Privacy Policy

Privacy Policy

This Privacy Policy outlines how Evogenom Oy collects, processes, and protects your personal data. It is designed to comply with relevant data protection laws and ensure that your privacy is safeguarded. Below are the key sections related to the processing of personal information:

1. Data Controller

Evogenom Oy
Ahlmaninkatu 2 E, 40100 Jyväskylä (3rd floor)
info@evogenom.com
+358 45 323 6199

2. Data Protection Officer

Evogenom Oy
Ahlmaninkatu 2 E, 40100 Jyväskylä
info@evogenom.com

3. Register Name

Evogenom Oy Customer Register

4. Purpose of Data Processing

Evogenom Oy uses the personal data stored in the user register to deliver ordered analyses, manage customer relations, provide customer service, and handle customer feedback.

5. Content of the Register

The register collects customers’ basic information as well as order information. This includes, for example:

• First and last name

• Customer number

• Address

• Email address

• Phone number

• Possible tracking information of orders

• Order date

• Payment method

• Ordered products

6. Samples, Isolation, and DNA

Customer DNA is isolated with their consent for the purpose of analysis. The customer’s saliva sample is processed pseudonymously, meaning the sample will not carry the customer’s personal information. Any remaining sample is destroyed after the analysis is delivered to the customer and four months have passed since the sample’s arrival.

7. Genomic Data

Genomic data is stored on a protected server in a pseudonymized format.

8. Data Retention Period

When the analysis has been delivered to the customer, any data associated with the customer is stored only in pseudonymized form.

Evogenom Oy retains customer relationship data in the customer register for the duration of the customer relationship and deletes the data as soon as possible once the relationship ends, unless there are legal obligations (e.g., accounting requirements) to retain the data.

9. Regular Data Sources

Evogenom Oy stores the information that customers provide to Evogenom Oy. Data is not collected from other sources.

10. Data Sharing and Transfers Outside the EU/EEA

Personal data is not shared outside Evogenom Oy unless required by law or with customer consent. Evogenom Oy may share pseudonymized raw data for medical research, drug development in different therapeutic areas, or in connection with business acquisitions.

Evogenom Oy does not transfer personal data outside the EU/EEA.

11. Data Security

Any paper-based materials are stored in a controlled and locked area at Evogenom Oy and are accessible only to authorized personnel. Digitally stored data consists solely of pseudonymized information, which is kept confidential. The access to the data is restricted within the organization to authorized personnel only. The computer system is protected by security software, encryption, and other necessary technical measures. Access to the system requires a username and password for each user. The data is stored in a secure and controlled environment.

12. Customer Rights Regarding Personal Data

12.1 Right to Access (Right to Inspect)
Customers have the right to inspect the data stored about them. The inspection request must be made in accordance with the “Contact” section below. The right to access is generally free of charge. The right to inspect can be denied on statutory grounds.

12.2 Right to Rectification
Customers can update their personal data by contacting customer service at info@evogenom.com. If customers discover or are informed of an error, they should immediately correct, delete, or supplement any incorrect, unnecessary, incomplete, or outdated information in the register. If the customer cannot correct the data themselves, the correction request should be made according to the “Contact” section below.

Customers also have the right to request Evogenom to restrict the processing of their personal data, for example, while awaiting Evogenom’s response to a request for data correction or deletion.

12.3 Right to Data Portability
If the customer has provided data to Evogenom’s customer register based on consent or a contract, they have the right to receive such data in a machine-readable format and to transfer it to another data controller.

12.4 Right to Erasure
Customers have the right to request the deletion of their data, subject to statutory limitations.

12.5 Right to Withdraw Consent
If Evogenom processes personal data based on the customer’s consent, the customer has the right to withdraw their consent by notifying Evogenom as per the “Contact” section below. Additionally, customers may request Evogenom to delete any personal data about them based on legal grounds.

13. Basis for Data Processing

Data processing is based on customer consent, contractual necessity, or legal obligations such as accounting legislation.

14. Contact Information

For inquiries related to personal data processing or to exercise rights, customers should contact Evogenom’s Data Protection Officer by email at info@evogenom.com or by mail to:
Evogenom Oy / Data Protection
Ahlmaninkatu 2 E, 40100 Jyväskylä, Finland (3rd floor, mailbox number 5)

Evogenom may request clarification of the customer’s request in writing, and the customer’s identity may be verified before further actions are taken.

This privacy policy was last updated on 4th May 2022. Evogenom reserves the right to update this privacy policy as necessary, such as for service improvements or changes in legislation.