Privacy Notice for Oticon Medical’s processing of personal data on social media platforms

1. Introduction

At Oticon Medical, we respect and protect the privacy of our users, and we are dedicated to being as transparent as possible regarding the use of your personal data.

This privacy notice (“Privacy Notice”) explains how Oticon Medical processes your personal data in connection with your interaction with Oticon Medical as a data controller by use of different social media platforms, such as Facebook, Instagram, X, YouTube and LinkedIn.

In this Privacy Notice, “we”, “us” and “our” mean Oticon Medical.

We may change this Privacy Notice from time to time, so please check back when you use our services to make sure that you have seen the most recent version.

2. Who we are

If you have any questions about this Privacy Notice, or you would like to exercise your rights, you can contact us by using the contact points below.

Oticon Medical AB
Datavägen 37B
SE-436 32 Askim,
Sweden
Email: info@oticonmedical.com

3. Personal data we collect and use

We may process the following types of personal data:

• Information about you, such as your name, email, age, gender, country, job title, current and former employer, education background, profile picture, interests, your friend list/connections/followers, and other publicly available information, provided that you have published this information on your social media profile or posted it on one of Oticon Medical’s social media pages.
• Other information you provide to us by posting on Oticon Medical’s social media page, including your comments and/or likes to our posts and pictures or direct messages you send to us via Oticon Medical’s social media platforms.

In addition, the different social media platforms collect personal data concerning you through your use of these platforms and through the use of cookies and similar technologies, including cookies collected via social media tools, such as Facebook Insights, Facebook Pixel, Facebook Custom Audience, Facebook Lookalike Audience and LinkedIn Insight Tag, etc.

In some cases (e.g., our Facebook page), Oticon Medical acts as joint controller together with Facebook in relation to the processing of your personal data. We recommend that you read Facebook’s privacy notice to understand how Facebook processes your personal data.

We generally refer to the different social media platforms’ privacy notices for more information about their processing of your personal data:

• Facebook data policy
• LinkedIn privacy notice
• Instagram privacy policy
• X (Twitter) privacy policy
• YouTube/Google privacy policy

4. Why do we collect and use your personal data and what is our legal basis for doing so

We use your personal data for the following purposes:

• To understand the audience to our social media channels (demographics, preferences and interests) to provide relevant information.
• To analyse trends and profiles to enhance, modify, personalise and improve our services and communications.
• To process and respond to requests and enquiries received from you.
• To carry out market surveys via our social media pages on Facebook, Instagram, X, YouTube and LinkedIn.
• To recommend products and services we think you will be interested in. We do not carry out direct marketing to our customers and/or potential customers. If we use electronic methods (e.g., email or direct messaging) to send direct marketing, we will only do so if permitted under applicable rules on direct marketing.

The legal basis for collecting and processing your personal data via Oticon Medical’s social media pages is our legitimate interest as described above in accordance with GDPR art. 6(1)(f). Our legitimate interests are under these circumstances regarded to override your interests.

5. How we share your personal data

We will not pass, sell or otherwise share or disclose your personal data, except as described herein or otherwise stated at the time the personal data is collected.

As mentioned in section 3, we may act as joint data controller together with the specific social media provider (e.g., Facebook Inc. or Facebook Ireland Ltd.).

We may share your personal data with affiliated companies within the Demant Group in order to deliver, enhance and develop our products and services. Please refer to the organisational chart in our latest annual report at www.demant.com.

We may share your personal data with our service providers for tasks such as:

• Administering or troubleshooting our website;
• Supplying or designing our products or assisting with our business administration;
• Assisting with our marketing campaigns (e.g., Facebook Custom Audiences and Lookalikes);
• Providing electronic or physical storage services or systems.

We will only share your information where necessary for the service provider to perform services for us. These providers are not authorised to use your personal data for other purposes and must keep it safe and confidential. We may disclose your personal data to selected third parties (e.g., law enforcement, regulators, and professional advisers) if required to comply with legal obligations, our legitimate interests, or to enforce/apply our website Terms of Use or related contracts.

6. Transfer of data to third countries

To deliver our products and services, we may share your personal data with Demant Group companies outside the EU/EEA and with non-affiliated companies (service providers or business partners) outside the EU/EEA where necessary for a given processing activity or service.

If your personal data are transferred outside the EU/EEA, we will implement appropriate technical and organisational measures to meet applicable data protection requirements and protect data subjects’ rights. Where necessary, we use the EU Commission’s Standard Contractual Clauses with the recipient.

7. How long do we keep your personal data

We keep your personal data as long as necessary for legitimate legal or business reasons, including regulatory obligations.

We delete personal data when no longer required for the purpose of collection, processing and storage, and retain data we are legally obliged to keep.

• Comments on our social media posts are deleted when the post is deleted (we may delete specific comments earlier). You can delete your own comment at any time.
• Information collected for a specific purpose (e.g., a targeted marketing campaign) is deleted 1 year after the activity. Certain data may be retained up to 2 years for documentation purposes.

If you would like more detailed information about our retention policy, please contact us (see section 2).

8. Your privacy rights

Pursuant to the GDPR, you may exercise the following rights (subject to conditions/exemptions, e.g., to protect others’ privacy, trade secrets, IP rights or to comply with legal obligations):

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise your rights, please contact us (see section 2).

9. Right to lodge a complaint

If you have concerns about how we use your data, please let us know and we will address them. You also have the right to lodge a complaint with Integritetsskydds Myndigheten (+46 8 657 61 00, imy@imy.se) or your relevant national data protection agency.

10. Children’s privacy

We provide solutions for children, but our social media pages on Facebook, Instagram, X, YouTube and LinkedIn are not intended or designed to collect personal data about children under the applicable age limit in any given country. We do not intentionally collect personal data from anyone under that age limit.

11. Third party links

Our social media pages may contain links to websites of other companies and organizations. This Privacy Notice does not apply to such third-party sites; please consult their privacy policies for information on data collection and use.

12. Changes to the Privacy Notice

We may update this Privacy Notice from time to time by publishing a new version on our website and social media pages.

 

Date updated: 21 September 2025