Privacy Information for the processing of personal data
This privacy information is given by Dante Labs S.r.l., with registered office at Via San Giuseppe 53, Pizzoli, L’Aquila (hereinafter “Dante Labs”), in the capacity of Data Controller, pursuant to Article 13 of the Regulation (EU) 2016/679 (hereinafter “Regulation”), with the intent to explain to you the purposes and means of processing of your personal data whenever you send us a swab or serological test as regards the performance of COVID-19 diagnostic service (hereinafter “Service”).
Personal data categories
Dante Labs may process some of your personal data or the personal data from the person you legally represent (hereinafter “Data”) for the performance of the Service you required. In particular, Dante Labs may process the health Data which result from the analysis performed: Data attributes Date of Birth and Gender are mandatory for complying with the Health Authorities of your country.
The conferral of the referred personal Data is necessary to enable Dante Labs to perform the Service required; in case of absence, Dante Labs cannot be able to perform the Service.
Purposes and lawful basis for processing of personal data
The personal Data shall be processed in order to pursuit the following purposes:
- carry out, upon your explicit consent, the diagnostic analysis you required;
Please note that the absence of your consent for the processing of your personal data for the purposes referred to in point i), means that Dante Labs will not be able to perform the Service you required.
Whenever you decide to withdraw your consent before Dante Labs start the analysis of the biological sample, Dante Labs will not perform the Service. In the event that you withdraw your consent after the performance of the Service, Dante Labs may store the acquired data solely for the purpose of safeguard its rights before the courts, pursuant to Art. 9 (f) of the Regulation.
Means of data processing
Your personal data shall be processed both by manual and electronic means, subjected to the Regulatory provisions and from the Italian national law, including any provisions from the Italian Supervisory Authority for the protection of personal data.
Duration of processing activities and data retention period
The personal Data collected shall be processed for the period required to perform the COVID-19 diagnostic analysis and to communicate to you its result. It will be retained for the following 10 years solely to comply with legal obligations and to eventually safeguard Dante Labs rights.
Third parties’ categories
Dante Labs can rely on third parties for some types of data processing. In that case, these parties will be nominated Data Processors, pursuant to Art. 28 of the Regulation, and will receive the proper operative instructions, especially regarding the adoption of appropriate security measures, to guarantee data security and data confidentiality. Data subjects may require to Dante Labs a list of Data Processors writing to firstname.lastname@example.org.
Data transfer to countries outside the European Economic Area
Dante Labs suppliers, responsible for the execution of activities related to the services you requested, may transfer your personal data to countries located outside the European Economic Area. The data transfer is regulated by standard contractual clauses adopted by the European Commission or with due regard for any other warranties provided by the Regulation.
Data subject’s rights
We inform you that, as data subject, you are entitled to exercise the rights recognised by the Regulation writing to our e-mail address email@example.com.
Among other things, you may:
- ask and obtain information about whether or not Dante Labs is holding any of your personal data or whether or not your personal data are being processed and, in this case, you may have access to them;
- ask and obtain a copy of your personal data that are processed by automated means in a structured, commonly used and machine-readable format; you can also claim the right to transmit those data to another controller;
- ask and obtain the alteration and/or rectification of your personal data when you consider them to be inaccurate or incomplete;
- ask and obtain the erasure – and/or a processing restriction – of your personal data whenever they are not necessary – or no longer necessary – to fulfil the purposes for which they were collected, hence upon expiry of the retention period referred to in the paragraph above.
Please note that you can lodge a complaint with the supervisory authority whenever your personal data are unlawfully processed.
Please be advised that Dante Labs has nominated a Data Protection Officer (DPO) that you may reach at the following address firstname.lastname@example.org.