Varian Mobile Application Privacy Statement

Effective date: December 8, 2021

Varian Medical Systems, Inc. (including its affiliate entities, collectively “Varian”) is committed to respecting your privacy. As you use our mobile application, Varian MobileTM (the “App”), our intent is that your experience is informative, convenient and secure. Varian is committed to responsibly managing the personal information provided, and we have adopted the following privacy statement to explain our commitment to your privacy.

The App may access your information in order to provide the services to our customers. Your clinic is our customer and your clinic is the data controller of your information and Varian is the data processor. This App allows you to access your clinic’s environment. Please also review the applicable clinic’s privacy statement as to its use of your information and contact the clinic if you have any concerns in relation to the use of your information. This privacy statement applies to the App and it discloses Varian's practices with respect to the type of information that we gather, the way we use information internally and our policy statement regarding sharing information with others with respect to the data collected in the App that Varian is a data controller of.

COLLECTION AND USE OF PERSONAL INFORMATION

When you download, install and use the App, we automatically collect information on the type of device you use, operating system version, and the device identifier. When you use the App, we and/or a third-party provider may also collect and share between us the localized language of the App, or to otherwise provide you with updates in regard to specific content or services. If you do not wish to have a provider process your data, please do not register for the App.

We use mobile analytics software to allow us to better understand the functionality of our App on your phone. This software may record information such as how often you use the application, performance data, and where the application was downloaded from. We do not link the information we store within the analytics software to any personal information you submit within the App.

LOG FILES

We, through our third-party tracking and analytics utility providers, maintain a log file. We track in the log file, your actions that are initiated or facilitated using the App, including the country which you are logging in from, user engagement data, your user details which you enter as part of registration, use of the App at Varian events, survey questions and responses. In addition, the log files may generally capture, record and store data concerning your use of the App. Access to this data is restricted to those providers and those who administer our network and mobile apps.

OTHER USES OF PERSONAL INFORMATION

When you download and use the App, we automatically collect information on the type of device you use and the operating system version. When you use the App, we and/or a third-party provider may also collect and share between us the localized language of the App. Your clinic may also use the App to communicate or send you notices. If you do not wish to have a provider process your data, please do not register for the App. When you sign into the App with registered credentials you will have access to specified features of the App and can view private content pertinent to your user profile. Information may be collected: (1) to gather statistical data about App usage and (2) to understand user activity and the App engagement.

INFORMATION SHARED WITH OUTSIDE PARTIES

Any information that you provide to us will be used for our purposes only as set out in this privacy statement. All other uses of your information will be determined by our customers, more information on which will be found in their privacy statement.

Except as specified in this privacy statement, your information will not be sold or shared with individuals outside the employ of Varian, or with other companies. We may share your information with third parties who provide services on our behalf to help with our business activities. These companies are authorized to use your personal information only as necessary to provide these services to us. For example, Varian uses third-party vendors for different uses such as hosting, logging, surveys, etc. Some of the parties to whom we disclose your information are located in countries, including the United States, that may not provide the same level of data protection as your home country. As required by law, we take appropriate steps to ensure that such recipients of your information are bound to duties of confidentiality (See below Transfers of Personal Data section).

Varian complies with applicable law and legal obligations to respond to governmental, law enforcement and court requests for personal information and other information and data about our visitors and their transactions. In certain situations, Varian may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Varian's Legal Department may access and use your personal information and other information or data to protect our rights, in the event of a dispute or in response to legal process, law enforcement inquiries or abuse of the App.

If Varian is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personally identifiable information, as well as any choices you may have regarding your personally identifiable information.

TRANSFERS OF PERSONAL DATA

Your Personal Data may be stored and or accessed outside of the country in which you live. As of July 16, 2020 (the ”Decision Date”), we rely on country-level adequacy decisions or utilize privacy frameworks to legitimize the transfer of the Personal Data or Health Data, such as the Standard Contractual Clauses or similar for EEA, Switzerland and UK transfers.

TRACKING TECHNOLOGIES

Technologies such as cookies, beacons, tags and scripts are used by Varian and some of our third-party partners (including analytics partners and service providers). These technologies are used in analyzing trends and administering the App. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.

SECURITY

We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We suggest that you change your passwords often and that your passwords include a combination of letters and numbers. If you have any questions about security on the App, you can email us at support@varian.com.

MANAGING PERSONAL INFORMATION

If for any reason you wish to access, correct, update, or delete your personal information that Varian is a data controller of please contact your clinic. Where provided for by law, you may also object to or request restriction of processing of your personal information, and request portability of your personal information held by Varian. In case there is a problem in exercising such rights using the App, please send an email to support@varian.com. We will respond to your request to access, correct, or delete any personal information within 30 days. You may also have the right to lodge a complaint with the relevant data protection supervisory authority if you consider that our use of your personal information infringes applicable law.

CHANGES TO THIS PRIVACY STATEMENT

Varian may decide to change this privacy statement from time to time to reflect changes to our information practices. When we do, we will notify you through the App or by email, as appropriate, so that you are always aware of the information we collect, how we use it, and under what circumstances we disclose it. We encourage you to periodically review this page for the latest information on our privacy practices.

OVERSIGHT AND QUESTIONS

We welcome comments and questions on this privacy statement. As stated above, we are dedicated to protecting your privacy, and we will make every reasonable effort to keep your information secure. If you have any questions or comments about this privacy statement you can contact us electronically at dataprivacyoffice@varian.com.

Additionally, you may contact us by writing via postal mail at the following address:

Varian Medical Systems, Inc.
Attention: Data Privacy Office
3120 Hansen Way, M/S G100
Palo Alto, CA 94304.