The companies responsible for processing your personal data are: 

Novo Nordisk Kenya Limited
7^th Floor, The Convex Building,
Riverside lane, Riverside,
Nairobi, Kenya

Nordisk Pharma Limited
4^th Floor GIL Group Building, 10
Gbolahan Lawal close, Off Ashabi Cole Street
Alausa CBD, Ikeja
Lagos, Nigeria

You can always contact Novo Nordisk Kenya Limited and Novo Nordisk Pharma Limited  Data Privacy Officer at privacyma@novonordisk.com with questions or concerns about how we process your personal data.

We get your personal data from you directly in your dialogue with iCARE chatbot.

We process personal data about you for the following purposes:

• To respond to your questions or request for information.
• To perform scientific evaluations of complaints and side effects potentially related to Novo Nordisk’s medicinal products. Complaints and side effects will be filed in databases and will be regularly analysed for overall patterns.

You are not required to provide us with your personal data. If you do not want Novo Nordisk to use your personal data, we will not be able to provide you with disease awareness information through iCARE chatbot.

For the purposes described above in Section 3, we may process the following types of personal data if provided by you:

• Contact information (e.g. name, address, telephone number, email address)
• Data concerning your health and medicinal products you are using

Our processing of your personal data requires a legal basis.

By law we are allowed to process your personal data described above in Section 4 based on the following legal bases:

• You give consent for us to process your personal data
• The processing is necessary for our compliance with a legal obligation (in case of safety information).
• The processing is necessary for our legitimate interests. The legitimate interest is to provide you with an answer to your question

Your information is strictly confidential and will be treated as such. A very limited number of individuals will have access to this information, when this data is reported, it is aggregated and anonymized.

We may share your personal data with: In the course of our activities and for the same purposes as those listed in this Privacy Notice, your personal data can be accessed by, or transferred to the following categories of recipients, on a need-to-know basis to achieve such purposes:

• Suppliers or vendors that assist our company (e.g., customer services, consultants, IT service providers, financial institutions, law firms, license partners).

• Other Novo Nordisk entities.

• Public authorities including health and /or regulatory authorities if needed.

• Our safety team for follow-up on safety concerns.

We will keep your personal data for:

For a period of 90 days from date of first dialogue with iCARE chatbot.

For data related to side effects, your personal data will be entered into the Novo Nordisk global safety database and will be treated confidentially. Data will be kept until end of activity + 10 years.

For technical complaints of Novo Nordisk medicinal products, your personal data will be entered and kept permanently in the Novo Nordisk global safety database and will be treated confidentially.

In general, you have the following rights:

• You can get an overview of what personal data we have about you
• You can get a copy of your personal data in a structured, commonly used and machine-readable format
• You can get an update or correction to your personal data
• You can have your personal data deleted or destroyed
• You can have us stop or limit processing of your personal data
• If you have given consent for us to process your personal data (see Section 5), you can withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent
• You can submit a complaint about how we process your personal data to a Data Protection Authority.
   

Under applicable law, there may be limits on these rights depending on the specific circumstances of the processing activity.  Contact us as described in Section 1 with questions or requests relating to these rights