Effective date: October 1, 2022
Varex Imaging Corporation is committed to ensuring the protection and security of your personal data. When we collect and process your data, we do it in accordance with best industry practice and the highest legal and regulatory standards. The following information provides a comprehensive guide to our personal data processing practices
Data Controller
As Data Controller, we are responsible for the collection and processing of your personal data on this website. We can be reached at:
Varex Imaging Corporation Inc.
1678 S. Pioneer Road, Salt Lake City, UT 84104
1 (801) 972-5000
Information We Collect and How We Use It
In order to provide our products and the service offerings, it is sometimes necessary for us to collect certain personal data about users of such service offerings, including, but not limited to, account user name, IP address (local and public), session information and other usage data. It is important to note that some of your personal data may be provided to us by our business partners. To the extent necessary for management of the service offerings and statistical purposes, we may retain collected personal data for a limited period of time, after which time the information will be discarded or destroyed. Where possible, any such retained personal data will be stripped of personal identifiers and rendered anonymous.
Cookies
We collect personal information through cookies in order to improve the quality of our websites and provide you with a better user experience.
Cookies are small pieces of information that are stored on your hard drive. A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.
The cookies can retrieve information about you, your preferences or your device allowing our site to work as you expected. Our website utilizes a number of different types of cookies:
Required Cookies:
These cookies are necessary for the website to function. You may disable these by changing your browser settings, but this may affect how our website works.
We are processing your personal data for the legitimate purposes explained below.
Functional Cookies:
These cookies enable us to provide you enhanced functionalities and personalization. This type of cookies also allows us to count visits and traffic sources so we can measure and improve the performance of our site. They may be set by us or by third party providers whose services we may be incorporated in our websites.
Advertising cookies:
These cookies may be set through our site by our advertising partners. The cookies may be used by those companies to build a profile of your interests and show you advertisements tailored to your interests.
With regards to the “functional” and “advertising cookies” described above, we always process your personal data based on your consent or any other applicable laws and regulations. Your consent is collected and registered following your cookie preferences selection in our cookie banner.
Rights of the Data Subject
As a user you have the right to request information on the personal data we store concerning you as well as the purpose of collection and storage. In addition, you have a right to demand that incorrect data be corrected and data which are inappropriate or no longer needed be deleted. You also have the right to request that we restrict the processing of your data or to forward it to another controller. If we collect your personal data based on legitimate interest, you have the right to object. In such case, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defence of legal claims. For information, requests and suggestions regarding data protection, please do not hesitate to contact us.
Social Media Links
We place various social media buttons on our platform in the form of a link.
Please be aware that these buttons do not integrate any social media plugins. Your personal data will be transferred to these platforms only if you click on the button. We have no control over the extent, nature and purpose of data processing operations performed by social media providers. Please check the social media providers’ websites for policies regarding their privacy policies and practices.
“Contact Us” Form
When you are using our contact form to get in touch with us, we only collect and process your title, name, your email address, address, phone number, country, city and your questions and comments.
We are processing your personal data for the legitimate purposes of replying to you and informing you about our products and services. The personal data will be erased when they are no longer necessary for the original purpose (replying to your raised questions and comments).
Security Measures
We adopt technical and organisational measures to protect your data as comprehensively as possible. In addition to the commitment of our employees to secrecy and a careful selection and monitoring of our service providers, we also secure our operating environment adequately.
To protect your data against unwanted access, we use data encryption. Data collected from this website will be passed between your computer and our server and vice versa via the internet using data encryption in transit technology by using TLS 1.2, ECDHE_ECDSA with X25519 encryption. If the connection is encrypted the ‘lock’ symbol on your browser status list will show as locked, and the address line will start with “https://”.
Transfer to Third Parties
We treat your personal data confidentially and do not pass it on to unauthorized third parties. We may disclose your personal information to third parties such as our members and our external and internal service providers that support us within the scope of commissioned data processing as per our instructions.
Please note that our third-party service providers processing data on our behalf are required to take appropriate security measures to protect your personal data in line with our policies.
We may disclose your personal information for the purposes set out above and only for specific purposes according to the relevant data protection laws. Those service providers are bound to process your personal data only on our strict instructions and when they can offer adequate technical and organizational measures to protect your data.
We may also disclose your personal information if it is required or authorized by law, where disclosure is necessary to prevent a threat to life, health or safety, or where we are otherwise permitted by the relevant data protection laws.
Contact Information
Questions or comments regarding this Privacy Statement should be submitted to Varex by mail or e-mail at the address: dataprivacy@vareximaging.com.
EU/EEA Residents Appendix
EU regulation 2016/679 shall be applicable to residents and users of the website based in EU/EEA. Below you will find the additional information required as per applicable data protection legislation.
Description of data processing and cookies
When you visit our website, we might collect and process your personal data for the following purposes and legal grounds:
- process and respond to your requests when you reach us via our contact forms ((pre)contractual or legitimate interest, respectively Art. 6(1)(b) and 6(1)(f) GDPR);
- improve website performance and browsing experience (legitimate interest, Art. 6(1)(f) GDPR);
- display content on our website including videos (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
- maintain the security of our website (legitimate interest, Art. 6(1)(f) GDPR);
- analyse site usage and enhance site navigation (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
- marketing purposes (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
- share information with advertising partners (consent, Art. 6(1)(a) GDPR);
- consider you for potential job openings within our organisation (consent or (pre)contractual, respectively Art. 6(1)(a) and Art. 6(1)(b) GDPR).
When you use our website, we may use cookies and similar technologies. Our cookie banner and cookie policy show you the list of the cookies we use, including their provider, purpose, description and other relevant information. You can adjust your preferences and withdraw your consent at any time at the following link [ES1] . See the cookie privacy policy [ES2] for more information.
Data retention
Unless we have provided you with specific information about the retention of your personal data, we retain your data as long as this is necessary to fulfil the purposes for which it has been collected. Data, which is no longer required, will be deleted.
Social links
On our website we place social media buttons (such as LinkedIn, Twitter and YouTube) in the form of links. We only display a button and do not integrate any social media plugins. This means that personal data from you will only be transferred to the social media provider if you click on the button.
If you are already logged into the social media service, when you click on the respective social media button, the social media service may also use this data to identify your username and, possibly, even your real name.
We have no control over the extent, nature and purpose of such data processing by the social media service. Please note that the social media service might use this data to create pseudonymised and even individualised user profiles.
You can find further information about how social media providers use your data on the privacy policies provided on their respective social media platforms.
Embedded videos
To make our site as appealing and informative as possible, we embed videos that are not hosted on our servers[ES3] . When you view the content, the third-party provider is informed that you accessed our website, and receives the usage data that are required in order for them to provide their service. We have no influence on the further data processing performed by the third-party provider.
| Third party provider | maximum retention period[ES4] | adequate level of data protection |
| YouTube (USA) | No adequate level of data protection. | |
| Vimeo (USA) | No adequate level of data protection. |
Google Analytics
We use the web analysis tool “Google Analytics” to design our websites according to your needs. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. In this way we are able to recognize returning visitors and count them as such.
Within the framework of Google Analytics, Google Ireland Limited and Google LLC (USA) support us. The data processing can therefore also take place outside the EU or EEA. With regard to Google LLC, no adequate level of data protection can be assumed due to the processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. Please take this into account if you decide to give your consent to our use of Google Analytics.
If you wish to withdraw your consent, you can change your cookies preferences at the following link[ES5] :
Contact form
You are welcome to reach us via our contact form. In order to use our contact form, we ask you to provide the following information: your name, email, phone, country and subject.
We use this data on the basis of our legitimate interest to respond to your requests.
Furthermore, you can decide for yourself whether you would like to provide us with further information (e.g., in the message text box). This information is provided voluntarily and is not required for contacting us. We process your voluntary details on the basis of your consent.
Your data will only be processed to answer your request. We will delete your data if they are no longer required and there are no legal obligations to retain them.
As far as your data, transmitted via contact form, is processed on the basis of our legitimate interest, you can object to the processing at any time. In addition, you can revoke your consent to the processing of your voluntarily stated information at any time. To do so, please use the email address provided in the section below “Data protection requests”.
Transfer to Third Parties
Varex may share your personal data with:
- members of the Varex Imaging Group of companies, if required by the processing operation;
- our contractors and suppliers, such as those who provide us with information technology services, such as, hosting and technical support;
- our professional advisors and auditors;
- our business partners;
- regulators, governments and legal authorities, when required by the applicable regulation.
When we share your personal data with our service providers, the transfer falls under the scope of a data processing agreement which obliges our service providers to follow our strict instructions and comply with contractual obligations.
The personal data that we collect may be processed by Varex affiliated companies and trusted third parties. In some cases, we may transfer personal data to third countries outside the European Union (EU). Some of the countries to which your personal data is transferred may not offer an adequate level of protection equivalent to the protection offered by the laws in the EU. In such cases, to ensure that your personal data remains protected when it is transferred outside of the EU, Varex makes sure that appropriate measures are implemented, including our intragroup agreement, or approved Standard Contractual Clauses.
Our business partners, such as Google and Vimeo, may transfer your data to countries (such as the United States) in which data protection laws do not offer an adequate level of protection. When data are transferred to such countries, the authorities may have access to the data, without any legal recourse being available. In such cases, we ask you for your consent to perform this transfer based on Art. 49.1 (a) GDPR. If you wish to withdraw your consent, you can change your cookies preferences at the following link[ES6] :
Please note that when you start a video with a click, you enable such transfers. For more information on embedded videos see section 4 above.
Your rights as a data subject
According to Art. 12-22 GDPR, you may have the right to:
- access your data as well as receive a copy of your data;
- rectification and erasure;
- restriction of processing;
- data portability;
- object, if the data is processed pursuant to the legitimate interests of Varex Imaging;
- lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection regulations.
Data protection requests
Questions or comments regarding your rights as a data subject should be submitted to Varex by e-mail at the address: dataprivacy@vareximaging.com [ES7] [AA8]
Data Protection Officer
Our data protection officer for the EU/EEA, Switzerland and the UK is:
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88
28217 Bremen, Germany
Email: office@first-privacy.com