1. Privacy at Endovascular

Endovascular Endovascular (Shanghai) Co., Ltd. (“Endovascular”) respects your privacy rights and we are committed to the responsible use of Personal Data concerning all stakeholders. To this effect, we are dedicated to complying with Data Protection laws, and our employees and vendors abide by internal privacy rules and policies.

2. About this Policy

This Privacy Policy describes how Endovascular and its affiliates process and protect Personally Identifiable Information that this website collects about its visitors ("Personal Data"). Endovascular’s website is intended to be used by Endovascular customers, commercial visitors, business associates, investors, and other interested parties for business purposes. To the extent Endovascular collects information outside of this website, Endovascular will provide a separate data protection notice where required by applicable laws.

3. Data Protection Applicable Laws

Endovascular is established in multiple jurisdictions and this website can be accessed by visitors based in various countries. This Policy is intended to provide notice to Data Subjects regarding Personal Data in an effort to be compliant with the strictest of all Data Protection laws of the jurisdictions in which Endovascular operates. As the data controller, Endovascular is responsible for the processing of Personal Data for the purposes and with the means described in this Privacy Policy.

4. Lawfulness of Processing

As a visitor, you may be a customer, supplier, distributor, end-user, or employee. This website is intended to inform you about Endovascular and its products. It is in Endovascular’s legitimate interest to understand what content visitors are interested in when they browse our pages and, sometimes to use this opportunity to interact directly with them. If you make a request or purchase through our website, the lawfulness of processing is the execution of a contract to which you are a party. If Endovascular is under legal or regulatory obligation to keep a record of or disclose information collected on this website, then the lawfulness of processing is the legal obligation to which Endovascular must comply.

5. Collection of Personal Data from Your Device

Even though most of our pages do not require any form of registration, we may collect data that identifies your device. For example, without knowing who you are and with the use of technology, we may use Personal Data such as your device’s IP address to know your approximate location in the world. We may also use Cookies to get information about your experience on this website, such as the pages you visit, the website from which you came and the searches you perform. The processing of your Personal Data using Cookies is explained in our Cookie Policy. Overall, these processing activities make use of your personal device data which we strive to protect with adequate cybersecurity measures.

6. Collection of Personal Data Using a Form

Particular pages of this website may offer services requiring you to fill in a form, which collects identifying data such as your name, address, e-mail address, telephone number, as well as data pertaining to previous work experiences or education, depending on the tool of collection. For example, filling in such a form could be necessary to manage your request to receive tailored information and/or render services available through the website, to deliver you products and services, to provide you with customer support, to process your application, etc. We may process Personal Data for other purposes, such as to promote products and services which we think may be of interest to Healthcare Professionals and patients.

7. Use of Personal Data

Personal Data collected by Endovascular through this website is used in support of our relationship with customers, commercial visitors, business associates, investors, and other interested parties for business purposes. In compliance with Data Protection laws, all forms that collect your Personal Data provide detailed information about the specific purposes of processing before you voluntarily submit your Personal Data.

8. Security of Personal Data

In order to protect your privacy, Endovascular implements cybersecurity measures to safeguard the security of your Personal Data when collecting, storing and processing the Personal Data you share with us. These necessary measures are of technical and organizational nature and aim at preventing against alteration, loss and non-authorized access to your data.

9. Sharing of Personal Data

Endovascular will not share your personal information collected from this website with an unrelated third-party without your permission. However, in the normal operation of our website, we instruct subcontractors to process Personal Data on our behalf. Endovascular and these subcontractors implement appropriate contractual and other measures to protect your Personal Data. In particular, the subcontractors can only process your Personal Data under our written instructions, and they must implement technical and organizational security measures to protect your data.

10. Cross-Border Transfer

Your personal information may be stored and processed in any country where we have facilities or subcontractors, and by using our service or by providing Personal Data, your information may be transferred to countries outside of your country of residence. In the event of such a cross-border transfer, appropriate contractual and other measures are in place to protect your Personal Data and to make that transfer lawful in accordance with Data Protection laws.

11. Retention Period

We will retain your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and according with Data Protection laws and good practices. For example, we may store and process Personal Data for the length of time we have a relationship with you and as long as we provide products and services to you. Endovascular could be required to store some Personal Data as an archive for the length of time we have to comply with a legal or regulatory obligation to which we are subject. After the data retention period has been reached, Endovascular shall erase and no longer store your Personal Data.

12. Your rights regarding Personal Data

As a Data Subject, you may also exercise the following rights according to Data Protection Laws: Right of access; Right to rectification; Right to erasure; Right to restriction of processing and to object. For any questions regarding your rights as a Data Subject, please contact data-privacy@Endovascular.com.

13. Update of the Policy

This Policy may be updated from time to time to adapt to legal or regulatory changes pertaining to Personal Data, and we will indicate the date the Policy was updated.