Genetic Data Privacy Information

Dear Customer,

this Privacy Information regards the performance of the analysis of the biological sample you will send to Dante Labs S.r.l. after buying your genetic test from Dante Labs Inc.

Dante Labs S.r.l. will be in charge to carry on with the analysis of your biological sample under your request. You may proceed with your biological sample analysis request after reading this privacy information by registering at Dante Labs website’s customer area in https://genome.dantelabs.com/updates

 

Privacy Information for the processing of genetic data

This Privacy Information is given by Dante Labs S.r.l., with registered office at Tecnopolo Abruzzo, Strada Statale 17, L’Aquila - Italy (hereinafter “Dante Labs”) in the capacity of Data Controller, pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter “Regulation”), with the intent to explain to you the purposes and means of processing of your personal data whenever you send us a biological sample and request Dante Labs analysis services.

Personal data categories

Dante Labs may process some of your personal data or the personal data from the person you legally represent (hereinafter “Data”) for the performance of the services you required.

Namely, Dante Labs may process genetic Data, which means data relating to inherited or acquired genetic characteristics which give unique information about a subject’s physiology or health and which result, in particular, from the analysis of a biological sample, whenever you require for the examination of a biological sample after buying the test;

Conferring us the aforementioned Data is necessary to enable Dante Labs to perform the services you required; in case of absence, Dante Labs cannot be able to perform the services you required.

Purposes and lawful basis for processing personal data

The personal Data shall be processed pursuant to Art. 9 (2) (a) of the Regulation in order to pursuit the following purposes:

  1. i) carry out, upon your explicit consent, the genetic test you required;
  2. ii) scientific research, upon your explicit and voluntary consent.

Please note that the absence of the consent for processing your personal data for the purposes referred to in point i), means that Dante Labs will not be able to perform the services you required.

The consent for the purposes of scientific research referred to in point ii), where applicable, can be withdrawn at any time. If you want to withdraw your consent to scientific research, you can write to privacy@dantelabs.com.

Means of data processing

Your personal data shall be processed both by manual and electronic means, subjected to the Regulation provisions and from the Italian national law, which includes any provisions from the Italian Supervisory Authority for the protection of personal data.

Duration of processing activities and data retention period

The test, containing the genetic sample your sent us, will be destroyed right after the results are ready and available at your personal area in Dante Labs’ Genome Manager website (hereinafter “Customer Area”).

Your Data shall be processed for the period required to perform the requested services.

Until when you decide to deactivate your account on Dante Labs website, the report with the results will be kept available in your Customer Area to allow you to buy additional genome analysis. After the account deactivation, your personal data will be retained for the following 10 years solely to comply with legal obligations and to eventually safeguard Dante Labs rights.

Furthermore, whenever you give us your consent to use your data for scientific research purposes, Dante Labs will process your personal data for as long as they are relevant to the research activities, until your consent is withdrawn.

Third parties’ categories

Dante Labs can rely on third parties for some types of data processing. In that case, these parties will be nominated Data Processors, pursuant to Art. 28 of the Regulation, and will receive the proper operative instructions, especially regarding the adoption of appropriate security measures, to guarantee data security and data confidentiality. Data subjects may require to Dante Labs a list of Data Processors writing to privacy@dantelabs.com.

Data transfer to countries outside the European Economic Area

Dante Labs suppliers, responsible for the execution of activities related to the services you requested, may transfer your personal data to countries located outside the European Economic Area. The data transfer is regulated by standard contractual clauses adopted by the European Commission or with due regard for any other warranties provided by the Regulation.

Data subjects’ rights

We inform you that, as data subject, you are entitled to exercise the rights under Articles 15, 16, 17, 18, 19, 20, 21, 22, 23 of the Regulation writing to our e-mail address privacy@dantelabs.com.

Among other things, you may:

  • ask and obtain information about whether or not Dante Labs is holding any of your personal data or whether or not your personal data are being processed and, in this case, you may have access to them;
  • ask and obtain a copy of your personal data that are processed by automated means in a structured, commonly used and machine-readable format; you can also claim the right to transmit those data to another controller;
  • ask and obtain the alteration and/or rectification of your personal data when you consider them to be inaccurate or incomplete;
  • ask and obtain the erasure – and/or a processing restriction – of your personal data whenever they are not necessary – or no longer necessary – to fulfil the purposes for which they were collected, hence upon expiry of the retention period.

Please note that you can lodge a complaint with the supervisory authority whenever your personal data are unlawfully processed.

Please be advised that Dante Labs has nominated a Data Protection Officer (DPO) that you may reach at the following address privacy@dantelabs.com.