Iduna Genomics Privacy Policy
Introduction
At Iduna Genomics, we take the protection of your personal data very seriously. We process personal data collected during your visit to our website in compliance with applicable data protection regulations. In the following, we will explain which data we collect during your visit to our website and how exactly we use this data.
Controller: Data Protection Officer (DPO):
Iduna Genomics GmbH Richard Steinberger
Franz-Fischer-Straße 7b rs@blue-mountain.at
6020 Innsbruck 0660/3587091
office@iduna-genomics.at
Basis for data collection
In accordance with the GDPR, the following terms apply:
"Personal data": any information relating to an identified or identifiable natural person (data subject);
"Processing": any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data;
"Controller": the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
"Recipient": a natural or legal person, public authority, agency or another body, to which the personal data are disclosed;
"Processor": a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
"Third party": a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
Please read these privacy policies carefully before making any decisions.
What data is collected?
We collect two types of data and information from users.
The first category includes non-identifying and non-identifiable user data provided or collected through the use of the website. We do not know the identity of the user from whom non-personal data was collected. Non-personal data that may be collected includes aggregated usage data and technical data transmitted by your device, including certain information about software and hardware used on the device (such as the browser and operating system used, language settings, access times, etc.). Using this data, we improve the functionality of our website. We may also collect data about your activity on the website (such as pages visited, browsing behavior, clicks, actions, etc.).
The second category includes personal data, which identify or can be identified through appropriate measures an individual person. Such data includes:
Device data: We collect personal data from your device. This data includes geolocation data, IP address, unique identifiers (such as MAC address and UUID), and other data that results from your activity on the website.
IP address of the requesting computer
Date and time of access
Name and URL of the accessed data
Amount of data transmitted
Message whether the retrieval was successful
Identification data of the browser and operating system used
Name of your internet access provider
Processing of this data ensures the use of the website (connection establishment), system security, and serves to optimize the internet offering.
When you contact us, additional personal data is collected, such as your name and email address.
In the course of our services, social security number, date of birth, residential address, telephone number, and health data are collected and processed.
The processing of your data is based on consent and contract fulfillment. Without the collection and processing of the data mentioned above, we are unable to offer our services.
How do we obtain data about you?
We obtain your personal data from various sources:
You voluntarily provide us with such data, for example when registering on our website.
We receive such data when you use our website or access it in connection with one of our services.
We receive such data from other providers, services, and public registers (for example, from data traffic analysis providers).
What data is collected?
We use data for the following purposes:
To communicate with you (sending notifications about our services, providing technical information, and processing customer service requests if necessary)
To inform you about new updates and services
For marketing our websites and products (further information under "Marketing")
For statistical and analytical purposes to improve the website
As part of our occupational medical services, we use Dr. Igor Theurl's laboratory, Sicherheits Technisches Büro Hirner GmbH, and RADIOLOGIE IM EUROPAHAUS as processors. Furthermore,
Any use of your personal data is only for the purposes mentioned above and to the extent necessary to achieve these purposes.
In addition to the purposes stated in these privacy policies, we may transfer personal data to our trusted external providers in different jurisdictions for the following reasons:
Hosting and operating our website
Providing our services, including the personalized display of our website
Storing and processing such data on our behalf
Displaying advertisements and the ability to evaluate the success of our advertising campaigns, retargeting users
Providing marketing offers and advertising materials related to our website and services
Conducting studies, technical diagnoses, or analyses
Disclosure to third parties is only made with your consent. Transfers of your personal data to governmental authorities and agencies only occur within the framework of mandatory legal provisions.
We do not transfer your data to third countries. All processing takes place within the European Union and countries subject to the GDPR.
User Rights
You have the following rights:
To receive confirmation of whether and to what extent your personal data is being used and processed, and to request access to the personal data stored about you and additional information
To request a copy of the personal data you have voluntarily provided to us in a structured, commonly used, and machine-readable format
To request correction of the personal data we have stored about you
To request deletion of your personal data
To object to the processing of your personal data by us
To request restriction of the processing of your personal data by us
To file a complaint with a supervisory authority
Please note, however, that these rights are not unlimited and are subject to our own legitimate interests and regulatory requirements.
If you wish to exercise any of the rights listed here or require further information, please contact our data protection officer at:
Richard Steinberger
rs@blue-mountain.at
0660/3587091
Storage
We will store your personal data for as long as it is necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our policies. The retention periods depend on the type of data collected and the purpose for which the data was collected, taking into account both the case-specific circumstances and the need to delete outdated, unused information as soon as possible. Records containing personal data of customers, documents related to account setup, communications, and other data are stored in accordance with applicable laws and regulations.
Cookies
We and our trusted partners use cookies and other technologies in our related services, including when you visit our website or access our services.
A "cookie" is a small file unit that a website assigns to your device while you are accessing it. Cookies are very useful and can be used for various purposes. These include easy page navigation, possible automatic activation of certain functions, storing your settings, and quick and easy interaction between you and our services. Cookies are also used to display relevant advertisements that may be of interest to you and to compile statistics on your use of our services.
The following types of cookies are used on the website:
a. "Session cookies" are used only temporarily during a browsing session to enable normal system usage. These cookies are deleted from your device once you close the browser.
b. "Persistent cookies" are read only by the website that placed them on your computer for a certain period of time and are not deleted when the browser is closed. Such cookies are used to recognize you on a repeat visit. This allows us, for example, to save your settings for the next login.
c. "Third-party cookies" are placed by other online services that run content on the displayed page, such as external analytics companies that monitor and analyze access to our website.
Cookies do not contain data that can identify you. Personal data that we store about you may be linked by us with data stored in cookies and retrieved from cookies. Instructions for removing these cookies are available in the device settings. Note that disabling cookies may cause some features of our website to not function properly and may limit your online experience.
Collection of data by third parties
This policy only addresses the use and disclosure of data that we collect from you. Other websites or third parties may have different policies regarding the collection, use, and disclosure of your data. Therefore, it is important to always carefully review the terms and privacy policies of any website or third party before disclosing your data.
These privacy policies do not apply to business practices of companies that are not owned or controlled by us, or to individuals who are not our employees or agents, including any third parties to whom we may disclose data as described in this privacy policy.
How do we protect your data?
We use technical and organizational security measures to protect your personal data that is managed by us from accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties. We continuously improve our security measures to reflect technological developments. Although we take appropriate steps to protect your data, we cannot be held responsible for actions of those who gain unauthorized access to our website or misuse it, and we provide no express or implied warranty that we can prevent such access.
Transfer of data outside the European Economic Area
Please note that some recipients of your data may not be located within the European Economic Area. In such cases, we will only transfer your data to countries approved by the European Commission as having an adequate level of data protection, or through a legal agreement to ensure an adequate level of data protection.
Marketing
We may use your personal data, such as your name, email address, phone number, etc., ourselves or disclose it to a subcontractor to provide you with promotional materials regarding our services that may be of interest to you.
We respect your right to privacy, and therefore, these marketing materials will always include an option for you to unsubscribe from further mailings. If you choose to unsubscribe, your email address or phone number will be removed from our marketing distribution lists.
Please note that even after unsubscribing from our marketing emails, we may still send you emails containing important information that do not contain an unsubscribe option, such as maintenance notifications or administrative notices.
Minors
Protecting the data of children, especially in the online realm, is of utmost importance. Our website is not designed for children and is not directed to them. The use of our services by minors is only permitted with the prior consent or authorization of a parent or legal guardian. We do not knowingly collect personal data from minors. If a parent or legal guardian becomes aware that their child has provided us with personal data without their consent, they may contact us at [rs@blue-mountain.at].
Updates or Changes to this Privacy Policy
We reserve the right to amend or review this Privacy Policy from time to time. You can find the date of the current version under "Last Modified." Your continued use of the platform after such changes have been posted on our website constitutes your agreement to such changes to the Privacy Policy and signifies your consent to be bound by the modified terms.
