Legal information
Privacy policy
How we handle the personal and health data you entrust to us.
This document is a prepared outline. Before the website goes live, have the wording reviewed and completed by a lawyer specialising in data protection and health services.
Data controller
Add the business name, registered office, company ID and contact details of the data controller.
Add contact details for the data protection officer, if one has been appointed.
What data we process
Add the categories of data processed — identification and contact details, health data, data from genetic analysis, data from communication.
Health data and genetic data fall within the special categories of personal data and require a specific processing regime.
Purpose and legal basis for processing
Add the purposes of processing and the corresponding legal bases under Article 6 and Article 9 of the GDPR.
Recipients of data
Add who the data is passed on to — the laboratory partner, collection points, IT service processors.
Add information on any transfer of data outside the European Economic Area and the safeguards that apply.
Retention period
Add how long each category of data is retained and under which legislation.
Your rights
Add the list of data subject rights — access, rectification, erasure, restriction of processing, portability, objection, withdrawal of consent.
Add how these rights can be exercised and information on the right to lodge a complaint with the Czech Data Protection Authority.
Data security
Add a description of the technical and organisational measures protecting the data.
Add the date of the most recent update