ABBOTT FREESTYLE LIBRE SYSTEM PRIVACY NOTICE

Version Date: October 2019

Abbott Diabetes Care, Inc. (“Abbott” or “us”, “our”, “we”) recognizes the importance of data protection and privacy and is committed to protecting personal information, including health-related information. This Privacy Notice describes how your personal information, including health-related information, is collected and used by Abbott and how it is uploaded, transmitted and stored by you in the LibreView System.

Abbott is the developer of sensors, readers and glucose test meters for the FreeStyle family of products and the FreeStyle Libre branded mobile applications (“Libre App”).

The LibreView website (“LibreView”) and the LibreLinkUp mobile app (“LibreLinkUp App“) have been developed by Newyu, Inc. (“Newyu”). The Libre App, LibreView and LibreLinkUp App together make up the “LibreView System”.

Please read this Privacy Notice carefully before creating a LibreView System account as it applies to your use of the LibreView System and to the processing, transfer and storage of your personal information, including health-related data in the cloud by Abbott and certain affiliated companies as described below. More specifically, this Privacy Notice describes the privacy and data protection practices of Abbott and applies only to the personal information processed by us in the LibreView System through the:

It also applies to the processing of your personal information by our affiliated companies and by our processors if required to resolve a customer service issue related to the LibreView System.

This Privacy Notice does not apply to personal information processed or collected by other Abbott affiliates or subsidiaries or via other methods, such as other Abbott websites, other Abbott customer call centers, or use of FreeStyle Libre software and other privacy policies may apply to the personal information processed or collected through these methods.

By creating a LibreView System account and using LibreView, the Libre App or LibreLinkUp App, you accept this Privacy Notice and you:

BY ACCEPTING OR AGREEING TO THIS PRIVACY NOTICE, YOU EXPLICITLY ACKNOWLEDGE THAT YOUR USE OF THE LIBREVIEW SYSTEM IS CONDITIONED UPON YOUR ACCEPTANCE OF THIS PRIVACY NOTICE AND TO THE PROCESSING AND TRANSFER OF PERSONAL INFORMATION, INCLUDING HEALTH-RELATED INFORMATION, AS DESCRIBED IN THIS PRIVACY NOTICE.

WHERE REQUIRED BY THE LAW OF YOUR COUNTRY OF RESIDENCE, CLICKING “ACCEPT” OR “AGREE” MEANS THAT YOU CONSENT TO THE PROCESSING OF YOUR PERSONAL INFORMATION INCLUDING HEALTH-RELATED INFORMATION.

YOUR CONSENT IS GRANTED AT YOUR FREE WILL AND YOU ACKNOWLEDGE THAT YOU ARE NOT UNDER ANY LEGAL OBLIGATION TO PROVIDE PERSONAL INFORMATION TO ABBOTT.

+About Us and Controller Information

Abbott Diabetes Care Inc. of 1420 Harbor Bay Parkway, Alameda, CA 94502, USA is the developer of sensors, readers and glucose test meters for the FreeStyle Libre family of products and the Libre App. The LibreView System includes the Libre App and LibreLinkUp mobile applications which may be compatible with LibreView located at www.LibreView.com.

Abbott is the controller of personal information, including health-related information, uploaded, transmitted to or stored by you in the LibreView System. Professional users are the controller of their patients’ personal information where those patients have a LibreView System account for the purpose of receiving medical care.

+Background on the LibreView System, Libre App, LibreLinkUp App and LibreView

The LibreView System is a cloud-based diabetes management system that may be used by individuals, healthcare professionals and Abbott to aid in the review, analysis and evaluation of historical glucose data, glucose test results, ketone test results and user-entered information including insulin, food, exercise, and notes to support an effective diabetes health management program. The LibreView System allows Abbott to provide improved guidance for patients utilizing Abbott’s meters, readers and mobile apps. It also enables Abbott to improve quality, security and effectiveness of medical devices and systems and allows Abbott to develop innovative and effective treatment for and management of diabetes in the interests of public health.

Please be aware that third parties may offer services, software, hardware (such as glucose meters) and mobile apps not authorized by Abbott and which they claim may be compatible with your sensor, the Libre App, and/or the LibreView System. Abbott does not recommend using the LibreView System with these third party products and services, and is not responsible if you do. Abbott is not responsible for your connection of these third party products or your decision to upload data from these third party products to your LibreView System account. If you do use these third-party products or services, your use is subject to their respective privacy policies and terms of use. When you do use such third-party products, services, software or apps and upload information in your LibreView System account, Abbott will receive and process such data, including if you have uploaded health-related information. For information about how Abbott allows you to share your information with authorized third parties, please see +Disclosure of Personal Information for more information.

Use of the LibreView System may require compatible devices, internet access, data usage (charges may apply), certain software (charges may apply), and periodic updates, and the performance of the LibreView System may be affected by these requirements.

Your health care provider also has the ability to use the LibreView System to create patient profiles. When you visit your health care provider, they can connect your reader or meter to their LibreView System account to view and print out patient reports and to remotely view patient reports and share those reports with other professionals in their practice. The LibreView System allows patient users to create their own accounts upload their own information and share information with professional users.

+Personal Information Collection via the Libre App, LibreLinkUp App and LibreView

This Privacy Notice applies only to the personal information, including health-related information, processed by us in the LibreView System when:

When you sign up for a LibreView System account, your account profile information is kept in a separate database that does not include your health-related information, and Abbott uses technical and administrative measures to ensure data separation. Please note that your name and glucose data will be combined when you use the share functionality to share a report of your glucose data with your healthcare provider or any other third party.

This Privacy Notice covers the following information:

+Use of Personal Information

When you sign up for a LibreView System account, account profile data (name, date of birth, email address) are kept separate from the information you upload from your sensor, reader or meter. Abbott uses technical and administrative measures to ensure data separation and will never combine these data.

Abbott uses your personal information, including health-related information, data derived from your sensor, reader or meter, and technical information about your mobile device if you use the Libre App or LibreLinkUp App or the computer you use to access LibreView in the following ways:

+Data Storage

Abbott uses Amazon Web Services (AWS) to host your LibreView System accounts in the cloud. The servers that host LibreView System accounts may be located in North America, Europe and the Asia Pacific region. For French users Abbott hosts LibreView System accounts with OVH. OVH is accredited by the French Ministry of Health, the ASIP Santé to host health-related information. The personal information and health-related information you upload to your LibreView System account will be stored in the region closest to your country of residence or otherwise in accordance with the data storage and privacy requirements of your selected country/region. When your personal information is hosted in a country other than the country you selected, it may become subject to the laws of the host country, which may not be equivalent to the laws of the country you selected. Abbott has implemented appropriate security measures and controls to protect your personal information.

+Data Analysis

Abbott uses de-identified, pseudonymized, aggregated and/or anonymized information for limited purposes. Our parent company Abbott Laboratories assists us as a data processor with this data analytics process, in particular, they help us with the processes related to de-identifying, pseudonymizing and/or anonymizing your personal information. This is information which Abbott securely holds and will not be used to identify you individually by your name or email address. The purposes for which Abbott will use this information are:

Abbott does product usage analysis based on de-identified and pseudonymized data for limited purposes, in particular to help us understand the performance of the Libre App and LibreLinkUp App, to help us understand issues which may need fixing with the Apps and to help us understand how many times the Apps have been downloaded from App Stores. This information is also available to Newyu as the developer of LibreLinkUp.

If in addition to using the LibreView System, you use FreeStyle Libre Desktop Software, please note that information uploaded to the LibreView System is hosted separately and independently from the FreeStyle Libre Desktop Software. Abbott will never combine data from these two services (de-identified data obtained through the FreeStyle Libre Desktop Software and personal data uploaded to and contained in the LibreView System). Abbott uses administrative, technical and organizational measures to ensure that these data flows remain separate.

+Use of Cookies and Similar Technologies on LibreView

We use cookies and similar technologies on LibreView to collect technical information. Cookies are text files containing small amounts of data which are downloaded to your computer when you visit a website. Cookies are useful because they allow us to recognize your computer and improve your experience on our websites. We also use Google’s Invisible reCAPTCHA service to maintain the integrity of LibreView. The use of the Invisible reCAPTCHA service is subject to Google’s Privacy Policy and Terms of Use.

Your web browser (such as Internet Explorer, Firefox, Safari or Chrome) then sends these cookies or similar technologies back to the website on each subsequent visit so that we can recognize you. These can only be read by the server that sent it to your browser. Our systems may not recognize Do Not Track (DNT) headers or similar mechanisms from some or all browsers.

Through our use of cookies and similar technologies on LibreView, we collect the following technical information: your domain name, browser type and operating system, the webpages you view, links you click, IP address, length of time you visit LibreView, the referring URL or the webpage that led you to LibreView and troubleshooting and analytical data to help us provide the LibreView System to you. We may combine this automatically collected information with other information we have about you.

There are various ways that you can control and manage your cookies. Please remember that any settings you change will not just affect these cookies used by LibreView. These changes may apply to all websites that you visit (unless you choose to block cookies from particular sites).

LibreView uses the following types of cookies:

To find out more about cookies visit https://www.allaboutcookies.org.

+Retention of Personal Information

Abbott will continue to store your personal information while you have an active LibreView System account. Your LibreView System account will be considered to be inactive once there has been no activity on it for six (6) months. Once your LibreView System account is considered inactive, all personal information, including data derived from your use of the Libre App or LibreLinkUp App, a meter or reader, from the computer used to interact with LibreView and health-related information associated with that account will be de-identified for the purposes set out section entitled +Data Analysis and all other personal information may be permanently and irrevocably deleted. We will notify you in advance by sending an email to the email address associated with your LibreView System account so that you have an opportunity to ensure your account stays current and available for your use. The section entitled +Deleting your LibreView System Account explains how you can delete your account and what happens to your personal information once your account has been deleted.

+Disclosure of Personal Information by us

We share personal information with the following:

Abbott Laboratories: Our parent company, assists us as a data processor with the data analytics process, in particular, the processes related to de-identifying, pseudonymizing and/or anonymizing information.

Third-party suppliers: We share personal information with third-party suppliers solely to provide, maintain, host, and support the LibreView System. Newyu will process personal information, including health-related information, on our behalf as a third-party supplier and/or may act as our Business Associate under HIPAA (please see our HIPAA Notice of Privacy Practices at HIPAA Notice of Privacy Practices and the section entitled +USA below for further information). Abbott uses Amazon Web Services (AWS) and other cloud providers to host LibreView System accounts in the cloud. Where we provide your personal information to third-party suppliers to assist us with the provision of your LibreView System account, they are required to keep your personal information confidential and secure and to use your personal information to the minimum extent necessary. Where possible, Abbott uses third party service providers to report system errors so that we can support and improve the LibreView System and in such instances the information sent to such third parties will not involve the use of your personal information.

Abbott uses third-party service providers to provide you with the LibreView System, the Libre App or LibreLinkUp App. For example, we use third-party service providers to report when either the Libre App or LibreLinkUp App crashes or experiences certain scanning errors so that we can support and improve the apps, and when these crashes or scanning errors occur, the app will send certain information about the incident to such third parties. The information sent to such third parties will not involve the use of your personal information. Abbott uses AWS and OVH in France to store LibreView System accounts (please see the section entitled +Data Storage for further information). Abbott uses Lomaco et AGPS to ensure invoicing of telemedicine acts in France to the social security system.

For Libre App users with Android devices, Android requires location services permissions to be granted in order to connect apps with Bluetooth devices. Google’s Location Services include features that collect a user’s precise location data, including GPS signals, device sensors, Wi-Fi access points, and cell tower IDs. This data will be collected by Google if a user grants access to his or her location. For more information on Google’s privacy practices relating to this data, please see Android’s support website. After the initial connection between the Libre App and a Sensor, you may choose to stop sharing location data with Google using your mobile device settings, but you will have to turn on Google’s Location Services to connect a new Sensor. Abbott will not use your Personal Information derived from Google’s Location Services.

Local affiliated Abbott companies: Where you opt-in to receive direct marketing communications from us, we may share your personal information with local affiliated Abbott companies with whom we are jointly marketing a product or service or jointly conducting a program or activity. This will only occur where you consent to sharing, for example, where you opt in to receive marketing communications from Abbott (or its affiliates) as described in this Privacy Notice.

Other Third Parties: We may share de-identified, pseudonymized, aggregated, and/or anonymized information with affiliated Abbott companies and with other third parties for the purposes relating to the +Data Analysis set out above. This is information which Abbott securely holds and will not be used to identify you individually by your name or email address.

We also may share your personal information with third parties where you have expressly asked us to do so, including where you use the share functionality in the Libre App or choose to share reports with your health care provider. We will not sell or license your personal information to third parties except in connection with the sale, merger, or transfer of a product line or division, so that the buyer can continue to provide you with information and services. For the avoidance of doubt, we will never sell your personal information for commercial purposes to third parties and we may only share your personal information with third parties where you have provided consent or where permitted by applicable law.

We reserve the right to disclose your personal information to respond to authorized information requests from government authorities, to address national security situations, or when otherwise required by law. Furthermore, where permitted or required by law, we may also disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Privacy Notice, or as evidence in litigation in which we are involved. Your personal information may be subject to foreign laws and may be accessible by foreign governments, courts, law enforcement, and regulatory agencies.

When you provide your health care providers access to your LibreView System account or where your health care provider sets up a LibreView System account for you, Abbott (through the LibreView System) will be processing your personal information on behalf of your health care provider to protect your vital interests as determined by your health care provider. Abbott will process your personal information, including health-related information, as a ‘processor’ for the purpose of the health care they provide to you to protect your vital interests and your health care provider will be the controller of your personal data in such instances. If you reside in the United States of America please see the section entitled +HIPAA Notice for individual users in the United States of America for additional information.

+How You May Share Information with your Health Care Provider or Others

The LibreView System allows users to share information with healthcare providers and professional users of LibreView. Where you use the share functionality in the Libre App, we may share your personal information or choose to share reports with your healthcare provider or with other third parties. We may also share your personal information with third parties where you have expressly asked us to do so.

Where you use the share functionality in the Libre App or choose to share reports with your health care provider, we will combine your name and glucose data.

Your health care provider has the ability to use the LibreView System to create patient profiles and to connect your reader or meter to their LibreView System account to view and print out a patient report and to remotely view patient reports and share those reports with other professionals in their practice.

+Security of Personal Information

We have implemented administrative, technical and physical safeguards to protect your personal information, including health-related information, from unauthorized or unlawful access, accidental loss, destruction, damage, misuse, disclosure and alteration, including through the use of cryptographic technologies. Abbott restricts access to personal information by its employees on a need to know basis. Please keep in mind that no internet or Wi-Fi transmission is 100% secure, so please exercise caution when uploading personal information, especially health-related information, to your LibreView System account.

You are responsible for protecting against unauthorized access to your LibreView System account. We recommend securing access to LibreView by logging-out, choosing a robust password for your LibreView System account that nobody else knows or can easily guess, implementing security settings your mobile device or computer such as a password to access it, keeping your device locked when not in use and keeping your account information and password private. Abbott is not responsible for any lost, stolen or compromised passwords or for any activity on your LibreView System account from unauthorized users where caused by you. If you think your account has been compromised, please contact us as soon as you are able at DiabetesCarePrivacy@Abbott.com.

+Cross-Border Transfers of Personal Information

If you selected a country outside the United States of America as your country of residence, we may occasionally need to access or view your personal information, such as your name and email address, and in certain exceptional circumstances your health-related information, via a secure network from the United States of America to the extent it is necessary for us to provide you with technical support or to troubleshoot any LibreView System issues in relation to your account.

In addition, we also transfer de-identified or pseudonymized data, which does not identify you by name, for the purpose of conducting data analysis as described in the section entitled +Data Analysis. The United States of America may not provide data protection or privacy laws equivalent to the laws of your country; however, we put appropriate measures in place to protect your personal information.

BY CREATING A LIBREVIEW SYSTEM ACCOUNT AND BY ACKNOWLEDGING THIS PRIVACY NOTICE, WE ARE INFORMING YOU OF THESE TRANSFERS OF YOUR PERSONAL INFORMATION TO THE UNITED STATES OF AMERICA AND TO THE ACCESS OF YOUR PERSONAL INFORMATION, INCLUDING HEALTH-RELATED INFORMATION, WHICH MAY BE REQUIRED IN EXCEPTIONAL CIRCUMSTANCES TO RESPOND TO ANY SUPPORT REQUESTS YOU SUBMIT. THE UNITED STATES OF AMERICA MAY NOT OFFER AN EQUIVALENT LEVEL OF PROTECTION FOR YOUR PERSONAL INFORMATION WHEN COMPARED TO SWITZERLAND, AN EUROPEAN ECONOMIC AREA COUNTRY OR OTHER COUNTRY WITH DATA PROTECTION OR PRIVACY LAWS IN WHICH YOU RESIDE.

+How Abbott Sends Marketing and Other Material

Abbott (or its affiliates) may send you advertising and marketing-related information or request you to participate in surveys about diabetes care or their other products and services if (where required by law) you opted-in to receive such communications when you set up your LibreView System account. You may receive marketing information which is tailored to your specific needs based on the information uploaded or connected to your LibreView System account (including health-related information). We may also invite you to participate in surveys about our products, provide you with news and newsletters, or to notify you about special offers and promotions at any time. These materials may be sent by us or by an affiliate of Abbott. You may opt out from receiving marketing-related communications by either clicking on the unsubscribe link at the bottom of marketing-related emails we send you or by contacting us at DiabetesCarePrivacy@Abbott.com. We will process opt-out requests without undue delay.

Neither Abbott nor its affiliates or licensors will knowingly send advertising or marketing-related information to children.

Abbott will not sell your personal information to third parties for direct marketing.

Where you opt out of receiving marketing-related information about diabetes care, we or Newyu may send you non-marketing related information. This information may be in relation to necessary system and service updates or issues relating to product safety.

+How Abbott Protects Children’s Privacy

Each user is required to enter their date of birth and county so that we may establish whether the user is a child under the law of their country. If a date of birth attributable to a child is entered, the user will be required to enter the email address of a parent/guardian before a LibreView System account will be created. The parent/guardian must consent to the child’s use of the LibreView System. Upon such consent, a LibreView System account will be created for the parent/guardian for use by a child.

Where a child wishes to use any functions in the LibreView System which act to disclose their personal information, including health-related information, to any other party, the child is prevented from doing so without obtaining the consent of his or her parent/guardian. Before a child may take such an action, the parent/guardian is required to enter his or her password to enable this functionality. We will send parents/guardians notice via their registered email address when such settings have been accessed, and it is the parent’s/guardian’s responsibility to manage these settings for the child.

At any time, a parent/guardian may stop the collection of a child’s personal information, including health-related information, by requesting that Abbott delete the LibreView System account used by a child by contacting us at DiabetesCarePrivacy@Abbott.com. This action will delete the account being used by the child but we retain aggregated and de-identified information and may need to retain certain personal information as required by law.

+How Individual Users can Access and Correct Personal Information and Your Rights

You may correct your profile information (your name, date of birth (except children), email address and password) through the LibreView System account settings, or through the settings within your Libre App or LibreLinkUp App. We are not able to correct or amend any sensor readings that you have uploaded into your LibreView System account or any data uploaded from a FreeStyle Libre reader or meter, but we will assist you with deleting your LibreView system account and creating a new one so that you can reload the correct information.

Depending on your place of residence, you may have the right to: (a) access the personal information we hold about you; (b) request we correct any inaccurate personal information we hold about you; (c) delete any personal information we hold about you; (d) restrict the processing of personal information we hold about you; (e) object to the processing of personal information we hold about you; and/or (f) receive any personal information you have provided to us on the basis of your consent in a structured and commonly used machine-readable format or have such personal information transmitted to another company by using the export function in your LibreView System account, where accessible.

Children may also have the right to access the personal information held about them through the LibreView System. Where we receive a request for access for a child’s personal information from the child’s parent/guardian, we may respond directly to the child’s parent/guardian. We will always seek to verify the identity of person seeking access to a child’s information, whether it is from the child him/herself or from a parent or guardian.

To request the exercise of these rights, please contact us using any of the methods set out in the section entitled +Contact Us.

+Deleting your LibreView System Account

If you would like to delete your LibreView System account, you may do so by logging into your LibreView System account via www.libreview.com and using the delete account functionality. Please be aware that if you delete your account, we will retain aggregated and de-identified information and may need to retain certain personal information as required by law.

Once your LibreView System account and any associated personal information has been deleted, you will no longer have access to the LibreView System and deletion of your account is irreversible. You are not therefore able to reactivate your LibreView System account or retrieve any personal information, including health-related information, so you may want to download and save any required information before requesting that we delete your account from the LibreView System.

If you have chosen to share your LibreView System account information with your health care provider or with other connections and you delete your account, those persons will no longer be able to view your glucose readings.

Please be aware that if your health care provider has set up their own account in the LibreView System and created a patient profile specific to you, your deletion of your LibreView System account may have no effect on the account or patient profile created by your health care provider.

Abbott reserves the right to delete inactive LibreView System accounts after six (6) months. We will notify you in advance by sending an email to the email address associated with your LibreView System account so that you have an opportunity to ensure your account stays current and available for your use.

+Third Party Links to LibreView

LibreView may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Notice, but instead is governed by the privacy notices of those third-party websites. We are not responsible for the information practices of such third-party websites.

+Contact Us

If you have questions, comments, or complaints about our privacy practices, please contact us by clicking on the “Contact Us” link in one of our websites or emailing us at DiabetesCarePrivacy@Abbott.com. For HIPAA-related inquiries, please contact us at: DiabetesCareHIPAA@Abbott.com. Alternatively, you may write to us at:

Attn: Privacy Officer
Abbott Diabetes Care Inc.
1420 Harbor Bay Parkway
Alameda, CA 94502
USA

For EEA Users see also below under your regional section for additional contact details.

In all communications to us, please include the email address used to create your LibreView System account and a detailed explanation of your request.

+Changes to this Privacy Notice

If we make material changes our privacy practices, an updated version of this Privacy Notice will reflect those changes. You will be alerted to updates to this Privacy Notice by email, via the Libre App or LibreLinkUp App or when you next log into LibreView. You will be notified if there is a new version of this Privacy Notice and will be prompted to read and accept it so that you can continue to access and use your LibreView System account via LibreView, the Libre App or LibreLinkUp App.

Without prejudice to your rights under applicable law, we reserve the right to update and amend this Privacy Notice without prior notice to reflect technological advancements, legal and regulatory changes and good business practices to the extent that it does not change the privacy practices as set out in this Privacy Notice.

If you do not agree to the changes to this Privacy Notice, you should delete your LibreView System account by logging into your account via www.libreview.com and using the delete account functionality.

+HIPAA Notice for individual users in the United States of America

Please note that any personal information, including health-related information provided to us by you directly through the Libre App or provided to us by your health care provider, or shared by you with your health care provider, via LibreView may be additionally governed by our HIPAA Notice of Privacy Practices, available on LibreView at HIPAA Notice of Privacy Practices, and may be governed by the Health Insurance Portability and Accountability Act or its implementing regulations (collectively, “HIPAA”).

When you share your personal information, including health-related information, with us directly or with your health care provider through the LibreView System and you opt-in to receive marketing communications from Abbott, you are authorizing Abbott to use and disclose your personal information so that Abbott (or its affiliates) may send you advertising and marketing-related information about diabetes care or other products and services. You understand that once your information is disclosed pursuant to this authorization that it may be re-disclosed and may no longer be protected by HIPAA. You understand that neither Abbott nor your health care providers may condition your treatment, payment, insurance enrollment, eligibility for benefits on your choice to opt-in to receive marketing communications from Abbott. This authorization will remain in effect for so long as you share personal information with us directly or with your health care provider through the LibreView System account and opt-in to receive marketing communications. You understand that you may revoke this authorization at any time by opting out of receiving marketing communications by either clicking on the unsubscribe link at the bottom of marketing-related emails we send you, by changing your LibreView preferences, or by contacting us at DiabetesCareHIPAA@abbott.com, but that this revocation will only apply to the extent that we have not already taken action based on it.

+COUNTRY SPECIFIC PROVISIONS

+USA

Some functions within Abbott may operate as a “Covered Entity” pursuant to the Health Insurance Portability and Accountability Act and its implementing regulations (collectively “HIPAA”) and may use any patient personal information, including health information, that you provide to us directly or through the LibreView System for the purpose of improving treatment guidance for patients utilizing Abbott’s FreeStyle family of products or Libre App. Abbott’s use of patient personal information, including health information, that is provided to us directly or through the LibreView System may be additionally governed by our HIPAA Notice of Privacy Practices, available on LibreView at HIPAA Notice of Privacy Practices.

If you choose to delete your LibreView System account, Abbott may also retain any patient personal information, including health-related information, that you provide to us directly or through the LibreView System for the purpose of improving treatment guidance for patients utilizing Abbott’s FreeStyle family of products or Libre App. Please contact DiabetesCareHIPAA@abbott.com with any questions about your HIPAA rights.

+Argentina

The Public Information Access Agency, in its capacity as supervisory body of Act No. 25.326, has jurisdiction over all accusations and complaints made by those affected in their rights for infringements to regulations in force referred to the protection of personal information.

+Australia

If you wish to make a complaint about a breach of the Privacy Act, the Australian Privacy Principle (“APPs”) or a privacy code that applies to us, or if you have any queries or concerns about our Privacy Notice or the way we handle your personal information, please contact us using the details above and we will take reasonable steps to investigate and respond to you.

If after this process you are not satisfied with our response, you can submit a complaint to the Office of the Information Commissioner. See http://www.oaic.gov.au/privacy/privacy-complaints, to obtain the relevant complaint forms, or contact the Information Commissioner’s office. We are not likely to disclose your personal information overseas, except as permitted by the Privacy Act 1988 (Cth), unless we otherwise advise you in writing. We may transfer your personal information to the United States. You consent to that disclosure and agree that by giving that consent, Australian Privacy Principle 8.1 no longer applies, and we are not required to take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information.

+European Economic Area and Switzerland

Consent: To process personal information concerning your health, you must provide Abbott affirmative consent to use the LibreView System. You may withdraw your consent at any time by logging into your LibreView System account via www.libreview.com and using the delete account functionality.

Legal basis for the processing of your personal information: Abbott processes your information based on the following legal bases as set out in the General Data Protection Regulation 216/679:

Data Protection Officer: The contact details of our European data protection officer along with other useful contact information are available at www.eu-dpo@abbott.com.

Your rights: If you would like to exercise any of your rights set out in the section entitled +How Individual Users can Access and Correct Personal Information and Your Rights and are contacting us by email, please title your email subject line accordingly (for example, “Correction Request” or “Access Request”, or other right as applicable, in the subject line of the email.) We will do our best to respond to all reasonable requests in a timely manner, or at the very least, in accordance with any applicable legal requirement. You have the right to lodge a complaint with your local data protection authority if you are unhappy with any aspect of Abbott’s processing of your personal information.

+California

California Civil Code Section 1798.83 permits residents of the State of California to request from certain businesses with whom the California resident has an established business relationship a list of all third parties to which the business, during the immediately preceding calendar year, has disclosed certain personally identifiable information for direct marketing purposes. Abbott is required to respond to a customer request only once during any calendar year. To make such a request you should send a letter to Abbott Diabetes Care Inc., Attn: Privacy Officer, 1420 Harbor Bay Parkway, Alameda, CA 94502, USA. In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California Privacy Rights requirements and only information sharing that is covered will be included in our response.

+Chile, Colombia and Saudi Arabia

Your consent is required for Abbott to process your personal information generally. By accepting the terms of this Privacy Notice, you are deemed to have consented to the processing of your personal information as described herein. You may withdraw your consent at any time by logging into your LibreView System account via www.libreview.com and using the delete account functionality.

+France

It is important when you sign up for a LibreView System account that you select France as your country of residence as this will determine where your data is stored. If you have incorrectly identified a different country as your country of residence, do not complete the installation. Instead, return to www.libreview.com and click “Sign Up”. The controller for your LibreView System account is Abbott Diabetes Care, Inc., 1420 Harbor Bay Parkway, Alameda, California 94502 United States. Our local representative is Abbott Diabetes Care France (Diabétologie), Bâtiment Cologne, 12 Rue de la Couture, BP 20235, 94518 Rungis Cedex.

+South Africa

You have the right to lodge a complaint to the Information Regulator regarding the processing of your personal information, by writing to: The Information Regulator, SALU Building, 316 Thabo Sehume Street, PRETORIA, Ms Mmamoroke Mphelo, Tel: 012 406 4818, Fax: 086 500 3351, inforeg@justice.gov.za

DOC38902-005_rev-A_en-US