Privacy Policy & Terms of Use

PRIVACY POLICY

B. Braun of America Inc.

Last Updated: July 1, 2023

B. Braun of America Inc., along with its affiliated entities located and operating in North America, including B. Braun Medical Inc., a leader in smart infusion therapy, safe and effective pharmacy products, patient and provider safety and sustainable health solutions, (collectively, “B. Braun”, “we”, “our”, “us”) strives to help providers constantly improve patient satisfaction and outcomes. This Privacy Policy (“Policy”) describes how we collect, use, disclose, and otherwise process the personal information described in this Policy, as well as the rights and choices individuals have regarding such personal information.

For information about the privacy choices you have regarding your personal information, review Section 7. Your Privacy Choices. If you are a resident of California, please also refer to Section 13. Additional Privacy Information for California Residents for information about the categories of personal information we collect and your rights under California privacy laws.

Your use of our Services (defined below), and any dispute over privacy, is subject to this Policy and our Terms of Use, available on our website, including applicable terms governing limitations on damages and the resolution of disputes.

Table of Contents

Scope
Personal Information We May Collect
Purposes of Use and Processing
Disclosures of Personal Information
Aggregate Data and Non-Identifiable Data
Cookies, Targeting, and Analytics
Your Privacy Choices
Third Party Links
Children’s Information
Security
Changes to this Policy
Contact Us
Additional Information for California Residents

1. Scope

Except as otherwise noted below, this Policy applies to the personal information that B. Braun processes as a controller or business related to:

users of our websites, including but not limited to www.bbraunusa.com (our “Website”), our mobile applications (“Apps”), and the services we provide through these, as well as any other products and services provided by us that display or include a link to this Policy (collectively, the “Services”);
individuals who register for or participate in our webinars, trainings and other events;
customers, vendors, and partners, whether current, former, or prospective;
individuals who are subscribed to receive news, information, and marketing communications from us, including through our social media channels;
individuals who participate in surveys and research conducted or facilitated by us; and
individuals that communicate with us or otherwise engage with us related to our Services.

Not In Scope. Please note that this Policy does not apply to the following:

Personal information collected and processed by non-U.S. affiliates of B. Braun on websites maintained by such affiliates.
Personal information we collect and process about B. Braun employees, personnel, job applicants, and candidates.
Personal information that we process as a service provider or business associate on behalf of our business customers (“Client Content”). Our processing of Client Content is subject to the terms of our contracts with each business customer, who is the controller and business for the Client Content that we process on their behalf.
Links to third-party websites or features. Any access to and use of third-party websites or features is governed by the privacy policies of those third parties. We are not responsible for their information practices, including their collection of your personal information. You should review the privacy policies and terms for any third parties before proceeding to those websites or using those features.

Additional Disclosures. In some cases, we may provide additional or supplemental privacy notices (each an “additional notice”). An additional notice may apply to certain personal information collected and processed by us in connection with specific Services that we provide. The additional notice will control to the extent that there is a conflict with this Policy, with respect to your personal information that is subject to that notice.

In addition, any protected health information as defined by the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”) about you that we collect, receive, or otherwise maintain about you in our capacity as a business associate to a covered entity will be covered under the covered entity’s privacy policy and our business associate agreement with the covered entity.

2. Personal Information We May Collect

We may collect personal information directly from you, automatically through your use of the Services, and from third-party sources.

Personal Information We May Collect Directly from You. The personal information we collect varies depending upon your use of our Services and our interactions with you. In general, we may collect the following:

Account information. When you register for a “My B. Braun” account, we may collect certain personal information, including name, company, job title, email, and physical address, and other information submitted to us through the account.
Payments and purchases. When you make a purchase or payment through the Services, we collect purchase and payment information to process your payment, such as your credit card number and applicable shipping and billing address. We also maintain records about your past orders and purchases.
Communications and interactions. When you email, call, complete our “Contact Form,” or otherwise communicate with us and with members of our team, we collect and maintain a record of your contact details, communications, and our responses. We also maintain records of your communications with us and information that you provide in other forms, and in other areas of the Services, as well as on our social media channels, and information you provide to us related to any customer support requests.
Surveys. We may ask you to provide feedback or participate in surveys. We may use this information, some of which may be personal information, to improve our Services and in any manner consistent with our policies.
Events, Trainings, and other requests. We may also collect personal information related to your participation in our events and training classes as well as other requests that you submit to us related to our Services. For example, if you register for or attend an event or training class that we host or sponsor, we may collect information related to your registration for and participation in such event or training. When you fill out our “Contact Form,” signup for our mailing lists, or otherwise request information from us, we collect and maintain records of your requests.
Protected health information. In certain circumstances, we may collect or use your information through our Services while acting as a “business associate” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), which may constitute “Protected Health Information.” A “business associate” includes an entity that provides services to a HIPAA covered entity that involves the use or disclosure of Protected Health Information. If your health care provider or health insurance company qualifies as a HIPAA covered entity, and we provide services to them or on their behalf, we may qualify as their business associate. “Protected Health Information” as defined under HIPAA, generally means information about you that identifies you and that relates to your physical or mental health or condition, the provision of health care to you, or payment for health care provided to you. To the extent we are acting as a business associate, we will only use and disclose your information as permitted by HIPAA, which may include, but is not limited to, fulfilling our service obligations, our internal management and administration, executing our legal responsibilities, de-identifying or aggregating data, or as otherwise required by law.

Personal Information We May Collect from Third Parties. We may collect personal information about you from third-party sources, such as public databases, joint marketing partners, social media platforms, telecommunications providers, operating systems, and platforms, and other third parties. We may receive lead and prospect information from third parties about prospective business clients that may be interested in our Services, and we may engage with third parties to enhance or update our customer information. We may also collect your name, contact information, and certain payment and transaction details from our vendors and service providers that act on our behalf.

Personal Information We May Collect Automatically. We may automatically collect personal information related to your use of our Services and your interactions with us and others, including from cookies, pixel tags, and other similar technologies, as well as information we derive about you and your use of our Services. Such information includes:

Device and browsing information. We may use cookies, log files, pixel tags and other tracking technologies to automatically collect information when users access or use our Services, such as IP address, general location information, domain name, page views, a date/time stamp, browser type, device type, device ID, unique ID, Internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. For more information, see Section 6. Cookies, Targeting, and Analytics below.
Activities and usage. We may also collect activity information related to your use of the Services, such as information about the links clicked, searches, features used, items viewed, time spent within the Services, and products and items you view. However, we do not reproduce how you navigate through the content on our website.
Location information. We may collect or derive location information about you, such as through your IP address. Further, with your permission, we may collect geolocation information from your device. You may turn off geolocation data sharing through your device settings.

3. Purposes of Use and Processing

Generally, we use and otherwise process the personal information we collect to accomplish legitimate business purposes including but not limited to the following purposes:

Services and support. To provide and operate our Services, communicate with you about your use of our Services, provide troubleshooting and technical support, respond to your inquiries, fulfill your orders and requests, process your payments, communicate with you about the Services, provide you with trainings you request, and for similar service and support purposes.
Analytics and improvement. To better understand how users access and use our Services, and other products and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop services and features, and for internal quality control and training purposes.
Customization and personalization. To tailor content we may send or display on our Services, including to offer location customization and personalized help and instructions, and to otherwise personalize your experiences.
Marketing and advertising. For marketing and advertising purposes. For example, to send you information about our Services, such as offers, promotions, newsletters, and other marketing content, as well as any other information that you sign up to receive. We may also use certain information we collect to manage and improve our advertising campaigns so that we can better reach people with relevant content.
Planning and managing trainings and events. For training and event planning and management, including registration, attendance, connecting you with other attendees, and contacting you about relevant trainings, events and other Services.
Research and surveys. To administer surveys and questionnaires, such as for market research or customer satisfaction purposes.
Security and protection of rights. To protect the Services and our business operations; to protect our rights or those of our stakeholders; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use.
Compliance and legal process. To comply with the law and our legal obligations, to respond to legal process and related to legal proceedings.
General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, record-keeping, and legal functions.

4. Disclosures of Personal Information

We may disclose the personal information that we collect for the purposes described above, in order to provide our Services to you, to respond to and fulfill your orders and requests, as otherwise directed or consented to by you, and as follows:

Vendors and service providers. We may disclose personal information we collect to our service providers, processors, and others who perform functions on our behalf. These may include, for example, IT service providers, help desk, payment processors, analytics providers, consultants, auditors, and legal counsel.
Our affiliates. We may disclose personal information we collect to our U.S. and non-U.S. affiliates or subsidiaries, who will use and disclose this personal information in accordance with the principles of this Policy.
Our business clients. Any client data that we collect and process on behalf of a business client will be disclosed to the business client and otherwise shared as directed by that business client.
Third-parties. We may disclose or make available personal information to third-party platforms and providers that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make certain personal information available to third parties in support of our marketing, analytics, advertising, and campaign management (see Section 6. Cookies, Targeting and Analytics for more information).
In support of business transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and third-party advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
Compliance and legal obligations. We may also disclose personal information to third parties to comply with our legal and compliance obligations and to respond to legal process. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by government officials and law enforcement, including responding to national security or law enforcement disclosure requirements. This may include regulators, government entities, and law enforcement as required by law or legal process. In addition, it may include certain disclosures that we are required to make under applicable laws, such as the names of sweepstakes and contest winners.
Security and protection of rights. We may disclose personal information where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property, and safety of others. For example, we may disclose personal information to (a) prevent, detect, investigate, and respond to fraud, unauthorized activities, unauthorized access, illegal activities, and misuse of the Services, (b) situations involving potential threats to the health, safety, or legal rights of any person or third party, or (c) enforce, detect, investigate, and take action in response to violations of our Terms of Use. We may also disclose information, including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, record-keeping, and legal functions.
Other disclosures. We may disclose personal information in other ways not described above, after we notify you or obtain your consent.

5. Aggregate Data and Non-Identifiable Data

Notwithstanding anything else in this Policy, we may use and disclose aggregate and other non-identifiable data related to our business and the Services for quality control, analytics, research, development, and other purposes. Where we use, disclose, or otherwise process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in deidentified form and not to attempt to reidentify the information, except in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws.

6. Cookies, Targeting, and Analytics

We and our third-party service providers may use cookies, pixels, local storage objects, log files, APIs, and other mechanisms to automatically collect information browsing, activity, device, and similar information within our Services and to target advertising and content across our Services as well as third-party sites and service. We use this information to, for example, analyze and understand how users access, use, and interact with others through our Services, as well to identify and resolve bugs and errors in our Services and to assess secure, protect, optimize, and improve the performance of our Services. You have certain choices about our use of cookies and tracking within the Services, as described in this section. For more information on the types of personal information we collect via cookies and similar mechanisms, please see Section 2. Personal Data Collected.

Cookies. Cookies are alphanumeric identifiers that we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within our Services.

Pixel Tags. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, help us manage content and compile usage statistics. We may also use these in HTML emails we send, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our Website. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Third-Party Analytics and Tools. We use third-party tools, such as Google Analytics, which are operated by third-party companies, to evaluate usage of our Website and Services. These third-party analytics companies use cookies, pixel tags, and other tracking technologies to collect usage data about our Services to provide us with reports and metrics that help us evaluate usage of our Services, improve our Website, and enhance performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://policies.google.com/technologies/partner-sites. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Targeted Advertising. We work with third parties, such as ad networks, channel partners, mobile ad networks, analytics and measurement services, and others (all together, “third-party ad companies”) to personalize content and display advertising, as well as to manage our advertising on third-party sites, mobile apps, and online services. We may share certain information with these third-party ad companies, and we and they may use cookies, pixels tags, and other tools to collect usage and browsing information within our Services, as well as on third-party sites, apps, and services, such as IP address, location information, device ID, cookie and advertising IDs, and other identifiers, as well as browsing information. We and these third-party ad companies use this information to provide you more relevant ads and content within our Services and on third-party sites and apps, and to evaluate the success of such ads and content.

Managing Your Preferences. We make available several ways for you to manage your preferences regarding targeted advertising and cookies within our Services. Many of these are browser and device specific, which means that you need to set the preference for each browser and device you use to access our Services; in addition, if you delete or block cookies, you may need to reapply these preferences. Further, opting out of cookies and advertising as discussed below does not mean that you will no longer receive advertising content from us. You may continue to receive generic or “contextual” ads from us.

Cookie preference manager. You can review or change your preferences for targeting cookies and tags on our website by clicking on the “Do not sell or share my personal information” link on our website. This link will take you to our cookie preference manager where you can adjust your cookie settings. These settings are browser and device specific. Important: Please note that you will find examples of different third party cookies on our website under the “Services” tab in the cookie preference manager. The third party cookies listed under this tab are illustrations only; they do not constitute a complete list of all third party cookies we may use on our website from time-to-time.
Browser signals. If our Website detects that your browser is transmitting a global privacy control (“GPC”) signal, we will apply that to opt that browser on your device out of targeting cookies on our Website. If you come to our Website from a different device or from a different browser on the same device, you will need to apply GPC for that browser and/or device as well. For more information about GPC, please visit globalprivacycontrol.org and see Section 13. Additional Privacy Information for California Residents.
Mobile settings. In addition to the above, some of our Apps may include third-party advertising and analytics. You can change your targeting and advertising preferences for these Apps by adjusting the in-app settings at the device level.
Industry ad choice programs. You can also control how participating third-party ad companies use the information that they collect about your visits to our Website and use of our mobile applications, and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). You may also download the DAA AppChoices (https://youradchoices.com/appchoices) tool in order to help control interest-based advertising on apps on your mobile device. Please note that opting out of participating ad networks does not opt you out of being served advertising. You may continue to receive generic or “contextual” ads on our Services. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs.
Browser settings. If you wish to prevent cookies from tracking your activity on our Website or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The Help portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Services who disable cookies will be able to browse the Site, but some features may not function.

7. Your Privacy Choices

There are several ways that you can manage your privacy choices and the personal information you provide to us in connection with your use of the Services. These include:

My B. Braun Account. If you have a “My B. Braun” account, you can review and update some of the personal information we maintain about you by logging into your account and updating your information.
Targeted advertising and cookie preferences. As described in Section 6. Cookies, Targeting and Analytics there are several ways that you can manage your preferences for targeting cookies and advertising by us and on our Website. You can review or change your preferences for many of the cookies and tags on our Website, other than those that are necessary for operation and functionality, by adjusting your cookie settings and by turning on GPC for your browser. These preferences are browser and device specific, so you will need to set your preferences for each browser and device you use. If you subsequently delete or block cookies you may need to reapply these settings.

If you are a California resident, please review Section 13. Additional Information for California Residents, below for specific information about additional Privacy Rights you have under California law and how to exercise them.

For more information about our privacy practices and your privacy choices, you may contact us as laid out in the “Contact Us” section.

8. Third-Party Links

Our Website and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

9. Children’s Information

Our Services are not designed for children, and we do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information in violation of applicable law, we will delete such information from our systems. If you are a parent and you believe we have collected your child’s information in violation of applicable law, please contact us as laid out below in Section 12. Contact Us.

10. Security

We have implemented safeguards that are intended to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

11. Changes to this Policy

This Policy is reviewed and updated periodically consistent with applicable law and to ensure it accurately describes our information practices and procedures. When we update this Policy, we will accordingly revise the “Last Updated” date at the top of this document. If we make material changes to how we collect, use, and disclose the personal information we have previously collected about you, we will endeavor to provide you prior notice, such as by emailing you or posting prominent notice on our Website or within the Services.

12. Contact Us

If you have questions about this Policy or our privacy practices, please contact us by email at Privacy@bbraunusa.com.

13. Additional Information for California Residents

This section provides additional information for California residents and describes our information practices. We intend for this section to demonstrate our compliance with the California Consumer Privacy Act (as amended, including by the California Privacy Rights Act of 2020) and its implementing regulations (as amended) (together, the “CCPA”).

This section does not address or apply to our handling of personal information that is exempt under the CCPA, such as publicly available information or deidentified or aggregated information. Additionally, this Notice does not apply to personal information we collect, receive, or otherwise maintain about you that is primarily governed by certain federal laws, such as the Health Insurance Portability and Accountability Act (HIPAA). The CCPA recognizes that health information subject to HIPAA is already protected under federal law, so the CCPA does not apply to such information.

A. Personal Information We May Collect, Use, and Disclose

Categories of Personal Information We May Collect and Disclose. While our processing of personal information varies based upon our relationship and interactions with you, the table below generally identifies the categories of personal information (as defined by the CCPA) that we have collected about California residents, as well as the categories of third parties to whom we may disclose this information for a business or commercial purpose.

Categories of Personal Information Collected		Categories of Third-Party Disclosures
Identifiers	Includes direct identifiers, such as name, alias, user ID, username, or unique personal identifier, email address, phone number, address, and other contact information, IP address and other online identifiers.	Advisors and agents Regulators, government entities and law enforcement Affiliates and subsidiaries Advertising networks Data analytics providers Data brokers Internet service providers, operating systems and platforms Others as required by law
Categories of personal information related to customer records	Includes personal information, such as name, account name, user ID, contact information, employment information, and financial or payment information that individuals provide us in order to purchase or obtain our products and services. For example, this may include information collected when an individual registers for an account, purchases or orders our products and services, or enters into an agreement with us related to our products and services.	Advisors and agents Regulators, government entities and law enforcement Affiliates and subsidiaries Others as required by law
Commercial information	Includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. For example, this may include demographic information that we receive from third parties in order to better understand and reach our customers.	Advisors and agents Affiliates and subsidiaries Regulators, government entities and law enforcement Advertising networks Data analytics providers Internet service providers, operating systems and platforms Others as required by law
Internet or other electronic network activity information	Including, but not limited to, browsing history, clickstream data, search history, and information regarding interactions with an internet website, application, or advertisement, including other usage data related to your use of any of our Services or other online services.	Advisors and agents Affiliates and subsidiaries Regulators, government entities and law enforcement Advertising networks Data analytics providers Internet service providers, operating systems and platforms Others as required by law
Location data (not precise location data)	Location information about a particular individual or device.	Advisors and agents Affiliates and subsidiaries Regulators, government entities and law enforcement Advertising networks Data analytics providers Internet service providers, operating systems and platforms Others as required by law
Audio, electric, visual, thermal, or similar information	Includes audio, electronic, visual, or similar information, such as CCTV footage (e.g., collected from visitors to our offices/premises) and call recordings (e.g., of customer support calls).	Advisors and agents Affiliates and subsidiaries Regulators, government entities and law enforcement Internet service providers, operating systems and platforms Others as required by law
Professional or employment-related information	Includes professional and employment-related information such as current and former employer(s) and position(s), and business contact information.	Advisors and agents Affiliates and subsidiaries Regulators, government entities and law enforcement Affiliates and subsidiaries Internet service providers, operating systems and platforms Others as required by law
Profiles and inferences	Including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Advisors and agents Affiliates and subsidiaries Regulators, government entities and law enforcement Advertising networks Data analytics providers Internet service providers, operating systems and platforms Others as required by law
Sensitive Personal Information	In limited circumstances, we may collect driver’s license or state identification card information when you engage with us and certain disability and/or health information in order to provide appropriate accommodations if you attend our events or visit our premises.	Advisors and agents Others as required by law

Sales and Sharing of Personal Information. California privacy laws define a “sale” of Personal Information broadly to include disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may “sell” or “share” (as defined by the CCPA) certain technical information, including IP address, digital identifiers, information about your web browsing and usage of our Services, information about how you interact with our ads, and certain analytic information, with third party data analytics, marketing, and advertising partners. We do so in order to improve and evaluate our advertising campaigns and better reach customers and prospective customers with more relevant ads and content.

We do not collect, use, or disclose sensitive personal information, and we do not sell or share any personal information about individuals who we know are under sixteen (16) years old.

Sources of Personal Information. In general, we may collect the categories of personal information identified in the table above from the following categories of sources:

Directly from individuals
Advertising networks
Data analytics providers
Social networks
Data brokers
Business customers/clients
Government entities

Purposes of Collection, Use, and Disclosure. As described in more detail in Section 3. Purposes of Use and Processing and Section 4. Disclosures of Personal Information above, we collect, use, disclose, and otherwise process the above personal information for the following business or commercial purposes and as otherwise directed or consented to by you:

Services and support
Analytics and improvement
Customization and personalization
Marketing and advertising
Planning and managing events
Research and surveys
Security and protection of rights
Legal proceedings and obligations
General business and operational support
In support of business transfers (e.g., if we are acquired by other company)

Sensitive Personal Information. We only use and disclose sensitive personal information as reasonably necessary (i) to perform our services requested by you, (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents, (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct, (iv) to verify or maintain the quality and safety of our services, (v) for compliance with our legal obligations, (vi) to our service providers who perform services on our behalf, and (vii) for purposes other than inferring characteristics about you. We do not use or disclose your sensitive personal information other than as authorized pursuant to section 7027(m) of the CCPA regulations (Cal. Code. Regs., tit. 11, § 7027 (2022)).

Retention. We retain the personal information we collect for as long as needed and permitted under applicable law for the purposes described above or otherwise disclosed to you at the time of collection. The criteria we use to determine how long to retain information is based on the nature and occurrence of your use of our Services, requests received from you related to your personal information, and related legal obligations or legal matters that have or could arise. For example, for My B. Braun accounts, we will retain your profile and account data for as long as you have an active account with us and data related to your interactions with us for as long as necessary to comply with our tax, accounting and recordkeeping obligations, to administer any applicable warranty programs, and for research, development and safety purposes, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and comply with legal obligations.

B. Your California Privacy Rights

California Residents’ Rights. Under the CCPA, California residents have the following rights (subject to certain limitations):

To opt out of sales and sharing. The right to opt out of our sale and sharing of their personal information.
To limit certain uses and disclosures of sensitive personal information. The right to limit our use or disclosure of sensitive personal information to those uses authorized by the CCPA. B. Braun does not use Sensitive Personal Information for purposes beyond those permitted under the CCPA, thus this right is not available.
To delete. The right to delete their personal information that we have collected, subject to certain exceptions.
To know/access. The right to know what personal information we have collected, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
To correct. The right to correct inaccurate personal information that we maintain about them.
Non-discrimination. The right not to be subject to discriminatory treatment for exercising their rights under the CCPA.

Submitting CCPA Requests. California residents may exercise their CCPA privacy rights as set forth below:

Requests to Opt Out. California residents who use our Services may exercise their opt out rights in a number of ways:

To opt out of the sale and sharing of their personal information collected through our website, they can click on the “Do not sell or share my personal information” toggle in the pop-up banner when they first access our website, or later by clicking on the “Do not sell or share my personal information” link in our website footer.
Our website responds to global privacy control—or “GPC”—signals, which means that if we detect that your browser is communicating a GPC signal, we will process that as a request to opt out that particular browser and device of sales and sharing (i.e., via cookies and tracking tools) on our website. Note that if you come back to our website from a different device or use a different browser on the same device, you will need to opt out (or set GPC for) that browser and device as well. More information about GPC is available at: https://globalprivacycontrol.org/.

Request to know/access, correct, and delete. California residents may submit CCPA requests to access/know, correct, and delete their personal information previously provided to us through their use of the Services by submitting an email request to Privacy@bbraunusa.com or by calling us at (844) 422-7286. In order to process your request, you must provide all of the following information: (1) Your full first and last name; (2) Your California residence mailing address; (3) Your phone number; and (4) Your email address. Although it is not required, providing the following additional information, if known, would help us search for and identify your personal information: (5) Description of personal information provided to us; (6) Date range of personal information provided to us; (7) Device(s) used to provide your personal information to us; and (8) Name of your Company or Organization.

We will take steps to verify your request by matching the information provide by you with the information we have in our records. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information from you in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify you.

Authorized agents may initiate a request on behalf of another individual by submitting a request to the following email address: Privacy@bbraunusa.com; authorized agents will be required to provide proof of their authorization, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

C. Contact Us

For more information about our privacy practices, you may contact us as described in Section 12. Contact Us, above.