United States Regional Supplemental Privacy Notice

Last Update: 10/15/2024

1. Scope

This United States Regional Supplemental Privacy Notice (“U.S. Notice“) is a supplemental notice to the ZimVie Corporate Privacy Notice | ZimVie Americas and applies to certain United States residents, except for California residents which are governed by the  Supplemental Privacy Notice for California Residents.

This U.S. Notice describes how ZimVie and our group companies (“ZimVie”, “we”, “us”, and “our”) collect, use and disclose the personal information of residents of Colorado, Connecticut, Virginia, Nevada, and Utah (“consumer” or “you”). This notice applies to personal information collected by our websites, applications, services, and products (collectively “services”), and during routine offline business contact with you.

We adopted this notice to comply with the Colorado Privacy Act (“CPA“), the Connecticut Data Privacy Act (“CTDPA”) the Virginia Consumer Data Protection Act of 2021 (“VCDPA”), the Nevada Revised Statutes Chapter 603A (“Nevada Privacy Law”), the Utah Consumer Privacy Act (“UCPA“), and other federal and state laws, as may be applicable (all collectively shall be defined as “U.S. Privacy Laws”). Terms used herein shall have the same meaning under the applicable privacy regulations.

If you are not located in the aforementioned United States jurisdictions, this notice does not apply to you. Please refer to our Corporate Privacy Notice.

2. Collection and sharing of your personal data

Please refer to our Corporate Privacy Notice for a full description of the types of personal data that we collect (see “What types of personal information we process”) and how we share this data with third parties (see “Who will access your personal data”).

Our Corporate Privacy Notice also provides details about ZimVie’s responsibilities when handling your personal data (for example, see “How we secure your personal data”).

3.  Purposes for processing your personal data

We may process your personal data on one or more of the following legal bases:

  • when necessary to enter into a contract with you or a legal entity you represent, to perform our contractual obligations, to provide ZimVie services, to respond to requests from you, or to provide customer support;
  • where we have a legitimate interest, as described in our Corporate Privacy Notice (see “Purposes for processing your personal data”);
  • as necessary to comply with relevant law and legal obligations, including to respond to lawful requests and orders; or
  • with your consent

4.  Your data subject rights

Your Privacy Rights as a Resident of Virginia

Virginia law provides some Virginia residents with the rights listed below.

Right to access. You have the right to confirm whether or not we act as a controller processing your personal data and to access such personal data.

Right to correct. You have the right to request that we correct inaccurate personal data.

Right to delete. You have the right to request that we delete the personal data we have collected about you.

Right to opt-out. You have the right to opt out of targeted advertising and the sale of your data (as defined under Virginia law). ZimVie does not engage in profiling decisions that produce legal or similarly significant effects concerning consumers.

Exercising your Virginia privacy rights. You may make a request up to two times annually. To exercise your rights as described above or request an appeal of our decision, please submit a request using the following method:

Responding to requests

We will ask you to verify your identity if we need to, and to provide information that helps us to understand your request. If we do are unable to comply with your request, whether in whole or in part, we will explain why.

Response timing and format

We endeavor to respond to a verifiable consumer request within 45 days of receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period. We will generally not charge you to fulfill your requests but may charge a reasonable fee for administrative expenses if your request is manifestly unfounded, excessive, or repetitive.

Contact us privacy.nam@zimvie.com

 

Your Privacy Rights as a Colorado Resident

Right to access. You have the right to confirm whether or not we act as a controller processing your personal data and to access such personal data.

Right to correct. You have the right to request that we correct inaccurate personal data.

Right to delete. You have the right to request that we delete the personal data we have collected about you.

Right to data portability. You have the right to obtain a copy of your data in portable and readily usable format that allows you to transmit the data to another controller without hindrance.

Right to opt-out. You have the right to be notified about the processing of sensitive data and to opt out of profiling that involves decisions producing legal or similarly significant effects, targeted advertising and the sale of your data (as defined under Colorado law). ZimVie does not engage in profiling decisions that produce legal or similarly significant effects concerning consumers.

Exercising your Colorado privacy rights. To exercise your rights as described above or request an appeal of our decision, please submit a request using the following method:

Responding to requests

We will ask you to verify your identity if we need to, and to provide information that helps us to understand your request. If we are unable to comply with your request, whether in whole or in part, we will explain why.

Response timing and format

We endeavor to respond to a verifiable consumer request within 45 days of receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period. We will generally not charge you to fulfill your requests but may charge a reasonable fee for administrative expenses if your request is manifestly unfounded, excessive, or repetitive (e.g. second or subsequent requests made within a 12-year period).

Contact us privacy.nam@zimvie.com

 

Your Privacy Rights as a Utah Resident

Utah law provides some Utah residents with the rights listed below.

Right to access. You have the right to confirm whether or not we act as a controller processing your personal data and to access such personal data.

Right to delete. You have the right to request that we delete the personal data we have collected about you.

Right to data portability. You have the right to obtain a copy of your data in portable and readily usable format that allows you to transmit the data to another controller without impediment.

Right to opt-out. You have the right to be notified about the processing of sensitive data and to opt out of the processing of sensitive data, targeted advertising and the sale of your data (as defined under Utah law). ZimVie does not engage in profiling decisions that produce legal or similarly significant effects concerning consumers.

Exercising your Utah privacy rights. To exercise your rights as described above or request an appeal of our decision, please submit a request using the following method:

Responding to requests

We will ask you to verify your identity if we need to, and to provide information that helps us to understand your request. If we are unable to comply with your request, whether in whole or in part, we will explain why.

Response timing and format

We endeavor to respond to a verifiable consumer request within 45 days of receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period. We will generally not charge you to fulfill your requests but may charge a reasonable fee for administrative expenses if your request is manifestly unfounded, excessive, or repetitive (e.g. second or subsequent requests made within a 12-year period).

Contact us privacy.nam@zimvie.com

 

Your Privacy Rights as a Connecticut Resident

Connecticut law provides some Connecticut residents with the rights listed below.

  • Right to Access. You may have the right to confirm with us whether we are processing your personal data. You may also request access to such personal data.
  • Right to Correct. Subject to certain exceptions, you have the right to request that we rectify, correct, or update your personal data held by us that is inaccurate.
  • Right to Delete. Under certain circumstances, you may have the right to request that we delete the personal data that we hold about you. We may refuse your right to delete if it is reasonably necessary for us to provide a service requested by you; to perform a contract between us; to maintain functionality and ensure security of our systems; to enable solely expected internal uses of your personal data; to exercise a right provided by law; or to comply with a legal obligation.
  • Right to Opt Out of Sale. You have the right to opt-out of the sale of your personal data.  ZimVie does not sell your personal data.
  • Right to Opt Out of Targeted Advertising. You may have the right to opt-out of processing of your personal data for purposes of targeted advertising based on your activity across non-affiliated websites, applications, and online services.
  • Right to Opt out of Profiling. Connecticut users have the right to opt-out of “profiling,” which CTPA defines as solely automated processing of personal data to make certain decisions with a legal or similarly significant effect on you (such as credit decisions, and access to basic goods and services). ZimVie does not engage in profiling as described above.
  • Right Against Discrimination. You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising or requesting to exercise your rights.

Exercising Privacy Rights. You can exercise your rights once every 12 months. To exercise your rights as described above or request an appeal of our decision, please submit a request using the following methods:

A Connecticut resident may also designate another person to act on their behalf with respect to these rights. ZimVie shall comply with such requests received from an authorized agent if ZimVie is able to verify, with commercially reasonable effort, the identity of the consumer and the authorized agent’s authority to act on such consumer’s behalf.

Responding to requests

We will ask you to verify your identity if we need to, and to provide information that helps us to understand your request. If we do are unable to comply with your request, whether in whole or in part, we will explain why.

Response timing and format

We endeavor to respond to a verifiable consumer request no later than 45 days after receipt of the request. If we require more time (up to 90 days), we will inform you of the reason and extension period. We will generally not charge you to fulfill your requests but may charge a reasonable fee for administrative expenses if your request is manifestly unfounded, excessive, or repetitive.

Contact us privacy.nam@zimvie.com