Privacy policy | Polygenic tests

The purpose of the privacy policy is to provide the polygenictest.biomed.lu.lv customer with information about how personal data is processed, amounts of data, deadlines for processing data, and data protection.

Controller of personal data and contact details

The manager of personal data of the Platform https://polygenictest.biomed.lu.lv is The APP Latvian Biomedical Research and Study Centre, taxpayer registration No. 90002120158, registration No. of the Scientific Institution 181002 legal address Rātsupītes Street 1 k-1, Rīga, LV-1067, bmc@biomed.lu.lv.

For questions, uncertainties, or claims related to this privacy policy, please write to oskars@datudrosiba.com where the information submitted by the user will be recorded and evaluated.

Legal basis for processing personal data and purpose of processing

When processing personal data, BMC shall comply with the laws and regulations in force in the Republic of Latvia, with Regulation (EU) 2016/679 of the European Parliament and the Council on the protection of individuals about the processing of personal data and the free movement of such data, as well as with this privacy policy.

BMC processes your data based on service agreements between you and BMC and to ensure they are enforced (When you sign up for https://polygenictest.biomed.lu.lv.platform, you agree to terms of use, which is a distance agreement and determines the reciprocal rights, obligations, and responsibilities of both parties).

BMC processes your data for the following purposes:

Verification of your identity, registration, and conclusion of a service contract;
The provision and performance of the service;
Review and process your submissions;
To contact you, including to inform you of changes;
The development of the service;
For sending and displaying collaboration quotes.

Processed personal data

BMC processes the following personal data:

Information regarding the person – given name, surname, personal identity number, e-mail, telephone number, date of birth, gender, city.
Information obtained from the biological sample regarding your genomic DNA sequence and other information (depending on the analysis performed within the framework of the service agreement).
The medical information you have entered and stored. As part of the service, you select and determine what kind of information you want to collect. As part of the service, it is or will be offered the opportunity to collect laboratory examinations, diagnoses, allergies, medications, exams, surgeries, manipulations, medical devices, vaccinations, measurements, insurance data, doctor visits, and doctors.
External sources – information provided by our partners that is necessary for the provision of the service.
Communication data is processed when you contact us by phone, email, from social media.

Way of obtaining personal data

Personal identification data (given name, surname, personal identity number) received during the service registration process from Google, Latvija.lv, Smart-ID systems.
The information you enter that you provide when you fill in the information fields in the polygenetictest.biomed.lu.lv system.
The polygenetic risk assessment is performed by obtaining and analyzing your genomic DNA sequence for which you passed the biological sample by signing the informed consent document.
Health data from the Health Statistics database if you consent to the loading of data by those service providers through the polygenetictest.biomed.lu.lv service.
Laboratory examination data received from medical treatment institutions (laboratories) in connection with the loading of analytical results, if you consent to the loading of data by these service providers using the polygenetictest.biomed.lu.lv service.
The information you provide to our employees by contacting them (telephone, email).

Processing, protection, and storage of personal data

BMC processes your data using today's technology capabilities, taking into account existing privacy risks and reasonably available organizational, financial, and technical resources.

To ensure your data is protected, BMC uses a variety of safeguards according to current technical development capabilities, taking physical, electronic, and procedural safeguards that prevent unauthorized access to your data.

Before you can sign up for the service and access your data, a person is identified using a secure authentication tool.
When you sign up, you create your genome data account, user name, and password.
Only you, as a data owner, can access your data account after authorization.
In connection history, you can keep track of your connection times.
In addition to security, you will receive an informative email when you connect to your account from another computer or mobile device.
All data traffic is encrypted (SSL) when transmitting data.
The site has a security certificate.
Before entering your access data (user name, password), make sure that the correct address is entered in the Internet browser address input bar. The address must start with https://polygenictest.biomed.lu.lv/.
Your data is stored on secure servers in the European Economic Area.
To ensure the functioning of the system, only specially authorized employees can access your data, they must comply with strict contractual confidentiality requirements for non-disclosure of data and non-disclosure agreements even after termination of their employment relationship.

Rights and obligations of a person

You have the right to do the following with your data at any time by remotely connecting to your genome data account: download, enter, arrange, modify, edit, store, use, share, and delete.

You have the right to use additional services by giving your consent to the processing of personal data.

You have the right to revoke the consent given to the processing at any time. In that case, no further data processing based on prior consent for the specific purpose will be carried out. Revocation of consent does not affect data processing performed at the time your consent was valid.

You are responsible for not disclosing your password, changing your password regularly, and are fully responsible for any actions you take using your account and password.

You are obliged to inform BMC immediately of any unauthorized use of your password or any other breach of security.

If you decide to opt out of the service, you can do so at any time by sending a written opt-out application from your genome data account. Breaking the agreement will delete your account and delete your data.

Duration of processing and storage of personal data

BMC stores and processes your data while at least one of the following criteria exists:

as long as the contract for the provision and use of the service entered into with you is in effect;
as long as your consent to the processing of personal data is valid;
as long as there is a legal obligation to store the data;
while in accordance with the procedures laid down in external laws and regulations, the BMC or you may exercise your legitimate interests (e.g. examination of applications, protection of rights, resolution of issues, observance of limitation periods).
After the criteria in this paragraph do not apply, your data is deleted.

Categories of access to personal data

Only you, as the data owner, can access the genome data account after authorization.

You have the right to share your data with trusted people, such as your doctor, or a specialist, giving you the right to access your account information after authorization. You control what information you share and what this trusted person can do with your data.

BMC does not disclose any of your data to third parties. THE BMC shall examine the possibility of disclosing and may disclose personal data only in the cases specified in regulatory enactments of the Republic of Latvia.

Communicating with you

BMC communicates with you based on the contract you entered into using the contact information (e-mail address) you provided.

Otherwise, BMC contacts you based on a request submitted by the data subject.

Other provisions

BMC has the right to make changes to its privacy policy, and the website always has the latest version of the privacy policy.

If this privacy policy has been translated into other languages, the Latvian text shall prevail in case of contradictions.