We obtain your personal data through/from the following sources:
Novo Nordisk keeps your personal data for as long as it is needed to carry out the business purpose for which the data was collected and/or for as long as required under applicable law. Retention periods for Novo Nordisk records, including records containing employee personal data, are set out in the ATLAS document catalogue.
As a pharmaceutical company, many Novo Nordisk records (including employee records containing personal data) are covered by specific GxP requirements that mandate certain, typically quite long, retention periods. The following table lists retention periods for categories of employee personal data that are covered by GxP requirements:
Data category | Retention time |
Signature sheet | 50 years |
Full name, initials, department, period of employment in department | End of employment +30 years |
Documentation of completed training and education in GxP regulated processes |
50 years |
IT user activity for GxP regulated IT systems | Depending on the specific purpose for which data is stored in the IT system, the retention period ranges from 7 to 75 years |
Access logs for GxP regulated facilities | 10 years |
QA surveillance (video) of GMP[1] regulated areas | 5 years |
[1] Good Manufacture Practices may require some areas are controlled and monitored by cameras (always marked with sign postings) and stored by a certain period in order to comply with QA surveillance.
Please find a detailed description of which Personal Data is processed by Novo Nordisk in Appendix A below.
Please inform local P&O if there are any changes to the personal data you have shared with Novo Nordisk.
We may share your personal data with:
Novo Nordisk may process the following Personal Data from you: