Effective date: October 1, 2024
Varex Imaging Corporation is committed to ensuring the protection and security of your personal data. When we collect and process your data, we do it in accordance with best industry practice and the highest legal and regulatory standards. The following information provides a comprehensive guide to our personal data processing practices.
There may be other terms applicable to our collection and processing activities or your data, depending on the jurisdiction. Please see the appendix that may be relevant to you.
Data Controller
As Data Controller, Varex Imaging Corporation Inc. is responsible for the collection and processing of your personal data on this website. We can be reached as noted in the contact details portion below.
Information We Collect and How We Use It
When you visit our Websites, we collect Internet or other electronic network activity information through the use of cookies and other trackers. Depending on your tracking preferences, the information we collect may include for example your device’s Internet Protocol (“IP”) address, referring website, what pages your device visited, and the time that your device visited our Website. We may also rely on analytics and tools used to prevent spam and other security risks related to the use of abusive automated software. You can choose your preferences with regards to the cookies and other trackers by accessing the preference centre on our Websites. Visit our Cookie Policy for more information on the types of cookies and other trackers we use on our Websites.
Rights of the Data Subject
As a user you have the right to request information on the personal data we store concerning you as well as the purpose of collection and storage. In addition, you have a right to demand that incorrect data be corrected and data which are inappropriate or no longer needed be deleted. You also have the right to request that we restrict the processing of your data or to forward it to another controller. If we collect your personal data based on legitimate interest, you have the right to object. In such case, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defense of legal claims. For information, requests and suggestions regarding data protection, please do not hesitate to contact us.
Social Media Links
We place various social media buttons on our platform in the form of a link.
Please be aware that these buttons do not integrate any social media plugins. Your personal data will be transferred to these platforms only if you click on the button. We have no control over the extent, nature and purpose of data processing operations performed by social media providers. Please check the social media providers’ websites for policies regarding their privacy policies and practices.
“Contact Us” Form
When you are using our contact form to get in touch with us, we only collect and process your title, name, your email address, address, phone number, country, city and your questions and comments.
We are processing your personal data for the legitimate purposes of replying to you and informing you about our products and services. The personal data will be erased when they are no longer necessary for the original purpose (replying to your raised questions and comments).
Security Measures
We adopt technical and organizational measures to protect your data as comprehensively as possible. In addition to the commitment of our employees to secrecy and a careful selection and monitoring of our service providers, we also secure our operating environment adequately.
To protect your data against unwanted access, we use data encryption. Data collected from this website will be passed between your computer and our server and vice versa via the internet using data encryption in transit technology by using TLS 1.2, ECDHE_ECDSA with X25519 encryption. If the connection is encrypted the ‘lock’ symbol on your browser status list will show as locked, and the address line will start with “https://”.
Transfer to Third Parties
Please note that our third-party service providers processing data on our behalf are required to take appropriate security measures to protect your personal data in line with our policies.
We may disclose your personal information for the purposes set out above and only for specific purposes according to the relevant data protection laws. Those service providers are bound to process your personal data only on our strict instructions and when they can offer adequate technical and organizational measures to protect your data.
We may also disclose your personal information if it is required or authorized by law, where disclosure is necessary to prevent a threat to life, health or safety, or where we are otherwise permitted by the relevant data protection laws.
Contact Information
Questions or comments regarding this Privacy Statement should be submitted to Varex by mail or e-mail at the address:
Varex Imaging Corporation Inc.
1678 S. Pioneer Road, Salt Lake City, UT 84104
1 (801) 972-5000
Or contact the regional DPO appointed for your jurisdiction, which you can find in the relevant appendix.
EU/EEA Residents Appendix
EU regulation 2016/679 shall be applicable to residents and users of the website based in EU/EEA. Below you will find the additional information required as per applicable data protection legislation.
Description of data processing and cookies
When you visit our website, we might collect and process your personal data for the following purposes and legal grounds:
- process and respond to your requests when you reach us via our contact forms ((pre)contractual or legitimate interest, respectively Art. 6(1)(b) and 6(1)(f) GDPR);
- improve website performance and browsing experience (legitimate interest, Art. 6(1)(f) GDPR);
- display content on our website including videos (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
- maintain the security of our website (legitimate interest, Art. 6(1)(f) GDPR);
- analyse site usage and enhance site navigation (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
- marketing purposes (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
- share information with advertising partners (consent, Art. 6(1)(a) GDPR);
- consider you for potential job openings within our organization (consent or (pre)contractual, respectively Art. 6(1)(a) and Art. 6(1)(b) GDPR).
When you use our website, we may use cookies and similar technologies. Our cookie banner and cookie policy show you the list of the cookies we use, including their provider, purpose, description and other relevant information. You can adjust your preferences and withdraw your consent at any time at the following link. See the cookie privacy policy for more information.
Data retention
Unless we have provided you with specific information about the retention of your personal data, we retain your data as long as this is necessary to fulfil the purposes for which it has been collected. Data, which is no longer required, will be deleted.
Social links
On our website we place social media buttons (such as LinkedIn, Twitter and YouTube) in the form of links. We only display a button and do not integrate any social media plugins. This means that personal data from you will only be transferred to the social media provider if you click on the button.
If you are already logged into the social media service, when you click on the respective social media button, the social media service may also use this data to identify your username and, possibly, even your real name.
We have no control over the extent, nature and purpose of such data processing by the social media service. Please note that the social media service might use this data to create pseudonymized and even individualized user profiles.
You can find further information about how social media providers use your data on the privacy policies provided on their respective social media platforms.
Embedded videos
To make our site as appealing and informative as possible, we embed videos that are not hosted on our servers. When you view the content, the third-party provider is informed that you accessed our website, and receives the usage data that are required in order for them to provide their service. We have no influence on the further data processing performed by the third-party provider.
Google Analytics
We use the web analysis tool “Google Analytics” to design our websites according to your needs. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. In this way we are able to recognize returning visitors and count them as such.
Within the framework of Google Analytics, Google Ireland Limited and Google LLC (USA) support us. The data processing can therefore also take place outside the EU or EEA. With regard to Google LLC, no adequate level of data protection can be assumed due to the processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. Please take this into account if you decide to give your consent to our use of Google Analytics.
If you wish to withdraw your consent, you can change your cookies preferences at here.
Contact form
You are welcome to reach us via our contact form. In order to use our contact form, we ask you to provide the following information: your name, email, phone, country and subject.
We use this data on the basis of our legitimate interest to respond to your requests.
Furthermore, you can decide for yourself whether you would like to provide us with further information (e.g., in the message text box). This information is provided voluntarily and is not required for contacting us. We process your voluntary details on the basis of your consent.
Your data will only be processed to answer your request. We will delete your data if they are no longer required and there are no legal obligations to retain them.
As far as your data, transmitted via contact form, is processed on the basis of our legitimate interest, you can object to the processing at any time. In addition, you can revoke your consent to the processing of your voluntarily stated information at any time. To do so, please use the email address provided in the section below “Data protection requests”.
Transfer to Third Parties
Varex may share your personal data with:
- members of the Varex Imaging Group of companies, if required by the processing operation;
- our contractors and suppliers, such as those who provide us with information technology services, such as, hosting and technical support;
- our professional advisors and auditors;
- our business partners;
- regulators, governments and legal authorities, when required by the applicable regulation.
When we share your personal data with our service providers, the transfer falls under the scope of a data processing agreement which obliges our service providers to follow our strict instructions and comply with contractual obligations.
The personal data that we collect may be processed by Varex affiliated companies and trusted third parties. In some cases, we may transfer personal data to third countries outside the European Union (EU). Some of the countries to which your personal data is transferred may not offer an adequate level of protection equivalent to the protection offered by the laws in the EU. In such cases, to ensure that your personal data remains protected when it is transferred outside of the EU, Varex makes sure that appropriate measures are implemented, including our intragroup agreement, or approved Standard Contractual Clauses.
Our business partners, such as Google and Vimeo, may transfer your data to countries (such as the United States) in which data protection laws do not offer an adequate level of protection. When data are transferred to such countries, the authorities may have access to the data, without any legal recourse being available. In such cases, we ask you for your consent to perform this transfer based on Art. 49.1 (a) GDPR. If you wish to withdraw your consent, you can change your cookies preferences here.
Please note that when you start a video with a click, you enable such transfers. For more information on embedded videos see section 4 above.
Your rights as a data subject
According to Art. 12-22 GDPR, you may have the right to:
- access your data as well as receive a copy of your data;
- rectification and erasure;
- restriction of processing;
- data portability;
- object, if the data is processed pursuant to the legitimate interests of Varex Imaging;
- lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection regulations.
Data protection requests
Questions or comments regarding your rights as a data subject should be submitted to Varex by e-mail at the address: dataprivacy@vareximaging.com
Data Protection Officer
Our data protection officer for the EU/EEA, Switzerland and the UK is:
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88
28217 Bremen, Germany
Email: office@first-privacy.com
Philippine Residents Appendix
The Data Privacy Act (“DPA”), its implementing rules (“IRR”), and issuances by the National Privacy Commission shall be applicable to Philippine users of the website. Below you will find the additional information required as per applicable data protection legislation.
Rights of Data Subject
In addition to the rights mentioned above, you have the following rights under the DPA and its IRR:
Right to Access
You may have the right to reasonable access to, upon demand, the following:
- Contents of your personal data that were processed;
- Sources form which personal data were obtained;
- Names and addresses of recipients of the personal data;
- Manner by which such data were processed;
- Reasons for the disclosure of the personal data to recipients, if any;
- Information on automated processes where the data will, or is likely to, be made as the sole basis for any decision that significantly affects or will affect the data subject;
- Date when personal data concerning you were last accessed and modified; and
- The designation, name or identity, and address of the personal information controller.
Right to Damages
You may have the right to be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data, taking into account any violation of your rights and freedoms as data subject.
Right to Lodge a Complaint
You may also have the right to lodge a complaint before the National Privacy Commission for any violation of your data privacy rights.
Data Processing and Cookies
When you visit our website, we might collect and process your personal data for the following purposes on the basis of consent and legitimate interests:
- process and respond to your requests when you reach us via our contact forms;
- improve website performance and browsing experience;
- display content on our website including videos;
- maintain the security of our website;
- analyze site usage and enhance site navigation;
- marketing purposes;
- share information with advertising partners; and
- consider you for potential job openings within our organization
- When you use our website, we may use cookies and similar technologies which collect certain information by automated means. Our cookie banner and cookie policy show you the list of the cookies we use, including their provider, purpose, description, and other relevant information. You can adjust your preferences and withdraw your consent at any time by clicking “Manage Settings” at https://www.vareximaging.com/. See the Cookie Policy for more information.
Data retention
We retain your data as long as this is necessary to fulfil the purposes for which it has been collected. Data, which is no longer required, will be deleted.
Data Sharing
Varex may share your personal data with:
- members of the Varex Imaging Group of companies, if required by the processing operation;
- our contractors and suppliers, such as those who provide us with information technology services, such as, hosting and technical support;
- our professional advisors and auditors;
- our business partners;
- regulators, governments and legal authorities, when required by the applicable regulation.
When we share your personal data with our service providers, the transfer falls under the scope of a data processing agreement which obliges our service providers to follow our strict instructions and comply with contractual obligations.
Please note that when you start a video with a click, you enable such transfers. For more information on embedded videos see discussion below.
Embedded videos
To make our site as appealing and informative as possible, we embed videos that are not hosted on our servers. When you start a video with a click, you enable transfer of data. When you view the content, the third-party provider is informed that you accessed our website and receives the usage data that are required in order for them to provide their service. We have no influence on the further data processing performed by the third-party provider. We are not responsible for, and this Privacy Policy does not apply to, the privacy practices of the third-party providers or of any companies that Varex does not own or control.
Data Protection Officer
PH Quality Manager
Varex PH Imaging Philippines Inc.
Harvard Avenue, EZP Business Park, CPIP
4027 Calamba, Laguna, Philippines
dpo_vcph@vareximaging.com