Introduction
At GENE-DIAGNOSTIC-SOLUTIONS, we are committed to protecting the privacy and security of our benificiaries personal datas. This document outlines our approach to data protection and our compliance with the General Data Protection Regulation (GDPR).
What is GDPR?
The GDPR is a regulation enacted by the European Union to protect the personal data of individuals within the EU. It aims to give individuals more control over their personal data and to ensure that organizations handling such data do so responsibly.
Our Commitment to Data Protection
1. Lawful Processing: We ensure that all personal data is processed lawfully, fairly, and transparently.
2. Data Minimization: We collect only the data that is necessary for the purposes for which it is processed.
3. Accuracy: We take all reasonable steps to ensure that personal data is accurate and kept up to date.
4. Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it is processed.
5. Integrity and Confidentiality: We implement appropriate technical and organizational measures to ensure the security of personal data.
Your Rights
Under the GDPR, individuals have the following rights regarding their personal data:
- Right to Access: You can request access to your personal data and obtain information about how it is processed.
- Right to Rectification: You can request the correction of inaccurate or incomplete personal data.
- Right to Erasure: You can request the deletion of your personal data under certain circumstances.
- Right to Restrict Processing: You can request the restriction of processing of your personal data under certain conditions.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your personal data in certain situations.
Data Security
We take the security of your personal data seriously and implement various measures to protect it, including:
- Encryption: We use encryption to protect personal data during transmission and storage.
- Access Controls: We limit access to personal data to authorized personnel only.
- Regular Audits: We conduct regular audits to ensure compliance with our data protection policies and procedures.
Data Breach Notification
In the event of a data breach that may pose a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay.
Third-Party Processors
We may engage third-party service providers to process personal data on our behalf. We ensure that these providers comply with GDPR requirements and implement appropriate safeguards to protect your data.
Data Collection and Use
· Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes and do not process it in a manner that is incompatible with those purposes.
- Data Quality: We ensure that the personal data we collect is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
- Transparency: We provide clear and transparent information about how we collect and use personal data, including the purposes of processing and the rights of individuals.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Once the retention period expires, we securely delete or anonymize the data.
International Data Transfers
If we transfer personal data to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect the data in accordance with GDPR requirements.
Employee Training and Awareness
We provide regular training to our employees on data protection and GDPR compliance to ensure that they understand their responsibilities and the importance of protecting personal data.
Contact Us
If you have any questions or concerns about our data protection practices or your rights under the GDPR, please contact us.
Conclusion
We take our responsibility to protect your personal data seriously. By adhering to the principles of the GDPR and our broader data protection policy, we aim to ensure that your data is handled with the utmost care and respect.