Data Subject to Personal Information Protection Act of Republic of Korea

II. Who You Should Contact

If you have any questions about this Privacy Notice, please contact us by using the following information:

Contact us within the Americas:

Attn: Data Protection
Olympus Corporation of the Americas
3500 Corporate Parkway Center Valley, PA 18034
privacy@olympus.com

Contact us within Europe, Middle East and Africa:

Attn: Data Protection
Olympus Europa SE & CO. KG
Amsinckstraße 63 20097 Hamburg, Germany
privacy@olympus.com

Contact us in Asia:

Attn: Data Protection
Olympus Corporation
Shinjuku Monolith, 3-1 Nishi-Shinjuku 2-chrome Shinjuku-ku, Tokyo 163-0914, Japan
privacy@olympus.com

Or, follow the instructions in the “contact us” section within the Site(s), if applicable.

III. Types Of Information We Collect And Use

Olympus collects certain information, including personal data, from you and about you. The term “personal data” means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to a natural person (you). Olympus’ goal is to limit the information we collect to the information needed to support our business. Not all categories may be collected about every individual.

Below is a summary of the categories of personal data we may collect, where we get it, why we collect it, and with whom we may share it:

IV. Why We Collect And Use Information

Below are examples of ways we use your information collected for product and service fulfillment; marketing, promotions, and advertising; internal operations; fraud prevention, security and compliance; and payment processing, as referenced above:

(a) Product and Service Fulfillment

• To complete, fulfill, manage, and communicate with you about your transactions;
• To establish and service your online profile/account on the Site(s);
• To provide you with customer service and alert you to product or shipping information;
• To enable the provision of services, such as training events, repair of products, and other events or services;
• To administer loyalty programs; and
• Respond to inquiries, requests, complaints, questions, comments.

(b) Marketing, Promotions & Advertising

• To deliver information about our products, services, and promotions (e.g., email, third-party sites or applications, and mobile devices);
• To provide interactive features on the Site(s) (e.g. product ratings and reviews, comments, blogs, real-time offers and location-based offers);
• To identify product preferences and shopping preferences (e.g. services and promotions of possible interest) and;
• To administer contests, sweepstakes, promotions, and surveys.

(c) Internal Operations

• To improve the effectiveness of the Site(s), services, merchandise assortment, and customer service;
• Quality control and training;
• To confirm contractual requirements;
• To conduct research and analytics related to our operations; and
• To perform other logistics and operations activities as needed.

(d) Fraud Prevention, Security and Compliance

• To protect our assets and prevent fraudulent transactions;
• To validate credentials and authenticate customers, HCP’s and other users when logging into your online profile, and/or applications;
• To protect the security and integrity of our services and our data; and
• To assist law enforcement and respond to legal regulatory inquiries.

(e) Payment Processing

• To process your payments and address your order inquiries and requests.

Olympus does not rent, lease, or otherwise sell your Personal Data.

V. Additional Ways We May Collect And Share Your Information

In addition to the methods enumerated above, Olympus may collect and share information, including your personal data, through the following methods:

(a) Information From Other Sources

• We may receive your updated shipping information from a third-party provider.
• We engage with current and prospective customers through multiple internet marketing channels and social media services (e.g., Facebook, Instagram, Twitter, Tiktok, Wechat, Weibo). If you contact us on one of our internet marketing channels, request customer service via social media or otherwise direct us to communicate with you via social media, we may contact you via direct message or use other internal or social media tools to interact with you. In these instances, your interactions with us are governed by this Privacy Notice as well as the privacy notice of the social media platform you use. If you choose to access, link to, or log-in to our Sites or internet marketing channels or otherwise communicate with us through a third-party social media service, you are granting us permission to access and use the information that you post or store on the applicable social media service in accordance with the privacy notice of that service and the privacy settings that are applicable to your account, and to store the user name and password you use to log-in to the applicable social media service. By accessing or logging into our Sites or internet marketing channels via a social media service, any information you provide to us may also become accessible to that service, subject to that service’s privacy notice. For additional information and more details on how you can manage the information provided to us by these social media services, please review the privacy settings applicable to your account with the applicable social media service. We do not control, and are not responsible for, the privacy practices of such services. Please consult the privacy notice of such services for additional information.
• We may also share aggregated or anonymize information, which cannot reasonably be used to identify you.
• We participate in consortiums to share information or match customer data. When shared, this information is de-identified or anonymized.
• We may receive various types of information, including identification information, contact information, and transactional information, from our service providers, vendors, and family of companies. We may combine the personal data and non-personal data collected online and offline, including information collected from third parties to provide you with advertisements we think you will find interesting.

(b) Business Transfers

• Unless otherwise prohibited by law, if Olympus merges with, acquires or is acquired by another business entity, it may share your information with any successors to all or part of its business. This may include an asset sale, corporate reorganization or other change of control. If Olympus or any of its subsidiaries sold to or are otherwise acquired by a third party, all Olympus’ data assets will become the property of the acquiring party. Such a party will be subject to the consent(s), opt-outs or other customer conditions on data. A change in data ownership may or may not include a notice on the Site(s).

(c) Third Party Marketing

• Unless prohibited by law, including the European Privacy laws, as defined in Section XII, we may share your information with third parties that provide products or services we believe may interest you. These third parties may also share your information with others. These third parties may use your information for their own marketing purposes or the marketing purposes of others. This may include the delivery of internet-based advertising.

VI. How Long We Will Keep Your Personal Data

We will retain your Personal Data only as long as necessary to provide you with the products, services and programs you request, our essential business purposes, such as maintaining the performance of the services and programs, making data-driven business decisions about new features and offerings, complying with our legal obligations and resolving disputes. When we have no justifiable business need to process your Personal Data, we will either delete or anonymize it.

The criteria, used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide services or programs to you (for example, for as long as you have a profile/account with us or keep using the services/programs);
• Whether there is a legal obligation to which we are subject; or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statues of limitations, litigation or regulatory investigations).

VII. Our Use Of Information Technology

This section describes the various types of technologies we may use when you interact with our Site(s), and your choices regarding those technologies:

(a) Cookies, Pixel Tags, and Flash Cookies

• We collect certain information, including personal data, by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs, and web beacons. Cookies are small text files that websites send to your computer or other connected device to uniquely identify your browser or to store information or settings in your browser. Cookies allow us to recognize when you return to the Site(s). They also help us provide a customized experience and enable us to detect certain kinds of fraud. The types of technology used by Olympus may change over time as technology evolves. Some of these technologies are essential for the provision of the Site(s), such as account access/authentication. To learn more about the cookies we use, click here.

(b) Website Optimization Services

• Olympus shares information with Adobe Analytics and other optimization services to understand and optimize website performance and enhance site usability for users. These tools run in the background of our sites analyzing site usage information and then return reports to us through an encrypted connection. They are required to maintain data securely and confidentially and are not permitted to share data collected with parties other than Olympus. Credit card, passwords or other sensitive information is not collected through these optimization services. In addition, these services may associate and group session visits to our website from various browsers and devices. To learn more about Adobe Analytics, including options for opting out and/or managing the ads you may see online please visit: https://www.adobe.com/privacy/opt-out.html .

(c) Interest-Based or Online Behavioral Advertising

• Olympus uses third-party advertising companies to serve interest-based advertisements. These companies compile information from various online sources to match user profiles with ads we believe will be most relevant, interesting and timely based on that users profile.

(d) Social Network & New Tech Advertising Programs

• Olympus has relationships with several social networks. These companies have specific interest-based ads programs that match people that have shown an interest in Olympus through our Site(s) or other services within their profiles (such as on Facebook) and platforms (such as Facebook and Google). This matching allows us to deliver relevant, interest-based ads on those companies’ networks.

(e) Do Not Track

• Olympus does not currently recognize and process Do Not Track signals from different web browsers. For more information on Do Not Track please visit http://www.allaboutdnt.org/ .

VIII. Security

Olympus is committed to maintaining appropriate organizational, technical, and physical controls to protect the personal data entrusted to us. These controls protect personal data from anticipated threats and hazards as well as unauthorized access and use. Olympus will strive to provide security that is proportional to the sensitivity of the personal data being protected, with the greatest effort being focused on protecting sensitive personal data, like financial or medical data, that could result in substantial harm or inconvenience if it got into the wrong hands.

IX. International Transfers Of Personal Data

Your information, including your personal data, will be submitted to servers managed by Olympus and/or its service providers/sub processor(s). By accessing or using the Site(s) or otherwise providing information to us, you consent to the processing and transfer of information, including your personal data, to the European Union, Japan, United States and/or any other location where the Olympus group operates which are described at https://www.olympus-global.com/company/base/?page=company.

X. Promotional Emails

If we send you any promotional emails, and you no longer would like to receive such emails, please follow the “unsubscribe” instructions on those emails, if available. Your email address will be removed from our marketing list. Please allow us a reasonable period of time in order to satisfy your request.

XI. Information Applicable To Residents Of the United States

(a) Information about Minors

Olympus is strongly committed to preserving online privacy for all of our Site(s) visitors, including children. Olympus’ policy is not to collect any personal data about children under 13 years old. Olympus’ services are offered to customers who are the age of 13 years and above. No programs, services or offerings are intended for children under the age of 13. Furthermore, we may restrict entries to any contests, sweepstakes or promotions to entrants who are at least 18 years of age.

Minors under 18 years of age may have the Personal Information that they provide to us through the Site deleted by sending an email requesting deletion to privacy@olympus.com. Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal data does not ensure complete and comprehensive removal of that data from all systems.

(b) California Residents

California residents have certain additional rights regarding our use and disclosure of personal information. For purposes of this section XI only, the term “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as further defined by the California Consumer Privacy Act of 2018.

• 1. You may request a copy of the following: (1) The categories of personal information we collected about you; (2) The categories of sources from which the personal information is collected; (3) The business or commercial purpose for collecting or selling (if applicable) the personal information; (4) The categories of third parties with whom we share personal information; and (5) The specific pieces of personal information we have collected about you. To submit a request for this information, you may email us at privacy@olympus.com.
• 2. You may request that we (and our service providers) delete your personal information. Note that deletion requests are subject to certain limitations, for example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, to process transactions and facilitate customer requests, and for certain other internal business purposes described in this Privacy Notice. To submit a request for deletion, you may email us at privacy@olympus.com.
• 3. You may request to opt-out of the sale of your personal information by emailing privacy@olympus.com. Please see below for the categories of personal information we may have sold about you in the preceding 12 months.
• 4. We will not discriminate against you for exercising your rights under this section.
• 5. As set forth above, California law requires us to identify, for the prior to the collection of your personal data, what information Olympus has “sold” about you. Please be assured that Olympus does not sell or rent your information to third parties purely for our profit, to data brokers, or in any way other than those intended to improve your online experiences and the relevance of offers made to you through Olympus and elsewhere. Instead, there are instances where Olympus has shared personal information in order to provide our customers with personalized services or customized offers to improve your online experiences through our services or elsewhere. We do this in ways that are intended to extend the Olympus experience to our customers in a variety of environments. Depending on the circumstances and the contractual obligations in place, this sharing may be a “sale” under applicable law and you may have the right to request that we stop such sharing as more fully set forth below. This sharing includes:
  • ・ identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, account name, and other similar identifiers;
  • ・ commercial information, including records of services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
  • ・ Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements; and
  • ・ inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Olympus may require proof of California residence before responding to any request made under this section. You may authorize another person (your “agent”) to submit a request on your behalf by emailing privacy@olympus.com. Shortly after you (or your agent) submit a request, we will contact you (via email at the email address provided during submission of your request) with instructions on how to verify the request before we fulfill it. We will verify your identity by asking you to log in to your account if you have one with us. Or if you do not, we may ask for your email address, the order number of a recent order you placed with us or the last four digits of a credit or debit card used on our Site(s). We will aim to complete your requests as soon as reasonably practicable and consistent with any applicable laws.

If you have an account with us, you may also see certain personal information (such as certain profile and transaction information) directly through your account profile page after logging in to a Site. Please note that changes you make on your account profile page through one of our Sites may not always be reflected on other Sites operated by us.

(c) Shine the Light Law - Direct Marketing

You have the right to request information from Olympus once per calendar year regarding the manner in which Olympus shares certain categories of your personal information with third parties, for the third parties' direct marketing purposes. California Civil Code § 1798.83 provides you with the right to submit a request to Olympus at its designated address and receive the following information:

• 1. The categories of personal information Olympus’ disclosed to third parties for the third parties' direct marketing purposes during the preceding calendar year;
• 2. The names and addresses of third parties that received such information; and
• 3. If the nature of a third party's business cannot be reasonably determined from the third party's name, examples of the products or services marketed.

You are entitled to receive a copy of this information in a standardized format and the information will not be specific to you individually. Olympus’ designated email address for such a request is privacy@olympus.com .

To learn more about managing your privacy and to know your choices concerning interest-based ads, you may visit the Network Advertising Initiative's opt-out page at http://www.networkadvertising.org/managing/opt_out.asp or www.aboutads.info/choices .

XII. Personal Data Subject To European Privacy Laws

If you are located in the European Union, the United Kingdom, Switzerland and/or your personal data is otherwise subject to the General Data Protection Regulation or comparable European Data Protection Legislation (collectively referred to as “European Privacy Laws”), this section provides additional information about your rights and how Olympus processes your personal data.

Olympus is the controller of personal data submitted by you or otherwise collected when you use the Site(s). Please note, however, that Olympus is not the controller of third-party data you may submit to the Site(s). We process such information within the Site(s) solely in the processor’s role and, depending on the scope of your activity, you may be the data controller.

(a) Rights to Control Your Personal Data

• You may have certain rights with regard to your personal data under European Privacy Laws. If you would like to request a copy of your personal data being held by us, request that your personal data is deleted, request to update and/or correct your personal data, or request that we provide a copy of your personal data to another data controller, please contact us. We will aim to respond to your request within one calendar month of receipt of your request. Where we are unable to do so within the calendar month, we will notify you of the soonest practicable time within which we can respond to your request (and within three months from the date of your request). There are certain exemptions and restrictions of these rights under the European Privacy Laws that enable personal data to be retained, processed or withheld from access and we will inform you of these restrictions if they apply. We use your Personal Data as described in the chart above.

(b) Sharing your personal data

• We share your personal data with third parties to help us use your personal data, as described in the Privacy Notice.

(c) Tracking Tools (“Cookies”)

• We use cookies as described in our Cookie Notice. You may choose to block or delete cookies, but doing so will cause the Site(s) to not operate correctly.

(d) Contact us

• You may access, download, change, or modify your personal data by contacting us. You may also exercise your right to prevent us from sharing your personal data at any time by contacting us as described above in the “Who You Should Contact” section.

(e) Submit a Complaint to a Supervisory Authority

• You have the right at all times to submit a complaint to a data protection supervisory authority, in case you feel that the processing of your personal data, as described in this Notice, infringes with the law. You may find a list of the supervisory data protection authorities in Europe here: https://edpb.europa.eu/about-edpb/board/members_en .

(f) Legal Basis

Olympus has the following legal basis for processing your Personal Data:

Type of Personal Data	Legal Basis
Information you provide to us	Olympus exercising its rights and performing its obligations in connection with any contract we make with Controller (Article 6 (1) (b) General Data Protection Regulation). Compliance with Olympus’ legal obligations (Article 6 (1) (c) General Data Protection Regulation).
Information we collect automatically	Legitimate interests pursued by Olympus (Article 6 (1) (f) General Data Protection Regulation). Olympus has assessed that these legitimate interests are not overridden by the data protection interests or fundamental rights of any individuals. Compliance with Olympus’ legal obligations (Article 6 (1) (c) General Data Protection Regulation).

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Data, please contact us at privacy@olympus.com.

XIII. Personal Data Subject To Japanese Privacy Laws

You may request, pursuant to the Act on the Protection of Personal Information (Japanese Law), the disclosure correction, deletion or other measures regarding the personal data provided hereby. Please see “Personal Information Inquiry” for matters concerning procedures for consenting to “requests for disclosure” on the service desk.
https://www.olympus-global.com/privacy/jp/

XIV. Personal Data Subject to Personal Information Protection Act of Republic of Korea

If you are a citizen of the Republic of Korea and/or your personal data is otherwise subject to Personal Information Protection Act, Credit Information Use and Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection or other comparable Korean Data Protection Legislation (collectively referred to as “PIPA Laws”), this section provides additional information about your rights and how processes your personal data.

(a) Rights to Control Your Personal Data

You may have the following rights in relation to the processing of his or her own personal information.

• 1. The right to be informed of the processing of such personal information;
• 2. The right to determine whether or not to consent and the scope of consent regarding the processing of such personal information;
• 3. The right to confirm whether or not personal information is being processed and to request access (including the provision of copies; hereinafter the same applies) to such personal information;
• 4. The right to suspend the processing of, and to request correction, deletion, and destruction of such personal information;
• 5. The right to appropriate redress for any damage arising out of the processing of such personal information through a prompt and fair procedure. If you would like to request a copy of your personal data being held by us, request that your personal data is deleted, request to update and/or correct your personal data, or request that we provide a copy of your personal data to another data controller, please contact us. We will respond to your request within ten business days upon the receipt of your request. We are entitled to limit or deny your request when your request is prohibited or limited by PIPA Laws; or when your request may cause damage to the life or body of a third party, or unjustified infringement of property and other interests of any other person. We will notify you the causes within ten business days.

(b) Sharing Your Personal Data

We do not share your personal data unless you give us a prior consent for marketing and/or promotional purposes. Regardless of Section IX above, we shall gain your additional consent for international transfer of your personal data.

(c) Destruction of Data

Olympus destroys your personal data without delay after the purpose of collecting and using personal information is achieved or after the retention period expires. However, in the case of personal information that needs to be preserved in accordance with relevant laws and internal regulations, it is moved to a separate storage space after the purpose of collection and use is achieved, and it is stored and destroyed according to each retention basis and period. Your personal data shall not be used for any purpose other than the purpose corresponding to each retention basis. When destroying personal information, hard copies containing any personal data shall be shredded, and personal information stored in electronic file form shall be completely deleted using technical methods to prevent any recovery and reproduction.

(d) Contact Us

You may access, download, change, or modify your personal data by contacting us. Please email us at: pip.okr@olympus-ap.com.

History of revision