This document informs you about privacy issues such as the collection, storage, use and disclosure of personal information received from users of this Website, and of personal information received in the course of the provided services.
LS CancerDiag Ltd
Business ID 2558287-9
c/o Terkko Health Hub
Haartmaninkatu 4, Building 14
If you are a website visitor, we may collect your name, email, and cookies.
If you are a patient, we may collect your name, date of birth, gender, ethnicity, nationality, identifiable genetic information, health-related information from your physician, specimen identification number and equivalent identifiers, family history and relationships.
If you are a customer, marketing contact, or job applicant, we may collect your name, contact details and relevant professional data.
If you are an employee or corporate-related member of LS CancerDiag Ltd, this privacy statement does not apply to you. You may contact LS CancerDiag Ltd for the relevant privacy notice.
If you are a website visitor, customer, marketing contact, or job applicant, your data is collected by us with your consent.
If you are a patient, your data is collected by your healthcare facility or intermediary lab testing facility and send to us for diagnostic testing.
We look at the trend of our website visitors to understand how we can improve our online communication about our services. Some data may be visible, such as your cookies, and from where you access our website. Other information may not be visible to us.
We provide our services, such as diagnostic testing and analysis, to our customers, and keep them informed about our company updates.
We are building our network with marketing contacts to make sure our company updates and achievements are spread within the community.
Data from job applicants is kept with specific consent for future career opportunities, or deleted after completion of the interview process.
Data from patients is used for diagnostic testing, to provide the patient’s physician health-related information about the patient and its family. If the patient has provided informed consent to its healthcare facility, we may also use the patient data for further research to improve our internal diagnostic testing services, or acquire a deeper academic understanding about the specifics of the Lynch syndrome.
We have implemented several technical and organizational measures to protect the identity of any of our data subjects.
We use only secured electronic tools, which acquired prior approval by our data protection officer, and which are subject to regular review and updates. We do not make use of automatic decision-making tools.
Within our organization, only authorized personnel are assigned to process specific types of data originating from patients, customers and marketing contacts, and employees and job applicants. All personnel, new or onboarding staff, consultants, external or technical advisers are only allowed to process data that is specifically required to fulfill their work-related purpose, and only when they have obtained prior authorization.
We are processing patient-related information under pseudonymized references to make sure no identifying information is revealed when used for diagnostic testing and, in those instances, where the results are used for further internal research purposes.
Regularly we audit, review, update and communicate our data protection policy documentation, risk assessment, breach policy, IT systems and policies, storage and retention documentation under guidance of our data protection officer together with the entire team, and we record the results in our data protection registry of records.
We only share your data with sub-processors we have carefully vetted and are authorized by our data protection officer, to assist us in providing our diagnostic services, such as external electronic tools to store your data in protected clouds, or couriers to send your samples to the healthcare facility.
Unless explicitly authorized to do so by a legal obligation, we do not share your personal data with any other third parties.
LS CancerDiag Ltd is based in Finland and does not transfer data from our website visitor, customer, marketing contact, job applicants or patient data outside the European Economic Area, unless your data is stored in Cloud services outside the European Economic Area. In those instances, we have ensured carefully the legal contractual requirements to make use of these services to fully protect the identity of the data subjects.
If LS CancerDiag Ltd has received patient data from a healthcare or intermediary lab testing facility within the European Economic Area, we will not transfer your data physically outside the Union.
In the event we have received patient data from a healthcare or intermediary lab testing facility outside the European Economic Area, we will transfer your data physically outside the Union, carefully and in compliance with the legal requirements for international transfers.
We retain data regarding our website visitors, that is identifiable in some nature, for maximum of one year. Website data, which is anonymous, is not subject to data protection laws and kept indefinitely.
Data regarding customers and marketing contacts, are kept for a duration of two to five years, depending on the nature of the business relationship. Each year this data will be reviewed and established if it is necessary to retain the data.
Data regarding job applicants will be kept throughout the interview process and deleted within sixty days after conclusion. In the event the job applicant wishes to remain in our database for future job opportunities, we will keep the data for a duration of maximum one year.
Health-related data from patients will be kept internally within our company for not longer than ten years.
As a website visitor, customer or marketing contact or job applicant, you have at all times the right to:
As a patient, you have in principle the same rights as stated above. However, in some instances we may not be able to comply because we are not your data controller. In those instances, may you contact us, we will refer to your healthcare facility and we will assist your data controller to the best of our abilities.
Please feel free to consult us about your data protection rights, or any privacy matter related to you. Should you LS CancerDiag Ltd has not addressed your concerns in a satisfying manner, or you wish to report a complaint, you may contact the Data Protection Authority in Finland or in your country of residence.