Privacy Policy
This document informs you about privacy issues such as the collection, storage, use and disclosure of personal information received from users of this Website, and of personal information received in the course of the provided services.
Contact
If you have any questions about this Privacy Policy, your data, or if you would like to exercise one of your data protection rights, please do not hesitate to contact our data protection officer at:
Lynsight Ltd
Business ID 2558287-9
Arabiankatu 12
00560 Helsinki
Finland
Email: pr*****@ly**********.com
Data we may collect about you
If you are a website visitor, we may collect your name, email, and cookies.
If you are a patient, we may collect your name, date of birth, gender, ethnicity, nationality, identifiable genetic information, health-related information from your physician, specimen identification number and equivalent identifiers, family history and relationships.
If you are a customer, marketing contact, or job applicant, we may collect your name, contact details and relevant professional data.
If you are an employee or corporate-related member of Lynsight Ltd, this privacy statement does not apply to you. You may contact Lynsight Ltd for the relevant privacy notice.
How we receive your data
If you are a website visitor, customer, marketing contact, or job applicant, your data is collected by us with your consent.
If you are a patient, your data is collected by your healthcare facility or intermediary lab testing facility and send to us for diagnostic testing.
How we use your data
We look at the trend of our website visitors to understand how we can improve our online communication about our services. Some data may be visible, such as your cookies, and from where you access our website. Other information may not be visible to us.
We provide our services, such as diagnostic testing and analysis, to our customers, and keep them informed about our company updates.
We are building our network with marketing contacts to make sure our company updates and achievements are spread within the community.
Data from job applicants is kept with specific consent for future career opportunities, or deleted after completion of the interview process.
Data from patients is used for diagnostic testing, to provide the patient’s physician health-related information about the patient and its family. If the patient has provided informed consent to its healthcare facility, we may also use the patient data for further research to improve our internal diagnostic testing services, or acquire a deeper academic understanding about the specifics of the Lynch syndrome.
How we protect your data
We have implemented several technical and organizational measures to protect the identity of any of our data subjects.
We use only secured electronic tools, which acquired prior approval by our data protection officer, and which are subject to regular review and updates. We do not make use of automatic decision-making tools.
Within our organization, only authorized personnel are assigned to process specific types of data originating from patients, customers and marketing contacts, and employees and job applicants. All personnel, new or onboarding staff, consultants, external or technical advisers are only allowed to process data that is specifically required to fulfill their work-related purpose, and only when they have obtained prior authorization.
We are processing patient-related information under pseudonymized references to make sure no identifying information is revealed when used for diagnostic testing and, in those instances, where the results are used for further internal research purposes.
Regularly we audit, review, update and communicate our data protection policy documentation, risk assessment, breach policy, IT systems and policies, storage and retention documentation under guidance of our data protection officer together with the entire team, and we record the results in our data protection registry of records.
Do we share your data
We only share your data with sub-processors we have carefully vetted and are authorized by our data protection officer, to assist us in providing our diagnostic services, such as external electronic tools to store your data in protected clouds, or couriers to send your samples to the healthcare facility.
Unless explicitly authorized to do so by a legal obligation, we do not share your personal data with any other third parties.
Do we transfer your data
Lynsight Ltd is based in Finland and does not transfer data from our website visitor, customer, marketing contact, job applicants or patient data outside the European Economic Area, unless your data is stored in Cloud services outside the European Economic Area. In those instances, we have ensured carefully the legal contractual requirements to make use of these services to fully protect the identity of the data subjects.
If Lynsight Ltd has received patient data from a healthcare or intermediary lab testing facility within the European Economic Area, we will not transfer your data physically outside the Union.
In the event we have received patient data from a healthcare or intermediary lab testing facility outside the European Economic Area, we will transfer your data physically outside the Union, carefully and in compliance with the legal requirements for international transfers.
How long do we store your data
We retain data regarding our website visitors, that is identifiable in some nature, for maximum of one year. Website data, which is anonymous, is not subject to data protection laws and kept indefinitely.
Data regarding customers and marketing contacts, are kept for a duration of two to five years, depending on the nature of the business relationship. Each year this data will be reviewed and established if it is necessary to retain the data.
Data regarding job applicants will be kept throughout the interview process and deleted within sixty days after conclusion. In the event the job applicant wishes to remain in our database for future job opportunities, we will keep the data for a duration of maximum one year.
Health-related data from patients will be kept internally within our company for not longer than ten years.
How can I exercise my data protection rights?
As a website visitor, customer or marketing contact or job applicant, you have at all times the right to:
-
access your data and request copies of all processing activities concerning your data;
-
rectify information concerning any data about you that you believe is inaccurate;
-
request to be forgotten, to which we can comply under certain conditions: such as when we are not following a legal obligation from a National Authority, or reasons for public interest or public health;
-
request to restrict or object to processing, to which we can comply under certain conditions, such as when we are not following a legal obligation from a National Authority, or reasons for public interest or public health;
-
request a structured, commonly used and machine-readable format to transfer the data to another controller or directly to you (portability).
As a patient, you have in principle the same rights as stated above. However, in some instances we may not be able to comply because we are not your data controller. In those instances, may you contact us, we will refer to your healthcare facility and we will assist your data controller to the best of our abilities.
Complaints
Please feel free to consult us about your data protection rights, or any privacy matter related to you. Should you Lynsight Ltd has not addressed your concerns in a satisfying manner, or you wish to report a complaint, you may contact the Data Protection Authority in Finland or in your country of residence.
Updates
This policy was last updated December 2023. Lynsight Ltd will keep this privacy policy continuously under review and reserves the right to modify this document. Lynsight Ltd advises you to regularly to consult this document for the latest updates.