Privacy policy

This Privacy Policy sets forth the types of data OraSure Technologies, Inc., and its wholly owned subsidiaries and affiliates (“Company” or “us”) collect from you when you use our website, how we may use that data, to whom and under what circumstances we may disclose it, and how we protect it. By using this site or voluntarily providing personal data to us, you consent to the terms of this Privacy Policy. If you do not agree to the policy, please do not use the site.

Our personal data handling policy and procedures have been developed in line with the requirements of the General Data Protection Regulation, which is in force as of 25^th of May 2018.

What personal data do we collect?

We collect and process personal data about you when you interact with us through conferences, our website and social media. The personal data we process can include:

Category of Personal Data	Purpose for Collection	Legal grounds
Contact information: such as your name, work address, personal and work telephone numbers, personal and work email addresses.	To open and maintain records of our interactions with you, to provide you with the products and services you requested, and to communicate with you for business purposes.	Processing needed in order to take steps at your request prior to entering into a relationship and/or contract. Processing necessary for the purpose of the legitimate interests pursued by the Company.
Job-related information: such as employer, title and job role.	To maintain our business relationship with you.	Processing needed in order to take steps at your request prior to entering into a contract.
Other delivery information: name and address of recipient for delivery, if different from yours	To deliver to the person at the address which you have requested.	Processing necessary for performance of an order and/or contract.
Purchase and order information: contact information, together with purchase details, delivery details, payment details, any communications we have received about your order or purchase	To validate, confirm, verify, deliver, install, and track your order, including to arrange for shipping, handle returns and refunds, maintain a record of the purchases you make, to service products you purchased from us, and to provide you offers that may be of interest to you.	Processing necessary for performance of an order and/or a contract.
Payment information: name, card issuer and card type, expiration date, billing address, bank account number and other bank account details	To accept payment from you, to check that the right person is using the right card or account, to meet the requirements of the card brands or account issuers, and to make sure we are paid for what you buy. We never store credit card numbers or CVV code.	Processing necessary for performance of an order and/or contract.
Preference information: your marketing preferences, your account settings including any default preferences, any preferences you have indicated, the types of services/offers that interest you, or the areas of our website that you visit	To enhance your online experience, including as a way to recognize you and welcome you to the website, to provide you with customized website content, targeted offers, promotions and advertising on the website, through other third party sites, or via email, that are offered by us or other marketing partners that might be of interest to you.	Processing needed in order to take steps at your request prior to entering into a relationship and/or contract. Processing necessary for the purpose of the legitimate interests pursued by the Company.
Communications: communications we have with you. Please note that we may record calls to our customer service team.	To handle your requests, to contact you when necessary or requested, including to respond to your comments and questions and provide customer service.	Processing based on consent Processing necessary for execution of a contract. Processing needed in order to take steps at your request prior to entering into a relationship and/or contract. Processing necessary for the purpose of the legitimate interests pursued by the Company.
Device information: IP address, internet provider, operating system and browser used, type of device, such as laptop or smart phone, device cookie settings and other device details, such as MAC address and geolocation, if you permit it to obtain your precise geolocation	To make sure our website works properly with your device and make sure you can see and use our intended website on the device you are using, and for analytical and demographic purposes and to provide offers that may be of interest to you. We also will use this information to protect the security or integrity of the website and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users.	Processing necessary for the purpose of the legitimate interests pursued by the Company policy Consent : See applicable Company website cookies policy
Information automatically collected from your browser: when you use the website, some data is automatically transferred from your browser to our server, including your browser type, operating system type or mobile device model, viewed webpages, links that are clicked, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to our website, the amount of time you spend viewing or using the website, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our website	We will use this information in an aggregated non-specific format for analytical and demographic purposes. We also will use this information to protect the security or integrity of the website and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users.	See applicable Company Website Cookie Policy

Personal data is reviewed, assessed and updated (at least) yearly.

We may also send you direct marketing and newsletters in relation to Company and our products. Electronic direct marketing will only be sent where you have given your consent to receive it, or you have been given an opportunity to opt-out. You will continue to be able to opt-out of electronic direct marketing at any time by following the instructions in the relevant communication.

With whom and where will we share your personal data?

We value your personal data and only share this valuable data within our affiliated companies. The data will not be shared with third parties without your written consent.

How long will we keep your personal data?

We will not keep your personal data for any purpose longer than necessary to fulfill the original or a compatible purpose.

Where this is the case, your personal data will only be processed for the relevant legitimate purpose and not used for marketing from third parties. When you are a customer, we will keep your personal data for the length of any contractual relationship you have with us, for as long as appropriate to provide services and products or for other legitimate purposes.

When you are a prospective customer and you have expressly consented to us contacting you, we will only retain your personal data for this purpose (a) until you unsubscribe from our communications; or, if you have not unsubscribed, (b) while you interact with us and our content; or (c) for as long as appropriate to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirement, or for other legitimate purposes. In the case of any contact you may have with our customer services team, we will retain your details for as long as is necessary to resolve your query and for as long as permitted by law.

Where is your data stored?

Company securely stores your data at Belgian and North American data centers. Colleagues located outside the European Union will be able to add, consult, and adapt the personal data. Since we operate globally, we process data both inside and outside of the United States, where Company is headquartered, or any other country in which we or our affiliates are located, subsidiaries or service providers maintain facilities. The data protection and other laws of these countries may not be as comprehensive as those in the European Union − in these instances, we rely on legally-provided mechanisms to lawfully transfer data across borders. You hereby consent to the transfer of your personal data to countries outside the European Union.

Further information may be obtained from our Global Privacy Team: privacy@orasure.com

What are your rights in relation to your personal data?

Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access - You have the right to request Company for copies of your personal data.

The right to rectification - You have the right to request that Company correct any information you believe is inaccurate. You also have the right to request Company to complete information you believe is incomplete.

The right to erasure - You have the right to request that Company erase your personal data, under certain conditions.

The right to restrict processing - You have the right to request that Company restrict the processing of your personal data, under certain conditions.

The right to object to processing - You have the right to object to Company's processing of your personal data, under certain conditions.

The right to data portability - You have the right to request that Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: privacy@orasure.com

If you have a complaint about how we have handled your personal data, you can ask us to restrict how we use your personal data while your complaint is resolved. In some circumstances you can ask us to delete your personal data (a) by withdrawing your consent for us to use it; (b) if it is no longer necessary for us to use your personal data; (c) if you object to the use of your personal data and we don't have a good reason to continue to use it; or (d) if we haven't handled your personal data in accordance with our obligations.

Official legal complaints on your specific data handling performed by Company can be done by filing an official complaint with your local supervisory authority.

What are cookies?

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Company uses cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in

• Understanding how you use our website

• Web Analytics

How to manage cookies

You can set your browser not to accept cookie. However, in a few cases, some of our website features may not function as a result.

Please consult the applicable Company website Cookie Notice for more information about the type of cookies and tracking technologies that we use on Company websites and why, and how to accept and reject them.

Where can you find more information about Company’s handling of your data?

Should you have any queries regarding this Privacy Notice, about Company’s processing of your personal data or wish to exercise your rights you can contact the Global Privacy Team using this email address: privacy@orasure.com