Skip to main content

PRIMA Patient Privacy Notice

Last Updated: October 9, 2026.

Summary

The hospital is responsible for your medical care, the operation, follow-up care, and your medical records. La Science SAS (“La Science”) supplies and manufactures PRIMA, processes data for fitting and configuring the system, rehabilitation and support, device operation, technical troubleshooting, and product quality and safety.

La Science uses contact and appointment details, fitting measurements, relevant health and eye information, surgery and follow-up information, device identifiers, settings and usage or error logs, rehabilitation information, and complaints or safety information. It obtains this data from you, La Science staff, the PRIMA system, and the hospital.

Research and development using personal or pseudonymised data, marketing, and the use of photographs, recordings or your personal story are voluntary and require separate consent. Refusal or withdrawal does not affect your treatment, the implant or necessary rehabilitation.

Data may be shared with La Science’s parent company, Science Corporation, and its other affiliates, service providers, research partners and authorities, and may be processed in the United States or other countries with legally required safeguards. La Science keeps data only for as long as necessary or legally required.

You may request access, correction, erasure or restriction, object where applicable, withdraw consent, and complain to a supervisory authority. No medical decision is made solely by an automated system. For questions or requests, contact privacy@science.xyz or dpo@science.xyz.

This summary is provided for convenience, but it is not a substitute for ensuring that the complete notice below has been read to you and that you understand it.

1. Who is responsible and what does this notice cover?

The relevant hospital or healthcare provider uses PRIMA as part of your medical treatment and is responsible for patient selection, diagnosis, treatment, implantation, medical decisions, and follow-up care. Personal data processed by the hospital or healthcare provider is subject to their privacy notices and policies.

La Science SAS, 74 rue du Faubourg Saint-Antoine, 75012 Paris, France (“La Science”), is the seller and legal manufacturer of PRIMA and is a wholly-owned subsidiary of Science Corporation, 300 Wind River Way, Alameda, CA 94501, USA.

In this notice, we refer to Science Corporation, La Science and their affiliates as “Science”.

This notice covers Science’s processing of personal data as described below and is separate from the hospital or healthcare provider’s privacy notice.

For data protection purposes, Science are controllers of your personal data and La Science SAS is Science Corporation’s representative in the European Union.

Contact: privacy@science.xyz. Data Protection Officer: dpo@science.xyz. This notice is available in large print and an accessible digital format and will be read aloud or explained on request.

References to the GDPR mean the EU GDPR or UK GDPR, as applicable. Any additional national law conditions are stated in the relevant local version or addendum.

2. What data do we use and where does it come from?

Science obtains data directly from you, from Science personnel and PRIMA components, from the hospital and its clinicians, from your assigned PRIMA system and associated devices, and from competent authorities or regulatory bodies. Depending on the services you receive, Science processes:

  • identification, contact, appointment, communication, and consent records and, where necessary, contact details of family members, caregivers or primary care practices;

  • fitting and customisation data, including head and face measurements, eye-related measurements, glasses or lens parameters, assistive-device use, personal goals, and support needs;

  • relevant health, eye, treatment, surgery, and follow-up information, including diagnoses, medical history, medication, visual and functional test results, ophthalmological images, implantation details, complications, and adverse events;

  • product, device, and usage data linked to you or your assigned PRIMA system, including identifiers, software versions, settings, usage information, and technical, diagnostic, error, and security logs;

  • rehabilitation and support data, including goals, exercises, progress, visual or reading performance, everyday use, feedback, and information from home visits or other support contacts;

  • complaint, quality, safety, and vigilance data linked to you or your assigned device, including malfunctions, follow-up information, causality or reportability assessments, recalls, and corrective measures; and

  • photographs, video or audio recordings and patient-story information only where you have separately consented.

Science uses your data for the following purposes:

  • La Science: Fitting, customisation, rehabilitation, ongoing support, device operation, troubleshooting, and information security. La Science relies on: its legitimate interests in the safe and reliable provision, operation and support of PRIMA, and where health data is involved, its provision of the devices and/or health and rehabilitation services, care and support and its requirements to ensure product quality and safety, together with applicable national law.

  • La Science: Quality, complaints, post-market surveillance, vigilance, recalls, and other manufacturer obligations. La Science relies on its legitimate interests, and applicable medical-device law and, for health data, requirements to ensure product quality and safety, together with applicable national law. This processing is independent of any R&D consent.

  • Science: R&D relating to PRIMA, retinal implants, visual prostheses, related hardware and software, and rehabilitation and support methods. This includes evaluating and improving products, settings, usability, safety and rehabilitation; developing and validating related products and services; and scientific, statistical, regulatory, reimbursement, health-technology-assessment and health-economic analysis. Personal or pseudonymised data is used for these purposes on the basis of your consent.

  • Science: Media use, marketing communications, and analysis of personal or pseudonymised outcomes for product or marketing claims. These activities take place on the basis of your consent.

  • Science: Administration, legal compliance, audits, and legal claims. Science relies on its legitimate interests, legal requirements and performance of contracts, and, for health data, its legal requirements, including for the provision of healthcare services and requirements to ensure product quality and safety.

Science may create and use anonymous data for research, statistics, product and rehabilitation improvement, safety, regulatory, and business purposes. It will not attempt to re-identify you from data treated as anonymous.

4. When do we disclose your data?

Where necessary and lawful, data may be disclosed to:

  • the hospital and the clinicians involved in your care to facilitate their care;

  • Science Group members and authorised Science Group personnel for purposes consistent with this notice;

  • Providers of services to us (including rehabilitation support, laboratory, IT, cloud, software, communications, support, quality, analytics, marketing, and R&D) and professional advisers to facilitate the services they provide to us;

  • authorities, notified bodies, other medical-device economic operators, and insurers for compliance, protection, and risk management purposes; and

  • where covered by a separate media consent, production providers, platforms, the press and the public for promotional and educational purposes.

R&D data is shared with universities or research partners only for a specific project covered by the applicable consent. Service providers acting on Science’s instructions are contractually bound to protect the data.

5. Are there international transfers?

Data may be processed in the United States, including by Science Corporation and relevant service providers. Where the country of the recipient of your data is not recognised as providing adequate protection, Science uses an approved transfer mechanism and any supplementary measures required under law. You may request further information or a copy of the relevant safeguards at dpo@science.xyz.

With respect to data transfers to Science Corporation in the United States, Science Corporation relies on its certification to the United States Department of Commerce that it adheres to the Data Privacy Framework Principles of the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, as further described in the Science Data Privacy Framework Statement (the “DPF Statement”), which supplements this notice. The DPF Statement is available at science.xyz/legal/dpf-statement.

6. How long do we keep the data, and must you provide it?

Science keeps data only for as long as necessary and lawful:

  • fitting, device, usage, rehabilitation, and support data: for the duration of fitting, use, rehabilitation and support and thereafter where needed for safety, compliance or legal claims;

  • complaint, quality, vigilance, and regulatory data: for the periods required by medical-device law and the quality-management system;

  • consent-based R&D data: until the relevant R&D activity ends, as may be required for the purposes of the research, or national requirements, or until earlier withdrawal, unless another legal basis requires retention;

  • media and marketing data: until withdrawal or the end of the selected use or communication, with consent and use records retained as necessary for compliance and legal claims; and

  • temporary local copies: only until successful transfer to the designated system.

Criteria for determining the appropriate retention period for personal data include the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process the personal data, whether we can achieve those purposes through other means, and applicable legal requirements.

Data needed for fitting, safe use, rehabilitation, support, complaint investigation or legal manufacturer obligations must be provided; without it, the relevant service may be limited or unavailable. R&D, outcome analysis for marketing claims, media use, future research contact and marketing are voluntary and do not affect treatment, the implant or necessary rehabilitation.

7. What are your rights?

Subject to the applicable legal requirements, you may request access, correction, erasure, restriction and data portability; object to processing based on legitimate interests; and withdraw consent at any time for the future. Withdrawal does not affect earlier lawful processing. Some rights may be limited where continued processing is required for medical-device, quality, safety, vigilance, retention or legal or claims purposes.

To exercise your rights, contact privacy@science.xyz or the Data Protection Officer at dpo@science.xyz. For processing controlled by the hospital, please contact the hospital. You may also lodge a complaint with the competent data protection supervisory authority.

Science does not make decisions based solely on automated processing that produce legal or similarly significant effects. Technical analyses or recommendations from PRIMA do not replace medical decisions.

8. Changes to this notice

Science may update this notice when its processing, the PRIMA system or legal requirements change and will communicate material changes appropriately. The current version is available from your Science contact.