Privacy Statement

Data Protection Statement for Fresubinsamples.ie website

This privacy notice provides information on how Fresenius Kabi Limited collects and processes your personal data when you visit our Fresubin sample website at fresubinsamples.ie/.Whether you are either a Health Care Practitioner (HCP) completing this form on behalf of patient, or the patient receiving samples using the Fresenius Kabi Direct -To-Patient Sample Service. Information on your personal data, how we use it in relation to this service, your privacy rights and how to exercise these or raise any questions or concerns is provided below.

Who are we?

The Fresubin Direct-To-Patient Sample Service is provided by Fresenius Kabi Limited who is the controller and responsible for the processing of the personal data that is provided via the Fresubin Direct-To-Patient Sample Service website www.samples.fresubin.com/uk. Fresenius Kabi Limited has appointed a Data Protection Officer; if you have any questions about your data or how it is processed you can contact them using the information in the ‘How to Contact Us’ section below.

Please be aware that we also may process your personal data in other contexts, e.g. when you are a business contact for products or services, when you interact with us in your capacity as a healthcare professional, if you report an adverse reaction or if you submit a data subject request. You can find more information about how Fresenius Kabi  process your personal data in these situations here

We may from time to time update this privacy notice when it is necessary to do so, the notice was last update in October 2025, the previous version dated Last updated [June 2023] can be found here.

What Personal Data do we Collect?

When you place a direct to patient sample service order as a HCP we will collect and process both the patient and HCP personal data that you provide us with as part of the order process. Personal data means any information about an individual from which that person can be identified. We collect the following types of personal data when you place an order on our website:

When Visiting our Website

As a visitor of our website, Fresenius Kabi Limited (“we”) will collect and use certain personal data from you. This data protection statement informs you about the processing of personal data when visiting our website. 

Please be informed that our websites include links to external sites which are not covered by this data protection statement. Also, some of the Fresenius Kabi entities in our group provide data protection statements that may differ from this data protection statement. Your visit to such websites is subject to the respective data protection statement of that website.

Why we collect and use your data

We collect and use your data for the following purposes:

  • To make the website work and optimised for the device you use it on
  • To provide the best possible service to you, enhance your user experience and store your preferences for your current or future browsing sessions
  • To further improve our websites.

What data we collect and how we do that

We collect your data of your visit to our website in the following ways:

Automatically by our website or by using cookies and other technologies

We collect and use the following internet protocol data or cookie data during your visits on our websites:

  • The name of your service provider including IP address
  • The website that directed you to our site
  • The pages you visited on our websites
  • Your web browser type
  • The date and length of your visit
  • The preferences you select.

You can accept all, accept only necessary or you can choose your own settings for the use of certain cookies & other technologies for this website. Please note that if you choose not to accept the use of certain cookies you may not be able to experience the full functionality of this website and may have to confirm certain dialogs once again.

Your cookie settings are always related to the web browser you are using, and the settings are of no effect if you use a different web browser upon your next use of this website. Alternatively, you can manage the settings of your web browser or on your mobile device. Here you can delete cookies at your own discretion at any time.

We use the following types of cookies:

Strictly necessary cookies

This type of cookies is required to make the website work. They are exclusively used by us during the session. They help to make the page load more quickly and to limit the number of sessions originating from a user to prevent a website-overload. 

We use a “cookie notifier” cookie which saves your decision either to agree with the usage of cookies on our website or not. It is saved automatically upon your click on one of the two options available. Your acceptance of our cookies is stored for one year from the acceptance date. If you decide to refuse our cookies, your decision will be stored for 30 days. During this time, the cookie information banner will not be shown again.

All other strictly necessary cookies remain valid during the session and are automatically deleted when you close the browser.

Functional cookies

Functional cookies save the choices and preferences you make while visiting this website in order to offer you an improved functionality and personal features. They can remember your login status, or the status of videos played. These will be stored for 30 days.

Analytical cookies

When you consent to the usage of analytical cookies, respective cookies will be stored on your device. Analytical cookies allow us to analyze the way the website is used, how often visitors use a page of our website, and if they get error messages from our pages. For this purpose, your IP address will be processed in a pseudonymized manner by deleting the last three digits. That way we are no longer able to directly identify you as an individual. We will delete this data within three years.

When activating social media plug-ins

If you activate plug-ins of social media providers (such as Facebook, LinkedIn, or Instagram), your web browser will connect to the servers of the respective providers and send your specific user data to these providers.

In addition, if you are currently logged in to a social network of one of the above-mentioned providers, your activity may be linked to your user account with these providers at the same time.

Information you or your HCP provide to us

We collect and process the following types of data about when you or your Health Care Practitioner request Fresubin sample::

HCP first and last name
HCP job title and location information
HCP Email address
Patient delivery address including postcode
Patient first and surname
HCP Address including post code
Details of the product that the patient requires a sample of – this is classed as sensitive data

Why We Collect and Use Your Data

For the purposes of providing the sample service we need to collect and process the patient’s address and name to fulfill and deliver the patient’s sample order. We need to collect and process the HCP personal data for the following reasons:

  • To track delivery and communicate to the HCP by placing the order any changes needed to enable the order to be processed
  • To create, verify and fulfil your online HCP account
  • To allow you to review the status of your orders and your order history
  • To recommend products and services that may be of interest to you (providing you have provided us with your consent to receive marketing communications).

We may also use patient and HCP personal data on an anonymized basis for planning and managing the Direct-To-Patient Sample Service.

We may also process your data for other purposes such as when you are a business contact for our products or services, when you interact with us in your capacity as a healthcare professional, or if you report an adverse reaction or want to submit a data subject request. Further information about how we process your personal data in these scenarios can be found here.

Legal Basis for processing your data

We rely on the following lawful basis to be able to process your personal data to provide the Fresubin sample service.

  • Consent – obtained by the HCP from the patient to process their personal data to fulfil  the Fresubin sample service. You have the right to withdraw this consent at any time, however when Consent is withdrawn, we can’t process the personal data to fulfil the sample order. As a HCP you provide your consent to us when you enter your personal data into the sample request form on our website.
  • Legitimate interests – We rely on our legitimate interests to process the anonymised personal data for our planning and management of the sample service, these do not override your data protection interests or fundamental rights and freedoms.
  • We process your health data in a limited form in that we are supplying you with oral nutrition supplement samples. In order for us to be able to process your health data which is special category or sensitive data, we rely upon the provision of Healthcare or Treatment under Article 9 (2) (h) of the GDPR.
  • There may also from time to time be circumstances where we process your data under other legal grounds, for example:
    • In relation to a dispute or legal claim
    • To enable us to comply with a legal obligation
    • If it is in the public interest, for instance, to assist certain bodies for investigation purposes
    • You have provided your explicit consent to specific processing activity

How we share your personal data

Fresenius Kabi will share the personal data that is provided to us within our group companies (for example if you are an HCP and have consented to receiving marketing information from us) and with our selected third-party service providers, to enable us to process and deliver your sample order.

These third parties include:

  • Our Direct-To-Patient Sample Service Distribution provider who fulfills the requests for samples on behalf of Fresenius Kabi Limited
  • Our Delivery Partners, who deliver the sample order to the patient directly
  • Our third-party application and hosting providers who ensure that our website and systems function correctly for your use and to ensure the sample service runs well. We only send your data to a third party when we have a legal agreement with them, to ensure that the personal data we send will only be used for the purposes that we provide it for (such as fulfilling the sample service order) and will be kept secure and confidential.

International transfers

We may send your personal data in parts or as a whole to the above recipients in other countries. For some of these countries the European Commission or respective legislator or authority in your country has determined an adequate level of data protection to be in place that matches the level of data protection in your country. 

The European Commission has done this for the following countries / international organizations in which Fresenius entities are located: Argentina, Canada, Japan, South-Korea, United Kingdom, New Zealand, Switzerland or Uruguay.

For the UK these are: all countries in the European Union, and the countries, territories and sectors covered by the European Commission’s adequacy decision including Andorra, Argentina, Faroe Islands, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland, and Uruguay. There are partial findings of adequacy for Canada, Japan, and the United States of America.  For countries where the respective legislator or authority has not decided that an adequate level of data protection exists that matches the level of data protection in the UK, we have provided safeguards in order to secure your personal data to a degree that is equivalent to the level of data protection in the European Union and the UK.

These safeguards are:

  • For the exchange of data within our company: our Binding Corporate Rules for Controllers
  • For the exchange of data with our service providers and other international organisations: Standard Contractual Clauses that have been issued by the European Commission or the ICO.

You can obtain a copy of these Standard Contractual Clauses and our Binding Corporate Rules, online, or upon request.

How long we Retain Your Data

Your personal data will only be used for the purposes stated above and retained in line with our retention policy. We will only retain your data for as long we have an ongoing legitimate business need to do so, e.g. until the sample has been provided to the patient and there is no other reason to retain the data.

Requests, Inquiries and Complaints

Depending on the situation you have certain rights regarding your personal data. You have the right to:

  • Request access to your personal data
  • Request rectification of your personal data
  • Request erasure of your personal data
  • Request the restriction of processing of your personal data
  • Data portability
  • Object on grounds specific to your situation

You can exercise these rights online by using the data protection contact form.