Privacy protection protocol

Breda Genetics srl has undertaken all necessary steps to protect users’ personal data in accordance with EU regulation 2016/679 (GDPR). This page contains the rules that Breda Genetics srl put in action to protect users’ personal data when they surf Breda Genetics’ websites or utilize online services as offered on any Breda Genetics’ website, including https://bredagenetics.com and https://personal.bredagenetics.com.

Below provided information may be modified by Breda Genetics srl at any time and at its sole discretion. Any changes will be communicated and made available on this site. In any case, the subsequent use of the site or any of its services automatically implies the acceptance of the modifications by the user.

1. Collection of Personal Information

This privacy policy protocol describes how Breda Genetics srl processes users’ personal data, either when they are identified or identifiable, when they use and interact with its websites and annexed services. This notice is given pursuant to EU regulation 2016/679. In particular, the present disclosure is to provide information concerning the manner, the timing and nature of the information that data controllers must provide users when they connect to web pages, regardless of the purpose.

The information applies only to the Breda site Genetics’ websites and not for other web sites accessed via links.

Your use of the websites indicates your consent to the collection of data and information in the manner described in this policy, according to the terms and conditions of use provided by Breda Genetics srl and in respect of the EU regulation 2016/679.

2. Liable for data processing and treatment (“Data Controller”)

The Controller of data is Breda Genetics srl, based in Brescia, via Cipro 1, 25124 Brescia.

3. Place of data processing

The processing of data solely takes place by using informatics systems. These systems are equipped with advanced safety protocols, including: SSL encryption protocol (for the website) and digital signature protocol DKIM (for emails). As far as possible, personal data and clinical/genetic data are stored in a disjointed manner in order to maximize privacy protection measures. Only persons officially in charge, or any occasional personnel for maintenance operations, may have access to data and only to the minimum extent (personal and / or clinical and / or genetic) and the minimum time necessary for the accomplishment of the services requested by the user. In case, any personal and sensitive data will always be treated according to principles of confidentiality, accuracy, integrity, minimization, pseudonymization, and lawfulness.

4. Communication and dissemination of data

No data from the website and its services are communicated or spread, except when differently prescribed by the law. Personal information provided by users who submit specific requests will be used only to perform the service requested and are communicated to third parties only if this is necessary for that purpose. Third parties (“Data Processor”) only include company personnell and consultants.

5. Types of data

Navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data of which transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interests, but by their very nature could, through processing and associations with data held by third parties, identify users. This category of data includes IP addresses or domain names of computers used by users to connect to the site, URI (Uniform Resource Identifier) of requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. Such data are made anonymous and are used only to obtain statistical information about the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical crimes against the site.

Data voluntarily provided by the user. The optional, explicit and voluntary transmissions to the e-mail addresses listed on this site and / or filling out the form published on Breda Genetics’s sites, including the form to register in the personal area, involves the subsequent acquisition of the sender’s details, including any personal data provided, which then become necessary to respond to the user’s request.

6. Cookies

For the conditions of use and handling of cookies by Breda Genetics’ websites, please refer to the relevant page Cookie policy.

7. Optional supply of data

Apart from that specified for navigation data, the user is free to provide personal data if required in special sections of this site. Depending on the requested service, their absence may make it impossible to send or process the request.

8. Method of treatment

Personal data are processed by Breda Genetics srl for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, illegal or incorrect use and unauthorized access.

9. Rights of the user

To enable online services, the user accepts to give their data to Breda Genetics srl, which will treat them in compliance with the EU Regulation 2016/679 (GDPR) following principles of confidentiality, accuracy, integrity, minimization, pseudonymization, and lawfulness. The user can partially or completely revoke the consent to the treatment of their or their patients’ data and can request access, modification, correction or cancellation of such data at any time by sending a registered letter to Breda Genetics srl, via Cipro 1, 25124 Brescia and actions will be taken to fulfil their request as fast as possible within 30 days. For any possible controversy regarding data treatment or the requested test/service, it is mutually agreed to elect the court of Brescia (Italy) as competent.